Infosec company pwned by 4chan user • Hacker News Board

Re: Infosec company pwned by 4chan user

#51

Post by brodouevencode » Wed, May 10, 2023, 5:50 PM UTC

sofixa wrote: post #5

philipwhiuk wrote: post #3

Who makes their Jenkins instance world accessible!

Who still uses Jenkins? It's an abomination of an obsolete system that is just a pain to use, manage, maintain, setup, etc. while there are much better, more featured, easier to use and maintain alternatives out there. And it has been like this for close to ten years now . It should have been ripped out in favour of either the "native" CI/CD (e.g. GitLab CI if GitLab is used for VCS, GitHub Actions if GitHub, etc.) o…

That's what you took away from the question?

Jenkins still lives in legacy, and probably will for some time.

Re: Infosec company pwned by 4chan user

#52

Post by voynich » Wed, May 10, 2023, 5:50 PM UTC

doodlesdev wrote: post #32

It's always Jenkins.

Apparently so, considering that this is the same person who got a hold of the No-Fly List a while back, and, you guessed it, they found it through Jenkins somehow.

Re: Infosec company pwned by 4chan user

#53

Post by reocha » Wed, May 10, 2023, 5:50 PM UTC

c7DJTLrn wrote: post #47

I suspect this leak was made by the author themselves and submitted to 4chan via Tor or a VPN. I don't have hard evidence to back this up but if you read the Wikipedia article about them, it's pretty easy to put two and two together.

Maia is very honest when she hacks a company, unsupported theories don't help anyone.

Re: Infosec company pwned by 4chan user

#54

Post by serf » Wed, May 10, 2023, 5:51 PM UTC

boomboomsubban wrote: post #36

alexjplant wrote: post #6

This page reminds me of the old web. I kind of miss it, auto-playing MIDI songs and custom cursors and all. I'll take that over having to wade through Reddit 12 times out of 10.

As the creator was born in 1999, it's interesting to me because she's nostalgic for a period she did not fully experience. It's something I did, and it's neat yet strange to see it being done to a part of my past.

it reminds me of the phenomena of parodying 'I Love Lucy!'. Even though it hasn't seen new episodes since 1957 it is included or mentioned in some way in nearly every popular media.

The constant revitalization of the parody through new works ensures that the future will also include some mention. I think 90s aesthetic/internet-culture is a bit like that -- the projects that include those themes beget new similar projects in the future as long as they have some level of audience exposure.

Re: Infosec company pwned by 4chan user

#55

Post by MilStdJunkie » Wed, May 10, 2023, 5:51 PM UTC

sofixa wrote: post #5

philipwhiuk wrote: post #3

Who makes their Jenkins instance world accessible!

Who still uses Jenkins? It's an abomination of an obsolete system that is just a pain to use, manage, maintain, setup, etc. while there are much better, more featured, easier to use and maintain alternatives out there. And it has been like this for close to ten years now . It should have been ripped out in favour of either the "native" CI/CD (e.g. GitLab CI if GitLab is used for VCS, GitHub Actions if GitHub, etc.) o…

Big companies with data restrictions that can't have anything so much as look at the cloud, and they don't have the skills or money to set up something nicer on prem.

Bitbucket is also a big part of this story.

That results in seeing Jenkins all over the ding-darn place at Boeing, LockMart, RC, L3, NGA, etc.

Of course, all that is thrown right out the window if you wire up the Jenkins instance to the goddamn internet.

Re: Infosec company pwned by 4chan user

#56

Post by testplzignore » Wed, May 10, 2023, 5:54 PM UTC

cornhole34 wrote: post #17

OptimEyes.ai wins Global Infosec Award 2022 OptimEyes.ai data leak - 2023 smh

Aren't these industry awards essentially participation trophies for whoever is willing to pay? Like the notorious "Who's Who Among American High School Students" in the US.

Re: Infosec company pwned by 4chan user

#57

Post by cedws » Wed, May 10, 2023, 5:55 PM UTC

reocha wrote: post #53

c7DJTLrn wrote: post #47

I suspect this leak was made by the author themselves and submitted to 4chan via Tor or a VPN. I don't have hard evidence to back this up but if you read the Wikipedia article about them, it's pretty easy to put two and two together.

Maia is very honest when she hacks a company, unsupported theories don't help anyone.

Maybe because previous hacks have been of varying legality. The entrypoint for the airline hack was also Jenkins.

Re: Infosec company pwned by 4chan user

#58

Post by hiidrew » Wed, May 10, 2023, 5:56 PM UTC

this is the same person that found the no fly list from an airline lol https://maia.crimew.gay/posts/how-to-hack-an-airline/

Re: Infosec company pwned by 4chan user

#59

Post by cushpush » Wed, May 10, 2023, 5:58 PM UTC

Semaphor wrote: post #25

alexjplant wrote: post #6

This page reminds me of the old web. I kind of miss it, auto-playing MIDI songs and custom cursors and all. I'll take that over having to wade through Reddit 12 times out of 10.

0 times out of ten for me. First I blocked the annoying cat, then I got to the bottom, was assaulted by blinking buttons and decided I didn’t need to know what else they were saying anyway.

Oh man, never visit Tumblr

Re: Infosec company pwned by 4chan user

#60

Post by pc86 » Wed, May 10, 2023, 5:58 PM UTC

Semaphor wrote: post #25

alexjplant wrote: post #6

This page reminds me of the old web. I kind of miss it, auto-playing MIDI songs and custom cursors and all. I'll take that over having to wade through Reddit 12 times out of 10.

0 times out of ten for me. First I blocked the annoying cat, then I got to the bottom, was assaulted by blinking buttons and decided I didn’t need to know what else they were saying anyway.

Oh my, assaulted? By that single blinking icon? I hope you're ok.