Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Infosys leaked FullAdminAccess AWS keys on PyPI for over a year

tomforb.es

Post reply on HN
Print view View original

161–170 of 218 posts

Re: Infosys leaked FullAdminAccess AWS keys on PyPI for over a year

#161

Post by SV_BubbleTime »

viraptor wrote: post #124
SV_BubbleTime wrote: post #29

Earlier quoted context omitted.

Reading the recent posts about an Android bug and how difficult it was for the researcher to get them to fix and how he was reluctant to disclose or even threaten to disclose reminds me of a time gone past of… harder… type of hackers. It’s like the completely backwards on the wrong foot.

In good old days you could do a lot without some massive Corp dragging you to court. Are you willing to risk years of self-funded courtroom process which may not turn out well for you, just to show how hard you are as a hacker? I don't think so. We know of cases where even reporting an issue caused lawyers to threaten you without any upside otherwise.

Yea… but I guess I’m from a time that you wouldn’t do any of this under your real name.

Re: Infosys leaked FullAdminAccess AWS keys on PyPI for over a year

#162

Post by terminal_d »

nell wrote: post #150
kras143 wrote: post #145

Earlier quoted context omitted.

I understand your sentiment! Do you have any references or stories to share which show WITCH companies in a good light?

They lifted millions of us at least a class or more, financially. Lower -> middle Middle -> upper middle Some even got rich. In a caste discriminating society, they leveled the playing field. Their business partners continue to do business with them. I remember an internal story, during the GFC, we worked on credit for a client who couldn’t pay their invoice($ millions). These companies are not angels, nor they only…

It's a business, they don't do it out of the goodness of their hearts. It's an unintended byproduct.

WITCH salaries are a joke, no wonder they deliver substandard results.

Re: Infosys leaked FullAdminAccess AWS keys on PyPI for over a year

#163

Post by approxim8ion »

notRobot wrote: post #94
COMMENT___ wrote: post #37

This kind of stories is one of the reason I visit Hacker News. Thank you! It's funny and annoying to read every week or so about another epic fail of a multi-billion "multinational information technology company". Good luck with outsourcing your critical services and medical data to neurodivergents. Thanks again for making my day.

> neurodivergents Can you please explain this?

It's good old-fashioned racism.

Re: Infosys leaked FullAdminAccess AWS keys on PyPI for over a year

#164

Post by dwheeler »

andrewxdiamond wrote: post #60
ticviking wrote: post #3

I really wish this surprised me. The number of people who completely understand the stack they are working on is shrinking, even as the size of the stack grows. The power of computing is such that every organization on the planet is forced to lower the bar to get people who are marginally competent, even if they lack attention detail and cannot be relied on to solve problems of this sort. This kind of leak is the res…

I don’t think there are any people who understand the full stack. I don’t think anyone like that has existed in computing in a very long time. It’s truly impossible for a single human to actually understand the physics of electronics, the world of CPU micro-architecture, packet shuffling network equipment, the nuance of CSS, and the never ending complexity of UI/UX design. The only way this statement could be accurat…

I disagree, it takes lots of time but it is possible.

Personal example: I have an electronics engineering degree that was 1 semester short of a physics degree, so I learned quantum mechanics, electromagnetic field theory, transistors, and how to create a CPU (I even created a CPU out of simple gates and way too much wire wrapping). I love computer software, so I learned assembly, how to write compilers and operating systems, and libraries. I have configured network hardware and written network software at various levels. I've also used CSS and implemented UI/UX. I've written code in many programming languages, including JavaScript, Python, C, C++, Java, Ruby, Rust, Common Lisp, and Scheme. I eventually got a Computer Science degree as well.

None of these things are magic, and the info is relatively easy to get. You simply have to keep learning and be willing to try new things. It can be fun, too.

Yes, today it can be helpful to specialize at any particular time in your life. But I think it's best to use that as a launching pad to branch out.

Re: Infosys leaked FullAdminAccess AWS keys on PyPI for over a year

#165

Post by kamaal »

terminal_d wrote: post #162
nell wrote: post #150

Earlier quoted context omitted.

