Live data from Hacker News

Dutch journalist gatecrashes EU defence video conference

bbc.co.uk

11–20 of 94 posts

Re: Dutch journalist gatecrashes EU defence video conference

#11
post #7

Not sure how confidential that conference was but I'd imagine these use at least a 2FA dongle to authenticate. This is surprising.

You'd imagine, but this conference software apparently only requires a pin that's visible as a GET parameter in the URL. I don't think you can blame the users for posting a screen shot.

Re: Dutch journalist gatecrashes EU defence video conference

#13
post #5
post #3

The conference chair couldn't help giggling. What was it he said? "Hey you better hang up before the police arrives"?

It's very serious stuff, it's not funny. Someone leaves their doors unlocked it doesn't mean you should be entering. More importantly, how on bloody earth are defence discussions happening in a situation that can so easily be defeated. The officials themselves are to blame for blatantly terrible security protocols.

Someone leaves door unlocked means you must enter one step and scream out loud before criminals come and trigger a global thermonuclear war. That’s basic ethics for software engineers.

Re: Dutch journalist gatecrashes EU defence video conference

#14
post #5
post #3

The conference chair couldn't help giggling. What was it he said? "Hey you better hang up before the police arrives"?

It's very serious stuff, it's not funny. Someone leaves their doors unlocked it doesn't mean you should be entering. More importantly, how on bloody earth are defence discussions happening in a situation that can so easily be defeated. The officials themselves are to blame for blatantly terrible security protocols.

> Someone leaves their doors unlocked it doesn't mean you should be entering.

Yea, well, it's a useful function of journalism to poke their head in open doors and say "you're doing _WHAT_ in here?!"

I slot this in alongside the time US nuclear missile officers were found asleep, with the door open waiting for takeout - simultaneously seriously disturbing and quite funny.

https://www.cnn.com/2013/10/23/us/air-force-nuclear-silo-doo...

Re: Dutch journalist gatecrashes EU defence video conference

#15
post #6

I wonder, I he was sitting in a suit and in a room with some flags behind him (not in his shirt in an ordinary office) if anyone would have even noticed he was intruding on their conference. They laugh it off now because he doesn't fit in.

Probably if he didn't turn on his camera then nobody would've noticed at all.

Re: Dutch journalist gatecrashes EU defence video conference

#17
post #7

Not sure how confidential that conference was but I'd imagine these use at least a 2FA dongle to authenticate. This is surprising.

Had the laptop had a 15 inch screen it would likely have shown the entire URL including the full PIN code. Also visible in the screen are bookmarks to Netflix and what looks like barber shop music. Also a Gmail tab open. Did now know defense ministers were using Gmail on official hardware...

Re: Dutch journalist gatecrashes EU defence video conference

#18
post #11
post #7

Not sure how confidential that conference was but I'd imagine these use at least a 2FA dongle to authenticate. This is surprising.

You'd imagine, but this conference software apparently only requires a pin that's visible as a GET parameter in the URL. I don't think you can blame the users for posting a screen shot.

In this case, you can blame the user. They are the minister of defense, they can (and should) request an audit for the conference system they use. Personally, I think that they didn't want a more secure system like 2FA because it's not convenient for them.

Re: Dutch journalist gatecrashes EU defence video conference

#20

They're laughing right now, but really these kinds of mistakes are telling how weak the security of various agencies are.

EU militaries are a joke tbf. Apart from France and (formerly) the UK, most of them can't do shit except sell firearms to Arab despots. I think someone from Romania here mentioned that they trust the US to protect them more than they trust France or Germany.
Post reply on HN