Weaponizing the Web

nybooks.com

21 points·prostoalex··6 comments

All software has holes, and all software development teams have vulnerabilities. It is impossible to fully secure anything, and all information will eventually leak out and become public. All of the intelligence agencies around the world are in a race to build databases containing all the same data, originating in reality.

Posting my general opinion, site linked only seems to have a couple sentences, so I'm guessing it's designed for JSers.

Can anyone elaborate on how JetBrains was involved? I don't have access to the whole article, and results from my searches are ambiguous.

There is no substantive discussion of that. The paragraph is:

"Another point of entry may have been a backdoor in software developed by a Czech company called JetBrains, run by Russian nationals, that supplies its software testing product, TeamCity, to 300,000 businesses around the world, one of which is SolarWinds."

The article then moves on and does not mention this again or provide any evidence.

There was some coverage of TeamCity in relevant circles, e.g. https://www.nytimes.com/2021/01/06/us/politics/russia-cyber-...

That article attributes the claim to "officials and executives briefed on the inquiry".

I think the article is spreading false information as it's similar to mis-configuring ssh and then blaming the software itself when you get compromised.

https://blog.jetbrains.com/blog/2021/01/06/statement-on-the-...

Jet Brains published this statement.

s/Web/Internet/

Reply on news.ycombinator.com