Hacker News new | ask | show | jobs
by afavour 299 days ago
> However, according to the complaint, the copied data had far fewer security measures in place to protect it than the SSA's standard protocols typically require.

> According to Andrea Meza, an attorney with the Government Accountability Project who represents Borges, the cloud environment appeared to be set up for DOGE-affiliated Social Security staffers, but it "lacks independent security, monitoring and oversight." She said Borges "has serious concerns about the vulnerability it causes for nearly every American's data."

Not all applications of "secure" are equal.

1 comments

It may be secure enough for being on S3, but that's not the whole definition of secure for government / SSNs, where there's (presumably) sheaves of paperwork explaining what exactly the storage needs to conform to and, more importantly, what paperwork and procedures need to be in place.