Anatomy of the SolarWinds Hack: Who What Where When How
a16z Podcast1 Feb 2021

Anatomy of the SolarWinds Hack: Who What Where When How

In this special “3x”-long episode of our (otherwise shortform) news analysis show 16 Minutes -- past such 2-3X explainer episodes have covered section 230, Tiktok, GPT-3, the opioid crisis, more -- we cover the SolarWinds hack, one of the largest (if not the largest!) publicly known hacks of all time... and the ripple effects are only now starting to be revealed. Just this week, the U.S. Cybersecurity and Infrastructure Security Agency shared (as reported in the Wall Street Journal) that approximately 30% of both private-sector and government victims linked to the hack had no direct connection to SolarWinds. So who was compromised, do they even know, can they even know?!

Because this hack is a supply-chain compromise involving various third-party software and services all connected together in a "chain of chains", the knock-on effects of it will be revealed (or not!) for years to come. So what do companies -- whether large enterprise, mid-sized startup, or small business -- do? What actually happened, and when does the timeline really begin? While first publicly revealed in December 2020 -- we first covered the news in episode #49 here when it first broke, and there have been countless headlines since (about early known government agency victims, company investigations, other tool investigations, debates over who and how and so on) -- the hack actually began not just a few months but years earlier, involving early tests, legit domains, and a very long game.

We help cut through the headline fatigue of it all, tease apart what's hype/ what's real, and do an "anatomy of a hack" step-by-step teardown -- the who, what, where, when, how; from the chess moves to technical details -- in an in-depth yet accessible way with Sonal Chokshi in conversation with a16z expert and former CSO Joel de la Garza and outside expert Steven Adair, founder and president of Volexity. The information security firm (which specializes in incident response, digital forensics/ memory analysis, network monitoring, and more) not only posted guidance for responding to such attacks, but also an analysis based on working three separate incidents involving the SolarWinds hackers. But how did they know it was the same group? And why was it not quite the perfect crime?

image: Heliophysics Systems Observatory spacecraft characterize, in the highest cadence, the constant stream of particles exploding from the sun affect Earth, the planets, and beyond via NASA Goddard Space Flight Center / Flickr

Episoder(907)

a16z Podcast: Getting That First Board Seat

a16z Podcast: Getting That First Board Seat

When you're going for a board interview -- especially when it's your first board seat -- you're actually not supposed to go into it advocating for yourself and trying to convince people that you're a good operator, as you might in a job interview. So what does the board interview involve then? Is all the common advice we hear about getting on boards (e.g., "don't talk about strategy") really true? TaskRabbit COO Stacy Brown-Philpot, who was just announced to the HP Inc board (in Hewlett Packard's first major board shuffle since it split into two companies), answers these questions and shares other interesting nuggets from her experience getting her first board seat. She also shares why she went for a public board, as well as what other factors you should consider -- and really matter -- when considering board service. Joining her is Matt Levy, who manages a16z's board and mentor talent network as part of the executive talent team. For more resources on boards, see http://a16z.com/tag/board-matters-series/.

13 Aug 201520min

a16z Podcast: Is It Possible to Achieve Equitable Equity for Startup Employees?

a16z Podcast: Is It Possible to Achieve Equitable Equity for Startup Employees?

