Or, this is a desperate ploy by SolarWinds to cover up and make excuses for their incompetence in the hopes that the market doesn't give their company the death

Or, this is a desperate ploy by SolarWinds to cover up and make excuses for their incompetence in the hopes that the market doesn't give their company the death penalty. Like sure, securing yourself against a government is hard. But when a security researcher told solarwinds an update server was accessible with the password 'solarwinds123' and they sat on that report for 3 days [1], my confidence levels that they were generally competent are not high. > Security researcher Vinoth Kumar told Reuters that, last year, he alerted the company that anyone could access SolarWinds’ update server by using the password “solarwinds123” [1] and > When reached for comment by Newsweek, Kumar forwarded his email correspondence with SolarWinds. He first notified the company of the issue on November 19, 2019. SolarWinds' information security team responded a few days later on November 22, 2019. [2] and > Others - including Kyle Hanslovan, the cofounder of Maryland-based cybersecurity company Huntress - noticed that, days after SolarWinds realized their software had been compromised, the malicious updates were still available for download. [1] Did the company with the above security practices get more important stuff right? Like sure... maybe? But probably not. [1] https://www.reuters.com/article/global-cyber-solarwinds/hackers-at-center-of-sprawling-spy-campaign-turned-solarwinds-dominance-against-it-idUSKBN28P2N8 https://www.reuters.com/article/global-cyber-solarwinds/hack... [2] https://www.newsweek.com/solarwinds-update-server-could-accessed-2019-using-password-solarwinds123-report-1554986 https://www.newsweek.com/solarwinds-update-server-could-acce...