@DustinB3403 said in Solarwinds Blames Intern for Laughable Password:

@scottalanmiller said in Solarwinds Blames Intern for Laughable Password:

@IRJ said in Solarwinds Blames Intern for Laughable Password:

They should be required to do audits and pen testing yearly due to requirements of government systems. It sounds like solar winds worked with pen testing firms that that just gave passing grades. Sometimes organizations purposely hire bad security talent so they don't get exposed as doing a bad job.

You mean like how the government hires Solarwinds?

I have a client that uses at least one solar wind product and I shudder....

Me too.

@DustinB3403 said in Microsoft Hid Known Vulnerability According to Senator:

@scottalanmiller said in Microsoft Hid Known Vulnerability According to Senator:

@Dashrender said in Microsoft Hid Known Vulnerability According to Senator:

you're saying that they can't ever be wrong in their releases?

No, I'm saying that whether right or wrong is irrelevant. That it happened is what matters. Deciding if it happened accidentally or on purpose is a different discussion. Things that happen on accident doesn't make them not have happened.

Like teen pregnancy....

LOL, exactly.

@GregC No, it just keeps happening for some reason.

@nadnerb said in SPAM Emails Appearing to Come from Solarwinds:

Poking around for a more flexible helpdesk/asset tracking system. Remembered this thread. Struck SolarWinds off the list.
I think we might be using them for something else but I'm not comfortable with giving them any more money after reading this thread.

I wouldn't do business with them in any capacity at this point. Ever.

@nadnerB said:

Have a look at this one by softperfect.
It's portable but... I don't think that there is a report function.
https://www.softperfect.com/products/networkscanner/

I swear by SoftPerfect's Scanner. You can save your scans and it can do a LOT - - to the point where you can load up custom OID's for SNMP scanning, alternate credentials for WMI scanning, configure right-click options on your scan results, etc. I use it all the time.

When we migrate our remote sites to new IP schemes, I use it to inventory the subnet, then I'll come back and scan again (you can import your prior scans and merge them). The SNMP integration is great. I am getting printer serial and model numbers - - otherwise, I would have to connect to each manually.

It's portable in that you can simply copy the folder to a USB drive and it will work, but I don't know if it's 'proper portable.'

Great stuff.

Actually it was a bug in NodeBB. And now there appears to be another bug. Looks like we are hitting a number of issues with the 0.5.3 update. We've seen YouTube embedding break and now links are breaking.