Comment

Comment by thesimon

SolarWinds hasn't bothered to revoke their certs or remove the package

https://twitter.com/KyleHanslovan/status/1338360093767823362

Back in 2019 apparently their FTP server credentials were exposed on GitHub, allowing automated updates being pushed

https://twitter.com/vinodsparrow/status/1338431183588188160/...

Edit: If updates failed due to signature not matching, SolarWinds recommended downloading the package and installing it manually, LOL

https://twitter.com/KyleHanslovan/status/1338419999665508354...

parent thesimon 5 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton