"so, anons, I'm not sure if you grasp the absolute big deal it is that SolarWinds is admitting to with this "hack"."
"Have used their products from the administration side and can tell you all, you can basically do whatever you want to any computer you want (except Macs, though most files are available via the admin console when the machine is on and someone is logged in). You can see whatever you want, you can configure the tool however you want (no notification to the user - ie. completely invisible to the user)."
"If that computer is powered on and connected to the internet, I would have full control of it and all of its data, if it was a Windows machine."
-------
So the comms last night going on between Krebs and his insider friends still at cisa - about not sure if they should power down (because powering down would possibly finish an install)or not means this: Screwed if you do, screwed if you don't. Patriots have it all.
Follow up to 2303: My note. Krebs used to work for Microsoft.
its 11:30 at night and I'm going downstairs to get my box of chains and decorations for my tree which has lights on but nothing else....
I'll be in an out....
...What if the NSA has been using Solar Winds?
As in “We have it all” ?
I like the way you think!