DHS's Office of Industry Partnership was hacked by a group called "Department of Peace" and info about ICE contracts with over 6,000 companies is now published on @ddosecrets.org!

[vwbusguy@mastodon.online]

@phillip @manchicken @micahflee "CII is a private sector solution" in the Linux foundation..

"This funding would include a DHS representative holding a voting seat on the CII Steering Group"

Does this mean current DHS has a seat on a Linux Foundation entity?

[krosen_nw@mindly.social]

@micahflee Cool!
Now do the DOJ #EpsteinFiles
Pretty please

[astropug@hachyderm.io]

@micahflee

HBGary! That’s a name I haven’t heard in a while.

[phillip@social.lol]

@vwbusguy @manchicken @micahflee No, the DHS does not have a voting seat with the Linux Foundation. The CII Steering Group is a sub-project of the Linux foundation that accepts monetary donations, then doles them out to open source projects in need.

Core Infrastructure Initiative - Wikipedia

(en.wikipedia.org)

So the DHS has (or had maybe?) a voting seat to give them a say in how their donations are spent.

[iampytest1@infosec.exchange]

Just adding something I noticed: these grants and contract are part of DHS' Long Range Broad Agency Announcement (LRBAA) program:

The Science and Technology Directorate's (S&T) Long Range Broad Agency Announcement (LRBAA) is a standing, open invitation to the scientific and technical communities to fund pioneering research and development (R&D) projects in support of our nation’s security.

Access Denied

(www.dhs.gov)

That doesn't answer your question, though.

[dbaplanb@mastodon.sdf.org]

@micahflee Thank you for making this info available! Disheartening how many universities are listed...

[skua@mastodon.social]

@micahflee
Anyone got the geeks to set up a bot that posts the names of 10 of the companies once every 12 hours?
#ICEContractor #ICEComplicit

[vwbusguy@mastodon.online]

@iampytest1 Yeah, looking at the contract, it seems more InfoSec research related for DHS during Biden era.

[julie@merida.hair]

@micahflee@infosec.exchange Uhhh... looks like DHS may have had their contracts system get popped during a penetration test in 2025?

[Edit: LOL]

[cinebox@masto.hackers.town]

@phillip @manchicken @micahflee Probably from CISA, which is under DHS for some reason.

[claralistensprechen3rd@friendica.myportal.social]

@micahflee Well well well, move over WikiLeaks!

[risottobias@toot.risottobias.org]

@micahflee this is awesome!

[terrorbite@meow.social]

@julie @micahflee that means they were probably aware of the vulnerability that allowed this leak to happen… and then they didn't fix it (nor did they remove the data that the pentesters injected into their production database, apparently!)

[k3ym0@infosec.exchange]

@micahflee oh no, how terrible.

[havvyhh2@mas.to]

@micahflee glorious!!

[avincentinspace@furry.engineer]

@micahflee I cannot help but notice the "Contractors" file is about three times the size of the "Contracts" file.

[micahflee@infosec.exchange]

@julie huh, this is quite interesting

[generalx@freeradical.zone]

@TerrorBite @julie @micahflee
Bugcrowd HackDHS

[dalias@hachyderm.io]

@skua @micahflee Maybe every hour?

[skua@mastodon.social]

@dalias
Forking Reply

"Frequency of bot posts" - ideally something that could be swapped over to "User selected frequency of receiving posts by a bot".

For me, if I checked my notifications after 2 days away from Mastodon and found 48 posts by a bot I'd unFollow.

But really I have no idea where a sweet spot might be found.

#FrequencyOfBotPosts #UserControlBotReceipts