Hacker News Reader

Actual title:

Hackers used SolarWinds' dominance against it in sprawling spy campaign

Not to dismiss the point of the editorialised title here ("SolarWinds use the password 'solarwinds123' on their Update Servers") but note:

Neither the password nor the stolen access is considered the most likely source of the current intrusion, researchers said

View on HN

Additionally, that was a flaw from a year ago. Still incredibly stupid, but not really relevant to the recent hacks at all. This is being used to discredit the fact that investigators are pointing to "a" state actor for the source of these hacks.

>Additionally, that was a flaw from a year ago. Still incredibly stupid, but not really relevant to the recent hacks at all.

I'd argue that it's very relevant; if they were making such terrible decisions a year ago, what else did they do wrong between then and the hack? I am reluctant to assume that they didn't make other mistakes, given how obvious this password flub was.

The title should be edited from "use" to "used" imo.

Reply on news.ycombinator.com