U.S. Cybersecurity Agency Leaves Its Digital Keys Out in Public on GitHub
88 points
4 hours ago
| 9 comments
| gizmodo.com
| HN
neogodless
1 hour ago
[-]
Previous:

https://news.ycombinator.com/item?id=48190454 CISA Admin Leaked AWS GovCloud Keys on GitHub (krebsonsecurity.com)

~7 hours ago, ~27 comments

reply
WhyIsItAlwaysHN
2 hours ago
[-]
That's an interesting interpretation of open source.
reply
aerodexis
37 minutes ago
[-]
No one is entertaining the possibility that this was done on purpose?
reply
2OEH8eoCRo0
19 minutes ago
[-]
I assume it's a honeypot. Is anyone dumb enough to try to use these?
reply
toss1
27 minutes ago
[-]
THIS

This is either insane levels of incompetence, or an intentional act to enable compromise by other agents.

>>"“Currently, there is no indication that any sensitive data was compromised as a result of this incident[…]"

Of forking course there is no indication of compromise. Anyone competent would use the keys and passwords to login, exfiltrate the data they wanted, and depart without being noticed. And of course, the actors leaving it there could help cover.

OFC, it is also possible that it is insane levels of incompetence since the primary and only criteria to work in this administration is loyalty, and competence is usually seen as a liability since actual skill and knowledge often conflicts with being strictly loyal.

So, Hanlon's Razor applies, but they sure test the limits of it.

One way or the other, we're fooked.

reply
zombot
1 hour ago
[-]
Did they recruit their personnel from DOGE?
reply
reactordev
2 hours ago
[-]
You have to watch a video ad to read the article? First time I’ve seen that.
reply
ChrisArchitect
1 hour ago
[-]
reply
ohyoutravel
1 hour ago
[-]
You can’t spell cisappointment without CISA.
reply
fcsuper
4 hours ago
[-]
Because of course it was.
reply
philipallstar
1 hour ago
[-]
It's very odd that the author can't just report on this extremely basic security error without diverting on to Trump.
reply
benoau
1 hour ago
[-]
reply
ceejayoz
50 minutes ago
[-]
https://www.nytimes.com/2025/04/05/us/politics/trump-loomer-...

> When President Trump abruptly fired the head of the National Security Agency and U.S. Cyber Command on Thursday, it was the latest in a series of moves that have torn away at the country’s cyberdefenses just as they are confronting the most sophisticated and sustained attacks in the nation’s history.

> For four years, he nurtured deep resentments about CISA, which had declared that the 2020 election was one of the best run in history, undercutting his false claims that he had been cheated of victory. Weeks after taking office this year, he began a campaign of dismantlement.

This is one of those cases where The Buck Stops Here is literally true.

reply
axus
1 hour ago
[-]
Complaining about Trump is useful as a free-speech canary. When the complaints start being silenced, you know we're in trouble.
reply
sublinear
56 minutes ago
[-]
I would think a canary should be more obviously for that purpose. There's no secret committee or group understanding deciding these things.

Trump complaints function much better as a dogwhistle, so that's what they are. Everyone is very tired of them regardless of political stance. At this point, observing a lack of complaints won't mean anything other than someone catching their breath.

reply
t0mpr1c3
1 hour ago
[-]
Not really, considering that Trump signed CISA into law, and then immediately kneecapped it by firing one of the only competent people he has ever appointed (Krebs).
reply