There's been a lot of activity lately around trying to improve equity compensation (for example, by removing tax liabilities that handcuff them). Or by making equity more equitable in other ways; as former Groupon CEO Andrew Mason observed, "When startups grow into unicorns, the distribution of employee earnings follows a common pattern: the founders make more money than they could spend in infinite lifetimes, a handful of early folks achieve financial independence, and everyone else gets a nice bonus, but nothing life changing." It's admittedly a very rarefied problem yet one that plagues a number of startup founders and employees who put in a lot of work to make the startup a success ... but end up with less than others in the same company. And it's a problem that has long plagued Mason, who shared his views on something he calls "progressive equity" to help more startup employees achieve financial independence if and when their companies exit through an IPO, acquisition, or other liquidity event. Can it work? Should it? a16z General Partner and co-founder Ben Horowitz joins Mason on this episode of the a16z Podcast to dissect the idea. The views expressed here are those of the individual AH Capital Management, L.L.C. (“a16z”) personnel quoted and are not the views of a16z or its affiliates. Certain information contained in here has been obtained from third-party sources, including from portfolio companies of funds managed by a16z. While taken from sources believed to be reliable, a16z has not independently verified such information and makes no representations about the enduring accuracy of the information or its appropriateness for a given situation. This content is provided for informational purposes only, and should not be relied upon as legal, business, investment, or tax advice. You should consult your own advisers as to those matters. References to any securities or digital assets are for illustrative purposes only, and do not constitute an investment recommendation or offer to provide investment advisory services. Furthermore, this content is not directed at nor intended for use by any investors or prospective investors, and may not under any circumstances be relied upon when making a decision to invest in any fund managed by a16z. (An offering to invest in an a16z fund will be made only by the private placement memorandum, subscription agreement, and other relevant documentation of any such fund and should be read in their entirety.) Any investments or portfolio companies mentioned, referred to, or described are not representative of all investments in vehicles managed by a16z, and there can be no assurance that the investments will be profitable or that other investments made in the future will have similar characteristics or results. A list of investments made by funds managed by Andreessen Horowitz (excluding investments and certain publicly traded cryptocurrencies/ digital assets for which the issuer has not provided permission for a16z to disclose publicly) is available at https://a16z.com/investments/. Charts and graphs provided within are for informational purposes solely and should not be relied upon when making any investment decision. Past performance is not indicative of future results. The content speaks only as of the date indicated. Any projections, estimates, forecasts, targets, prospects, and/or opinions expressed in these materials are subject to change without notice and may differ or be contrary to opinions expressed by others. Please see https://a16z.com/disclosures for additional important information.

7 Aug 201523min

a16z Podcast: Compensation Isn’t About Paying the Most, It’s About Being Consistent

a16z Podcast: Compensation Isn’t About Paying the Most, It’s About Being Consistent

The key to any great company is the people. Of course, part of attracting and keeping the best people is compensation. It seems straightforward, but if you don’t develop a philosophy early around how you are going to compensate all those great employees you’re going to be in a world of hurt later, says Shannon Schiltz, who heads up a16z’s People Practice. Compensation, from salary to different forms of equity, is the topic of this segment of the a16z Podcast. For the founders of many fast-growing companies it’s often an afterthought, says the other compensation expert on the pod, Than Nguyen. Founders are busy enough just finding enough people to build and grow their startup. But as a founder you need to raise your head up and consider how compensation fits into your long-term plans. Nguyen and Shiltz discuss ways to make that happen.

7 Aug 201531min

a16z Podcast: Bitcoin, Greece, and What’s Next for Cryptocurrency

a16z Podcast: Bitcoin, Greece, and What’s Next for Cryptocurrency

There are few things as old as financial catastrophe, except maybe finance. But in the latest fiscal meltdown in Greece, people started asking questions about whether newer technology -- bitcoin and the underlying blockchain -- could help. One of those was Wall Street Journal columnist Christopher Mims. In this episode of the pod, Mims and Coinbase CEO and co-founder Brian Armstrong talk about the current state and future possibility of bitcoin and the bitcoin blockchain. When it comes to Greece -- or the next financial snafu -- Armstrong and Mims think there is potential for bitcoin to help, but some education and UI mainstreaming needs to happen first. The views expressed here are those of the individual AH Capital Management, L.L.C. (“a16z”) personnel quoted and are not the views of a16z or its affiliates. Certain information contained in here has been obtained from third-party sources, including from portfolio companies of funds managed by a16z. While taken from sources believed to be reliable, a16z has not independently verified such information and makes no representations about the enduring accuracy of the information or its appropriateness for a given situation. This content is provided for informational purposes only, and should not be relied upon as legal, business, investment, or tax advice. You should consult your own advisers as to those matters. References to any securities or digital assets are for illustrative purposes only, and do not constitute an investment recommendation or offer to provide investment advisory services. Furthermore, this content is not directed at nor intended for use by any investors or prospective investors, and may not under any circumstances be relied upon when making a decision to invest in any fund managed by a16z. (An offering to invest in an a16z fund will be made only by the private placement memorandum, subscription agreement, and other relevant documentation of any such fund and should be read in their entirety.) Any investments or portfolio companies mentioned, referred to, or described are not representative of all investments in vehicles managed by a16z, and there can be no assurance that the investments will be profitable or that other investments made in the future will have similar characteristics or results. A list of investments made by funds managed by Andreessen Horowitz (excluding investments and certain publicly traded cryptocurrencies/ digital assets for which the issuer has not provided permission for a16z to disclose publicly) is available at https://a16z.com/investments/. Charts and graphs provided within are for informational purposes solely and should not be relied upon when making any investment decision. Past performance is not indicative of future results. The content speaks only as of the date indicated. Any projections, estimates, forecasts, targets, prospects, and/or opinions expressed in these materials are subject to change without notice and may differ or be contrary to opinions expressed by others. Please see https://a16z.com/disclosures for additional important information.

