> the only interesting part of this whole debacle... security [...] is only as secure as its weakest link I agree that it is a staggering debacle; I disagree t

> the only interesting part of this whole debacle... security [...] is only as secure as its weakest link I agree that it is a staggering debacle; I disagree that the weakest link is the only point of interest. SolarWinds did not vet its build process and outputs; no antivirus, no government entity, no so-called intelligence agency, no mighty software corporation caught the compromise... for more than six months. The set of characteristics of this compromise is notable and there are many sobering conclusions. Also mentioned in this other, brief HN discussion. https://news.ycombinator.com/item?id=25580673 https://news.ycombinator.com/item?id=25580673