Anatomy of the SolarWinds Hack: Who What Where When How
a16z Podcast1 Feb 2021

Anatomy of the SolarWinds Hack: Who What Where When How

In this special “3x”-long episode of our (otherwise shortform) news analysis show 16 Minutes -- past such 2-3X explainer episodes have covered section 230, Tiktok, GPT-3, the opioid crisis, more -- we cover the SolarWinds hack, one of the largest (if not the largest!) publicly known hacks of all time... and the ripple effects are only now starting to be revealed. Just this week, the U.S. Cybersecurity and Infrastructure Security Agency shared (as reported in the Wall Street Journal) that approximately 30% of both private-sector and government victims linked to the hack had no direct connection to SolarWinds. So who was compromised, do they even know, can they even know?!

Because this hack is a supply-chain compromise involving various third-party software and services all connected together in a "chain of chains", the knock-on effects of it will be revealed (or not!) for years to come. So what do companies -- whether large enterprise, mid-sized startup, or small business -- do? What actually happened, and when does the timeline really begin? While first publicly revealed in December 2020 -- we first covered the news in episode #49 here when it first broke, and there have been countless headlines since (about early known government agency victims, company investigations, other tool investigations, debates over who and how and so on) -- the hack actually began not just a few months but years earlier, involving early tests, legit domains, and a very long game.

We help cut through the headline fatigue of it all, tease apart what's hype/ what's real, and do an "anatomy of a hack" step-by-step teardown -- the who, what, where, when, how; from the chess moves to technical details -- in an in-depth yet accessible way with Sonal Chokshi in conversation with a16z expert and former CSO Joel de la Garza and outside expert Steven Adair, founder and president of Volexity. The information security firm (which specializes in incident response, digital forensics/ memory analysis, network monitoring, and more) not only posted guidance for responding to such attacks, but also an analysis based on working three separate incidents involving the SolarWinds hackers. But how did they know it was the same group? And why was it not quite the perfect crime?

image: Heliophysics Systems Observatory spacecraft characterize, in the highest cadence, the constant stream of particles exploding from the sun affect Earth, the planets, and beyond via NASA Goddard Space Flight Center / Flickr

Avsnitt(900)

a16z Podcast: Enough with the Old Stuff -- Time for New Questions in Mobile

a16z Podcast: Enough with the Old Stuff -- Time for New Questions in Mobile

It's been a long and (at times) interesting battle pitching iOS vs. Android. It's time to let it go, says a16z's Benedict Evans. It's time to move on to a new set of questions -- and ideas -- in mobile. The views expressed here are those of the individual AH Capital Management, L.L.C. (“a16z”) personnel quoted and are not the views of a16z or its affiliates. Certain information contained in here has been obtained from third-party sources, including from portfolio companies of funds managed by a16z. While taken from sources believed to be reliable, a16z has not independently verified such information and makes no representations about the enduring accuracy of the information or its appropriateness for a given situation. This content is provided for informational purposes only, and should not be relied upon as legal, business, investment, or tax advice. You should consult your own advisers as to those matters. References to any securities or digital assets are for illustrative purposes only, and do not constitute an investment recommendation or offer to provide investment advisory services. Furthermore, this content is not directed at nor intended for use by any investors or prospective investors, and may not under any circumstances be relied upon when making a decision to invest in any fund managed by a16z. (An offering to invest in an a16z fund will be made only by the private placement memorandum, subscription agreement, and other relevant documentation of any such fund and should be read in their entirety.) Any investments or portfolio companies mentioned, referred to, or described are not representative of all investments in vehicles managed by a16z, and there can be no assurance that the investments will be profitable or that other investments made in the future will have similar characteristics or results. A list of investments made by funds managed by Andreessen Horowitz (excluding investments and certain publicly traded cryptocurrencies/ digital assets for which the issuer has not provided permission for a16z to disclose publicly) is available at https://a16z.com/investments/. Charts and graphs provided within are for informational purposes solely and should not be relied upon when making any investment decision. Past performance is not indicative of future results. The content speaks only as of the date indicated. Any projections, estimates, forecasts, targets, prospects, and/or opinions expressed in these materials are subject to change without notice and may differ or be contrary to opinions expressed by others. Please see https://a16z.com/disclosures for additional important information.

