Anatomy of the SolarWinds Hack: Who What Where When How
a16z Podcast1 Feb 2021

Anatomy of the SolarWinds Hack: Who What Where When How

In this special “3x”-long episode of our (otherwise shortform) news analysis show 16 Minutes -- past such 2-3X explainer episodes have covered section 230, Tiktok, GPT-3, the opioid crisis, more -- we cover the SolarWinds hack, one of the largest (if not the largest!) publicly known hacks of all time... and the ripple effects are only now starting to be revealed. Just this week, the U.S. Cybersecurity and Infrastructure Security Agency shared (as reported in the Wall Street Journal) that approximately 30% of both private-sector and government victims linked to the hack had no direct connection to SolarWinds. So who was compromised, do they even know, can they even know?!

Because this hack is a supply-chain compromise involving various third-party software and services all connected together in a "chain of chains", the knock-on effects of it will be revealed (or not!) for years to come. So what do companies -- whether large enterprise, mid-sized startup, or small business -- do? What actually happened, and when does the timeline really begin? While first publicly revealed in December 2020 -- we first covered the news in episode #49 here when it first broke, and there have been countless headlines since (about early known government agency victims, company investigations, other tool investigations, debates over who and how and so on) -- the hack actually began not just a few months but years earlier, involving early tests, legit domains, and a very long game.

We help cut through the headline fatigue of it all, tease apart what's hype/ what's real, and do an "anatomy of a hack" step-by-step teardown -- the who, what, where, when, how; from the chess moves to technical details -- in an in-depth yet accessible way with Sonal Chokshi in conversation with a16z expert and former CSO Joel de la Garza and outside expert Steven Adair, founder and president of Volexity. The information security firm (which specializes in incident response, digital forensics/ memory analysis, network monitoring, and more) not only posted guidance for responding to such attacks, but also an analysis based on working three separate incidents involving the SolarWinds hackers. But how did they know it was the same group? And why was it not quite the perfect crime?

image: Heliophysics Systems Observatory spacecraft characterize, in the highest cadence, the constant stream of particles exploding from the sun affect Earth, the planets, and beyond via NASA Goddard Space Flight Center / Flickr

Avsnitt(902)

a16z Podcast: Wall Street's Most Hated Man -- A Conversation With Overstock.com's Patrick Byrne

a16z Podcast: Wall Street's Most Hated Man -- A Conversation With Overstock.com's Patrick Byrne

Mention Patrick Byrne, the founder and CEO of Overstock.com, and you’ll elicit a strong opinion. In 2004, one hedge fund manager labeled Byrne the most hated man on Wall Street -- a label he wears proudly. Byrne started Overstock.com in 1999, and the online retailer has been through a lot of change in the intervening years. At the outset, Byrne didn’t want Overstock to be a technology company trying to get retail right, he wanted to be a retail company that was amplified by technology. Looking back, he says, he had the emphasis wrong -- it should have been on technology. Byrne has been focused on the technology side of things ever since, pushing Overstock further into the cloud, as well as becoming the first major online merchant to accept Bitcoin. Byrne joins this segment of the a16z Podcast to discuss the state of online retail, value investing in tech, and why he believes Bitcoin and the crypto revolution is bigger than the Internet. The views expressed here are those of the individual AH Capital Management, L.L.C. (“a16z”) personnel quoted and are not the views of a16z or its affiliates. Certain information contained in here has been obtained from third-party sources, including from portfolio companies of funds managed by a16z. While taken from sources believed to be reliable, a16z has not independently verified such information and makes no representations about the enduring accuracy of the information or its appropriateness for a given situation. This content is provided for informational purposes only, and should not be relied upon as legal, business, investment, or tax advice. You should consult your own advisers as to those matters. References to any securities or digital assets are for illustrative purposes only, and do not constitute an investment recommendation or offer to provide investment advisory services. Furthermore, this content is not directed at nor intended for use by any investors or prospective investors, and may not under any circumstances be relied upon when making a decision to invest in any fund managed by a16z. (An offering to invest in an a16z fund will be made only by the private placement memorandum, subscription agreement, and other relevant documentation of any such fund and should be read in their entirety.) Any investments or portfolio companies mentioned, referred to, or described are not representative of all investments in vehicles managed by a16z, and there can be no assurance that the investments will be profitable or that other investments made in the future will have similar characteristics or results. A list of investments made by funds managed by Andreessen Horowitz (excluding investments and certain publicly traded cryptocurrencies/ digital assets for which the issuer has not provided permission for a16z to disclose publicly) is available at https://a16z.com/investments/. Charts and graphs provided within are for informational purposes solely and should not be relied upon when making any investment decision. Past performance is not indicative of future results. The content speaks only as of the date indicated. Any projections, estimates, forecasts, targets, prospects, and/or opinions expressed in these materials are subject to change without notice and may differ or be contrary to opinions expressed by others. Please see https://a16z.com/disclosures for additional important information.

