4 ms·
Is anyone else expecting an eventual leak that one of the US cyber security agencies is behind this backdoor, never expecting someone else to abuse it? Too much
by boomboomsubban 6y ago
Is anyone else expecting an eventual leak that one of the US cyber security agencies is behind this backdoor, never expecting someone else to abuse it? Too much of what the company has said in the past just echoes intel agencies opinions, and the response seems hyper focused on the "enemy" rather than those responsible for the breach. Their "solution" is just to turn off machines with SolarWinds, something they know will be a huge problem for anyone impacted.
- ganoushoreilly 6y agoI don't. It's sloppy work on solarwinds part. US agencies aren't know for using sloppy risks, they want clean, precise, and small footprint attack tools.
- boomboomsubban 6y agoYou have a far better impression of US agencies than I do.
- alasdair_ 6y agoThe solar winds update server had a password of “solarwinds123”. I don’t think intelligence agencies need to be blamed.
- luckman212 6y agoInitially I couldn't believe this was true. But, sadly... https://www.techdirt.com/articles/20201215/13203045893/security-researcher-reveals-solarwinds-update-server-was-secured-with-password-solarwinds123.shtml https://www.techdirt.com/articles/20201215/13203045893/secur...
- alasdair_ 6y agoIn other news, Trump’s twitter password until a few days ago was “maga2020”. I’m not joking.
- boomboomsubban 6y agoThere's also the incident of the CIA using unencrypted communications that you could Google for leading to numerous agent deaths, so it's not like such things are too sloppy for US intelligence.
- lawnchair_larry 6y agoTwitter disputed that story.