Anatomy of the SolarWinds Hack: Who What Where When How
a16z Podcast1 Feb 2021

Anatomy of the SolarWinds Hack: Who What Where When How

In this special “3x”-long episode of our (otherwise shortform) news analysis show 16 Minutes -- past such 2-3X explainer episodes have covered section 230, Tiktok, GPT-3, the opioid crisis, more -- we cover the SolarWinds hack, one of the largest (if not the largest!) publicly known hacks of all time... and the ripple effects are only now starting to be revealed. Just this week, the U.S. Cybersecurity and Infrastructure Security Agency shared (as reported in the Wall Street Journal) that approximately 30% of both private-sector and government victims linked to the hack had no direct connection to SolarWinds. So who was compromised, do they even know, can they even know?!

Because this hack is a supply-chain compromise involving various third-party software and services all connected together in a "chain of chains", the knock-on effects of it will be revealed (or not!) for years to come. So what do companies -- whether large enterprise, mid-sized startup, or small business -- do? What actually happened, and when does the timeline really begin? While first publicly revealed in December 2020 -- we first covered the news in episode #49 here when it first broke, and there have been countless headlines since (about early known government agency victims, company investigations, other tool investigations, debates over who and how and so on) -- the hack actually began not just a few months but years earlier, involving early tests, legit domains, and a very long game.

We help cut through the headline fatigue of it all, tease apart what's hype/ what's real, and do an "anatomy of a hack" step-by-step teardown -- the who, what, where, when, how; from the chess moves to technical details -- in an in-depth yet accessible way with Sonal Chokshi in conversation with a16z expert and former CSO Joel de la Garza and outside expert Steven Adair, founder and president of Volexity. The information security firm (which specializes in incident response, digital forensics/ memory analysis, network monitoring, and more) not only posted guidance for responding to such attacks, but also an analysis based on working three separate incidents involving the SolarWinds hackers. But how did they know it was the same group? And why was it not quite the perfect crime?

image: Heliophysics Systems Observatory spacecraft characterize, in the highest cadence, the constant stream of particles exploding from the sun affect Earth, the planets, and beyond via NASA Goddard Space Flight Center / Flickr

Episoder(904)

a16z Podcast: Where the Growth in Cloud and Enterprise Software Really Is (with Marc Benioff)

a16z Podcast: Where the Growth in Cloud and Enterprise Software Really Is (with Marc Benioff)

VCs wouldn't fund Salesforce ("that obviously won't work") when Marc Benioff began. With the cloud a growing part of practically every company, government, organization, and people's lives, a lot's changed since 1999. But what's next? Do enterprise CEOs get (mobile) religion? [Answer: not yet. Benioff thinks there's a ton of opportunity ahead there.] What's happening with international growth, when countries want their own clouds and 90% of enterprise software is bought in just 7 countries?

5 Des 201434min

a16z Podcast: Security’s Wakeup Call

a16z Podcast: Security’s Wakeup Call

The security landscape is changing. Can companies fight back against an increasingly well-armed and sophisticated set of bad players? “I think it is the beginning of a wakeup call,” former deputy secretary of defense Ashton Carter says. “That said, I think there are a lot of people at the top that don’t know what to do.” Carter (who is is expected to be formally nominated as the next Secretary of Defense) joins a16z board partner John Jack and Yahoo security chief Alex Stamos for a wide-ranging discussion about the state of security.

