Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

DOGE worker’s code supports NLRB whistleblower

krebsonsecurity.com

Post reply on HN
Print view View original

181–190 of 586 posts

Re: DOGE worker’s code supports NLRB whistleblower

#181

Post by II2II »

XorNot wrote: post #84
tw04 wrote: post #70

Earlier quoted context omitted.

Root on Linux isn’t exempt from logging. I also don’t know any enterprise that allows admin accounts to bypass logging. There is no legitimate justification for this request.

root on Linux can just kill the log forwarder and erase the relevant logs, or refill them with junk.

That is a very serious design flaw, but I also believe it is a flaw that is addressed by SELinux. (Perhaps someone with a knowledge of SELinux can offer some input here.) That said, I'm not sure how widespread the use of SELinux is and doubt that it would help in this case since the people in question have or can gain physical access.

Re: DOGE worker’s code supports NLRB whistleblower

#182

Post by frumplestlatz »

bdangubic wrote: post #169
frumplestlatz wrote: post #167

Earlier quoted context omitted.

It would be astonishingly stupid to threaten a whistleblower in such an amateurish manner when you’re backed by the party in power and have the full and official apparatus of the state at your disposal.

astonishingly stupid sounds about right for the people leading apparatus of the state :)

What could they possibly hope to accomplish with a threatening note and drone photos other than to provide fodder for his complaint?

Why would drone photos even be necessary when you’ve already demonstrated that you know where they live?

What possible purpose does such a threat serve?

Re: DOGE worker’s code supports NLRB whistleblower

#183

Post by mandevil »

nop_slide wrote: post #46

I find the following bizarre. Ignoring who this marko guy is, why would a random person post such a "take down" of the repo? I have never randomly passed by a repo and wanted to just dunk on it. Also this critique reeks of being AI generated. > On February 6, someone posted a lengthy and detailed critique of Elez’s code on the GitHub “issues” page for async-ip-rotator, calling it “insecure, unscalable and a fundament…

On February 6th, Marko Elez announced his resignation from DOGE after the WSJ discovered many racist posts he made in 2024 (which they published on the 5th). That likely made someone really interested in what his actual coding skill levels were, and they took a look at a repo he had made.

Musk did a "poll" on X that voted for rehiring Elez to DOGE, by February 20th Elez had a US Government email address again, and on Febrary 21st he was reported as working for DOGE at the Social Security Administration.

Re: DOGE worker’s code supports NLRB whistleblower

#184

Post by dehrmann »

kazinator wrote: post #29

I almost can't make heads or tails of out of this scatterbrained word salad. Let's start with this: > Berulis said the new DOGE accounts had unrestricted permission to read, copy, and alter information contained in NLRB databases. > Berulis said he discovered one of the DOGE accounts had downloaded three external code libraries from GitHub What exactly does that mean? NLRB database accounts are GitHub accounts? (Sure…

The only interesting part of 2 is it looks like Doge wanted all the data. The technical details of how they scraped it mostly doesn't matter.

Re: DOGE worker’s code supports NLRB whistleblower

#185

Post by whalesalad »

dijksterhuis wrote: post #114
progbits wrote: post #45

> Ge0rg3’s code is “open source,” in that anyone can copy it and reuse it non-commercially. As it happens, there is a newer version of this project that was derived or “forked” from Ge0rg3’s code — called “async-ip-rotator” — and it was committed to GitHub in January 2025 by DOGE captain Marko Elez. Original code: https://github.com/Ge0rg3/requests-ip-rotator Forked: https://github.com/markoelez/async-ip-rotator Code…

FYI the Fork got hidden/deleted in the last minute or so -- did anyone manage to clone it before it disappeared?

I did. It's essentially just a single .py file: https://gist.github.com/whalesalad/06804fd734efe6bd2e0c84906...

Re: DOGE worker’s code supports NLRB whistleblower

#187

Post by ein0p »

dekhn wrote: post #174
ein0p wrote: post #155

Earlier quoted context omitted.

[flagged]

Without making any statement on whether I believe DOGE is being seditious, it's not hard to interpret their underlying intent as being wholly compatible with the definition you pasted. DOGE intends to hurt the government in ways that cause people to trust it less, with the goal of eliminating large parts of the government.

[flagged]

Re: DOGE worker’s code supports NLRB whistleblower

#188

Post by satanfirst »

magicalist wrote: post #157
pests wrote: post #127

Earlier quoted context omitted.

Is the hostility really required? The comment was about last-day pardons, not pardons in general. Its a topic many presidents have gotten flak or attention for.

What hostility? I was asking if they were really confused or if they were asking rhetorically. If they were actually confused, the answer is yes. edit: oh, I guess "and Donald Trump is president until the end of his term" could come off as patronizing. I meant it just as a statement in a chain of reasoning

Recent untested precedent exists of blanket pardons needed for unqualified crimes and they are so far likely to be challenged on a different technicality (first?).. Asking what people think is not confused unless you are being uncharitable or know a lot of actual precedents that we all should know from another era.

Re: DOGE worker’s code supports NLRB whistleblower

#189

Post by romellem »

dboreham wrote: post #64
mikeyouse wrote: post #53

Earlier quoted context omitted.

I fully believe there's a stack of pardons in Trump's drawer for everyone involved in this debacle. I can't imagine breaking so many laws all over the government if you thought you'd ever have to face consequences. The alternative to pardons in preventing the next congress & administration from cleaning this up is too dire to really contemplate.

Time to remove the pardon powder. Has it achieved anything productive in the last 100 years?

To remove the presidential pardon power, you'd need to [amend the Constitution][1]. Getting [two thirds of both Houses of Congress][2] to pass any amendment in the foreseeable future seems highly unlikely if not downright inconceivable.

[1]: https://constitution.congress.gov/browse/essay/artII-S2-C1-3...

[2]: https://constitution.congress.gov/browse/essay/artV-1/ALDE_0...

Re: DOGE worker’s code supports NLRB whistleblower

#190

Post by alright2565 »

whalesalad wrote: post #185
dijksterhuis wrote: post #114

Earlier quoted context omitted.

FYI the Fork got hidden/deleted in the last minute or so -- did anyone manage to clone it before it disappeared?

I did. It's essentially just a single .py file: https://gist.github.com/whalesalad/06804fd734efe6bd2e0c84906...

    x_forwarded_for = headers.get("X-Forwarded-For")
    if x_forwarded_for is None:
        x_forwarded_for = ipaddress.IPv4Address._string_from_ip_int(
            randint(0, MAX_IPV4)
        )
lol
Post reply on HN