CISA Admin Leaked AWS GovCloud Keys on GitHub

Post by Hikikomori » Tue, May 19, 2026, 6:41 PM UTC

sandeepkd wrote: post #131

Hikikomori wrote: post #122

Earlier quoted context omitted.

We deleted the root credentials efter initial setup where we added mgmt iam accounts used by our automation. If we ever needed them we used the recovery process. All users and services use temporary credentials.

I made an assumption that you have federated AWS account setup. One organization management AWS account and then federated accounts under it and you are referring to deletion of deletion of ROOT credentials in the federated accounts. Considering thats not the case, what you just did is move the goal post to a account recovery process. Question becomes who has ability to recover the account, in case its tied with emai…

Post by red-iron-pine » Tue, May 19, 2026, 6:52 PM UTC

protastus wrote: post #117

In 2026, storing government credentials in a repo and not having scanners to flag it should be investigated. I am highly suspicious of anyone doing this in a professional capacity. If I worked at a foreign intelligence agency and saw this, I would first think it's a honeypot, and an unimaginative one because it's so lacking in subtlety.

Post by Forgeties79 » Tue, May 19, 2026, 7:00 PM UTC

sandeepkd wrote: post #137

Forgeties79 wrote: post #112

Earlier quoted context omitted.

> While I agree that it should not have happened, at the same time its probably true that most people are never formally trained on security. This isn’t a grocery store or something it’s CISA. This is like a gun going off in a cop’s holster while he’s texting and driving without a seatbelt. Yeah he’s a contractor but that doesn’t suddenly allow for such incompetence.

I have worked with some of the experienced folks in federal space in the past, who were super smart, experienced and COSTLY from managements perspective. They had the ability to challenge the management on such things. Most of them have either retired, managed out or moved on. What you have here is not a reflection of the individual but the entire management chain. Its a race to make most money and at times these con…

Post by doodlebugging » Tue, May 19, 2026, 7:11 PM UTC

tristor wrote: post #119

doodlebugging wrote: post #58

Earlier quoted context omitted.

Reading that article makes it look like Trump/Noem filled positions with foreign moles. One day the American people will have an accounting.

After reading Madhu's Wikipedia page and some basic research it looks like he failed his polygraph required to access controlled compartmentalized information (SCI), then DHS (under Noem) then fired six career staffers because of him failing his polygraph. He also does not appear to meet the US Persons requirement for TS:SCI clearance. That's somehow more bananas to me than so many other things the Trump admin has do…

Post by protastus » Tue, May 19, 2026, 7:17 PM UTC

red-iron-pine wrote: post #143

protastus wrote: post #117

In 2026, storing government credentials in a repo and not having scanners to flag it should be investigated. I am highly suspicious of anyone doing this in a professional capacity. If I worked at a foreign intelligence agency and saw this, I would first think it's a honeypot, and an unimaginative one because it's so lacking in subtlety.

good thing we know DOGE has been trying to exfil all US Gov data like all gov employees, or all SSNs under a previous administration I'd assume CISA was doing a dirty dangle, but given how corrupt and incompetent this administration is, to include firing lots of CISA, this may just be a legit fuckup.