3 ms·
This sounds like a 10/10 chained out of a rookie PKI mistake in their (editorializing here) poorly audited critical software infrastructure. Surely nobody steer
by cartoonworld 5y ago
This sounds like a 10/10 chained out of a rookie PKI mistake in their (editorializing here) poorly audited critical software infrastructure. Surely nobody steering the ship has been bitten by shitty PKI practices before, right?
These people have no care for the work of others they have trashed. The acquisition culture is so reprehensibly transparent and incompetent, it would blow my mind if it weren't just another day at the office. This company doesn't even has a CISO from what I can see. They must rely on their CTO's outstanding track record of industry-leading assurance technologies in a rapidly evolving landscape (of cash)
Refer to https://www.kaseya.com/company/ https://www.kaseya.com/company/
A) Their CTO presided over DigiCert, who botched 23,000 orthogonally integrated, outside-of-the-box, innovative security certificates[0] through their bad practices and garbage organization while meeting committed timeframes.
Dan Timpson leads all product development, security and cloud/SaaS operations teams across all lines of business for all Kaseya companies including Unitrends, Spanning Cloud Apps, Rapidfire Tools, ID Agent, Graphus, RocketCyber and IT Glue. He joins Kaseya with a proven track record of success having led and grown engineering and R&D teams to build architectures focused on security and integrity, data compliance and testing. Through his leadership, Timpson empowers engineering teams to develop solutions that emphasize quality, simplicity and reliability while meeting committed timeframes.
Prior to joining Kaseya, Mr. Timpson served as CTO of DigiCert, a provider of high-assurance digital certificates that deliver trusted SSL, private and managed PKI deployments and device certificates for the emerging IoT market. There, Timpson was responsible for Digicert’s technology strategy and played a vital role in leading the security industry by driving innovation.
Prior to joining DigiCert, Mr. Timpson worked for Microsoft Corp leading virtualization technology engineering teams and driving the division’s software security release discipline. Earlier in his career, he managed engineering teams at Novell over the span of nine years building identity and access management systems and Novell’s underlying PKI framework.
Mr. Timpson holds a Masters of Business Administration and Technology Management from Westminster College, and holds the patents to five technology innovations.
B) Their current CEO was onboarded after presiding over a number of pricey acquisitions in whatever tech fads, driving "unprecedented growth" with his undoubtedly forward-looking vision and commitment to shareholder value.
Fred Voccola leads the vision, strategy and growth of Kaseya and its family of brands including Unitrends, Spanning Cloud Apps, Rapidfire Tools, IT Glue, Graphus, RocketCyber and ID Agent. Prior to joining Kaseya, Mr. Voccola served as president and general manager of Yodle’s Brand Networks Division, providing digital and market automation solutions to small and medium businesses. In 2016, Yodle successfully was sold to Web.com (NASDAQ: Web). Prior to that, Mr. Voccola was president of Nolio, Inc., a devops SaaS company, where he drove 100% year-over-year growth and successfully sold the business to CA Technologies. Mr. Voccola also co-founded and served as president and CEO of Trust Technology Corp., where he drove significant growth over three years prior to the company’s sale to FGI Global.
Earlier in his career, Mr. Voccola co-founded and served as COO of Identify Software, substantially growing the business during his five-year tenure, culminating in a sale to BMC Software. He then served as vice president of worldwide sales and services at BMC Software. In addition, Mr. Voccola has held various management and executive roles at Intira (acquired by Divine Systems) and Prism Solutions (acquired by Ardent Software/Informix/IBM).
Mr. Voccola holds a Bachelor of Science in Finance from the Carroll School of Management at Boston College.
This stuff pisses me off to no end, especially after all the years of being called a crackpot and how nobody would do that or how could they know or whatever. I'm not a genius, this is crayon on the wall.
At least they've "created" a lot of jobs lately. Probably toasted a few, too. They'll be off to the next clown car soon enough, probably driving unprecedented growth in next-generation managed service applications for dialysis machines and pesticide application PLCs. In the cloud.
[0] - https://www.bleepingcomputer.com/news/security/23-000-users-lose-ssl-certificates-in-trustico-digicert-spat/ https://www.bleepingcomputer.com/news/security/23-000-users-...
- toast0 5y ago> Their CTO presided over DigiCert, who botched 23,000 orthogonally integrated, outside-of-the-box, innovative security certificates[0] through their bad practices and garbage organization while meeting committed timeframes. I had forgotten about this incident. Somehow I thought this happened before 2018. Anyway, I'm not sure how any of this is DigiCert's fault. Maybe they should have had mandatory audits of resellers to make sure they didn't do stupid things like have the private keys for customer certificates... But given that the reseller sent the private keys to the CA, that's pretty good evidence the keys are compromised, and worthy of revocation.
- cartoonworld 5y agoIndeed, they had one job...