17 Dec 201436min

a16z Podcast: Gateway Gadgets to the Internet of Things

a16z Podcast: Gateway Gadgets to the Internet of Things

The Internet of Things puts intelligence into all kinds of things -- especially in the home, from appliances to light bulbs and door locks. But we still have a ways to go. “We need to be very patient in this category,” says Quirky CEO Ben Kaufman in a conversation with a16z General Partner Scott Weiss. The technology is available, Kaufman adds, we just need our things -- and habits -- to be ready too. So when does this technology go mainstream? What gadget do they think will push it over the edge ... and what might hold it back even longer? The views expressed here are those of the individual AH Capital Management, L.L.C. (“a16z”) personnel quoted and are not the views of a16z or its affiliates. Certain information contained in here has been obtained from third-party sources, including from portfolio companies of funds managed by a16z. While taken from sources believed to be reliable, a16z has not independently verified such information and makes no representations about the enduring accuracy of the information or its appropriateness for a given situation. This content is provided for informational purposes only, and should not be relied upon as legal, business, investment, or tax advice. You should consult your own advisers as to those matters. References to any securities or digital assets are for illustrative purposes only, and do not constitute an investment recommendation or offer to provide investment advisory services. Furthermore, this content is not directed at nor intended for use by any investors or prospective investors, and may not under any circumstances be relied upon when making a decision to invest in any fund managed by a16z. (An offering to invest in an a16z fund will be made only by the private placement memorandum, subscription agreement, and other relevant documentation of any such fund and should be read in their entirety.) Any investments or portfolio companies mentioned, referred to, or described are not representative of all investments in vehicles managed by a16z, and there can be no assurance that the investments will be profitable or that other investments made in the future will have similar characteristics or results. A list of investments made by funds managed by Andreessen Horowitz (excluding investments and certain publicly traded cryptocurrencies/ digital assets for which the issuer has not provided permission for a16z to disclose publicly) is available at https://a16z.com/investments/. Charts and graphs provided within are for informational purposes solely and should not be relied upon when making any investment decision. Past performance is not indicative of future results. The content speaks only as of the date indicated. Any projections, estimates, forecasts, targets, prospects, and/or opinions expressed in these materials are subject to change without notice and may differ or be contrary to opinions expressed by others. Please see https://a16z.com/disclosures for additional important information.

13 Dec 201415min

a16z Podcast: Technology and the Opening of Myanmar

a16z Podcast: Technology and the Opening of Myanmar

After years of being shut off to the world -- Myanmar is opening itself up. Not just across physical borders, but also the digital. What happens when the vast majority of a population suddenly has access to a cell phone, not to mention Facebook? How is technology manifesting itself in the media, in the economy and in the education of a population eager to use the tools it suddenly has access to? What can Myanmar teach the rest of the world about the opportunities that arise, and potential pitfalls, when a wave of new technology crashes down? Joining the discussion is David Madden from non-profit Internews and the founder of the brand-new Phandeeyar: Myanmar Innovation Lab; Aye Moah, founder of Silicon Valley-based startup Baydin (in photo); and Ethan Zuckerman director of the Center for Civic Media at MIT.

8 Dec 201433min

a16z Podcast: If Coding is the New Literacy, How Can More People Code?

a16z Podcast: If Coding is the New Literacy, How Can More People Code?

Technology can be an equalizer, especially as new tools democratize the expertise that was previously held only by a limited few. But is coding really the new literacy -- the fourth “r” -- after reading, writing and arithmetic? Should it be? Why does this even matter, and how can coding enable more people?

8 Dec 201435min

a16z Podcast: Where the Growth in Cloud and Enterprise Software Really Is (with Marc Benioff)

a16z Podcast: Where the Growth in Cloud and Enterprise Software Really Is (with Marc Benioff)

VCs wouldn't fund Salesforce ("that obviously won't work") when Marc Benioff began. With the cloud a growing part of practically every company, government, organization, and people's lives, a lot's changed since 1999. But what's next? Do enterprise CEOs get (mobile) religion? [Answer: not yet. Benioff thinks there's a ton of opportunity ahead there.] What's happening with international growth, when countries want their own clouds and 90% of enterprise software is bought in just 7 countries?

5 Dec 201434min

a16z Podcast: Security’s Wakeup Call

a16z Podcast: Security’s Wakeup Call

The security landscape is changing. Can companies fight back against an increasingly well-armed and sophisticated set of bad players? “I think it is the beginning of a wakeup call,” former deputy secretary of defense Ashton Carter says. “That said, I think there are a lot of people at the top that don’t know what to do.” Carter (who is is expected to be formally nominated as the next Secretary of Defense) joins a16z board partner John Jack and Yahoo security chief Alex Stamos for a wide-ranging discussion about the state of security.

