Ill try to make this short for you: Solarwinds has centralized metrics collection and the attack mimicked the normal json payload, therefore the attacker was h

Ill try to make this short for you: Solarwinds has centralized metrics collection and the attack mimicked the normal json payload, therefore the attacker was hiding in regular traffic. In our topic Microsoft has the keys to thousands of orgs which have been leaked because they are all "in the same cloud" case Solarwinds would have been resolvable because it should have been noticeable that there is traffic going out externally to a cloud which it doesn't with truly self hosted software case Microsoft would have been resolvable by hosting your own exchange. In both cases the default firewall should be deny all and whitelisted by use case I am not anti cloud, i am however anti "central control servers" I am not claiming that FOSS is necessarily more secure, but as you noticed yourself, you are able to self service and therefore check also im not claiming it has to be free. My claim in concern with the government is simply that when they pay for something the result should be open source and public, as all of us pay for it.