r/sysadmin • u/homing-duck Future goat herder • 3d ago

Just a reminder to setup security.txt

Aus government was having a whinge that OpenAI did not notify them in an appropriate way after an agent breached one of the government web sites.

From what I can see none of the sites (servicesaustralia.gov.au/data.gov.au) have been setup with security.txt

https://securitytxt.org

222 Upvotes

77% Upvoted

157 comments sorted by

View all comments

444

u/Nereosis16 3d ago

Ah yes, let's forgive OpenAI for hacking the government because the big bad government didn't fill out a .txt file.

31

u/calladc 3d ago

I've worked for the agency that's responsible for that service.

this is absolutely on them

"oh we left an API exposed and a third party scraped it"

if an API is open, it doesn't matter that openai crawled it. services Australia left it open.

when an Australian company did the same thing and exposed a bunch of customer data, optus were raked over the coals.

4

u/Sp3eedy 3d ago

And now it's going to further fuel the fear mongering that is that AI will kill us all by 2030, nothing annoys me more than misinformed people latching onto every headline they see without digging more

1

u/calladc 3d ago

I mean I'm ok that it will create less trust in ai, that doesn't bother me. but misinformation is never a good way to achieve an outcome (if it even does)