They lifted millions of us at least a class or more, financially. Lower -> middle Middle -> upper middle Some even got rich. In a caste discriminating society, they leveled the playing field. Their business partners continue to do business with them. I remember an internal story, during the GFC, we worked on credit for a client who couldn’t pay their invoice($ millions). These companies are not angels, nor they only…

It's a business, they don't do it out of the goodness of their hearts. It's an unintended byproduct. WITCH salaries are a joke, no wonder they deliver substandard results.

>>WITCH salaries are a joke

Getting a job in India is not a joke. And that's saying something.

Most poor people in India, are not the same poor you see in the USA. Many people who make it to WITCH companies are likely succeeding despite all odds, and are starting their career at such companies, while they can get trained, and work on projects and later use the experience to do some thing good on the longer run. Several lucky also get overseas travel opportunities many even settle outside India.

Sure things are way less than perfect. And if you come from a rich family do not join a WITCH. You can either wait out for a better job, or may be go overseas for studies or just try to immigrate to some western lands.

Most people complaining about WITCH companies are typically from a background which is already better off. And they generally find such companies to be downgrade from their current social class. The remainder do just fine.

Re: Infosys leaked FullAdminAccess AWS keys on PyPI for over a year

#166

Post by cocoland2 »

nell wrote: post #143

This thread is full of generalized insults at a million people based on where they work. If someone did the same based on a different attribute of a population, they'd be banned. I've worked at one of these companies but left over a decade ago. I know how we're looked at when we do client work (part of why I left). Some of my colleagues were less competent, true. But, some will wipe the floor with the client employee…

That is a very compassionate comment.Thank you!. It is such a sad thing to make sweeping generalizations, I know of many ex employees of these organizations in FAANG, startups. Agreed that the ratio of great technical talent may be small, these companies have 300k employees, a vast majority is maintaining a legacy application that is keeping a business alive somewhere or processing someone's health insurance claim or something important thereof. You will find some really smart people doing products like Finacle, a well adopted core-banking software. What was done was bad and than talking of bad practices (so many exposed buckets in AWS, miners using compromised EC2 instances from github repos) a vast majority of the discussion seems to be sweeping generalizations of how every single person employed in these companies are!

Re: Infosys leaked FullAdminAccess AWS keys on PyPI for over a year

#167

Post by alxlaz »

basha94 wrote: post #158
Aeolun wrote: post #149

Earlier quoted context omitted.

I think you are misunderstanding what these companies have deals with Infosys for. It's not because they're so competent, it's because they're a convenient scapegoat when things inevitably go wrong. Things inevitably go wrong for them because people hiring a company like Infosys do not want to be told how to do tech by competent engineers (and are probably not able to distinguish competent from incompetent engineers…

Yeah, right. Vanguard is paying a billion dollars, and Daimler is paying three billion dollars to Infosys because they are a "convenient scapegoat"?

Yes -- among other reasons, none of them related to quality. WITCH companies are notorious for this. Accenture, for example, boasted similarly ginormous numbers for a contract with the NHS (11 bn GBP), which never produced any working software before being scrapped after several years.

Re: Infosys leaked FullAdminAccess AWS keys on PyPI for over a year

#169

Post by sumedh »

kras143 wrote: post #145
nell wrote: post #143

This thread is full of generalized insults at a million people based on where they work. If someone did the same based on a different attribute of a population, they'd be banned. I've worked at one of these companies but left over a decade ago. I know how we're looked at when we do client work (part of why I left). Some of my colleagues were less competent, true. But, some will wipe the floor with the client employee…

I understand your sentiment! Do you have any references or stories to share which show WITCH companies in a good light?

> Do you have any references or stories to share which show WITCH companies in a good light?

They made lot of their shareholders very rich

Re: Infosys leaked FullAdminAccess AWS keys on PyPI for over a year

#170

Post by ramraj07 »

throwawayxx123 wrote: post #132
ramraj07 wrote: post #99

Earlier quoted context omitted.

Now, the interesting this is the recent complete refactor of the country’s income tax portal. It was messy, but I feel it was heavenly compared to the clusterF that was healthcare.gov. So what are your thoughts on this being a WITCH specific problem?

It was fixed because a govt minister threatened them with jail time in the end. That set them straight and they fixed the monstrosity to save their ass. Can't reveal more details.

That’s interesting to know, thanks lol. That’s the interesting part about corruption in india, in some screwed up way, it’s more “fair” than corruption in the US I think?
Post reply on HN