U.S. LEAKS PRIVATE CLOUD KEYS IN GITHUB REPO #
Guillaume Valadon, a researcher at GitGuardian, sat in his office on May 14 when he stumbled upon the ultimate digital slum. In a public folder on GitHub titled “Private-CISA,” the United States government had left 844 megabytes of its most intimate secrets sitting out like discarded wrappers on a sidewalk. It was a catalogue of such profound amateurism that it makes the $30 hamburger crisis look like a minor accounting error.
The repository, maintained by a contractor for the Cybersecurity and Infrastructure Security Agency, contained plain-text passwords for federal cloud accounts. One file was helpfully titled “AWS-Workspace-Firefox-Passwords.csv.” Another, “external-secret-repo-creds.yaml,” practically begged to be opened. According to Gizmodo, this is likely the worst leak in the agency’s history, exposing reams of passwords and tokens for systems belonging to the Department of Homeland Security.
“I quickly understood that the leak was bad and that time was running out,” Valadon told The Register. The files included credentials for internal development environments and authentication data for the agency’s “Landing Zone.” While 240,000 DHS employees enter their second week without a paycheck, it seems the department can’t even afford a digital padlock for its own front door.
This paper’s reading of the ledger is simple: we are witnessing the terminal liquidation of the public administrative class. While the elite retreat into gated digital perimeters, the government’s own security infrastructure is being treated with the same care as a communal kitchen in a budget hostel. The repository had been open since November, proving that in the Hollow State, nobody is actually watching the watchmen.