Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Infosys leaked FullAdminAccess AWS keys on PyPI for over a year

tomforb.es

Post reply on HN
Print view View original

141–150 of 218 posts

Re: Infosys leaked FullAdminAccess AWS keys on PyPI for over a year

#141

Post by [deleted] »

P5fRxh5kUvp2th wrote: post #59
precompute wrote: post #9

> To put it bluntly, I’m not sure I trusted Infosys to revoke this key in a timely manner. So I did it for them with aws iam delete-access-key --access-key-id=$AWS_ACCESS_KEY_ID, and now the key is useless: Hilarious. Infosys is a known "mass recruiter" in indian colleges. WITCH (Wipro, Infosys, TCS, Cognizant, HCL) companies is where talent goes to die. No competent employee stays in those companies (from what I've…

> No competent employee stays in those companies I gotta say, this explains so much. We have a FTE who came from infosys and he's very good. I have such a hard time squaring that with the team that submits an initial PR with the bin and obj directories checked in, then follows it up by adding .gitignore.txt file before FINALLY submitting a .gitignore file. And then finding them representing currency as float, or find…

[deleted]

Re: Infosys leaked FullAdminAccess AWS keys on PyPI for over a year

#142

Post by lmm »

fragmede wrote: post #8
avg_dev wrote: post #5

Wow. Really crazy. I know it was not right to revoke the key, he touched into their system. He probably broke someone’s production. But it was also absolutely the right thing to do. A god mode key floating around for over a year unrevoked, with real human beings’s medical data on the other side… I am glad the post author revoked the key. It is probably too little too late but they did close that door and maybe saved…

The lesson here is that there are things worse than downtime. Yeah the site being down is bad but hey, what's worse? Leaking PII all over the place.

Sadly, if you measure "worse" in selfish financial terms, the site being down is probably worse for you.

Re: Infosys leaked FullAdminAccess AWS keys on PyPI for over a year

#143

Post by nell »

This thread is full of generalized insults at a million people based on where they work. If someone did the same based on a different attribute of a population, they'd be banned.

I've worked at one of these companies but left over a decade ago. I know how we're looked at when we do client work (part of why I left). Some of my colleagues were less competent, true. But, some will wipe the floor with the client employees we did the work for.

To WITCH employees: If you are an employee at one of these companies, remember you are not the worst. Many of you come from humble backgrounds and are just learning the ropes. The world is cruel. It is a tough place, and you will be discriminated against. This is your fuel. You've already made great strides; keep going. You have to.

Re: Infosys leaked FullAdminAccess AWS keys on PyPI for over a year

#144

Post by curiousgal »

oregano wrote: post #71

I applaud any bad press on InfoSys. I picked up contract gig through them a few years ago. Here are some of the takeaways from my short lived experience: - It took them over two weeks to send me a computer. - They cancelled PTO for everyone. (this was the most egregious single thing they did) - They had absolute worst internal site for accessing HR documents and accessing personal resources. Just a maze of links. You…

> You could only access it via Internet Explorer (I swear I'm not joking).

That has been in the case in most investment banks as well.

Re: Infosys leaked FullAdminAccess AWS keys on PyPI for over a year

#145

Post by kras143 »

nell wrote: post #143

This thread is full of generalized insults at a million people based on where they work. If someone did the same based on a different attribute of a population, they'd be banned. I've worked at one of these companies but left over a decade ago. I know how we're looked at when we do client work (part of why I left). Some of my colleagues were less competent, true. But, some will wipe the floor with the client employee…

I understand your sentiment! Do you have any references or stories to share which show WITCH companies in a good light?

Re: Infosys leaked FullAdminAccess AWS keys on PyPI for over a year

#146

Post by [deleted] »

nell wrote: post #143

This thread is full of generalized insults at a million people based on where they work. If someone did the same based on a different attribute of a population, they'd be banned. I've worked at one of these companies but left over a decade ago. I know how we're looked at when we do client work (part of why I left). Some of my colleagues were less competent, true. But, some will wipe the floor with the client employee…

[deleted]

Re: Infosys leaked FullAdminAccess AWS keys on PyPI for over a year

#149

Post by Aeolun »

basha94 wrote: post #121

Can't help but be annoyed by the flock of pretentious hackers painting every Infosys/TCS employee with a broad brush. One might say this particular leak is bad on part of Infosys and they must be held accountable for this. But calling the entire company incompetent is just lazy and stupid. They make more than $3B in free cash flow, they are worth more than $80B in market-cap and they gainfully employ more than 100k p…

I think you are misunderstanding what these companies have deals with Infosys for.

It's not because they're so competent, it's because they're a convenient scapegoat when things inevitably go wrong.

Things inevitably go wrong for them because people hiring a company like Infosys do not want to be told how to do tech by competent engineers (and are probably not able to distinguish competent from incompetent engineers in the first place).

Re: Infosys leaked FullAdminAccess AWS keys on PyPI for over a year

#150

Post by nell »

kras143 wrote: post #145
nell wrote: post #143

This thread is full of generalized insults at a million people based on where they work. If someone did the same based on a different attribute of a population, they'd be banned. I've worked at one of these companies but left over a decade ago. I know how we're looked at when we do client work (part of why I left). Some of my colleagues were less competent, true. But, some will wipe the floor with the client employee…

I understand your sentiment! Do you have any references or stories to share which show WITCH companies in a good light?

They lifted millions of us at least a class or more, financially.

Lower -> middle

Middle -> upper middle

Some even got rich.

In a caste discriminating society, they leveled the playing field.

Their business partners continue to do business with them. I remember an internal story, during the GFC, we worked on credit for a client who couldn’t pay their invoice($ millions). These companies are not angels, nor they only hire the best. But they’ve been the launchpad for millions of IT careers that wouldn’t have happened otherwise.

Post reply on HN