News for hackers. Stuff that matters.

A comment on SolarWinds: What Hit Us Could Hit Others.

Re:SolarWinds: What Hit Us Could Hit Others by omgbobbyg on Tuesday January 12, 2021 @04:17PM (#25753826)
As a citizen, I am shocked and appalled by this backdoor. As a software engineer, I can't help but marvel at the creativity and thoughtfulness put into the exploit.
[ Parent | on HN ]
Re:SolarWinds: What Hit Us Could Hit Others by f430 on Tuesday January 12, 2021 @04:29PM (#25754016)
The average engineer isn't an infosec expert and love automation so they found the weakest link in the chain: CI/CD
[ Parent | on HN ]
Re:SolarWinds: What Hit Us Could Hit Others by robbyt on Tuesday January 12, 2021 @06:13PM (#25755353)
We're not talking expert-level infosec here. They should have firewalled their CI systems. That's pretty basic stuff.
[ Parent | on HN ]