YHK - yet another hacker news clone

Uh yeah, it dangerous. Public data brokerage doesn't identify FBI agents in a master roster?

Consider open investigations with covert agents. Leaking their identitys could compromise entire investigations.

Hopefully there was some forsight in washing undercover agents from these systems to other secure ones or something otherwise that's pretty bad.

ISO and ICC start with the same letter, just saying...

That's assuming that the result of this will be to switch away from PeopleSoft.

The irony, of course, is that this will likely have a negative impact upon Oracle's reputation, which will have a negative impact upon its value, which will then be resolved with more RIFs.

It's okay. Larry got another island.

As long as they’re in a storage system accessible with an exploit chain, it’s just a matter of will and effort.

Probably just one of the new recruits clicking on a link while viewing beastiality

It doesn't do nothing. It does make things somewhat harder to attack.

There was a time, 25-ish years ago, where exploits were thrown about like candy at a parade. The procedures you mention, along with other things, have made zero-days like these more valuable than gold.

The attackers exfil'd 3TB of data, which obviously included PII, from AWS servers. They should've had DLP, active monitoring, countermeasures, using a security vendor (you can set this up for AWS services using CloudTrail, CloudWatch Logs, etc). You're supposed to have that for sensitive government or military work, and it should have (at least) caught that much traffic going to a rando external IP, blocked and flagged.

If they did have it set up, then somebody wasn't doing their job. If they didn't have it set up, they didn't comply (which is also not doing their job). I see this all the time. The security analysts send tickets to people when they see major issues and nobody is held accountable for inaction. Management asleep at the wheel (which is also their cover, can't be blamed for what you made sure you never knew about).

I'm less skeptical after seeing it happen to IDScan and terrabytes of government-issued IDs being exfiltrated quietly.

Still skeptical, but the FBI's vendors are just as vulnerable to 0-days as Hertz's vendors.

also an mmo thing - hunting for collectibles in game

“Glowie” is a white supremacist slur for “Jew” or “fed” (they think the Feds are “a bunch of Jews”.)

They say glowie because they see Jews are n*s who are white. They “glow” (they’re not dark.)

It’s crazy hearing main stream mention this slur slang without awareness of its root or meaning.