3 Des 201429min

a16z Podcast: Guiding Startup Culture -- The Genius ISMs

a16z Podcast: Guiding Startup Culture -- The Genius ISMs

It might seem that culture at a startup is something that is just intuitive. And in the first days, with the first handful of people, that might be true. But the co-founders of Genius.com, Tom Lehman and Ilan Zechory (pictured), found that even at 25 people taking the time to describe their company's culture in detail -- their basic principles of life and work -- was critical. What follows is their version of a culture guide, the "Genius ISMs," from the practical -- "take the roast out of the oven," and "run into the spike," to the more tonal -- "we'll figure it out" and "the chaos will not be minimized." You can check out all 17 here: http://genius.com/Genius-the-genius-isms-annotated And of course here's the interview annotated: http://genius.com/A16z-genius-podcast-annotated The views expressed here are those of the individual AH Capital Management, L.L.C. (“a16z”) personnel quoted and are not the views of a16z or its affiliates. Certain information contained in here has been obtained from third-party sources, including from portfolio companies of funds managed by a16z. While taken from sources believed to be reliable, a16z has not independently verified such information and makes no representations about the enduring accuracy of the information or its appropriateness for a given situation. This content is provided for informational purposes only, and should not be relied upon as legal, business, investment, or tax advice. You should consult your own advisers as to those matters. References to any securities or digital assets are for illustrative purposes only, and do not constitute an investment recommendation or offer to provide investment advisory services. Furthermore, this content is not directed at nor intended for use by any investors or prospective investors, and may not under any circumstances be relied upon when making a decision to invest in any fund managed by a16z. (An offering to invest in an a16z fund will be made only by the private placement memorandum, subscription agreement, and other relevant documentation of any such fund and should be read in their entirety.) Any investments or portfolio companies mentioned, referred to, or described are not representative of all investments in vehicles managed by a16z, and there can be no assurance that the investments will be profitable or that other investments made in the future will have similar characteristics or results. A list of investments made by funds managed by Andreessen Horowitz (excluding investments and certain publicly traded cryptocurrencies/ digital assets for which the issuer has not provided permission for a16z to disclose publicly) is available at https://a16z.com/investments/. Charts and graphs provided within are for informational purposes solely and should not be relied upon when making any investment decision. Past performance is not indicative of future results. The content speaks only as of the date indicated. Any projections, estimates, forecasts, targets, prospects, and/or opinions expressed in these materials are subject to change without notice and may differ or be contrary to opinions expressed by others. Please see https://a16z.com/disclosures for additional important information.

28 Nov 201432min

a16z Podcast: Ecommerce and the Holiday Shopping Collision

a16z Podcast: Ecommerce and the Holiday Shopping Collision

How can ecommerce companies deal with the conflicting expectations of consumers and logistics realities of an on-demand economy? How can they compete with ecommerce giant Amazon, which just gets bigger every year? And given all this, how is physical retail faring? The views expressed here are those of the individual AH Capital Management, L.L.C. (“a16z”) personnel quoted and are not the views of a16z or its affiliates. Certain information contained in here has been obtained from third-party sources, including from portfolio companies of funds managed by a16z. While taken from sources believed to be reliable, a16z has not independently verified such information and makes no representations about the enduring accuracy of the information or its appropriateness for a given situation. This content is provided for informational purposes only, and should not be relied upon as legal, business, investment, or tax advice. You should consult your own advisers as to those matters. References to any securities or digital assets are for illustrative purposes only, and do not constitute an investment recommendation or offer to provide investment advisory services. Furthermore, this content is not directed at nor intended for use by any investors or prospective investors, and may not under any circumstances be relied upon when making a decision to invest in any fund managed by a16z. (An offering to invest in an a16z fund will be made only by the private placement memorandum, subscription agreement, and other relevant documentation of any such fund and should be read in their entirety.) Any investments or portfolio companies mentioned, referred to, or described are not representative of all investments in vehicles managed by a16z, and there can be no assurance that the investments will be profitable or that other investments made in the future will have similar characteristics or results. A list of investments made by funds managed by Andreessen Horowitz (excluding investments and certain publicly traded cryptocurrencies/ digital assets for which the issuer has not provided permission for a16z to disclose publicly) is available at https://a16z.com/investments/. Charts and graphs provided within are for informational purposes solely and should not be relied upon when making any investment decision. Past performance is not indicative of future results. The content speaks only as of the date indicated. Any projections, estimates, forecasts, targets, prospects, and/or opinions expressed in these materials are subject to change without notice and may differ or be contrary to opinions expressed by others. Please see https://a16z.com/disclosures for additional important information.

