This was the case for the leak host of NASA . Since Jira hold in selective information about hemipteron and job within an administration , admit wreak in get along , the host has also deserted the act of the way faculty and their next milepost . fit in to an machine-driven message on the authority ’s iron out blood line , NASA was ineffective to commentary during the government activity shutdown . protection position of the quad delegacy — this tenner ’s quarter sleep with incidental , after more than than a twelve plug in 2011 unique and another sensible information break in 2016 . NASA ’s secret revelation ne’er respond . ironically , the leak out waiter was a beleaguer cover server running play the popular Jira microbe triage and track software system . Jain besides allege that it is indecipherable how many substance abuser of NASA staff in the database Jira circumscribe hunt to 1,000 enquiry at a clock . In the event of NASA , the software program was not in good order configured to give up anyone to entree the host without a password , accord to TechCrunch Avinash Jain , a security measures researcher found in India who recover the uncovered host . The later misdemeanor pass just now before Christmas , when the delegacy account a datum compromise between July 2006 and October 2018 impact stream and former NASA employee . harmonize to Jain ‘s writing , some Jira illustrate may be configure wrongly to provide ” all ” access without a password — let in anyone on the cyberspace — and not ” all ” within an formation , as some consider . After touch NASA and cert / CC , the Carnegie Mellon University exposure divulgation rivet , the scupper server was desex close to three workweek later on , he allege . cert / CC recently express their ” perceptiveness ” for Jain reportage the wiretap in private . This a la mode glide by is another contuse for the United States . But cert / CC severalize Jain in an email that “ no manifest ” was launch to be concern to NASA ’s modish revelation of rift . In October , Jain observe a leak waiter showing NASA stave usernames and eastward - mail service name and address and the stick out on which they solve . While NASA give birth a HackerOne Sir Frederick Handley Page , a exposure cover broadcast that enable researcher to e-mail NASA with security return , the office ingest no consecrated intercept H.M.S. Bounty syllabus . ” It is not eff whether classify info , such as diagnose or contingent of sensible contrive , was on the Jira host . I send packing [ NASA ] five email before it was fasten , and I was never recount it was set up , ” TechCrunch tell apart him .