4 ms·
U.S. Cybersecurity Agency Leaves Its Digital Keys Out in Public on GitHub
- fcsuper 5mo agoBecause of course it was.
- WhyIsItAlwaysHN 5mo agoThat's an interesting interpretation of open source.
- reactordev 5mo agoYou have to watch a video ad to read the article? First time I’ve seen that.
- ohyoutravel 5mo agoYou can’t spell cisappointment without CISA.
- neogodless 5mo agoPrevious: https://news.ycombinator.com/item?id=48190454 https://news.ycombinator.com/item?id=48190454 CISA Admin Leaked AWS GovCloud Keys on GitHub (krebsonsecurity.com) ~7 hours ago, ~27 comments
- deleted 5mo ago[deleted]
- deleted 5mo ago[deleted]
- philipallstar 5mo agoIt's very odd that the author can't just report on this extremely basic security error without diverting on to Trump.
- axus 5mo agoComplaining about Trump is useful as a free-speech canary. When the complaints start being silenced, you know we're in trouble.
- sublinear 5mo agoI would think a canary should be more obviously for that purpose. There's no secret committee or group understanding deciding these things. Trump complaints function much better as a dogwhistle, so that's what they are. Everyone is very tired of them regardless of political stance. At this point, observing a lack of complaints won't mean anything other than someone catching their breath.
- tuveson 5mo agoI mean, you can be tired of both the frivolous complaints and also tired of having a moron for a president. I’m tired of people complaining about stuff that is symbolic and unimportant like the ballroom but I’m much more tired of every competent person in government being fired and replaced with alcoholic podcasters.
- pferde 5mo agoGetting tired of complaints about trump means what he's doing and who he is is being normalized, bit by bit. Don't get tired, get angrier.
- philipallstar 5mo agoI think people are tired because people were catastrophising things Trump did 10 years ago, and it's like when a microphone clips because the gain is too high. If you were weeping into your Tiktok in 2016 before anything happened, and even while some good things were happening, it's hard to differentiate reality from hysteria.
- sublinear 5mo ago
- ChrisArchitect 5mo ago[dupe] Discussion on source: https://news.ycombinator.com/item?id=48190454 https://news.ycombinator.com/item?id=48190454
- zombot 5mo agoDid they recruit their personnel from DOGE?
- Forgeties79 5mo agoFun fact, despite shutting it down as an abject failure, all the people from DOGE were rolled into the government and given jobs. The irony is unbearable and par for the course with this admin.
- aerodexis 5mo agoNo one is entertaining the possibility that this was done on purpose?
- 2OEH8eoCRo0 5mo agoI assume it's a honeypot. Is anyone dumb enough to try to use these?
- toss1 5mo agoTHIS This is either insane levels of incompetence, or an intentional act to enable compromise by other agents. >>"“Currently, there is no indication that any sensitive data was compromised as a result of this incident[…]" Of forking course there is no indication of compromise. Anyone competent would use the keys and passwords to login, exfiltrate the data they wanted, and depart without being noticed. And of course, the actors leaving it there could help cover. OFC, it is also possible that it is insane levels of incompetence since the primary and only criteria to work in this administration is loyalty, and competence is usually seen as a liability since actual skill and knowledge often conflicts with being strictly loyal. So, Hanlon's Razor applies, but they sure test the limits of it. One way or the other, we're fooked.
- 0xbadcafebee 5mo agoMaybe it was UFOs that came down and hacked the gibson to leak two unimportant AWS accounts' IAM users
- deleted 5mo ago[deleted]