21 Nov 201422min

a16z Podcast: Where's My Stuff? -- The Lowdown on Logistics and Ops

a16z Podcast: Where's My Stuff? -- The Lowdown on Logistics and Ops

The ease with which we can order anything online masks the tremendous complexity of getting that item to your door in a day or two (or less). Andreessen Horowitz's Jeff Jordan leads a discussion with four experts in ecommerce logistics and operations -- the tough business of getting things from one place to another. The views expressed here are those of the individual AH Capital Management, L.L.C. (“a16z”) personnel quoted and are not the views of a16z or its affiliates. Certain information contained in here has been obtained from third-party sources, including from portfolio companies of funds managed by a16z. While taken from sources believed to be reliable, a16z has not independently verified such information and makes no representations about the enduring accuracy of the information or its appropriateness for a given situation. This content is provided for informational purposes only, and should not be relied upon as legal, business, investment, or tax advice. You should consult your own advisers as to those matters. References to any securities or digital assets are for illustrative purposes only, and do not constitute an investment recommendation or offer to provide investment advisory services. Furthermore, this content is not directed at nor intended for use by any investors or prospective investors, and may not under any circumstances be relied upon when making a decision to invest in any fund managed by a16z. (An offering to invest in an a16z fund will be made only by the private placement memorandum, subscription agreement, and other relevant documentation of any such fund and should be read in their entirety.) Any investments or portfolio companies mentioned, referred to, or described are not representative of all investments in vehicles managed by a16z, and there can be no assurance that the investments will be profitable or that other investments made in the future will have similar characteristics or results. A list of investments made by funds managed by Andreessen Horowitz (excluding investments and certain publicly traded cryptocurrencies/ digital assets for which the issuer has not provided permission for a16z to disclose publicly) is available at https://a16z.com/investments/. Charts and graphs provided within are for informational purposes solely and should not be relied upon when making any investment decision. Past performance is not indicative of future results. The content speaks only as of the date indicated. Any projections, estimates, forecasts, targets, prospects, and/or opinions expressed in these materials are subject to change without notice and may differ or be contrary to opinions expressed by others. Please see https://a16z.com/disclosures for additional important information.

21 Nov 201457min

a16z Podcast: The Next Phase of 3D Printing

a16z Podcast: The Next Phase of 3D Printing

In this wide-ranging discussion about the latest and next consumer and industrial applications for 3D printing, we examine (with Shapeway's Carine Carmy and a16z's Tom Rikert): how the software-driven ideal of product-market-fit may be achieved in physical products, too -- with rapid prototyping through 3D printing; how the ability to manufacture on-demand changes traditional notions of seasonality and inventory management in product cycles and development; and how the long tail of 3-D printing means being able to have a market of 1. The views expressed here are those of the individual AH Capital Management, L.L.C. (“a16z”) personnel quoted and are not the views of a16z or its affiliates. Certain information contained in here has been obtained from third-party sources, including from portfolio companies of funds managed by a16z. While taken from sources believed to be reliable, a16z has not independently verified such information and makes no representations about the enduring accuracy of the information or its appropriateness for a given situation. This content is provided for informational purposes only, and should not be relied upon as legal, business, investment, or tax advice. You should consult your own advisers as to those matters. References to any securities or digital assets are for illustrative purposes only, and do not constitute an investment recommendation or offer to provide investment advisory services. Furthermore, this content is not directed at nor intended for use by any investors or prospective investors, and may not under any circumstances be relied upon when making a decision to invest in any fund managed by a16z. (An offering to invest in an a16z fund will be made only by the private placement memorandum, subscription agreement, and other relevant documentation of any such fund and should be read in their entirety.) Any investments or portfolio companies mentioned, referred to, or described are not representative of all investments in vehicles managed by a16z, and there can be no assurance that the investments will be profitable or that other investments made in the future will have similar characteristics or results. A list of investments made by funds managed by Andreessen Horowitz (excluding investments and certain publicly traded cryptocurrencies/ digital assets for which the issuer has not provided permission for a16z to disclose publicly) is available at https://a16z.com/investments/. Charts and graphs provided within are for informational purposes solely and should not be relied upon when making any investment decision. Past performance is not indicative of future results. The content speaks only as of the date indicated. Any projections, estimates, forecasts, targets, prospects, and/or opinions expressed in these materials are subject to change without notice and may differ or be contrary to opinions expressed by others. Please see https://a16z.com/disclosures for additional important information.

