DHS's Office of Industry Partnership was hacked by a group called "Department of Peace" and info about ICE contracts with over 6,000 companies is now published on @ddosecrets.org!

[julie@merida.hair]

@micahflee@infosec.exchange Uhhh... looks like DHS may have had their contracts system get popped during a penetration test in 2025?

[Edit: LOL]

[cinebox@masto.hackers.town]

@phillip @manchicken @micahflee Probably from CISA, which is under DHS for some reason.

[claralistensprechen3rd@friendica.myportal.social]

@micahflee Well well well, move over WikiLeaks!

[risottobias@toot.risottobias.org]

@micahflee this is awesome!

[terrorbite@meow.social]

@julie @micahflee that means they were probably aware of the vulnerability that allowed this leak to happen… and then they didn't fix it (nor did they remove the data that the pentesters injected into their production database, apparently!)

[k3ym0@infosec.exchange]

@micahflee oh no, how terrible.

[havvyhh2@mas.to]

@micahflee glorious!!

[avincentinspace@furry.engineer]

@micahflee I cannot help but notice the "Contractors" file is about three times the size of the "Contracts" file.

[micahflee@infosec.exchange]

@julie huh, this is quite interesting

[generalx@freeradical.zone]

@TerrorBite @julie @micahflee
Bugcrowd HackDHS

[dalias@hachyderm.io]

@skua @micahflee Maybe every hour?

[skua@mastodon.social]

@dalias
Forking Reply

"Frequency of bot posts" - ideally something that could be swapped over to "User selected frequency of receiving posts by a bot".

For me, if I checked my notifications after 2 days away from Mastodon and found 48 posts by a bot I'd unFollow.

But really I have no idea where a sweet spot might be found.

#FrequencyOfBotPosts #UserControlBotReceipts

[dalias@hachyderm.io]

@skua Posts go in your home feed not notifications.

[skua@mastodon.social]

@dalias
You're right.
And on my home feed I'm choosing to unFollow some accounts as I want a Home feed that moves pretty slowly - ideally slowly enough that I "often" get to see posts by my most favourite accounts.

Thinking multiple bots could work.
@HourlyQuislings
@DailyQuislings
@WeeklyQuislings
User gets to choose frequency.

[geniodiabolico@mastodon.geniodiabolico.synology.me]

@micahflee

FYI - some of the more perplexing names on this list:

The Linux Foundation
National Public Radio, Inc.

[wyatt@soc.megatokyo.moe]

@manchicken @micahflee it looks like that started in 2014 and ended in 2018?
if i'm reading the dataset correctly. Still not a good look

[seruko@mstdn.social]

@phillip sure that's correct and the best type of correct. Broadly it's true that donors with money always have some kind of vote

[lioh@social.anoxinon.de]

@micahflee I find this scrolling visible between floating menus quite irritating.

[jamey@toot.cat]

@micahflee Oh, I see this is from all of DHS, not just ICE, and also that it includes contracts which ended years ago. That's good to be aware of. I actually worked on part of this one contract, over a decade ago, and it was purely about improving cybersecurity for people's smartphones; it had nothing to do with immigration. https://micahflee.github.io/ice-contracts/?state=OR&modalType=contract&modalAwardId=937

[opiobf@piaille.fr]

@micahflee poke @ddosecrets