Skip to content

The entire US Social Security database was uploaded on a random cloud server, Whistle-Blower Says

Technology
97 56 198
  • Don't you think after 5 months without oversight who exactly has access to that server that the difference between this and a random s3 bucket is nearly nil? But you are right, in the light of integrity the title should reflect the facts as they present themselves currently.

    I do, yes, it's blazingly stupid and others have been jailed for less.

    But I've noticed a number of misleading post titles recently, like the just today there was obe about a cyclist getting hit by a car when it was actually the cyclist turning into traffic. Tragic, but the title misleads. So I've started pointing them out.

    Maybe I just long for the days when titles aren't rewritten to drive opinion and engagement (regardless of if I agree or disagree).

  • In cyber security you may never know if a bad actor got access to your systems/data. The issue with not following good security practices is that you increase the risk of this happening.

    Its like saying we should stop mandating vaccines cause the diseases aren't around anymore. When you let down your defenses you end up with outbreaks that shouldn't have happened and are harder to control.

    In cyber security you may never know if a bad actor got access to your systems/data. The issue with not following good security practices is that you increase the risk of this happening.

    If they're using Azure or AWS then they have a level of built in good security practices. These people aren't morons, they know what they're doing. In fact, using AWS or Azure you have to fuck things up to make it insecure, because by default they're all pretty locked down.

    Its like saying we should stop mandating vaccines cause the diseases aren’t around anymore.

    I'm 100% a pro-vaccine person, but vaccines should not be mandatory. "My body, my choice" - isn't that the saying? Or is that only for women wanting an abortion? If someone doesn't want to get a vaccine then they can suffer the potential consequences while those who are vaccinated don't (but they have to deal with the potential side effects of the vaccine).

  • In cyber security you may never know if a bad actor got access to your systems/data. The issue with not following good security practices is that you increase the risk of this happening.

    If they're using Azure or AWS then they have a level of built in good security practices. These people aren't morons, they know what they're doing. In fact, using AWS or Azure you have to fuck things up to make it insecure, because by default they're all pretty locked down.

    Its like saying we should stop mandating vaccines cause the diseases aren’t around anymore.

    I'm 100% a pro-vaccine person, but vaccines should not be mandatory. "My body, my choice" - isn't that the saying? Or is that only for women wanting an abortion? If someone doesn't want to get a vaccine then they can suffer the potential consequences while those who are vaccinated don't (but they have to deal with the potential side effects of the vaccine).

    While AWS/Azure do make the initial configs rather fool proof, that falls apart the moment you start configuring them for actual use. It's also especially easy to mess things up when handling PII, at the SSA level it's probably something that DOGE staff don't have experience with.

    As for vaccines. Largely through that out there cause it seemed like obvious bait for you, but I don't think a single slogan "my choice my body" really encapsulates the arguments around abortion

  • While AWS/Azure do make the initial configs rather fool proof, that falls apart the moment you start configuring them for actual use. It's also especially easy to mess things up when handling PII, at the SSA level it's probably something that DOGE staff don't have experience with.

    As for vaccines. Largely through that out there cause it seemed like obvious bait for you, but I don't think a single slogan "my choice my body" really encapsulates the arguments around abortion

    The people working at doge are mostly what people would consider geniuses in their field. Configuring azure databases to be secure is a piece of cake. Like I said, it’s harder to make them insecure than it is to make them secure. I know, I work with them every day. How does handling PII make it easier to mess things up exactly?

    Good to know you were just trying to bait and “troll”, not really good faith arguing is it? You wouldn’t have been trying to find something to disagree with just because you can’t argue against my actual point I made, were you?

    “My body my choice” perfectly encapsulates the argument for abortion because it literally is pro-abortion people’s main argument - and yes, I am 100% pro-abortion.

  • The people working at doge are mostly what people would consider geniuses in their field. Configuring azure databases to be secure is a piece of cake. Like I said, it’s harder to make them insecure than it is to make them secure. I know, I work with them every day. How does handling PII make it easier to mess things up exactly?

    Good to know you were just trying to bait and “troll”, not really good faith arguing is it? You wouldn’t have been trying to find something to disagree with just because you can’t argue against my actual point I made, were you?

    “My body my choice” perfectly encapsulates the argument for abortion because it literally is pro-abortion people’s main argument - and yes, I am 100% pro-abortion.

    I think the line "how does handling PII make it easier to mess things up" just about sums things up for me.

  • I think the line "how does handling PII make it easier to mess things up" just about sums things up for me.

    If the servers are secure and the PII is properly encrypted in the original db then how does it make it any easier to mess up? Would love to hear your expert opinion on this.

  • This post did not contain any content.

    the government may be responsible for reissuing every American a new Social Security number at great cost

    Has this department made our government efficient yet?

  • If the servers are secure and the PII is properly encrypted in the original db then how does it make it any easier to mess up? Would love to hear your expert opinion on this.

    There are laws about how to handle PII and potential criminal charges based on things like the Privacy Act. Meaning there are additional requirements above and beyond how people normally store data on a system.

    More requirements = More chances to mess up

  • There are laws about how to handle PII and potential criminal charges based on things like the Privacy Act. Meaning there are additional requirements above and beyond how people normally store data on a system.

    More requirements = More chances to mess up

    And you’ve got evidence those laws aren’t being followed? No? There’s nothing that hosting it on a secure cloud server that makes that any easier to “mess up”.

  • It's times like this I wonder about the like/dislike paradigm I.E. "I like/dislike knowing this and/or appreciate the perceived reputability of the source" vs. "This is good news/I fucking hate this."

    This one just got a "I fucking hate this" from me.

    More of the first, but not exactly. It's "Other people should see and know about this too" and "This isn't worth anybody's time/is factually wrong and shouldn't have been posted."

    Because that's what upvoting does, makes it higher in the page so more people are able to see it.