2 ms·

> There is no way that their upper management didn't know that they would be an amazing target for a hack Presumes facts not in evidence. From the nyt article

by wglb 6y ago

> There is no way that their upper management didn't know that they would be an amazing target for a hack Presumes facts not in evidence. From the nyt article https://www.nytimes.com/2021/02/23/opinion/solarwinds-hack.html https://www.nytimes.com/2021/02/23/opinion/solarwinds-hack.h... "The market loves to reward corporations for risk-taking when those risks are largely borne by other parties, like taxpayers." See articles https://ciexinc.com/blog/solarwinds-articles/culture.html https://ciexinc.com/blog/solarwinds-articles/culture.html Notice the report to SolarWinds: https://arcticsecurity.com/guides/2021/02/12/solarwinds-going-beyond-attribution-all-in-a-days-work-for-a-bicycle-repair-man/ https://arcticsecurity.com/guides/2021/02/12/solarwinds-goin... What does that tell you about their culture?

bostonsre 6y ago
> Presumes facts not in evidence. Yep, agreed. Its hard for me to believe that they didn't know they were rolling the dice on security, but just my intuition.
- wglb 6y ago
  It appears to be stronger than that: In the article https://www.bloomberg.com/news/articles/2020-12-21/solarwinds-adviser-warned-of-lax-security-years-before-hack https://www.bloomberg.com/news/articles/2020-12-21/solarwind... (pro tip: open in firefox and clear cookies) "A former security adviser at the IT monitoring and network management company SolarWinds Corp. said he warned management of cybersecurity risks and laid out a plan to improve it that was ultimately ignored. In a 23-page PowerPoint presentation reviewed by Bloomberg News, Ian Thornton-Trump recommended to company executives in 2017 that SolarWinds appoint a senior director of cybersecurity, and said he told them that “the survival of the company depends on an internal commitment to security.” The following month, he terminated his relationship with the company, saying he believed its leadership wasn’t interested in making changes that would have “meaningful impact.”"

by wglb 6y ago

bostonsre 6y ago

> Presumes facts not in evidence. Yep, agreed. Its hard for me to believe that they didn't know they were rolling the dice on security, but just my intuition.

wglb 6y ago
It appears to be stronger than that: In the article https://www.bloomberg.com/news/articles/2020-12-21/solarwinds-adviser-warned-of-lax-security-years-before-hack https://www.bloomberg.com/news/articles/2020-12-21/solarwind... (pro tip: open in firefox and clear cookies) "A former security adviser at the IT monitoring and network management company SolarWinds Corp. said he warned management of cybersecurity risks and laid out a plan to improve it that was ultimately ignored. In a 23-page PowerPoint presentation reviewed by Bloomberg News, Ian Thornton-Trump recommended to company executives in 2017 that SolarWinds appoint a senior director of cybersecurity, and said he told them that “the survival of the company depends on an internal commitment to security.” The following month, he terminated his relationship with the company, saying he believed its leadership wasn’t interested in making changes that would have “meaningful impact.”"