Live data from Hacker News

Teen on Musk's DOGE team graduated from 'The Com'

krebsonsecurity.com

151–160 of 1001 posts

Re: Teen on Musk's DOGE team graduated from 'The Com'

#151

The biggest irony to me is that Musk wanted to reneg on the Twitter sale. It's interesting to consider the timeline where he was allowed to not buy it. Truly a "canon" event, that one. I'm also not convinced this is a "security breach." They're being allowed to do it. It's more like an unforced error, if anything. Not that it changes anything material about the situation. That said - a small majority of congress is c…

> I'm also not convinced this is a "security breach." They're being allowed to do it. It's more like an unforced error, if anything. Not that it changes anything material about the situation. From the perspective of the owners of this data, the US citizens and others that live in the country, this is very much a security breach; the data that was supposed to be secure is no longer secure.

That's what I'm saying though - DOGE claims it is secure and all of the data is still in the hands of those (in)directly appointed by Trump.

I do not disagree with your sentiment though, but a little pedantry is needed here. It's not necessary for this to be a security breach to be bad. Given how poorly this data is being handled even among those who are "supposed" to have it, it's likely there will be a legitimate security breach soon enough.

Re: Teen on Musk's DOGE team graduated from 'The Com'

#152

Ignoring the horrifying political parts, I think one aspect here about data access that is inherently worrying is that it seems like all usual controls were bypassed and the DOGE people had very low level access to systems. So there are probably copies of sensitive data now in their possession, and nobody knows exactly what was copied and where it is stored. This kind of access would be dangerous even in the hands of…

[flagged]

What was the impressive and profitable part? The article makes him sound like a script kiddie who dicked around with some DDoS networks and formed a couple LLCs but didn't end up accomplishing much (either entrepreneurially or illegally). Not saying that makes him a terrible person, but in generation ago terms, he sounds less like a founding l0pht member and more like a Rusty n Edie's subscriber.

Re: Teen on Musk's DOGE team graduated from 'The Com'

#153
post #18

Good reporting here. Clarifies why the kid was fired for leaking documents - it was specifically for leaking internal corporate documents to a competitor. The details about cybercrime discords involved in SWATting and DDOS attacks are fascinating. The idea that anyone involved in this would be fast-tracked for a clearance is beyond the pale.

I personally think it says volumes about how those in the Trump-Musk group (Musk group?) see this. They see the task as infiltrating an adversary, requiring someone with the technical skills to do so but who is also disposable. This in their mind is not about improving anything in the government for citizens, or with regard to US interests, it's about gaining access to a hostile entity without regard to their interes…

> They see the task as infiltrating an adversary, requiring someone with the technical skills to do so but who is also disposable.

People who have had access to that kind of data, and who have those kinds of skills, you'd better be careful about how you dispose of them. (Consider the term "blowback".)

Re: Teen on Musk's DOGE team graduated from 'The Com'

#154
post #148

I'd much rather Krebs actually looked into the theft of taxpayer funds by USAID, with all its "shrimp treadmills", "Iraqi Sesame Street", "transgender mice" and regime changes. I want to get to the leaves of that tree and see who really got my money. Everything else is immaterial and should be ignored as targeted attacks on their mission.

Replacing the entire security clearance and access control system of the government with the say-so of one guy is immaterial?

Re: Teen on Musk's DOGE team graduated from 'The Com'

#155

Ignoring the horrifying political parts, I think one aspect here about data access that is inherently worrying is that it seems like all usual controls were bypassed and the DOGE people had very low level access to systems. So there are probably copies of sensitive data now in their possession, and nobody knows exactly what was copied and where it is stored. This kind of access would be dangerous even in the hands of…

At the very least, it’s a field day for foreign intelligence in DC. Offering these guys some money, women, status, or drink would pay massive dividends.

Have they even done the training that says "watch out for women trying to get into your pants"? Or did they just show up?

Re: Teen on Musk's DOGE team graduated from 'The Com'

#156

The biggest irony to me is that Musk wanted to reneg on the Twitter sale. It's interesting to consider the timeline where he was allowed to not buy it. Truly a "canon" event, that one. I'm also not convinced this is a "security breach." They're being allowed to do it. It's more like an unforced error, if anything. Not that it changes anything material about the situation. That said - a small majority of congress is c…

[dead]

Re: Teen on Musk's DOGE team graduated from 'The Com'

#157

The question no one asking is why Elon is sending a team of teenage programmers and not a team of financial auditors if he really wanted to cut government spending?

Reporting on this is terrible. There are also senior (in age and experience) people, but much of the focus is on the youngins for obvious reasons. Musk also believes (either arrogance, or true belief) that much of this stuff can be figured out from first principals without much need of traditional experts.

I hope this is true. Can you name any senior people and/or financial auditors who are overseeing "the youngins"?

Re: Teen on Musk's DOGE team graduated from 'The Com'

#158

Ignoring the horrifying political parts, I think one aspect here about data access that is inherently worrying is that it seems like all usual controls were bypassed and the DOGE people had very low level access to systems. So there are probably copies of sensitive data now in their possession, and nobody knows exactly what was copied and where it is stored. This kind of access would be dangerous even in the hands of…

At the very least, it’s a field day for foreign intelligence in DC. Offering these guys some money, women, status, or drink would pay massive dividends.

They could just hack their devices remotely, or physically break into his residence. I suspect a serial leaker will lack neither the discipline to not copy data onto personal devices, nor the opsec to withstand a motivated nation-state, since a lot of the work seems rushed, and is off playbook.

Re: Teen on Musk's DOGE team graduated from 'The Com'

#159
post #154
post #148

I'd much rather Krebs actually looked into the theft of taxpayer funds by USAID, with all its "shrimp treadmills", "Iraqi Sesame Street", "transgender mice" and regime changes. I want to get to the leaves of that tree and see who really got my money. Everything else is immaterial and should be ignored as targeted attacks on their mission.

Replacing the entire security clearance and access control system of the government with the say-so of one guy is immaterial?

You don't have evidence for what you just alleged, aside from vague, unsubstantiated allegations by Krebs.

Re: Teen on Musk's DOGE team graduated from 'The Com'

#160

I don't like Musk and have not for many years, but the left has been venerating some very flawed people for a very long time. It’s hard to be outraged now when we’ve been selectively told to ignore the past of others. Let’s not forget that Trump is the pied piper candidate promoted by the left to make it easier to win elections. I remember when Ron Desantis was successfully undermined by the news media casting him as…

I don't blame HRC's team for trying the pied-piper strategy in 2016. It would have seemed rational enough at the time. It didn't come into play in 2020 at all, though -- do you have any insight to the contrary?
Post reply on HN