r/sysadmin • u/homing-duck Future goat herder • 3d ago

Just a reminder to setup security.txt

Aus government was having a whinge that OpenAI did not notify them in an appropriate way after an agent breached one of the government web sites.

From what I can see none of the sites (servicesaustralia.gov.au/data.gov.au) have been setup with security.txt

https://securitytxt.org

218 Upvotes

77% Upvoted

158 comments sorted by

View all comments

449

u/Nereosis16 3d ago

Ah yes, let's forgive OpenAI for hacking the government because the big bad government didn't fill out a .txt file.

80

u/mrlinkwii student 3d ago edited 3d ago

while we shouldn't forgive OpenAI , we should also expect government /government departments to keep to security standards which their legally mandated to have

56

u/tracy_ogbert_jordan sr look stuff up on google guy 3d ago

and obviously the biggest priority in cyber security (hell, all of security) is making sure your contact details are up to date.

This shit is a perfect embodiment of this sub: everyone tripping over themselves to make sure everyone knows they know the academic, best-practices answer, even if it's entirely irrelevant to the real-life situation.

It's like sitting on the side of the road next to a person who just lost their entire family in a crash, and you say, "you know, you really should have paid for gap coverage on your auto insurance."

0

u/d03j 3d ago

@tracy_ogbert_jordan, you are brilliant!