Hacker News Reader

This is not the way to divulge important information so I'm going to have to assume you're a fraud. shrug

You're right that it's not the way to divulge important information, but (barring more reputable reports) I'm inclined to believe him. It's a somewhat regular occurrence for employees to comment on these things on HN, even if slightly misguided.

First, there's a WSJ article out now with some more details that appears to back him up[0]:

> Investigators believe that the SolarWinds hackers gained access to a TeamCity server used by SolarWinds to build its software products, but it is unclear how this system was accessed, according to people familiar with the matter.

Further, some rudimentary OSINT reserach indicates he is, in fact, a JetBrains employee. People can do their own sleuthing if they're inclined to verify this; I have no desire to dox the guy publicly.

[0]: https://www.wsj.com/articles/solarwinds-hack-breached-justic...

The statement was already saying that one of the attack vectors was a bad configuration of TeamCity, the only difference was that it was in PR speech to protect JetBrains from false allegations.

I mean maybe. You can see the guys profile and see he is a developer advocate at JetBrains.

Communicating with the community like this is exactly what a developer advocate should be doing.

Reply on news.ycombinator.com