SolarWinds CEO blames intern for password leak
&gt; &quot;They violated our password policies and they posted that password on an internal, on their own private Github account,&quot; Thompson said.<p>So let&#x27;s analyze the various scenarios under which the &quot;intern&quot; might have been responsible, and why each one is bullshit.<p>1) The intern exposed a company password on their own account.<p>Counter: What kind of &quot;password policies&quot; allowed such a weak password in the first place?<p>2) The intern came up with the weak password themselves, thus violating &quot;password policies&quot; not just for secrecy but strength&#x2F;security. This password was then used for several critical, production applications.<p>Counter: Why was an intern in charge of deciding a password used for anything critical?<p>3) The intern came up with the weak password and exposed it, but it was only used for the intern&#x27;s own corporate accounts (e.g. their Windows workstation).<p>Counter: Why did an intern have a level of access such that their account being breached could lead to this level of compromise&#x2F;exfiltration?<p>Conclusion: 
There is no conceivable scenario under which this makes sense.