5 ms·
U.S. airline accidentally exposes ‘No Fly List’ on unsecured server
- nateb2022 4y agoPrevious discussions: How to own an airline in 3 easy steps and grab the TSA nofly list along the way: https://news.ycombinator.com/item?id=34446673 https://news.ycombinator.com/item?id=34446673 (7 days ago, 1016 points, 616 comments) U.S. airline accidentally exposes ‘No Fly List’ on unsecured server: https://news.ycombinator.com/item?id=34448155 https://news.ycombinator.com/item?id=34448155 (7 days ago, 8 points, 3 comments)
- LinuxBender 4y agoFor what it's worth all of these lists and more used to sit on unencrypted public FTP servers for the longest time. Some still do. I only know this because I had to fix firewalls that were intermittently breaking the FTP transfers into our applications at the time. If your applications uptake any of these FTP endpoints let the DHS know. [1] If anyone pushes back give them this [2] and CC the whitehouse. [1] - https://www.cisa.gov/zero-trust-maturity-model https://www.cisa.gov/zero-trust-maturity-model [2] - https://www.whitehouse.gov/briefing-room/presidential-actions/2021/05/12/executive-order-on-improving-the-nations-cybersecurity/ https://www.whitehouse.gov/briefing-room/presidential-action...