3 Dec 201429min

a16z Podcast: Guiding Startup Culture -- The Genius ISMs

a16z Podcast: Guiding Startup Culture -- The Genius ISMs

It might seem that culture at a startup is something that is just intuitive. And in the first days, with the first handful of people, that might be true. But the co-founders of Genius.com, Tom Lehman and Ilan Zechory (pictured), found that even at 25 people taking the time to describe their company's culture in detail -- their basic principles of life and work -- was critical. What follows is their version of a culture guide, the "Genius ISMs," from the practical -- "take the roast out of the oven," and "run into the spike," to the more tonal -- "we'll figure it out" and "the chaos will not be minimized." You can check out all 17 here: http://genius.com/Genius-the-genius-isms-annotated And of course here's the interview annotated: http://genius.com/A16z-genius-podcast-annotated The views expressed here are those of the individual AH Capital Management, L.L.C. (“a16z”) personnel quoted and are not the views of a16z or its affiliates. Certain information contained in here has been obtained from third-party sources, including from portfolio companies of funds managed by a16z. While taken from sources believed to be reliable, a16z has not independently verified such information and makes no representations about the enduring accuracy of the information or its appropriateness for a given situation. This content is provided for informational purposes only, and should not be relied upon as legal, business, investment, or tax advice. You should consult your own advisers as to those matters. References to any securities or digital assets are for illustrative purposes only, and do not constitute an investment recommendation or offer to provide investment advisory services. Furthermore, this content is not directed at nor intended for use by any investors or prospective investors, and may not under any circumstances be relied upon when making a decision to invest in any fund managed by a16z. (An offering to invest in an a16z fund will be made only by the private placement memorandum, subscription agreement, and other relevant documentation of any such fund and should be read in their entirety.) Any investments or portfolio companies mentioned, referred to, or described are not representative of all investments in vehicles managed by a16z, and there can be no assurance that the investments will be profitable or that other investments made in the future will have similar characteristics or results. A list of investments made by funds managed by Andreessen Horowitz (excluding investments and certain publicly traded cryptocurrencies/ digital assets for which the issuer has not provided permission for a16z to disclose publicly) is available at https://a16z.com/investments/. Charts and graphs provided within are for informational purposes solely and should not be relied upon when making any investment decision. Past performance is not indicative of future results. The content speaks only as of the date indicated. Any projections, estimates, forecasts, targets, prospects, and/or opinions expressed in these materials are subject to change without notice and may differ or be contrary to opinions expressed by others. Please see https://a16z.com/disclosures for additional important information.

28 Nov 201432min

a16z Podcast: Ecommerce and the Holiday Shopping Collision

a16z Podcast: Ecommerce and the Holiday Shopping Collision

How can ecommerce companies deal with the conflicting expectations of consumers and logistics realities of an on-demand economy? How can they compete with ecommerce giant Amazon, which just gets bigger every year? And given all this, how is physical retail faring? The views expressed here are those of the individual AH Capital Management, L.L.C. (“a16z”) personnel quoted and are not the views of a16z or its affiliates. Certain information contained in here has been obtained from third-party sources, including from portfolio companies of funds managed by a16z. While taken from sources believed to be reliable, a16z has not independently verified such information and makes no representations about the enduring accuracy of the information or its appropriateness for a given situation. This content is provided for informational purposes only, and should not be relied upon as legal, business, investment, or tax advice. You should consult your own advisers as to those matters. References to any securities or digital assets are for illustrative purposes only, and do not constitute an investment recommendation or offer to provide investment advisory services. Furthermore, this content is not directed at nor intended for use by any investors or prospective investors, and may not under any circumstances be relied upon when making a decision to invest in any fund managed by a16z. (An offering to invest in an a16z fund will be made only by the private placement memorandum, subscription agreement, and other relevant documentation of any such fund and should be read in their entirety.) Any investments or portfolio companies mentioned, referred to, or described are not representative of all investments in vehicles managed by a16z, and there can be no assurance that the investments will be profitable or that other investments made in the future will have similar characteristics or results. A list of investments made by funds managed by Andreessen Horowitz (excluding investments and certain publicly traded cryptocurrencies/ digital assets for which the issuer has not provided permission for a16z to disclose publicly) is available at https://a16z.com/investments/. Charts and graphs provided within are for informational purposes solely and should not be relied upon when making any investment decision. Past performance is not indicative of future results. The content speaks only as of the date indicated. Any projections, estimates, forecasts, targets, prospects, and/or opinions expressed in these materials are subject to change without notice and may differ or be contrary to opinions expressed by others. Please see https://a16z.com/disclosures for additional important information.

21 Nov 201422min

Populärt inom Business & ekonomi

framgangspodden
badfluence
varvet
uppgang-och-fall
rss-borsens-finest
svd-ledarredaktionen
avanzapodden
affarsvarlden
fill-or-kill
borsmorgon
rss-kort-lang-analyspodden-fran-di
dynastin
rss-dagen-med-di
kapitalet-en-podd-om-ekonomi
rikatillsammans-om-privatekonomi-rikedom-i-livet
tabberaset
lastbilspodden
ett-rikare-liv
market-makers
ekonomiekot-extra