341–350 of 747 posts
How was every person leaving the building not searched by police as a condition of exit? The kettling and taking of details of (even peaceful) protesters in the UK is pretty standard now (I don't like it, but it is what seems to happen) - so why did they just let these people leave unchecked?
Earlier quoted context omitted.
My office is likely set up the same as yours, or at least close enough to yours. You could absolutely pop in to visit me. But you could also grab enough of your friends to obtain a decisive numerical advantage – let's say, you and twenty of your closest friends, that probably gets close to what we saw yesterday. Be sure one or two of them are visibly armed. Once you have your buddies, you can go break through the gla…
> My office's threat model – and yours – is not based on defending against a mob of people storming the building. That's sort of exactly the point I'm making. My office's threat model isn't even in the same league, and yet it still seems to have more thought put into physical security than the Capitol building. It would appear that, unlike in the hypothetical you're constructing, in the real event, people didn't even…
The Capitol is intended to allow most people most of the time.
Earlier quoted context omitted.
Here's another video of cops letting people in. https://twitter.com/christina_bobb/status/134759627858319769...
This is the video that really got me thinking about this: https://old.reddit.com/r/PublicFreakout/comments/kt2u9v/conf... Not sure what happened, I hope we find out, but this video is especially damning.
How was every person leaving the building not searched by police as a condition of exit? The kettling and taking of details of (even peaceful) protesters in the UK is pretty standard now (I don't like it, but it is what seems to happen) - so why did they just let these people leave unchecked?
Earlier quoted context omitted.
If it’s a shared machine for projecting notes, chances are it has nothing stored locally.
Optimistic thinking. Chances are it has many PDF and PowerPoint files scattered on it. And probably a shared user account where the files fill up a Windows desktop.
Earlier quoted context omitted.
They took selfies with the insurrectionists. They were complicit.
> insurrectionists Peaceful protestors. Were the BLM people who stormed city hall in Seattle insurrectionists? Where the Black Panthers who took the California State Capitol in the 1970s insurrectionists? Stop with the bullshit name games. These were not rioters. They didn't set anything on fire. They should not have stolen or broken anything. That's wrong and bad and should be condemned. Those people should get fede…
Speaking of overreactions ...
> They didn't set anything on fire. They should not have stolen or broken anything. That's wrong and bad and should be condemned.
Okay, so to be clear, there's a difference between breaking things with your hands and setting it on fire. One is "bad", and one is "rioting". Huh, interesting.
Earlier quoted context omitted.
https://twitter.com/doctorow/status/1347244300527013889 : "Resecuring the Capitol's IT infrastructure should probably involve shredding every device, cable and thumb-drive, tearing open every light-socket and power-outlet, and even then, it will be hard to fully trust the building and its systems."
That actually sounds like a good idea anyway. There should be a full cleaning, de-bugging, and wipe every device on a regular basis.
Myself, I would be more worried about any keyloggers, or wifi/cell interception, "man-in-the-middle" devices being left behind...
While not congress, so I can't say for sure, I have been around government and other enterprise systems. Some measures they had in place: - Disabled USB Ports (except whitelisted peripherals) - User accounts don't have permission to install anything at all - If you plug a deceive with a different mac address than expected into an ethernet port the port locks down until a sysadmin verifies it and manually unlocks it -…
Question though... Don't hardware-based keyloggers present as a "keyboard", and isn't that a generic device which would probably be whitelisted?
Earlier quoted context omitted.
"no big deal" A stolen laptop is usually not considered "no big deal" basically everywhere I worked.
Really? Every place I have worked with more than about 50 employees has used full drive encryption, so a laptop being stolen is not an infosec risk at all.
Not to mention cold boot attacks if the laptop was still running.