AWS engineer exposed credentials and more on public GitHub

guest · Jan 23, 2020

Hapless AWS engineer spilled passwords, keys, confidential internal training info, customer messages on public GitHub
Only up for five hours, but that's plenty of time for the wrong person to spot it
January 23, 2020
https://www.theregister.co.uk/2020/01/23/aws_engineer_credentials_github/

Source code, internal user names and passwords, and private keys, for the website and online account systems of Canadian ISP Rogers have been found sitting on the open internet.

The leaked software, seemingly uploaded to GitHub by a Rogers engineer before they left the telco, is written in Java and powered the front-end for various parts of Rogers.com. The materials are marked "closed source" and copyright Rogers, yet can be found on the web if you know where to look. Details of and credentials for services and systems on the ISP's internal networks are included.

The incident should serve as a warning to all on the importance of keeping track of where source code is kept and who has access to it.
Click to expand...

UpGuard: Identity and Access Misstep: How an Amazon Engineer Exposed Credentials and More

mirimir · Jan 24, 2020

Huh?

Neither that Register article nor the UpGuard post mention Rogers.

Different leak? Or updated Register article?

Log in or Sign up

AWS engineer exposed credentials and more on public GitHub

guest Guest

mirimir Registered Member

Log in or Sign up

AWS engineer exposed credentials and more on public GitHub

guest Guest

mirimir Registered Member

Useful Searches