Cybersecurity group admits SolarWinds hack came FROM WITHIN THE US, but doubles down on blaming Russia

[Chauncey 138]

https://www.rt.com/usa/511504-solarwinds-hack-inside-blame-russia/

[Chauncey 138]

Not sure when they'll realize Russia really just doesn't care that much

[Burnt Reynolds 5,058]

It's a simple risk mitigation tactic, they shout "Russia", the public gets into a (distracted) melee about Russia, while the company prances away. The true benefit of "Russia" conspiracies.

[Cyberfx1024 7,980]

https://www.dailymail.co.uk/news/article-9108511/SolarWinds-warned-potential-cyber-attack-cost-saving-Europe-exposed-firm.html
 

Former and current SolarWinds staffers say the company was slow to prioritize security, even when its software was adopted by top cybersecurity companies and federal agencies. SolarWinds only added on security in 2017 under the threat of penalty from a new European privacy law. Then it hired its first chief information officer and brought in a vice president of security architecture. A reason, in part, why security was so relaxed was allegedly due to chief executive Kevin B. Thompson's cuts. Past and current employees say that Thompson, who was formerly an accountant and a chief financial officer, cut common security practices to save costs and his approach almost tripled SolarWinds' annual profit margins to more than $453million in 2019 from $152milliom in 2010. But some of those measures may have jeopardized the company and put its customers at a greater risk for attack. SolarWinds also moved much of its engineering to satellite offices in the Czech Republic, Poland and Belarus, where engineers had access to the Orion network management software that was hacked. Some of the Orion software was also engineered there. American investigators are focusing on whether the hack started at the Eastern Europe offices, where Russian intelligence operatives are deeply rooted. Initially officials said the hack began as early as March this year but SolarWinds have since revealed they traced the hackers back to October 2019. The spies were were believed to have tested their ability to insert the malicious code into their system on October 10, 2019.


I don't trust the RT to tell me that it didn't come from Russia. But when the final report does come out I can't wait to see it

[Burnt Reynolds 5,058]

1 minute ago, Cyberfx1024 said:

I don't trust the RT to tell me that it didn't come from Russia. But when the final report does come out I can't wait to see it

I'd take RT with a grain of salt too, on the other hand, I see no reason to be excited for any report, we know how those go, and it never ends with anyone of significance being culpable, they make sure of that.

[Chauncey 138]

11 minutes ago, Burnt Reynolds said:

I'd take RT with a grain of salt too, on the other hand, I see no reason to be excited for any report, we know how those go, and it never ends with anyone of significance being culpable, they make sure of that.

It's better that they post something though than ignore any updates and keep it on Russia

[Cyberfx1024 7,980]

11 minutes ago, Chauncey said:

It's better that they post something though than ignore any updates and keep it on Russia

They are just trying to deflect when in reality we know this is a state actor. It very could be China for all we know but at this point in time I am not ruling anyone out

[Cyberfx1024 7,980]

24 minutes ago, Burnt Reynolds said:

I'd take RT with a grain of salt too, on the other hand, I see no reason to be excited for any report, we know how those go, and it never ends with anyone of significance being culpable, they make sure of that.

Well by the Dailymail's report the company did what most companies do in regards to IT and treat us like we are a expendable line item that can be budgeted away

[Burnt Reynolds 5,058]

23 minutes ago, Cyberfx1024 said:

Well by the Dailymail's report the company did what most companies do in regards to IT and treat us like we are a expendable line item that can be budgeted away

That's its own can of worms, but I will say, yeah, we are, because people send that message by the way they conduct themselves, outwardly and at the ballot box. Because of this, public contracts where the taxpayer is collateral is today's warped capitalist dream. The corrupt partnership means exactly what we're seeing, the only stakeholder the company cares about is the politicians, where companies can have near inscrutible power over vital government functions, get away with whatever they want, and the stakeholders have no vested interest in holding them accountable because they benefit. But what they're doing is precisely the kind of accountability angle the public has over elected politicians. As much as I know the whole "you get what you deserve" thing isn't very popular in Trump circles at the moment, it's nonetheless true. Many, many of these people are Republicans too. It's not merely Democrats.

Edited January 4, 2021 by Burnt Reynolds

[TBoneTX 45,498]

10 hours ago, Cyberfx1024 said:

Thompson, who was formerly an accountant and a chief financial officer, cut common security practices to save costs

Years ago, I heard this:  "When accountants are in charge, the net result of everything is Zero."