Live data from Hacker News

Twin brothers wipe 96 government databases minutes after being fired

arstechnica.com

371–380 of 463 posts

Re: Twin brothers wipe 96 government databases minutes after being fired

#371
post #156

Earlier quoted context omitted.

Terminating access and rotating passwords (if needed) while the person is in the meeting but has not yet found out they are being let go has been SOP for at least the last 20 years

Is this specific to US culture? And what about your work environment makes it such a risk? Where people are laid off here (Norway), they're still employed by law for 3 months. Most companies don't force you to work all that time, but it's pretty common to finish up your tasks, do offboarding etc for a few weeks. Never considered it an issue. Maybe it's a high trust society thing?

>Is this specific to US culture? And what about your work environment makes it such a risk?

It's called garden leave, it's popular everywhere, especially if it's a big international company with diverse workforce, sensitive to IP rights, since there's been plenty of cases of people taking company IP on USB drives to the new employer, like that Indian guy who took IP from Valeo to Nvidia and got his home raided by the police because the Valeo guys saw him share it on a Teams call lol. Same for companies in finance or that handle sensitive information. Norwegian trust doesn't fly anymore when it comes to multinational corpos.

Companies run on liability and risk mitigation. If something bad happened once (IP theft or sabotage from someone they let go), then they have to prevent from ever happening again, not keep blindly trusting people while letting it happen.

Re: Twin brothers wipe 96 government databases minutes after being fired

#372
post #302

Earlier quoted context omitted.

>Looking at it from Europe - it is such a weird inhumane practice. Pretty standard practice in many technology(not just IT) and finance companies in Europe as well. >If you don't trust your people so much, why to hire them in a first place? It's not about trust, it's about risk, and most companies operate on liability and risk mitigation. If society ran on trust alone, we wouldn't need contracts, door locks, password…

No this is labour law in the UK, I just had this last year. Its 3 months where you get paid and you can search for a job etc. Made our new American CEO livid that he could not just fire people.

How does that go against anything I said?

Re: Twin brothers wipe 96 government databases minutes after being fired

#373
post #328

Earlier quoted context omitted.

> It's part of the reason why Europe is falling behind on everything. I read a news article that Orange Telecom in France was being sued by a woman they had on payroll for the last 20 years doing nothing, because due to a medical condition she suffered, she became unable to do her job, and since they couldn't fire her due to France unions and labor laws, nor did they have any available job that could fit her current…

>Ithey just kept paying her for 20 years to do nothing at work, and now she's suing them for the depression she got to get paid for no work. It's called "mise au placard" and it's illegal. It's a technique to get people to quit by themselves, so companies don't have deal with the hassle of firing them. The lawsuit is 100% justified. It's also very common in Japan.

Why can't they be sent on government disability instead? Forcing companies by law to keep people unfit for the job is bad for both parties.

Re: Twin brothers wipe 96 government databases minutes after being fired

#374
post #358

Earlier quoted context omitted.

> Sounds like he's getting paid to work on the same thing by a slightly different stakeholder. This honestly sounds like the sort of thing I'd sit down with the employee, their new employer, and various "Compliance Team" members, and firm up a bit. Sounds good for everyone. We get our bugs fixed, $vendor gets to say "Well we have this thing that was developed in-house for BoshNet, that might solve your problem too, i…

No company with a legal rep is going to be happy with that situation - ever. Who even owns the code the person is working on? Who is responsible when it goes wrong?

That’s the “firming up” bit. You have a contract that deems the code “work for hire” even though the money flow is wonky. Legally the guy is like any 1099.

Re: Twin brothers wipe 96 government databases minutes after being fired

#375
post #325

> [Opexus] said that “the individuals responsible for hiring the twins are no longer employed by Opexus.” Getting close to the classic Monty Python line: "Those responsible for sacking the people who have just been sacked, have been sacked." Jokes aside, stuff like this sucks because I suspect many employers will take from it the most extreme, dehumanizing lessons, e.g.: (a) make firings [edit: including lay-offs] as…

Privileged access should only be temporary in context of break glass with approval. People can go ballistic with core systems for reasons other than firing.

nah give the access to LLM, what can go wrong

Re: Twin brothers wipe 96 government databases minutes after being fired

#376

Earlier quoted context omitted.

