Chinese dev jailed and fined for posting DJI's private keys on GitHub

Re:Chinese dev jailed and fined for posting DJI's private ke... by RubenSandwich on Thursday May 02, 2019 @01:23PM (#19810220)

It seems that a lot of people commenting did not read the whole article. The developer committed four internal repos to DJI's public Github: 'spray-system', 'Management-platform', 'real_time_serve_v1' and 'real_time_serve'. These repos contained a wide variety of secret keys. So it does seem that this was intentional. Even playing devil's advocate because many large companies, Facebook, Google, etc, have systems to mirror part of their internal repos to GitHub, but I can imagine that adding a new path is checked and double checked by multiple people. Also this wasn't just a mistake of one repo, it was four.

I'm making no comment on if the punishment fit the crime, just that by reading the article it does seem that this was very much intentional.

[ Parent | on HN ]

Re:Chinese dev jailed and fined for posting DJI's private ke... by oh_sigh on Thursday May 02, 2019 @02:28PM (#19810976)

There have been thousands of instances of people unintentionally uploading their private keys to github. It seems at least plausible that this developer just didn't know the implications of what he was doing.

[ Parent | on HN ]

Re:Chinese dev jailed and fined for posting DJI's private ke... by forkLding on Thursday May 02, 2019 @02:59PM (#19811362)

Yea but you've breached NDA and likely committed some kind of intentional sabotage because this was done 4 times, so what happens to you is up to the courts and how you can argue it.

[ Parent | on HN ]

Re:Chinese dev jailed and fined for posting DJI's private ke... by oh_sigh on Thursday May 02, 2019 @07:23PM (#19813980)

If you can make a mistake once, you can make it 4 times.

If this guy was going for intentional sabotage, why not sell the keys on the dark web? Why not anonymously publish them on pastebin?

Why would he just upload them to github under his own name?

[ Parent | on HN ]

Re:Chinese dev jailed and fined for posting DJI's private ke... by acct1771 on Friday May 03, 2019 @08:05AM (#19817602)

Emotions make you stupid.

[ Parent | on HN ]

Re:Chinese dev jailed and fined for posting DJI's private ke... by adamnemecek on Thursday May 02, 2019 @03:08PM (#19811479)

It might not be international, he might have had a broken process or he was unfamiliar with it.

Like it's easy to make the same mistake if you weren't alerted to it the first time.

[ Parent | on HN ]