Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

DOGE worker’s code supports NLRB whistleblower

krebsonsecurity.com

Post reply on HN
Print view View original

271–280 of 586 posts

Re: DOGE worker’s code supports NLRB whistleblower

#271

Post by orochimaaru »

stephenitis wrote: post #266
rtkwe wrote: post #215

Earlier quoted context omitted.

Even worse when you know more of the whistleblower's story which is that ~15 minutes after one of DOGE's accounts were made there was an attempted login with the correct password from Russia. Not many explanations for that that look good for DOGE...

Citation?

Not parent but it’s here - https://krebsonsecurity.com/2025/04/whistleblower-doge-sipho...

DOGE is a complete clusterfuck. Fwiw I think there is hard to spot fraud in the govt that should be looked at (eg price inflation at the pentagon, VA, Medicaid/Medicare, SS). They should have done the hard work of uncovering that. Instead they just went for clickbait headlines.

Re: DOGE worker’s code supports NLRB whistleblower

#272

Post by kilna »

dfedbeef wrote: post #111

The CEO of Tesla and Space-X; a self-proclaimed high IQ individual, an alleged programmer, has apparently hired a straight-up script kiddie to their elite delta force of technical government downsizers.

Um, as best I can tell from similar articles, they're all script kiddies.

Re: DOGE worker’s code supports NLRB whistleblower

#273

Post by largbae »

twalkz wrote: post #8

> According to a whistleblower complaint filed last week by Daniel J. Berulis, a 38-year-old security architect at the NLRB, officials from DOGE met with NLRB leaders on March 3 and demanded the creation of several all-powerful “tenant admin” accounts that were to be exempted from network logging activity that would otherwise keep a detailed record of all actions taken by those accounts. Feels like a pretty good Occa…

I am sure they demanded maximum access, but the logging activity phrasing sounds a little bit like spin...

I think if I wanted to describe an account with access to perform "sudo -s" as negatively as possible, I would say "an all-powerful admin account that is exempt from logging activity that would otherwise keep a detailed record of all actions taken by those accounts."

Re: DOGE worker’s code supports NLRB whistleblower

#274

Post by blooalien »

FredPret wrote: post #35
vkou wrote: post #27

Earlier quoted context omitted.

There isn't one. Anything musk's dogs claim to find cannot be taken at face value because of this. Because there is no audit, and no evidence that they can offer that they didn't doctor their findings. The next time they claim that a 170-year old person is receiving SS checks, they have no way to prove that they didn't subtract a century from that person's birthdate in some table.

Ah, this is something I haven't thought of before. This might not actually be spying, but instead just an attempt to plant fake results.

> This might not actually be spying, but instead just an attempt to plant fake results.

That statement might be (slightly) more believable had there not been access attempts from Russian IP addresses using valid (and recently created) DOGE login credentials so very shortly thereafter.

Re: DOGE worker’s code supports NLRB whistleblower

#275

Post by matwood »

jppope wrote: post #198
dfedbeef wrote: post #111

The CEO of Tesla and Space-X; a self-proclaimed high IQ individual, an alleged programmer, has apparently hired a straight-up script kiddie to their elite delta force of technical government downsizers.

I agree with the script kiddies comment- which is basically what the reporting has shown... but in a way isn't that part of the point? That they can save billions of dollars just by having a couple of relatively normal comp sci kids (who can't even rent a car) review the most basic financial information of our government departments. These guys aren't supposed to be "delta force" they are supposed to be the interns.…

> I would really like my tax money used more efficiently

Except by most accounts so far it was being used efficiently by the federal workforce. This whole debacle will end up costing the US tax payer more money. See cutting the IRS or USAID which will probably lead the US to bailing out farmers. And if they privatize, then it'll be even more expensive.

Re: DOGE worker’s code supports NLRB whistleblower

#276

Post by geraldwhen »

satanfirst wrote: post #188
magicalist wrote: post #157

Earlier quoted context omitted.

What hostility? I was asking if they were really confused or if they were asking rhetorically. If they were actually confused, the answer is yes. edit: oh, I guess "and Donald Trump is president until the end of his term" could come off as patronizing. I meant it just as a statement in a chain of reasoning

Recent untested precedent exists of blanket pardons needed for unqualified crimes and they are so far likely to be challenged on a different technicality (first?).. Asking what people think is not confused unless you are being uncharitable or know a lot of actual precedents that we all should know from another era.

I am fully unaware of any challenges to recent pardons. I don’t follow politics much and just knew about the blanket pardon that I assume all presidents will use going forward unless it’s challenged in court.

Re: DOGE worker’s code supports NLRB whistleblower

#278

Post by bdangubic »

frumplestlatz wrote: post #249
bdangubic wrote: post #230

Earlier quoted context omitted.

not sure if this is a serious question…? what would it accomplish if you were the whistleblower? if it was me, my family would be on the first flight out of the country

It would convince me that whoever I was whistleblowing on was so remarkably stupid as to engage in a felonious criminal conspiracy while leaving behind physical evidence thereof. I hope that the threatening note and photos have been turned over to the police, where they can be analyzed for fingerprints, printer microdots, et al, and the police can canvas the neighborhood for security camera footage. As a tactical mov…

our HIGHEST-level government people are texting each other (along with whoever else happens to be in their contacts) war plans so you know, stupid is as stupid does :)

Re: DOGE worker’s code supports NLRB whistleblower

#279

Post by neilv »

> Berulis said he went public after higher-ups at the agency told him not to report the matter to the US-CERT, as they’d previously agreed.

If the allegation is true, what would be the motivation of the higher-ups to keep this secret from US-CERT?

It appears to be a severe compromise, and the context suggests that much of the rest of the federal government is imminently vulnerable to the same tactics by the same threat actor.

Where the higher-ups reporting the security crisis through better channels?

Or were they trying to keep it quiet entirely, so might be complicit in something bad?

Re: DOGE worker’s code supports NLRB whistleblower

#280

Post by superconduct123 »

mythrowaway49 wrote: post #263

this part of the whistleblower complaint seem way worse: " On or about March 11, 2025, NxGen metrics indicated abnormal usage at points the prior week. I saw way above baseline response times, and resource utilization showed increased network output above anywhere it had been historically – as far back as I could look. I noted that this lined up closely with the data out event. I also notice increased logins blocked…

Wow that's insane
Post reply on HN