>Also pay was relatively decent but much less than what you saw even 5 years ago. IDK, I'm not from the US/Bay-Area, nor does my country have any big-tech/FANG jobs to distort the market for what constitutes a "high wage" in tech, it's all the same. >in the back-half of COVID. Sure, but Covid was only a short blip, a temporary exception, not a baseline norm for wage/job growth, like the years prior which was a longer…

[flagged]

>You should have tried to create a business or fulfill G-ds hopes for you when you had the chance

Says who? What does God have to do with this topic? And why are you censoring the word God?

>but you sold out and took the easy pay check.

I didn't sell anything, nor was the paycheck easy, it was all hard honest work from school to university to put food on the table for my family. Why do I need to justify myself to you?

>Now You’re fucked

I'm doing fine, thanks. Your username is accurate though.

Re: Twin brothers wipe 96 government databases minutes after being fired

#377

I'm just amused how these people were even hired to begin with ? They don't seem to be Americans? How were they even allowed to work on sensitive systems? Why was this even allowed? So many questions. At 4:58 pm, he wiped out a Department of Homeland Security database using the command “DROP DATABASE dhsproddb.” At 4:59 pm, he asked an AI tool, “How do i clear system logs from SQL servers after deleting databases?” H…

They were born in Maryland, and apparently quite skilled (or at least skilled at cheating their way through their studies, if not genuinely technically skilled). https://www.somdnews.com/archive/news/19-year-old-twins-high...

...nobody skilled need to ask AI how to delete stuff

Re: Twin brothers wipe 96 government databases minutes after being fired

#378

Earlier quoted context omitted.

Is this specific to US culture? And what about your work environment makes it such a risk? Where people are laid off here (Norway), they're still employed by law for 3 months. Most companies don't force you to work all that time, but it's pretty common to finish up your tasks, do offboarding etc for a few weeks. Never considered it an issue. Maybe it's a high trust society thing?

>Is this specific to US culture? And what about your work environment makes it such a risk? It's called garden leave, it's popular everywhere, especially if it's a big international company with diverse workforce, sensitive to IP rights, since there's been plenty of cases of people taking company IP on USB drives to the new employer, like that Indian guy who took IP from Valeo to Nvidia and got his home raided by the…

It is not that common in Norway. It has at least been argued in the past that working your notice period is not just an obligation to employer if they want to enforce it, but a right for the employee on the basis that being walked out can affect your reputation by implying possible misconduct exactly because it has generally been uncommon in Norway.

I haven't worked in Norway for a long time, so haven't kept up to date on the current legal position. The typical argument used to be that if there were concerns over IP theft or sabotage, there were other ways of protecting against that - and indeed, insider risk is something companies need to deal with whether or not someone has been fired.

Re: Twin brothers wipe 96 government databases minutes after being fired

#379
post #365

Earlier quoted context omitted.

Murder by computer keyboard: https://www.deseret.com/1997/7/6/19322063/mother-charged-wit... Murder by ethernet cable: https://www.gainesvilletimes.com/news/dead-woman-found-in-pa... Murder by laptop: https://www.riverfronttimes.com/william-lynn-gunter-sentence... Murder by cellphone charger: https://lawandcrime.com/crime/pennsylvania-man-admits-to-str... Murder by desk lamp: https://www.pressdemocrat.com/2009/01/08/…

The fact that you had to find an article from three decades ago for an instance of killing with a keyboard is telling. All the others aren’t exactly that recent and are mostly isolated cases. Meanwhile, on gun related deaths, there are entire Wikipedia pages for it: https://en.wikipedia.org/wiki/List_of_countries_by_firearm-r... https://en.wikipedia.org/wiki/Lists_of_mass_shootings_in_the... There are more mass shoot…

>The fact that you had to find an article from three decades ago for an instance of killing with a keyboard is telling

Yeah, is telling that modern keyboards weight a lot less nowadays, and nobody would use one as a weapon to hit someone else. ;)

The original IBM Model M was 2.3 Kg.

Re: Twin brothers wipe 96 government databases minutes after being fired

#380
post #324

Earlier quoted context omitted.

so he was doing free labor for your company? What's he getting out of that?

https://www.nucalc.com/Story/

> We wanted to release a Windows version as part of Windows 98, but sadly, Microsoft has effective building security.
Post reply on HN