6 Okt 201535min

a16z Podcast: A Podcast about Podcasts

a16z Podcast: A Podcast about Podcasts

Podcasts and podcasting have been around a while, but seem to be going through a renaissance of sorts -- partly enabled by connected cars and other technologies. But how do we discover podcasts; is the ideal atomic unit the show, or an individual episode/topic? What makes a good podcast? And given their intimacy, how can brands and communities engage with podcasts? We discuss this and more in this oh-so-meta episode of the a16z Podcast-about-podcasts. And to help us do that, we invited longtime podcaster and radio host Roman Mars -- of the highly regarded design show 99% Invisible -- as well as fans (and now curators of) podcasts, Ryan Hoover and Erik Torenberg of Product Hunt. [Along with, of course, your a16z Podcast producers and hosts Sonal Chokshi and Michael Copeland.] The views expressed here are those of the individual AH Capital Management, L.L.C. (“a16z”) personnel quoted and are not the views of a16z or its affiliates. Certain information contained in here has been obtained from third-party sources, including from portfolio companies of funds managed by a16z. While taken from sources believed to be reliable, a16z has not independently verified such information and makes no representations about the enduring accuracy of the information or its appropriateness for a given situation. This content is provided for informational purposes only, and should not be relied upon as legal, business, investment, or tax advice. You should consult your own advisers as to those matters. References to any securities or digital assets are for illustrative purposes only, and do not constitute an investment recommendation or offer to provide investment advisory services. Furthermore, this content is not directed at nor intended for use by any investors or prospective investors, and may not under any circumstances be relied upon when making a decision to invest in any fund managed by a16z. (An offering to invest in an a16z fund will be made only by the private placement memorandum, subscription agreement, and other relevant documentation of any such fund and should be read in their entirety.) Any investments or portfolio companies mentioned, referred to, or described are not representative of all investments in vehicles managed by a16z, and there can be no assurance that the investments will be profitable or that other investments made in the future will have similar characteristics or results. A list of investments made by funds managed by Andreessen Horowitz (excluding investments and certain publicly traded cryptocurrencies/ digital assets for which the issuer has not provided permission for a16z to disclose publicly) is available at https://a16z.com/investments/. Charts and graphs provided within are for informational purposes solely and should not be relied upon when making any investment decision. Past performance is not indicative of future results. The content speaks only as of the date indicated. Any projections, estimates, forecasts, targets, prospects, and/or opinions expressed in these materials are subject to change without notice and may differ or be contrary to opinions expressed by others. Please see https://a16z.com/disclosures for additional important information.

4 Okt 201533min

a16z Podcast: Money, Risk, and Software

a16z Podcast: Money, Risk, and Software

Financial services are overdue for an overhaul. With a16z's newest general partner, Alex Rampell (who just officially started), this segment of the podcast explores the world of fintech... How software backed up by data is being brought to bear on lending, insurance, and the science (oftentimes art) of underwriting risk. We also get a taste of what life was like for Rampell running a successful internet business out of his bedroom -- an experience that would lead him toward the world of monetization/ payments and eventually co-founding numerous startups.

2 Okt 201538min

a16z Podcast: Advertising vs. Micropayments in the Age of Ad Blockers

a16z Podcast: Advertising vs. Micropayments in the Age of Ad Blockers

Apple included support for ad blocking in its recent iOS 9 update, and for many that prompted discussions around an age-old question: Is traditional advertising a viable business model for content -- and if it isn’t, what has a shot at replacing it? In this segment of the a16z Podcast [and one of our first podcasts 'by request'], Chris Dixon (who led our BuzzFeed investment and has previously shared his thoughts on the topic) and Benedict Evans (who has also been an independent content site producer himself and has shared some of his thoughts on the topic) discuss the future of advertising; why micropayments have been mostly a non-starter until now; the chicken-egg issue; and which alternative forms of advertising -- native ads, for example -- are showing promise. Finally, why quality media outlets will do extremely well once the industry comes out on the other side of this wrenching transitional period. The views expressed here are those of the individual AH Capital Management, L.L.C. (“a16z”) personnel quoted and are not the views of a16z or its affiliates. Certain information contained in here has been obtained from third-party sources, including from portfolio companies of funds managed by a16z. While taken from sources believed to be reliable, a16z has not independently verified such information and makes no representations about the enduring accuracy of the information or its appropriateness for a given situation. This content is provided for informational purposes only, and should not be relied upon as legal, business, investment, or tax advice. You should consult your own advisers as to those matters. References to any securities or digital assets are for illustrative purposes only, and do not constitute an investment recommendation or offer to provide investment advisory services. Furthermore, this content is not directed at nor intended for use by any investors or prospective investors, and may not under any circumstances be relied upon when making a decision to invest in any fund managed by a16z. (An offering to invest in an a16z fund will be made only by the private placement memorandum, subscription agreement, and other relevant documentation of any such fund and should be read in their entirety.) Any investments or portfolio companies mentioned, referred to, or described are not representative of all investments in vehicles managed by a16z, and there can be no assurance that the investments will be profitable or that other investments made in the future will have similar characteristics or results. A list of investments made by funds managed by Andreessen Horowitz (excluding investments and certain publicly traded cryptocurrencies/ digital assets for which the issuer has not provided permission for a16z to disclose publicly) is available at https://a16z.com/investments/. Charts and graphs provided within are for informational purposes solely and should not be relied upon when making any investment decision. Past performance is not indicative of future results. The content speaks only as of the date indicated. Any projections, estimates, forecasts, targets, prospects, and/or opinions expressed in these materials are subject to change without notice and may differ or be contrary to opinions expressed by others. Please see https://a16z.com/disclosures for additional important information.

