On: Infosys leaked FullAdminAccess AWS keys on PyPI for over a year

[COMMENT___]

This kind of stories is one of the reason I visit Hacker News. Thank you!

It's funny and annoying to read every week or so about another epic fail of a multi-billion "multinational information technology company". Good luck with outsourcing your critical services and medical data to neurodivergents.

Thanks again for making my day.

[dekhn → COMMENT___]

I recommend the RISKS mailing list. https://seclists.org/risks/ But note that they sometimes take reliability too far.

[COMMENT___ → dekhn]

Oh, this is great! Thank you.

PS Good old usenet. :)

[notRobot → COMMENT___]

> neurodivergents

Can you please explain this?

[approxim8ion → notRobot]

It's good old-fashioned racism.

[COMMENT___ → approxim8ion]

Sorry, but it is not.

[approxim8ion → COMMENT___]

In another comment, you ponder whether it is a "cultural problem". Yeah, sorry, but it absolutely is.

[COMMENT___ → approxim8ion]

What I actually meant was “corporate culture”. Culture != race.

Thanks for reviewing my comments, though.

[throwaway5874 → COMMENT___]

Not outsourcing, its incompetent engineers. Do you know how many american companies got hacked because of 200k enginners istakes?

Still some american banks store user passwords in plain text, Allow sim awapping without a proper check and so

[COMMENT___ → throwaway5874]

Yep, I guess you are right. But I think that some of those engineers come from Infosys-like companies, so they do exactly what they’ve been taught and what they are accustomed with. IDK, maybe it’s a cultural problem? Or is it a problem of following best security practices?

I understand that it’s useless to seek answers to such questions. Let’s leave it to philosophers. :)