New, by me: CISA Admin Leaked AWS GovCloud Keys on GitHub

Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a large number of internal CISA systems. Security experts said the public archive included files detailing how CISA builds, tests and deploys software internally, and that it represents one of the most egregious government data leaks in recent history.

https://krebsonsecurity.com/2026/05/cisa-admin-leaked-aws-govcloud-keys-on-github/

I wrote back in November about how easy it was to find leaked passport photos and driver's licenses online. The spills have only gotten worse in the months that age verification laws rolled out. We're reaching a point (if not already) where our government IDs aren't worth shit in the digital world.

https://this.weekinsecurity.com/it-is-far-too-easy-to-find-leaked-passports-and-drivers-licenses-online/

Without control of your food, you have no leverage. Period.

You can't strike if you can't feed your family.

You can't protest if you're spending all your waking hours finding enough to eat.

You can't build an alternative economy if you're dependent on the existing one for the most basic requirement of biological existence.

#activism #activists #solarpunk #climatecrisis #capitalism

I've said this before, but I may as well say it again: more people should be doing 8- and 16-bit homebrewing, Even in assembly language, these have dozens of the friendliest tutorials ever, and the hardest part is just getting a toolchain together that will turn your source code into binaries that *run* on the consoles or in emulators.

I've been putting together quick build-and-run tutorials to close that gap, for a great many systems. Check it out.

https://bumbershootsoft.wordpress.com/platform-guides/

#retrocomputing

In many ways these widespread new "AI" features and products are a direct threat to privacy.

In many, if not most, of those systems (which often just branch out from OpenAI in the end) the data goes both ways. Meaning all input is collected, uploaded, then reused by the system.

This is disastrous for data privacy,
and for proprietary data as well.

The antithesis of this practice is end-to-end encryption. In which the data is accessible only by its sender and intended recipient(s).

If you care about data protection at all, for yourself and for others, be very wary about any so-called AI feature. And seek end-to-end encryption everywhere it is possible to use it.

Privacy is a human right 🔒

#Privacy #NoAI #Encryption #E2EE #RootForE2EE