Supply chain security is actually worse than we think
Credit:
LOKAD
The recent SolarWinds mega-hack has managed to grab mainstream media headlines around the world but the more I read, the more I think the press coverage has buried the lede.
The incident gets called a "supply chain" attack which hints at war-time tactics and, I'm willing to bet, will launch a dozen VC-backed startups. People are (rightfully) worried about the knock-on effect since the SolarWinds attackers had access to several other development-houses and could have also poisoned those wells. This is definitely scary but there's a hard, sobering truth below that actually makes this a bit worse than you might think.