25 Sep 201525min

a16z Podcast: Building the Right Technical Advisory Board

a16z Podcast: Building the Right Technical Advisory Board

There is increasing interest among companies -- small and large -- in putting together technical advisory boards. It sounds pretty straightforward: get some senior technical experts to help with the technical speed bumps. But if that is all your technical advisory board is, you are missing out. Built and utilized correctly, a technical advisory board can be a huge advantage when it comes to mapping out a long-term strategic plan, finding talent, and building a great engineering culture. On this segment of the a16z Podcast we break down the right way to build a technical advisory board; what you should expect from the board (and just as important, what you shouldn’t). And for those looking to serve on a technical advisory board, the reasons to do it, as well as the things to consider before committing. This conversation was recorded as part of an event featuring four technical experts: Arnie Goldberg from PayPal; Purnima Padmanabhan, former CEO of Cavirin; Alex Roetter, SVP of Engineering at Twitter; and a16z General Partner Peter Levine.

21 Sep 201535min

a16z Podcast: Making the Case for Permissionless Innovation

a16z Podcast: Making the Case for Permissionless Innovation

The internet as it has evolved in the United States is perhaps the best example of “permissionless innovation” -- the idea that you can innovate without first waiting for permission or clearance. And so academics, entrepreneurs, and people took up the internet, developed technologies over it, and in the process created fantastically valuable companies that are now household names around the world. But such innovation hasn't happened outside the U.S., argues Adam Thierer -- research fellow with the Technology Policy Program at the Mercatus Center at George Mason University -- because other regions have reversed the model of "innovate first, regulate later" (or rather, regulate only as necessary and if not already covered by existing laws). Thierer, who has also authored a book on Permissionless Innovation, joins this segment of the a16z podcast to discuss "technopanic" cycles; emerging areas of interest; and where "best practices" help ... or hurt when it comes to soft regulation.

17 Sep 201522min

a16z Podcast: The Best Way To Be Smart ... Is To Not Be Stupid

a16z Podcast: The Best Way To Be Smart ... Is To Not Be Stupid

Legendary investor Charlie Munger (Warren Buffett's financial partner and vice chairman of Berkshire Hathaway) invokes a set of interdisciplinary "mental models" involving economics, business, psychology, ethics, and management to keep emotions out of his investments and avoid the common pitfalls of bad judgment. In a new book focused on lessons learned from Munger, Tren Griffin (who works at Microsoft and has long focused on lessons learned from many investors) shares insights on decision making and the psychology of human judgment -- especially as it applies to investing and risk. But Griffin believes that these lessons can be applied to all of us in our daily lives, not just by investors. (He also argues that investing may be one of the last liberal arts). So how then do we channel our inner Munger? In this episode of the a16z Podcast, we discuss how to think about thinking; why the best investors and business leaders spend more time on what they DON’T know; and how the best way to be smart is to ... not be stupid.

11 Sep 201532min

a16z Podcast: Apple Has Lock on Luxury Smartphones, But Not Business of TV

a16z Podcast: Apple Has Lock on Luxury Smartphones, But Not Business of TV

Apple has once again shown it absolutely dominates the high-end for smartphones, and no other company is likely to knock it from its perch in the near term, says a16z's Benedict Evans. But does it control the future of TV? Not yet. Evans breaks down the latest Apple event, filled with iPhones, iPads and Apple TV, in this segment of the a16z Podcast. Why the "3D Touch" Apple is featuring on its 6S phones is something only Apple could have pulled off, and why its latest iPad -- the Pro -- creeps into the PC market.

10 Sep 201526min

Populärt inom Business & ekonomi

framgangspodden
badfluence
varvet
uppgang-och-fall
rss-borsens-finest
svd-ledarredaktionen
avanzapodden
lastbilspodden
borsmorgon
rss-kort-lang-analyspodden-fran-di
rss-dagen-med-di
fill-or-kill
affarsvarlden
kapitalet-en-podd-om-ekonomi
dynastin
rikatillsammans-om-privatekonomi-rikedom-i-livet
tabberaset
rss-inga-dumma-fragor-om-pengar
ekonomiekot-extra
market-makers