News for hackers. Stuff that matters.

A comment on An Update on SolarWinds. Parent comment

Re:An Update on SolarWinds by sudhirj on Friday January 08, 2021 @02:13PM (#25688804)
Yes, but that’s a big if. It’s also simply possible that Solarwinds has their TeamCity admin account password set to ‘password’ and accessible on a public network.
[ Parent | on HN ]
Re:An Update on SolarWinds by zinekeller on Friday January 08, 2021 @04:29PM (#25690760)
... actually, SolarWinds used "solarwinds123" on their FTP site.

Which is stored on a publicly-accessible GitHub repository.

(Source: https://www.theregister.com/2020/12/16/solarwinds_github_pas...)

[ Parent | on HN ]
Re:An Update on SolarWinds by vorpalhex on Friday January 08, 2021 @02:48PM (#25689382)
Right, and we don't know, which means we should audit aggressively and assume these things may still be open attack vectors. You don't hang out with the backdoor open waiting for your friend to let you know.
[ Parent | on HN ]
Re:An Update on SolarWinds by marcosdumay on Friday January 08, 2021 @03:07PM (#25689698)
I guess that's why they said that they are auditing aggressively their CI tool.
[ Parent | on HN ]
Re:An Update on SolarWinds by sudhirj on Friday January 08, 2021 @09:51PM (#25695804)
We should, but we should have assumed CI software was an attack vector since before the solar winds hack. It’s always been a vector. This hack doesn’t change anything.
[ Parent | on HN ]