evilstevie @evilstevie@mastod1.ddns.net

JLR parent Tata Motors somehow put their AWS secret keys on their own website

https://techcrunch.com/2025/10/28/tata-motors-confirms-it-fixed-security-flaws-that-exposed-company-and-customer-data/

@reverseics and truthfully, the exec staff on the ship pretty much treat Worf the same way as everyone else who pays for enterprise security.

Ignore all warnings, dismiss all advice to actually secure things until it’s too late and dramatic conflict is afoot.

“ok, i want you to take a look at this address. memorize it. you may need it when you’re on the ground, but you can’t take it with you - it’s where you’ll find our field agents who can assist you if you get into trouble.”

“but…but…this is an IPv6 address.”

“that’s right. like i say, memorize it. good luck, 007.”

I always forget about my complete archive of UK government source code until I receive panicked emails asking me to delete things from it.

This time it was password hashes. A *lot* of password hashes.