Live data from Hacker News

NATO Classified Cloud Platform Compromised

ddosecrets.substack.com

11–20 of 122 posts

Re: NATO Classified Cloud Platform Compromised

#11

Everis is the typical meat grinder, and it is known for that in Spain. Now, just as I'm writing this I'm sure someome from Everis will chime in to say he gets paid handsomely and works for amazing projects. But everyone I've known working for Everis wants to die. And if such project had to land in Spain for political reasons, there are plenty of companies capable on taking such project with way better prospects.

So it's akin to Capgemini, Infosys, Accenture, Deloitte, PwC, TCS and the like?

Re: NATO Classified Cloud Platform Compromised

#13
post #10
post #7

Distributed Denial of Secrets, you've done it again!

Oh well, shouldn't that be Centralized Distribution Secrets?

It depends! If they're compromised and put on a torrent, does that make them a Distributed Distribution of Secrets?

Re: NATO Classified Cloud Platform Compromised

#14
post #11

Everis is the typical meat grinder, and it is known for that in Spain. Now, just as I'm writing this I'm sure someome from Everis will chime in to say he gets paid handsomely and works for amazing projects. But everyone I've known working for Everis wants to die. And if such project had to land in Spain for political reasons, there are plenty of companies capable on taking such project with way better prospects.

So it's akin to Capgemini, Infosys, Accenture, Deloitte, PwC, TCS and the like?

Don't forget Oracle.

Re: NATO Classified Cloud Platform Compromised

#15
post #5

How’s that Zero Trust working out for ya?

Better than trusting the perimeter. A single breach in a “trustful” intranet still results in full network compromise. Best to assume breach and work from there. Hating on zero trust is non-sensical to me, feels like the same as hating on security.

[deleted]

Re: NATO Classified Cloud Platform Compromised

#16
post #6

> "which basically tricks organizations into spending a ton of money for installing Docker into a CentOS image without any cryptographic signature to verify the integrity of that image." Ouch

In the end, I think NATO was done a service by this.

Only if they learn something from the experience

Re: NATO Classified Cloud Platform Compromised

#18

Everis is the typical meat grinder, and it is known for that in Spain. Now, just as I'm writing this I'm sure someome from Everis will chime in to say he gets paid handsomely and works for amazing projects. But everyone I've known working for Everis wants to die. And if such project had to land in Spain for political reasons, there are plenty of companies capable on taking such project with way better prospects.

Article: The platform, known as NATO’s Service-Oriented Architecture and Identity Access Management (SOA & IdM) Project, is one of four core projects of NATO's IT modernization efforts.

So this expresses what "modernization" is - fob as much work as possible unto a job-shop/meat-grinder operation and watch things like this happen. I don't even know whether to laugh or be appalled, the Snowden leaks happened due to contracted-out sys admins, after all.

Re: NATO Classified Cloud Platform Compromised

#20

Everis is the typical meat grinder, and it is known for that in Spain. Now, just as I'm writing this I'm sure someome from Everis will chime in to say he gets paid handsomely and works for amazing projects. But everyone I've known working for Everis wants to die. And if such project had to land in Spain for political reasons, there are plenty of companies capable on taking such project with way better prospects.

Article: The platform, known as NATO’s Service-Oriented Architecture and Identity Access Management (SOA & IdM) Project, is one of four core projects of NATO's IT modernization efforts. So this expresses what "modernization" is - fob as much work as possible unto a job-shop/meat-grinder operation and watch things like this happen. I don't even know whether to laugh or be appalled, the Snowden leaks happened due to co…

Nearly everyone who does real work like this for the government is a contractor anymore. The government employees manage the contracts.
Post reply on HN