Prompted to read into the SolarWinds supply chain attack ... ok, a malware product that people installed on machine or in virtualised servers ... good to see some of the responses - geekwire.com/2020/microsoft… ...
... however, the Amazon keynotes on simplify and observability couldn't have come at a better time - siliconangle.com/2020/12/15/go-…
On that theme of operating - AWS fault injector system - chaos monkeys / the master of disaster for the masses - excellent move aws.amazon.com/fis/
X : It is espionage, not war.
Me : Yep. It's espionage but using the supply chain as the vector of attack ditto buffer overflow attack.
X : Senators need to stop calling it an "attack". Worse is the "act of war" rhetoric.
Me : Oh dear. people getting carried away again.
Me : Yep. It's espionage but using the supply chain as the vector of attack ditto buffer overflow attack.
X : Senators need to stop calling it an "attack". Worse is the "act of war" rhetoric.
Me : Oh dear. people getting carried away again.
Me : You could argue that it's an attack on our digital sovereignty but that has two problems :-
1) that assumes that policy makers have a map of our digital sovereignty and know where the borders are - they don't.
2) that equates espionage to sabotage. Not the same thing.
1) that assumes that policy makers have a map of our digital sovereignty and know where the borders are - they don't.
2) that equates espionage to sabotage. Not the same thing.
... hmmm, "act of war" ... that would be a very unusual phrase. I must admit, it would raise enough red flags with me that I'd want to know why the person used that phrase.
I learn a new thing everyday. I should have used exploitation rather than attack. Thanks @TripKrant and @RidT -
https://twitter.com/RidT/status/1339953095892197376
X : Why SolarWinds?
Me : Why put an exploit there?
X : Yes.
Me : The best places to exploit are the tools that people trust and install freely in the network to manage some aspect of their network (i.e. wide permissions) combined with the ability to connect for updates ...
Me : Why put an exploit there?
X : Yes.
Me : The best places to exploit are the tools that people trust and install freely in the network to manage some aspect of their network (i.e. wide permissions) combined with the ability to connect for updates ...
... so monitoring tools, network security tools, logging tools ... all of these sorts of systems are the ideal place to put an exploit. The absolute best to exploit? Probably anti-virus and anti-malware tools.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
