security - 如何将 IntelliJ 配置为不存在安全问题？

Question

鉴于 SolarWinds 黑客事件 JetBrains俄罗斯情报机构涉嫌违反美国政府。我不使用受牵连的程序 TeamCity，但我确实使用(并且喜欢)IntelliJ。如何将 IntelliJ 配置为不存在安全问题，以便我可以继续凭良心使用它？

Answer 1

你不需要做任何事情。没有证据表明 JetBrains 产品受到影响。
见 official response更多细节:

Does this affect your IDEs and other tools?

Our IDEs are standalone tools and bear no relation to TeamCity, otherthan the fact that we use our own installation of TeamCity to buildthem. We have no evidence that indicates that any of our servers orour standalone tools have been tampered with, and much like is thecase with TeamCity, we run regular security audits on our tools andsystems.

Am I safe in using JetBrains tools?

None of the articles published sofar, including those referencing investigations by the FBI, as well asquotes from SolarWinds themselves, show any evidence that TeamCity hasany vulnerability or backdoor that would have allowed unauthorizedaccess to the build process.

As such we have no knowledge or evidence to believe that any of ourtools may have been compromised, and consequently do not believe thatyou are at any risk in continuing to use our tools.

We hope that the investigation with SolarWinds is finalised as soon aspossible and clears up any misrepresentation of our tools and ourcompany. We’d also like to reiterate that we offer our fullcooperation with any governmental agencies and security researchers.

For over 20 years, one of our pillars has been to be transparent,honest, and truthful with our customers, and nothing hurts us morethan seeing unfounded allegations that damage our reputation andinstil doubt on our customers.

We highly appreciate your support and will keep you updated on anyprogress.