Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Teen on Musk's DOGE team graduated from 'The Com'

krebsonsecurity.com

Post reply on HN
Print view View original

291–300 of 1001 posts

Re: Teen on Musk's DOGE team graduated from 'The Com'

#291

Post by hypothesis »

93po wrote: post #204
9283409232 wrote: post #79

Why are high level figures in these departments just letting them walk in and have access? Tell them to kick rocks until they have proper clearances.

Why do we care so much about classified information? Why is there a reverence for our government hiding information from its people? Why shouldn't the government operate out in the open in all ways? Something something terrorism, but i don't buy it. terrorism is the scapegoat for which we have massively eroded privacy and rights, in the same way that CSAM is the scapegoat for trying to ban encryption every 5 years.

They didn’t publish it all for everyone to use, did they? Not much transparency here, since all they did was steal it and use selectively for their purposes.

Re: Teen on Musk's DOGE team graduated from 'The Com'

#292

Post by SequoiaHope »

sangnoir wrote: post #158
the_snooze wrote: post #54

Earlier quoted context omitted.

At the very least, it’s a field day for foreign intelligence in DC. Offering these guys some money, women, status, or drink would pay massive dividends.

They could just hack their devices remotely, or physically break into his residence. I suspect a serial leaker will lack neither the discipline to not copy data onto personal devices, nor the opsec to withstand a motivated nation-state, since a lot of the work seems rushed, and is off playbook.

Perhaps giving an inexperienced script kiddie full access was part of a broader plan to allow someone else to covertly “steal” the data without directly implicating those in charge.

Re: Teen on Musk's DOGE team graduated from 'The Com'

#293

Post by ZeroGravitas »

jdross wrote: post #185

I realized I’m treading in extremely hostile waters here, but the stories I hear from folks working in DOGE are closer to “I spend 8am to 2am with the leaders of department X going through all contracts and outflows and identifying what is important versus wasteful given a target of saving $X million per day, and there are some great people in this department who really know what’s been going on and it’s been great t…

So why is their boss tweeting out outrageous lies about what they've found?

Don't they feel any moral compunction to say publicly, actually that is a complete misrepresentation of what we've found?

Re: Teen on Musk's DOGE team graduated from 'The Com'

#294

Post by milesrout »

dang wrote: post #684
dang wrote: post #37

All: if you're going to comment here, please make sure you're up on the guidelines at https://news.ycombinator.com/newsguidelines.html , and don't post low-information / high-indignation comments that could just as easily appear in any related thread. Such generic comments make discussion less interesting and more activating. That's not what we're trying for here. Rather, we want curious conversation. I know that's n…

I spent all day responding to the replies here, and then detaching them in order to save space at the top of the thread. But I just had a better idea. This is a stub comment so we have a single root to collapse the replies. This way (1) replies can stay close to their parent (the top comment) without flooding the screen with offtopicness; and (2) we can all re-experience the timeless truth of https://en.wikipedia.org…

I don't see how this kind of story is on-topic for HN. Yes, we all appreciate that HN is more than just a website for discussing garbage collection algorithms, graph algorithms, javascript frameworks, etc (i.e. computer science and programming) but isn't it meant to be about things that hackers would find interesting by virtue of being hackers?

My understanding of that broader topicality was that it was intended to capture things like science news ("Feynman's lectures have been published online for free" or "The Higgs Boson has been confirmed"), interesting posts and articles of other kinds (e.g. that series of posts of horror stories about dangerous chemical compounds - "why I will never work with supernitroglycerin" etc) and occasionally general news stories of such significance that ANYONE would want to discuss them (eg. Russian troops have invaded Ukraine).

That isn't what I am seeing here. There is now almost always general American political "news" on the front page. It isn't particularly newsworthy. It feels like the only reason it is here is that people here don't have anywhere else to discuss it because HN is one of the few decent forums left on the Web. But that doesn't make it on-topic, surely?

I often see you remove flags from posts. What's the point of having the flagging mechanism if you just remove them when people complain? You say there's interesting new information, but is everything that is interesting on-topic? Or is the test narrower: it should be interesting to hackers by virtue of their being hackers. I am sure this is interesting to many hackers that are also US political junkies (which I mean in a neutral way) but not because they are hackers.

Do you see what I mean?

Re: Teen on Musk's DOGE team graduated from 'The Com'

#295

Post by Spooky23 »

chmorgan_ wrote: post #272

Why the security concerns now and not with the thousands of employees with potentially similar access? NOW it's a concern because the idea occurred to people that who might have access to data is important? Imo the faux outrage is so far beyond rational that it turns people away. Let's have a reasonable discussion about data access and controls, and whether they are being followed, rather than some reflexive response…

Because controls ensures that people stay honest. I worked on a treasury system for a significant (not federal) organization. By design, I couldn’t even see aspects of the system directly.

When you give people unfettered access to sensitive information, your risk is exponentially greater. Those people can be compromised, tricked, engage in fraud, be victims or frauds, etc.

Worse, because access is unfettered and controls bypassed, you may never know.

Re: Teen on Musk's DOGE team graduated from 'The Com'

#298

Post by fzeroracer »

dudinax wrote: post #250
threeseed wrote: post #93

Earlier quoted context omitted.

Because Elon has the authority of the President who can override clearances. US government was simply never designed for scenarios like this.

It was designed for this. The safeguard is supposed to be Congress protecting their own powers out of self interest. They aren't. That's the where the "framers" screwed up.

I think the problem goes deeper than that, for two reasons.

The first is the obvious one. Congress is captured by a bunch of ineffectual assholes that either don't care enough to stop this or actively support ceding power to the executive.

But the second is that Congress has no actual enforcement mechanism. There are a few Congress members that are trying to stop this, but the executive can just play games with the court and lock out Congress members from any sort of oversight. If the executive refuses to abide by the laws of the country, who has control to stop it?

Re: Teen on Musk's DOGE team graduated from 'The Com'

#299

Post by conception »

chmorgan_ wrote: post #272

Why the security concerns now and not with the thousands of employees with potentially similar access? NOW it's a concern because the idea occurred to people that who might have access to data is important? Imo the faux outrage is so far beyond rational that it turns people away. Let's have a reasonable discussion about data access and controls, and whether they are being followed, rather than some reflexive response…

Uhh the other employees did go through the proper reviews? That’s why they are employees. That’s why there isn’t outrage at people who were hired and vetted for their jobs.

Re: Teen on Musk's DOGE team graduated from 'The Com'

#300

Post by beedeebeedee »

rcpt wrote: post #136
campbel wrote: post #46

Earlier quoted context omitted.

I'd encourage folks to go look at the source code for the referenced project https://github.com/DevrathIyer/ballotproof/tree/master . This does not strike me as nefarious in any way and there is a really valid reason for generating the ballot images -- testing, which is exactly how it is used in the project.

[flagged]

How far of a step would it be to produce this type of manipulation? https://www.wcia.com/business/press-releases/ein-presswire/7...
Post reply on HN