Now imagine how many normie, computer-illiterate federal employees in fairly sensitive roles have had various credentials leaked over the past few years.
imagine holding nominally-technical staff to a higher level of information security practice
DOGE engineer's credentials found in past public leaks from info-stealer malware
141–150 of 180 posts
Re: DOGE engineer's credentials found in past public leaks from info-stealer malware
#142> “At this point it's difficult not to suspect their awful 0pSec is a choice, and that there are specific people ( ahem cough cough the Russians cough ) to whom they're leaking secrets, with incompetence being merely plausible deniability for their true, treasonous agenda,” one critic wrote on Mastodon. Good point.
Hanlon's razor
Hanlon's razor is for a peaceful heart, not for helping you win bets.
Re: DOGE engineer's credentials found in past public leaks from info-stealer malware
#143The article title suggests that this is about his current PC which he is using at the agency. That is totally false.
In fact the story is that at someone point in the past at least in 2013 some credentials of his landed in multiple breaches. Some of my credentials also appear there, this of course means nothing at all about his current account security or the security of the data.
I don't even know what the allegations are. Can you not ever work for a government agency when any account of yours gets compromised? Databreaches aren't that uncommon, presumably many people here have some credentials leaked, do you think these people should be excluded from working jobs in the government?
Re: DOGE engineer's credentials found in past public leaks from info-stealer malware
#144> “At this point it's difficult not to suspect their awful 0pSec is a choice, and that there are specific people ( ahem cough cough the Russians cough ) to whom they're leaking secrets, with incompetence being merely plausible deniability for their true, treasonous agenda,” one critic wrote on Mastodon. Good point.
I imagine it is "all of the above".
Exactly as you describe, and I'm sure for other foreign interests, everyone at DOGE became massive targets for very highly directed nation-state level interest for phishing/malware/compromise.
Re: DOGE engineer's credentials found in past public leaks from info-stealer malware
#145Earlier quoted context omitted.
If the facts support those allegations, then absolutely yes.
> If the facts support those allegations, then absolutely yes See, here's the thing: almost everyone believes this about themselves. There is always enough difference between any given pairing of cases that one can retain their belief in their own fairness. And there is no shortage of partisan coverage that will assist you in believing that the cases are different. And it's not like there is an incentive for holding…
I get the impression that you think every American voter, including me, is partisan and a party loyalist.
I won't bother trying to persuade you otherwise, beyond saying that my voting record and public comments refute that.
Re: DOGE engineer's credentials found in past public leaks from info-stealer malware
#146> “At this point it's difficult not to suspect their awful 0pSec is a choice, and that there are specific people ( ahem cough cough the Russians cough ) to whom they're leaking secrets, with incompetence being merely plausible deniability for their true, treasonous agenda,” one critic wrote on Mastodon. Good point.
Hanlon's razor
Hanlon's razor can be taken advantage of.
Re: DOGE engineer's credentials found in past public leaks from info-stealer malware
#147Earlier quoted context omitted.
I mean if so many of them are scared they can just caucus with the nearly (but not actually) 50% of congress members that are democrats [1]. It's really just republicans are only unified in presenting a unified front so when it comes to actually doing something like electing a speaker [2] [3] the lack of alignment becomes obvious. So they aren't doing anything to counteract trump because they aren't as a whole unifie…
Never interrupt your enemy when he is making a mistake. The democrats don't have the numbers - even if they did, the more ridiculous the whole thing gets the better for them it is.
Siting around and do nothing is going to come back and bite incumbent democrats in a couple years.
Sure they might not lose the general election to a republican but their primary is going to be painful.
Re: DOGE engineer's credentials found in past public leaks from info-stealer malware
#148Earlier quoted context omitted.
>Good point. Is it a good point? How so? Without any proof or arguments, to me that Mastodon comment is just your average brain rot social media conspiracy slop, especially when you examine the profile of the user who wrote it. Is this what journalism has now become? Parroting othe people's unhinged takes off social media, then upvoting it on HN?
Remember that checklist meme from /.? The “You seem to be advocating/here is why it will not work”? Well, you’ve burned a bit of time on HN with the karma you’ve accrued. The non-conspiratorial truth is that if you go back and read HN over a longer period of time, it amounts to people parroting other people’s unhinged takes. Least offensive is tech, which is merely juvenile. But the other topics, especially medical o…
We're being downvoted to oblivion, but notice nobody is saying we are wrong?
Re: DOGE engineer's credentials found in past public leaks from info-stealer malware
#149Earlier quoted context omitted.
[flagged]
charitably, you have fallen for the myth that americans can only engage in politics from one of two sports-fan positions. this is not true and the sooner we stop engaging with this myth, the better. uncharitably, you are pushing a stupid narrative on purpose with ill intent.
"charitably?" "uncharitably?"
Nice ad hom you got there in lieu of an actual argument. lol
Re: DOGE engineer's credentials found in past public leaks from info-stealer malware
#150Earlier quoted context omitted.
>Nobody would care otherwise. As long as it's a work computer, what does it matter if it's his current computer or not? Remember that we're talking about an infostealer, it got his credentials and "that's it" (that's gravely serious).
Wouldn't the assumption be that some percentage of government workers have infostealers on their computers? The track record of these people is not good, pretty much since we've had the internet there have been a steady stream of minor-to-moderate scandals where information gets to places that it shouldn't be. This might just be selection bias because there is a large crowd of angry people looking for things to fling…
If there's bias, I think it comes from people being concerned that there are people coming into various govt. offices, demanding and receiving write/read, non-logging accounts on systems containing sensitive information. The access DOGE staffers are being granted absolutely warrants extra scrutiny of their conduct and security practices.