16 comments

  • neogodless 2 hours ago ago

    Previous:

    https://news.ycombinator.com/item?id=48190454 CISA Admin Leaked AWS GovCloud Keys on GitHub (krebsonsecurity.com)

    ~7 hours ago, ~27 comments

  • WhyIsItAlwaysHN 2 hours ago ago

    That's an interesting interpretation of open source.

  • aerodexis 41 minutes ago ago

    No one is entertaining the possibility that this was done on purpose?

    • 2OEH8eoCRo0 23 minutes ago ago

      I assume it's a honeypot. Is anyone dumb enough to try to use these?

    • toss1 31 minutes ago ago

      THIS

      This is either insane levels of incompetence, or an intentional act to enable compromise by other agents.

      >>"“Currently, there is no indication that any sensitive data was compromised as a result of this incident[…]"

      Of forking course there is no indication of compromise. Anyone competent would use the keys and passwords to login, exfiltrate the data they wanted, and depart without being noticed. And of course, the actors leaving it there could help cover.

      OFC, it is also possible that it is insane levels of incompetence since the primary and only criteria to work in this administration is loyalty, and competence is usually seen as a liability since actual skill and knowledge often conflicts with being strictly loyal.

      So, Hanlon's Razor applies, but they sure test the limits of it.

      One way or the other, we're fooked.

  • zombot an hour ago ago

    Did they recruit their personnel from DOGE?

  • reactordev 2 hours ago ago

    You have to watch a video ad to read the article? First time I’ve seen that.

  • ChrisArchitect an hour ago ago
  • ohyoutravel 2 hours ago ago

    You can’t spell cisappointment without CISA.

  • fcsuper 4 hours ago ago

    Because of course it was.

  • philipallstar 2 hours ago ago

    It's very odd that the author can't just report on this extremely basic security error without diverting on to Trump.

    • benoau 2 hours ago ago
    • ceejayoz an hour ago ago

      https://www.nytimes.com/2025/04/05/us/politics/trump-loomer-...

      > When President Trump abruptly fired the head of the National Security Agency and U.S. Cyber Command on Thursday, it was the latest in a series of moves that have torn away at the country’s cyberdefenses just as they are confronting the most sophisticated and sustained attacks in the nation’s history.

      > For four years, he nurtured deep resentments about CISA, which had declared that the 2020 election was one of the best run in history, undercutting his false claims that he had been cheated of victory. Weeks after taking office this year, he began a campaign of dismantlement.

      This is one of those cases where The Buck Stops Here is literally true.

    • axus 2 hours ago ago

      Complaining about Trump is useful as a free-speech canary. When the complaints start being silenced, you know we're in trouble.

      • sublinear an hour ago ago

        I would think a canary should be more obviously for that purpose. There's no secret committee or group understanding deciding these things.

        Trump complaints function much better as a dogwhistle, so that's what they are. Everyone is very tired of them regardless of political stance. At this point, observing a lack of complaints won't mean anything other than someone catching their breath.

    • t0mpr1c3 2 hours ago ago

      Not really, considering that Trump signed CISA into law, and then immediately kneecapped it by firing one of the only competent people he has ever appointed (Krebs).