3 ms·
You're right that it's not the way to divulge important information, but (barring more reputable reports) I'm inclined to believe him. It's a somewhat regular o
by vngzs 6y ago
You're right that it's not the way to divulge important information, but (barring more reputable reports) I'm inclined to believe him. It's a somewhat regular occurrence for employees to comment on these things on HN, even if slightly misguided.
First, there's a WSJ article out now with some more details that appears to back him up[0]:
> Investigators believe that the SolarWinds hackers gained access to a TeamCity server used by SolarWinds to build its software products, but it is unclear how this system was accessed, according to people familiar with the matter.
Further, some rudimentary OSINT reserach indicates he is, in fact, a JetBrains employee. People can do their own sleuthing if they're inclined to verify this; I have no desire to dox the guy publicly.
[0]: https://www.wsj.com/articles/solarwinds-hack-breached-justice-department-systems-11609958761 https://www.wsj.com/articles/solarwinds-hack-breached-justic...
- xiphias2 6y agoThe statement was already saying that one of the attack vectors was a bad configuration of TeamCity, the only difference was that it was in PR speech to protect JetBrains from false allegations.