Live data from Hacker News

Twin brothers wipe 96 government databases minutes after being fired

arstechnica.com

51–60 of 463 posts

Re: Twin brothers wipe 96 government databases minutes after being fired

#51

Earlier quoted context omitted.

Perhaps don't hire people who act as foreign adversaries for government work? Is that really such an absurd proposition?

You can’t assume someone is foreign based on their name. In fact I’d guess they’re not, since they’ve been employed on government projects since a young age.

>who act as foreign adversaries

This does not mean they are from another country.

Re: Twin brothers wipe 96 government databases minutes after being fired

#52
post #2

I have no problem with my credentials being revoked everywhere before I know about a layoff. I don't really care how I learn about it, just please don't make me come in to the office.

So this was why the FBI Director Kash Patel was in a panic when he couldn't log in one day. Revoking credentials before firing someone makes a lot of sense in security.

> So this was why the FBI Director Kash Patel was in a panic when he couldn't log in one day

Ever tried to login with two factor and justify a maxed out company card while high as a kite and drunk?

It’s stressful.

Re: Twin brothers wipe 96 government databases minutes after being fired

#53
post #22

Earlier quoted context omitted.

> just please don't make me come in to the office. But how do you pick up the stuff from your desk? I once lost a nice pair of headphones this way.

Meh. Don't leave anything at work. Forgo the convenience and carry your things on your commute. Use a bag. If there's "too much stuff", that's a sign to pare back what you "need" at work.

I know this is not a good year on the job market, but if you are traveling to work with a "go bag" and not leaving coffee mugs on your desk to prepare for being laid off maybe it is time to carry that go bag to some other buildings...

Re: Twin brothers wipe 96 government databases minutes after being fired

#54

Earlier quoted context omitted.

Well, who else would you hire for the circus?

Perhaps don't hire people who act as foreign adversaries for government work? Is that really such an absurd proposition?

> Perhaps don't hire people who act as foreign adversaries for government work?

Hilarious in the context of this administration.

Re: Twin brothers wipe 96 government databases minutes after being fired

#55
How did they get access to 5k passwords? Are they being sent/stored in cleartext? This is the most baffling part of the article for me.

The second part I'm unclear about is how you could pass SOC2 when you aren't terminating account access simultaneously with the employment termination.

Re: Twin brothers wipe 96 government databases minutes after being fired

#56
post #22

Earlier quoted context omitted.

> just please don't make me come in to the office. But how do you pick up the stuff from your desk? I once lost a nice pair of headphones this way.

Meh. Don't leave anything at work. Forgo the convenience and carry your things on your commute. Use a bag. If there's "too much stuff", that's a sign to pare back what you "need" at work.

God, if we're at the point where we're so paranoid about being laid off that we don't dare leave a single piece of personal property in the office then I think we're in a very dark place indeed. Can’t imagine the mental damage from considering losing your job every single day you wake up.

Re: Twin brothers wipe 96 government databases minutes after being fired

#57
post #55

How did they get access to 5k passwords? Are they being sent/stored in cleartext? This is the most baffling part of the article for me. The second part I'm unclear about is how you could pass SOC2 when you aren't terminating account access simultaneously with the employment termination.

From the article, it sounds like the passwords are indeed stored in cleartext:

> On Feb. 1, 2025, Muneeb Akhter asked Sohaib Akhter for the plaintext password of an individual who submitted a complaint to the Equal Employment Opportunity Commission’s Public Portal, which was maintained by the Akhters’ employer. Sohaib Akhter conducted a database query on the EEOC database and then provided the password to Muneeb Akhter. That password was subsequently used to access that individual’s email account without authorization.

Re: Twin brothers wipe 96 government databases minutes after being fired

#58

Earlier quoted context omitted.

When you are talking about access like they had "make firings as abrupt as possible including terminating all access immediately" not doing this is incompetence. This is absolutely a standard and has to be for these kinds of positions. I've never worked anywhere where it wasn't for the majority of IT staff. You meet with HR, someone clears your desk, and security walks you out.

> When you are talking about access like they had "make firings as abrupt as possible including terminating all access immediately" not doing this is incompetence. You're proving my point—employers take the most extreme lesson and it's considered expected practice. They absolutely should have immediately terminated the credentials that granted unilateral access to sensitive databases. (Ideally those would never exist…

Yeah I don't see why that's necessary. I'm sure you can always reach out to HR and ask (I have facilitated this in the past, pulling contact lists and phone numbers) but that also gives them ways to exfiltrate data. It's company data. Just think of all the info you have in your inbox. Unless you've managed offboarding for high level IT positions it seems harsh, but the risk is just too high to allow the user to do that stuff themselves.

Re: Twin brothers wipe 96 government databases minutes after being fired

#59

Earlier quoted context omitted.

> At 4:59 pm, he asked an AI tool, “How do i clear system logs from SQL servers after deleting databases?” He later asked, “How do you clear all event and application logs from Microsoft windows server 2012?” So many red flags, I can't even.

Ready access to AI tools sure makes vandalism easy.

Ai is just a tool. You can kill with hammer, doesn't mean you ban hammers. And they could have used stack overflow instead of ai.

Re: Twin brothers wipe 96 government databases minutes after being fired

#60

Earlier quoted context omitted.

I had the same questions. Apparently discovery of the prior conviction is what lead to them being fired: > When the company discovered Sohaib Akhter’s felony conviction, it terminated both brothers’ employment during an online remote meeting on Feb. 18, 2025 from https://www.justice.gov/opa/pr/federal-jury-convicts-virgina... which is a better source on this. That prompts the question of why background checks are so…

The company involved here is apparently based in Washington, DC, which has a "Ban the Box" ordinance that limits employment background checks for most kinds of jobs. And apparently DC's version of the law is particularly strict.

Shouldn't this force companies that need to pass a SOC2 out of the district? Doesn't SOC2 require background investigation of personnel with access to sensitive systems?
Post reply on HN