Hacker News Reader

Comment by zaroth | Hacker News Reader

I know nothing about “MOVEit” but somehow I already know that they suck at the teat of government RFPs to the tune of hundreds of millions of dollars, using an awe inspiring host of buzzwords, to deliver a total cesspool of close-sourced software which is somehow entrusted to the most sensitive data the government handles.

And besides, why wouldn’t an unencrypted backup of the entire DMV database for the State or Louisiana be getting tossed around using such a program?

Good grief.

View on HN

Just to note, MOVEit is (was?) used by banks, non-profits, healthcare companies, oil companies, airlines, etc. [1]

So this hit a wide spectrum of services both public and private.

[1] https://techcrunch.com/2023/06/15/moveit-clop-mass-hacks-ban...

Sounds like the perfect Corporate Crapware.

> Progress Software, which develops the MOVEit software, patched the vulnerability — but not before hackers compromised a number of its customers.

From my brief experience working at a similar company, calling the software they use closed-sourced is a bit of a reach. When I worked there, we almost exclusively used rebranded and slightly modified open source/freeware CMS systems. Actually the only software we sold that was completely developed in-house were testing/configuration tools or extremely simple and basically worthless LDAP auth based reporting programs that could only be used on-premise.

I can just imagine the buzzword filled sales pitch from one MBA with no tech experience to another MBA with no tech experience and them shaking hands afterwards and saying "excited to do business with you"

And they got promoted and now my private info is public and theyll never see an ounce of accountability.

Good old corporate and governmental America.

It’s part of the Louisiana suite of online service. There is Also “HIreIT” for unemployment and some similar catchy names for housing.

They are all peculiar system with weird UX.

Reply on news.ycombinator.com