Defense Contractor Left Sensitive Pentagon Files on Unprotected AWS S3 Bucket

Re:Defense Contractor Left Sensitive Pentagon Files on Unpro... by oval-atom on Wednesday May 31, 2017 @05:04PM (#14455904)

Retired as govt engineer. Reported a security violation, employees sharing passwords/account on a secured network. The 2 contractor ITs claimed to know nothing about it. At most only a handful of employees have access to the network and at most, but rarely 3 work on the network at the same time. If the contractor ITs were not aware, and they never are more that a few feet of the activity, they should have been fired. Management moved me to an isolated area and began the slow process of retaliation, so as not to look like retaliation. To their surprise, I walked away from my job. BTW, the supervisor I was reassigned too, told me not to report any more observations. I am not a fan of contractor support, and I see no reason to use such infrastructure such as Amazon to store any data, especially sensitive data.

[ Parent | on HN ]

Re:Defense Contractor Left Sensitive Pentagon Files on Unpro... by SomeStupidPoint on Wednesday May 31, 2017 @05:40PM (#14456157)

The US is seriously blundering by using contractors for military operations, and instead needs to hire more military personnel and civilian employees. This fixation on not having more government staff (and on funneling money to private sector contractors) is endangering the US government's operation.

In-house staff aren't a panacea, but in-housing critical capabilities has always been the prudent decision.

Of course, much the same can be said about contractors and off-shoring in the private sector as well.

At this point, the US is cannibalizing its future for short-term gains. Of course, the people making the decisions generally won't bear the costs, and have convinced much of the populace that such a strategy will benefit them through wishes and pixie dust.

[ Parent | on HN ]

Re:Defense Contractor Left Sensitive Pentagon Files on Unpro... by dyeje on Wednesday May 31, 2017 @06:36PM (#14456482)

Nothing changes until we can reduce money's influence over the election process. Until then, any special interest with deep enough pockets can and will have US taxpayers over a barrel.

[ Parent | on HN ]

Re:Defense Contractor Left Sensitive Pentagon Files on Unpro... by tapatio on Wednesday May 31, 2017 @06:45PM (#14456522)

Nothing changes until the gov pays competitive salaries.

[ Parent | on HN ]

Re:Defense Contractor Left Sensitive Pentagon Files on Unpro... by nickpsecurity on Wednesday May 31, 2017 @09:05PM (#14457180)

Original commenter is correct. This has little to do with salaries. The political power and money goes toward a government that sends tax dollars at high margins to contractors who don't even earn it in many cases. There's no major liability for malice so long as it affects taxpayers instead of those in power. The defense contractors continue to cut anything nonessential to their mission of turning tax dollars into profit for the people on top. And vicious circle continues.

Here's a nice write-up on the bribery and abuses of just one:

http://www.vanityfair.com/news/2007/03/spyagency200703

The others pull the same shit. The biggest trick is the revolving door of moving people back and forth into the private sector with them benefiting while taxpayers lose.

https://www.opensecrets.org/revolving/

And note before any counterpoint that a non-corrupt system might pay better wages in the event you're right. Most of the wages are rigged to go up and to bullshit that benefits people I'm describing. That could easily go to better tech. For instance, the first time the private market started doing strong security was a small initiative by the U.S. government mandating it with purchases promised in return. Led to the strongest systems of the time that resisted NSA pentesting. Although NSA killed that (incompetence or malice), it could be done again with a different group.

http://lukemuehlhauser.com/wp-content/uploads/Bell-Looking-B...

[ Parent | on HN ]

Re:Defense Contractor Left Sensitive Pentagon Files on Unpro... by at-fates-hands on Wednesday May 31, 2017 @08:32PM (#14457021)

You might be right.

Most people who got into gov. gigs know this but the upside always been a cushy retirement, sweet pension and a Cadillac health care plan in retirement.

"Unfunded government liabilities" are now always on the chopping block and those people that took those low paying jobs for a better long term payout in the end are now getting screwed, royally. Government jobs are no longer the sweet gig people think they are and I think they have to start being more competitive with the larger markets.

[ Parent | on HN ]

Re:Defense Contractor Left Sensitive Pentagon Files on Unpro... by balladeer on Wednesday May 31, 2017 @08:14PM (#14456933)

This is one of the root problems in India too. At the end of the day, in a Govt job, it's just:

- a lot of bureaucracy

- and the mandatory ass-licking

- working on ancient platforms and techs

- and a lot less pay compared to the market (so either you do under the table deals, or well..)

Very few tier one engineers go for Govt jobs and almost no tier one engineers from tier one college go for the Govt jobs.

Top it wtih maddeningly absurd and archaic interview process and selection criteria.

[ Parent | on HN ]

Re:Defense Contractor Left Sensitive Pentagon Files on Unpro... by tapatio on Thursday June 01, 2017 @01:21PM (#14462348)

Exactly.

[ Parent | on HN ]