Hacker News Reader

Comment by skoskie | Hacker News Reader

Hey devs! The article indicates jetbrains software might be compromised.

Jetbrains says they had not been contacted by law enforcement.

On yesterday's thread it said that Team city was only used, in the intended fashion, as the delivery mechanism for the malicious payload. Kinda like blaming ftp when a hacker uses it to upload a payload.

https://blog.jetbrains.com/teamcity/2021/01/statement-on-the...

I was also alarmed by this but am less so after I looked into discussion from yesterday: https://news.ycombinator.com/item?id=25662385

Only when it’s setup by solarwinds ops team apparently

And the New York Times article might be true.

I'm sure that Solarwinds uses many more developer tools than what Jetbrains supplies. But only Jetbrains was "founded by Russians" so the NYT leads with that.

Stop spreading misinformation.

Though they've provided no reason to suspect JetBrains, nor have they said who is "investigating" the company, the article does say they may be compromised. If you rely on their software, it's probably a good idea to make sure you have a mitigation plan ready.

>the article does say they may be compromised

Same applies to any software. No software without a bug or an issue.

There is a somewhat higher chance of a critical security issue being announced for their software over the next month compared to January of last year. The accusation is unreliable, but it's a good idea to ensure you are prepared.

Sure, but let's be careful. These accusations could ruin their business, and the damage may be undoable - even if we later learn it was false.

Reply on news.ycombinator.com