3 ms·

Hey devs! The article indicates jetbrains software might be compromised.

bredren 6y ago
I was also alarmed by this but am less so after I looked into discussion from yesterday: https://news.ycombinator.com/item?id=25662385 https://news.ycombinator.com/item?id=25662385
complexworld 6y ago
Jetbrains says they had not been contacted by law enforcement. On yesterday's thread it said that Team city was only used, in the intended fashion, as the delivery mechanism for the malicious payload. Kinda like blaming ftp when a hacker uses it to upload a payload. https://blog.jetbrains.com/teamcity/2021/01/statement-on-the-story-from-the-new-york-times-regarding-jetbrains-and-solarwinds/ https://blog.jetbrains.com/teamcity/2021/01/statement-on-the...
- eternalban 6y ago
  Stop believing your lying eyes. The New Times says they are under investigations, and that should be good enough for you ..
dilyevsky 6y ago
Only when it’s setup by solarwinds ops team apparently
SpaceRaccoon 6y ago
Stop spreading misinformation.
- boomboomsubban 6y ago
  Though they've provided no reason to suspect JetBrains, nor have they said who is "investigating" the company, the article does say they may be compromised. If you rely on their software, it's probably a good idea to make sure you have a mitigation plan ready.
  - konart 6y ago
    >the article does say they may be compromised Same applies to any software. No software without a bug or an issue.
    - boomboomsubban 6y ago
      There is a somewhat higher chance of a critical security issue being announced for their software over the next month compared to January of last year. The accusation is unreliable, but it's a good idea to ensure you are prepared.
  - SpaceRaccoon 6y ago
    Sure, but let's be careful. These accusations could ruin their business, and the damage may be undoable - even if we later learn it was false.
bitminer 6y ago
And the New York Times article might be true. I'm sure that Solarwinds uses many more developer tools than what Jetbrains supplies. But only Jetbrains was "founded by Russians" so the NYT leads with that.

I was also alarmed by this but am less so after I looked into discussion from yesterday: https://news.ycombinator.com/item?id=25662385 https://news.ycombinator.com/item?id=25662385

complexworld 6y ago

Jetbrains says they had not been contacted by law enforcement. On yesterday's thread it said that Team city was only used, in the intended fashion, as the delivery mechanism for the malicious payload. Kinda like blaming ftp when a hacker uses it to upload a payload. https://blog.jetbrains.com/teamcity/2021/01/statement-on-the-story-from-the-new-york-times-regarding-jetbrains-and-solarwinds/ https://blog.jetbrains.com/teamcity/2021/01/statement-on-the...

eternalban 6y ago
Stop believing your lying eyes. The New Times says they are under investigations, and that should be good enough for you ..

dilyevsky 6y ago

Only when it’s setup by solarwinds ops team apparently

SpaceRaccoon 6y ago

Stop spreading misinformation.

boomboomsubban 6y ago
Though they've provided no reason to suspect JetBrains, nor have they said who is "investigating" the company, the article does say they may be compromised. If you rely on their software, it's probably a good idea to make sure you have a mitigation plan ready.
- konart 6y ago
  >the article does say they may be compromised Same applies to any software. No software without a bug or an issue.
  - boomboomsubban 6y ago
    There is a somewhat higher chance of a critical security issue being announced for their software over the next month compared to January of last year. The accusation is unreliable, but it's a good idea to ensure you are prepared.
- SpaceRaccoon 6y ago
  Sure, but let's be careful. These accusations could ruin their business, and the damage may be undoable - even if we later learn it was false.

bitminer 6y ago

And the New York Times article might be true. I'm sure that Solarwinds uses many more developer tools than what Jetbrains supplies. But only Jetbrains was "founded by Russians" so the NYT leads with that.