7 ms·

JetBrainer here. It was an on-premise instance of TeamCity.

by gamesbrainiac 6y ago

tpmx 6y ago
This is not the way to divulge important information so I'm going to have to assume you're a fraud. shrug
- vngzs 6y ago
  You're right that it's not the way to divulge important information, but (barring more reputable reports) I'm inclined to believe him. It's a somewhat regular occurrence for employees to comment on these things on HN, even if slightly misguided. First, there's a WSJ article out now with some more details that appears to back him up[0]: > Investigators believe that the SolarWinds hackers gained access to a TeamCity server used by SolarWinds to build its software products, but it is unclear how this system was accessed, according to people familiar with the matter. Further, some rudimentary OSINT reserach indicates he is, in fact, a JetBrains employee. People can do their own sleuthing if they're inclined to verify this; I have no desire to dox the guy publicly. [0]: https://www.wsj.com/articles/solarwinds-hack-breached-justice-department-systems-11609958761 https://www.wsj.com/articles/solarwinds-hack-breached-justic...
  - xiphias2 6y ago
    The statement was already saying that one of the attack vectors was a bad configuration of TeamCity, the only difference was that it was in PR speech to protect JetBrains from false allegations.
- colmvp 6y ago
  I mean maybe. You can see the guys profile and see he is a developer advocate at JetBrains.
  - MartinCron 6y ago
    Communicating with the community like this is exactly what a developer advocate should be doing.
vngzs 6y ago
Thanks for the reply! With that CrowdStrike founder Dmitri Alperovitch quote in the article > Compromising and introducing a back door into a build environment such as TeamCity is the holy grail of a supply chain hack. It can allow an adversary to have thousands of SolarWinds-style back doors in all sorts of products in use by victims all over the world. This is a very big deal. it read like this was much more widespread than I'm hearing now. The NY Times has even gone back and edited the title, replacing "Russian" with "widely used." I hope the editors have another take at this before it gets republished on all the other news sites ...

JetBrainer here. It was an on-premise instance of TeamCity.

tpmx 6y ago

This is not the way to divulge important information so I'm going to have to assume you're a fraud. shrug

vngzs 6y ago
You're right that it's not the way to divulge important information, but (barring more reputable reports) I'm inclined to believe him. It's a somewhat regular occurrence for employees to comment on these things on HN, even if slightly misguided. First, there's a WSJ article out now with some more details that appears to back him up[0]: > Investigators believe that the SolarWinds hackers gained access to a TeamCity server used by SolarWinds to build its software products, but it is unclear how this system was accessed, according to people familiar with the matter. Further, some rudimentary OSINT reserach indicates he is, in fact, a JetBrains employee. People can do their own sleuthing if they're inclined to verify this; I have no desire to dox the guy publicly. [0]: https://www.wsj.com/articles/solarwinds-hack-breached-justice-department-systems-11609958761 https://www.wsj.com/articles/solarwinds-hack-breached-justic...
- xiphias2 6y ago
  The statement was already saying that one of the attack vectors was a bad configuration of TeamCity, the only difference was that it was in PR speech to protect JetBrains from false allegations.
colmvp 6y ago
I mean maybe. You can see the guys profile and see he is a developer advocate at JetBrains.
- MartinCron 6y ago
  Communicating with the community like this is exactly what a developer advocate should be doing.

vngzs 6y ago

Thanks for the reply! With that CrowdStrike founder Dmitri Alperovitch quote in the article > Compromising and introducing a back door into a build environment such as TeamCity is the holy grail of a supply chain hack. It can allow an adversary to have thousands of SolarWinds-style back doors in all sorts of products in use by victims all over the world. This is a very big deal. it read like this was much more widespread than I'm hearing now. The NY Times has even gone back and edited the title, replacing "Russian" with "widely used." I hope the editors have another take at this before it gets republished on all the other news sites ...