Re: [PLUG] OT: SolarWinds

[LeRoy Cressy via plug <plug@lists.phillylinux.org>]

On 12/23/20 7:56 AM, Rich Kulawiec via plug wrote:
> On Sat, Dec 19, 2020 at 01:07:50PM -0500, Rich Kulawiec via plug wrote:
>> Let's run with that, for a moment.  Look at what Orion has done
>> *since* this has come out.
> Addendum:
>
> One of the things that I like to do is to read companies' SEC filings.
> Why?  Because they'll send their spokesliars out all day long to wallpaper
> over what they've done (or not done) but most of them are far more candid
> in their SEC paperwork...because people who aren't sometimes go to prison.
>
> This is a $6B company that makes -- by its own claims -- software that's
> used in critical and sensitive roles throughout corporations, educational
> institutions, government agencies, etc.
>
> This is a company that (in 2019) paid its president $1.4M, one EVP $.75M,
> another EVP $.7M, another EVP $.7M, another EVP $.65M...blah, blah blah.
> My point is that they seem to have plenty of money -- enough to waste
> lots of it on useless/redundant C-level personnel.
>
> This is a company that made $343M in the first 9 months of 2020 off
> of Orion.
>
> Now...attached is a copy [PDF] of an 8-K filing from SolarWinds from
> just about a week ago (courtesy @File411, who did the highlights too).
> Let me call your attention to the second-to-last paragraph on page 2.
>
> That's where we find out that this is *also* a company that was too cheap
> to hire someone to run their own mail server, a baseline requirement for
> anyone who even wants to pretend to run a secure operation.  These clowns
> outsourced it to Office365 -- which is like taping a 3-story high "kick me"
> sign to their building.
>
> And whaddaya know, they got kicked.
>
> Nearly four hundred million dollars in revenue in just nine months and
> they were unwilling to drop a few hundred thousand on mail infrastructure
> and administrators.  No, instead they saved the money and cheerfully
> indulged in what is well-known to be a worst practice.
>
> So spare me any talk about how we should take it easy on them because
> we want vendors to be honest with us.  No.  Screw that.  These greedy,
> stupid people should be publicly crucified and their company burned to
> the ground.  The damage they've done is going to cost a fortune to repair
> and that's before we start trying to assess the cost of the dataloss
> incidents they've caused, and we can't even do *that* yet because this was
> an access hack and we have very little what they accessed besides "a lot".
>
> It'd be nice if vendors were more honest, sure.  But it would be much
> nicer if they were less greedy and stupid.
>
> ---rsk
> ___________________________________________________________________________
> Philadelphia Linux Users Group         --        http://www.phillylinux.org
> Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
> General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug

Great insight :-)

-- 
  Rev. LeRoy D. Cressy  mailto:rev.cressy@prontonmail.com 	 /\_/\
  								( o.o )
								 > ^ <
		       Cell Phone:  267-668-9686

gpg fingerprint:  8AD5 35EF 1FDF F1A7 E483  8CCE A50D 4E81 C34B 77CC

For info on gpg:		https://gnupg.org/
For secure Cell Phone:		https://whispersystems.org/

Jesus saith unto him, I am the way, the truth, and the life:
no man cometh unto the Father, but by me. (John 14:6)

Social Media:
	minds.com		https://www.minds.com/lrcressy/
	gab.com			https://gab.com/the-rev
	pocketnet.app		https://pocketnet.app/therev

Video:
	ugetube.com		https://ugetube.com/@the-rev
	bitchute.com		https://www.bitchute.com/channel/the-rev/
	rumble.com		https://rumble.com/user/lrcressy


___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug