3 ms·
If Solar Winds CEO, CTO, and everyon below them had taken the responsibility of security even slightly seriously, they would have made the system secure against
by toss1 6y ago
If Solar Winds CEO, CTO, and everyon below them had taken the responsibility of security even slightly seriously, they would have made the system secure against such leaks. Some really simple steps:
1) access restrictions such that even malicious interns, and certainly careless interns can do little damage *when* the inevitable leak happens
2) Actively scan everyone's online presence, and let them know that this is a requirement of employment.
3) Require 2FA
4) Much better training so it is reduced
5) Internally firewalled and airgapped systems
I could go on... but none of these were done
The fact that they blame the intern shows that they are insanely unqualified for any job related to any sort of security. These CxOs are active hazards in the industry.
- kazen44 6y ago> 1) access restrictions such that even malicious interns, and certainly careless interns can do little damage when the inevitable leak happens this should be something that is implemented in any organisation beyond a very small scale, mainly because even if not malicious, people should not be able to make critical mistakes in systems they have no know how off. The intern leaked the password, but how was he able to know this was critical information? Not to mention he should never have been put in that position in the first place.