7 Aug 201534min

a16z Podcast: A Copernican Update ... In Tech, the Smartphone is the Center

a16z Podcast: A Copernican Update ... In Tech, the Smartphone is the Center

Given the endless time we all spend with our noses in our phones, it may not be too surprising to hear that the smartphone has taken over the tech world. But the smartphone’s dominance is so complete, says a16z’s Benedict Evans, that it’s useful to think of it as the sun, the object around which everything else in the (technology) planetary system revolves. Technology meets astronomy, plus Android’s Stagefright bug, and why three German carmakers are getting into the software business in this segment of the a16z Podcast.

5 Aug 201522min

a16z Podcast: How Innovation Ecosystems Grow Around the Globe

a16z Podcast: How Innovation Ecosystems Grow Around the Globe

Why do so many-government led efforts to build the next "Silicon Valley" in one geography or another fail? Is it misguided to even try? But then what does make such innovation clusters work? In this segment of the pod a trio of expert guests -- AnnaLee Saxenian, Dean of the UC Berkeley School of Information and a longtime researcher/observer of regional competitive advantage; VC Brad Feld and writer on startup communities; and entrepreneur and investor Christopher Schroeder, who covers startups rising in the Middle East and most recently wrote about the tech phenomenon in Iran -- tackle the question of how innovation ecosystems grow. The discussion delves into how innovation is being spurred differently (or stifled) in places like China and Iran; whether there are cultural differences in attitudes for failure or about entrepreneurship; and if regulatory arbitrage is one way for regions to get ahead.

1 Aug 201534min

a16z Podcast: These Girls Code

a16z Podcast: These Girls Code

We sat down with four jet-lagged high school hackers from Nigeria, Brazil, and India -- representing some of the finalists in this year’s Technovation coding competition in San Francisco -- to hear about the mobile apps they created, the culture of coding in their home countries, and what’s coming next for their nascent software empires.

30 Jul 20156min

a16z Podcast: Why Every Business is in the Data Business

a16z Podcast: Why Every Business is in the Data Business

It’s not just the likes of Google, Facebook, and Amazon that lean on a massive and growing corpus of data, today every company is a data-driven company. In this world, access to data -- and how you manage it -- is what matters, says Ash Ashutosh, founder and CEO of Actifio. In this segment of the pod, we get in the weeds with Ashutosh and a16z’s Peter Levine on how this data-driven world is changing the technology infrastructure that is the engine behind it, and the companies that use it. Ashutosh and Levine also discuss ramping sales teams, going international, and what’s driving the timing of IPOs – or really the lack of IPOs. Finally, Ashutosh offers his four-legged response to being referred to as a “unicorn.”

28 Jul 201522min

Populært innen Business og økonomi

stopp-verden
dine-penger-pengeradet
e24-podden
rss-penger-polser-og-politikk
rss-borsmorgen-okonominyhetene
finansredaksjonen
livet-pa-veien-med-jan-erik-larssen
utbytte
pengesnakk
pengepodden-2
tid-er-penger-en-podcast-med-peter-warren
morgenkaffen-med-finansavisen
rss-sunn-okonomi
aksjesladder
lederpodden
nordnet-norge
okonomiamatorene
stormkast-med-valebrokk-stordalen
shifter
stinn-av-gryn