alt Hacker NewsLooks like a DevOps guy is going to take the blame for this: "Binance's initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions." https://x.com/binance/status/2115993361517891592
Replies
thecopy • today at 7:09 AM
I recommend everyone to move your plantext secrets from ~/.kube/config, ~/.ssh etc into a password-manager. You can tell Claude to adjust the config files to get the secrets from 1Password when they are needed with TouchID requirements etc.
➕ show 7 replies
throwawaysoxjje • today at 7:38 AM
The fact a single devops guy has the access to do this is the actual issue
➕ show 1 reply
dizhn • today at 10:55 AM
One person's key probably should not be enough to move billions no matter who it is.
If a compromised laptop was the entry point and that allowed someone to steal 6 billion dollars, it’s not really the engineers fault, right?