News for hackers. Stuff that matters.
Re:Sealed U.S. Court Records Exposed in SolarWinds Breach by tru3_power on Thursday January 07, 2021 @09:11PM (#25680593)
I’m wondering if solarwinds will survive all of this. Must be crazy working there right now.
Re:Sealed U.S. Court Records Exposed in SolarWinds Breach by qwantim1 on Thursday January 07, 2021 @10:16PM (#25681120)
I used their software, and it’s not the best I’ve used.

I often skip login and reload and it logs me in as a system user. It probably shouldn’t do that.

Re:Sealed U.S. Court Records Exposed in SolarWinds Breach by boringg on Thursday January 07, 2021 @10:45PM (#25681274)
I have to assume you are joking.
Re:Sealed U.S. Court Records Exposed in SolarWinds Breach by quotemstr on Thursday January 07, 2021 @11:10PM (#25681410)
Enterprise "security product" culture is just terrible. These things are sold by slick salesmen and do more harm than good
Re:Sealed U.S. Court Records Exposed in SolarWinds Breach by m463 on Thursday January 07, 2021 @11:38PM (#25681567)
Why limit it to "security product"?

You can ask anyone who uses Teams at work and they'll say it applies to all enterprise software.

I don't know what the answer is when balancing user acceptance/ease of use and business needs.

Re:Sealed U.S. Court Records Exposed in SolarWinds Breach by oivey on Friday January 08, 2021 @01:33AM (#25682164)
Teams in particular recent had a massive security breach where the client could be drive through exploited to own whole orgs and any org connected via guests, right?
Re:Sealed U.S. Court Records Exposed in SolarWinds Breach by recursive on Thursday January 07, 2021 @11:55PM (#25681655)
I use teams. It works well. Mostly. I like it. Mostly.
Re:Sealed U.S. Court Records Exposed in SolarWinds Breach by yamakadi on Friday January 08, 2021 @12:41AM (#25681875)
Same here. I do understand disliking Teams if you have used the more clunky alternatives, Skype for business for example. Overall though, I find it more useful than before if only because the cultural change it’s leading in my company where more direct communication is now being encouraged instead of Japanese business emails with 10 extra lines of boilerplate and extreme business language tacked on.
Re:Sealed U.S. Court Records Exposed in SolarWinds Breach by fomine3 on Friday January 08, 2021 @02:53AM (#25682590)
Security products are sold for security rather than other useful stuff like messaging, so it's really useless if it's insecure.
Re:Sealed U.S. Court Records Exposed in SolarWinds Breach by ackbar03 on Thursday January 07, 2021 @10:38PM (#25681237)
um, what?
Re:Sealed U.S. Court Records Exposed in SolarWinds Breach by hanniabu on Thursday January 07, 2021 @10:27PM (#25681177)
Honestly wouldn't expect much from government systems that are built by whichever contractor has the best connections and lowest price rather than best code.
Re:Sealed U.S. Court Records Exposed in SolarWinds Breach by lern_too_spel on Thursday January 07, 2021 @10:56PM (#25681349)
Its clients included 425 of the Fortune 500 and the top 10 US telecom companies. https://www.theverge.com/2020/12/15/22176053/solarwinds-hack...
Re:Sealed U.S. Court Records Exposed in SolarWinds Breach by Daho0n on Friday January 08, 2021 @08:56AM (#25684736)
That is a negative, not a positive. The amount of breaches, fraud, etc. that has happened in that category is insane. Would you say the same if it were Equifax?
Re:Sealed U.S. Court Records Exposed in SolarWinds Breach by lern_too_spel on Friday January 08, 2021 @10:31AM (#25685635)
The point is that the problem is not with how the government chooses vendors. Equifax has nothing to do with it.
Re:Sealed U.S. Court Records Exposed in SolarWinds Breach by anothernewdude on Thursday January 07, 2021 @11:22PM (#25681478)
I'm still trying to decide if its like the Equifax one and its back to business as usual in months or if they lose credibility entirely. Depends how locked in their customers are.
Re:Sealed U.S. Court Records Exposed in SolarWinds Breach by easterncalculus on Thursday January 07, 2021 @11:42PM (#25681595)
Since Equifax is one of three credit reporting agencies it's basically invincible. Solarwinds doesn't really have that kind of protection from the US government. Especially not since this has been directly affecting them.
Re:Sealed U.S. Court Records Exposed in SolarWinds Breach by elliekelly on Friday January 08, 2021 @12:01AM (#25681687)
I don’t disagree but what is the government’s alternative here? I just don’t see them being able to quickly pull off such a massive change in vendors if Solarwinds goes under. They’re like the government contract equivalent of “too big to fail”.
Re:Sealed U.S. Court Records Exposed in SolarWinds Breach by boringg on Friday January 08, 2021 @09:40AM (#25685146)
Good point. The fact that Equifax is back to business is so disappointing - one would have hoped that the industry would get an overhaul. I agree with another commentator that the market structure is fundamentally different though so it seems, on the surface, that this could sink the ship.
Re:Sealed U.S. Court Records Exposed in SolarWinds Breach by natas on Thursday January 07, 2021 @09:35PM (#25680794)
175 jobs open now, let's check in a few months? https://www.solarwinds.jobs/jobs?page=1
Re:Sealed U.S. Court Records Exposed in SolarWinds Breach by JohnJamesRambo on Thursday January 07, 2021 @10:29PM (#25681185)
>We're Geekbuilt™.

