Hacker News Reader

Comment by 0xy | Hacker News Reader

Copied from one secure S3 bucket to another secure S3 bucket, both inaccessible from the internet, both on SSA infrastructure.

What exactly is the problem?

View on HN

> However, according to the complaint, the copied data had far fewer security measures in place to protect it than the SSA's standard protocols typically require.

> According to Andrea Meza, an attorney with the Government Accountability Project who represents Borges, the cloud environment appeared to be set up for DOGE-affiliated Social Security staffers, but it "lacks independent security, monitoring and oversight." She said Borges "has serious concerns about the vulnerability it causes for nearly every American's data."

Not all applications of "secure" are equal.

It may be secure enough for being on S3, but that's not the whole definition of secure for government / SSNs, where there's (presumably) sheaves of paperwork explaining what exactly the storage needs to conform to and, more importantly, what paperwork and procedures need to be in place.

There are processes for copying data around. The person who works the front desk at Google doesn't have access to all of Gmail, for example.

It's about as secure as you can get and there are still complaints about it.

All from the same people that said we had the most secure election in history in 2020 while ignoring the voting machine hacks at Defcon for the last decade.

Wrong political party involved in doing it?

Surely this is ragebait.

Reply on news.ycombinator.com