4 ms·
The key nugget: > The spreadsheet with the information was published on October 28 in the personal profile of Wagner Santos, Einstein's data scientist, on the
by smarx007 6y ago
The key nugget:
> The spreadsheet with the information was published on October 28 in the personal profile of Wagner Santos, Einstein's data scientist, on the github platform, used by programmers to host codes and files.
> Einstein's employee Wagner Santos confirmed that he published the password spreadsheet in his profile on the github platform to perform a test in the implementation of a model, but forgot to remove the file from the public page.
Unintentional leaking of credentials is real! Oh and yes, it took a month to hit the news!
- ABeeSea 6y ago> In this case, both Einstein and his employee and the Ministry of Health can be held responsible for collective damage for having exposed information from millions of people. Even when they do not act purposefully, those responsible for leaks of personal and sensitive data may be compelled to pay compensation for collective damage. He f’d up bad, but the Brazilian government can literally ruin his entire life if they decide to make him the scapegoat of all this.
- gaius_baltar 6y agoIt really scares me that such system does not have RBAC, limited data access, or even a 2FA to prevent a single password leak from ruining everything.
- smarx007 6y agoI think that "such system" was put together using Django (or equivalent) over a 72h sprint on Friday to be "working by Monday" as an emergency measure.