>Developed by network and systems engineers who know what it takes to manage today's dynamic IT environments, SolarWinds has a deep connection to the IT community.

>The result? IT management products that are effective, accessible, and easy to use.

Well yes, very accessible!

[dead]
Re:Sealed U.S. Court Records Exposed in SolarWinds Breach by agravier on Thursday January 07, 2021 @11:53PM (#25681650)
<g> ?
Re:Sealed U.S. Court Records Exposed in SolarWinds Breach by jlgaddis on Friday January 08, 2021 @06:55AM (#25683723)
It means he's old. <gd&r>
Re:Sealed U.S. Court Records Exposed in SolarWinds Breach by waterhouse on Friday January 08, 2021 @12:09AM (#25681718)
I believe it's short for <grin>.
Re:Sealed U.S. Court Records Exposed in SolarWinds Breach by dxdm on Friday January 08, 2021 @01:10AM (#25682027)
Yep. I remember using that on IRC and ICQ chat in the 90s.
Re:Sealed U.S. Court Records Exposed in SolarWinds Breach by nradov on Thursday January 07, 2021 @09:41PM (#25680837)
Most large companies have some zombie job postings for positions which are no longer budgeted but haven't been removed from the web site yet.
Re:Sealed U.S. Court Records Exposed in SolarWinds Breach by dheera on Thursday January 07, 2021 @09:55PM (#25680957)
... and even startups who don't yet have the budget but are trying to raise money and create an fake aura of momentum with investors.
Re:Sealed U.S. Court Records Exposed in SolarWinds Breach by Scoundreller on Friday January 08, 2021 @01:18AM (#25682069)
Even big orgs in decline have done this.
Re:Sealed U.S. Court Records Exposed in SolarWinds Breach by baxtr on Thursday January 07, 2021 @10:15PM (#25681107)
Is “Chief Security Officer” one of them?
Re:Sealed U.S. Court Records Exposed in SolarWinds Breach by tedd4u on Thursday January 07, 2021 @10:36PM (#25681227)
Pretty sure CEO is one of them
Re:Sealed U.S. Court Records Exposed in SolarWinds Breach by dannyw on Friday January 08, 2021 @07:20AM (#25683907)
Systems can be made more secure, and organisational culture can change.

Don’t fire an engineer because they took unintentionally production down. Learn from it and fix it.