4 ms·
Yes, but that’s a big if. It’s also simply possible that Solarwinds has their TeamCity admin account password set to ‘password’ and accessible on a public netwo
by sudhirj 6y ago
Yes, but that’s a big if. It’s also simply possible that Solarwinds has their TeamCity admin account password set to ‘password’ and accessible on a public network.
- vorpalhex 6y agoRight, and we don't know, which means we should audit aggressively and assume these things may still be open attack vectors. You don't hang out with the backdoor open waiting for your friend to let you know.
- marcosdumay 6y agoI guess that's why they said that they are auditing aggressively their CI tool.
- sudhirj 6y agoWe should, but we should have assumed CI software was an attack vector since before the solar winds hack. It’s always been a vector. This hack doesn’t change anything.
- zinekeller 6y ago... actually, SolarWinds used "solarwinds123" on their FTP site. Which is stored on a publicly-accessible GitHub repository. (Source: https://www.theregister.com/2020/12/16/solarwinds_github_password/ https://www.theregister.com/2020/12/16/solarwinds_github_pas...)