19 Nov 201427min

a16z Podcast: The End of Ownership

a16z Podcast: The End of Ownership

What happens when the importance of access to things trumps the value of owning those same things? The end of ownership. From computer hardware, to houses, trucks, cars, and more, the notion of ownership is changing as software enables the matching of people and organizations that have things and those that need them. Joining a16z’s Balaji Srinivasan to pick apart this trend are Joe Gebbia, Airbnb co-founder and chief product officer; John Stanfield co-founder and CEO of Local Motion; and Ben Uretsky, co-founder and CEO of DigitalOcean. The views expressed here are those of the individual AH Capital Management, L.L.C. (“a16z”) personnel quoted and are not the views of a16z or its affiliates. Certain information contained in here has been obtained from third-party sources, including from portfolio companies of funds managed by a16z. While taken from sources believed to be reliable, a16z has not independently verified such information and makes no representations about the enduring accuracy of the information or its appropriateness for a given situation. This content is provided for informational purposes only, and should not be relied upon as legal, business, investment, or tax advice. You should consult your own advisers as to those matters. References to any securities or digital assets are for illustrative purposes only, and do not constitute an investment recommendation or offer to provide investment advisory services. Furthermore, this content is not directed at nor intended for use by any investors or prospective investors, and may not under any circumstances be relied upon when making a decision to invest in any fund managed by a16z. (An offering to invest in an a16z fund will be made only by the private placement memorandum, subscription agreement, and other relevant documentation of any such fund and should be read in their entirety.) Any investments or portfolio companies mentioned, referred to, or described are not representative of all investments in vehicles managed by a16z, and there can be no assurance that the investments will be profitable or that other investments made in the future will have similar characteristics or results. A list of investments made by funds managed by Andreessen Horowitz (excluding investments and certain publicly traded cryptocurrencies/ digital assets for which the issuer has not provided permission for a16z to disclose publicly) is available at https://a16z.com/investments/. Charts and graphs provided within are for informational purposes solely and should not be relied upon when making any investment decision. Past performance is not indicative of future results. The content speaks only as of the date indicated. Any projections, estimates, forecasts, targets, prospects, and/or opinions expressed in these materials are subject to change without notice and may differ or be contrary to opinions expressed by others. Please see https://a16z.com/disclosures for additional important information.

17 Nov 201438min

a16z Podcast: Sports, Tech, and What We Can All Learn from the Latest Performance Science

a16z Podcast: Sports, Tech, and What We Can All Learn from the Latest Performance Science

The modern, average 12-year-old Madden NFL videogame player has actually visualized more plays than ‪any past real-life NFL Hall-of-Famer. And now, for the first time, we're seeing those videogame tactics show up on the field too. There's a "technological and analytical arms race" going on in sports, and it's producing the world's best athletes in history. How are they working smarter, using science and technology to enhance the way they train and perform, when it's not enough to put in 10,000 hours? How should athletes sleep? (Note: you can try this at home, too). And what does “performance by the aggregation of marginal gains” have to do with winning? Author of the new book Faster, Higher, Stronger Wired's Mark McClusky -- interviewed by a16z General Partner (and enthusiastic basketball player) Jeff Jordan -- bridge the worlds of "jocks" and "nerds" in this wide-ranging conversation about sports, performance technology, nature vs. nurture, and the tricky nuances of why some enhancement technologies are legal vs. illegal or better vs. worse than others.

14 Nov 201457min

Populært innen Business og økonomi

stopp-verden
dine-penger-pengeradet
e24-podden
rss-penger-polser-og-politikk
rss-borsmorgen-okonominyhetene
finansredaksjonen
utbytte
tid-er-penger-en-podcast-med-peter-warren
livet-pa-veien-med-jan-erik-larssen
pengepodden-2
aksjesladder
morgenkaffen-med-finansavisen
pengesnakk
rss-sunn-okonomi
lederpodden
nordnet-norge
okonomiamatorene
stormkast-med-valebrokk-stordalen
rss-impressions-2
shifter