Live data from Hacker News

Laptop stolen from Pelosi's office during storming of U.S. Capitol, says aide

reuters.com

331–340 of 747 posts

Re: Laptop stolen from Pelosi's office during storming of U.S. Capitol, says aide

#331
post #274

Earlier quoted context omitted.

Maybe stealing it also removed a bunch of foreign operative bugs and keyloggers :) "How can we remove this compromised system from the building without letting on that we know " "just have a 'theft' remove it!"

Why do you think any of your rogue nation club have any interest hacking US politicians , except for, probably, blackmail? US is an open society, and most US politicians speak what they think, or at least you can guess, or even ask them yourself! Those people are like open books. Unlike of your usual cabal totalitarians, who either don't speak at all, or purposefully try to hide their real aims by engaging in double…

Seems safe to assume that the Speaker of the House and her aides would have access to classified national intelligence that might not be open to the world, and would be valuable in it's own right. Things like progress and updates with Covid vaccines, their deployment plans, and lack of security around them would make information like it ripe for the black market and adversary governments in these times.

Re: Laptop stolen from Pelosi's office during storming of U.S. Capitol, says aide

#332

Myself, I would be more worried about any keyloggers, or wifi/cell interception, "man-in-the-middle" devices being left behind...

did you see the photos of the rioters? Do you really believe they are that tech-savy?

One or two hiding in the crowd could be enough. I wouldn’t be surprised if there was at least one spy from some adversarial nation.

From a security perspective, I think they will need to assume everything is potentially compromised and go from there. Remote wipe, scan for microphones and cameras, etc.

Re: Laptop stolen from Pelosi's office during storming of U.S. Capitol, says aide

#333
post #304

Earlier quoted context omitted.

Didn't fit the perp profile police expect (race)

Are you suggesting that the profile for hackers isn't "white male"? Or are you just trying to ham-fist "cops are racist" into the convo?

you missed the part where the cops let them in and took selfies

Re: Laptop stolen from Pelosi's office during storming of U.S. Capitol, says aide

#334

More great news showing the competence level of our elected leadership.

Wait, there were armed people storming the building and police supporting them. You think their first priority was, "Better secure this workstation attached to a projector!" and not, "Dear god I hope I don't get murdered today!"

Re: Laptop stolen from Pelosi's office during storming of U.S. Capitol, says aide

#335
post #210

Earlier quoted context omitted.

These folks don't trust one another with information, so it seems unlikely that they'd pass around a laptop loaded with one anothers presentations.

These folks are also among the most tech-unsavvy people on Earth...

This laptop is probably used by staffers in their 20s and 30s. It's not like Nancy Pelosi is administrating IT security.

Re: Laptop stolen from Pelosi's office during storming of U.S. Capitol, says aide

#336

Myself, I would be more worried about any keyloggers, or wifi/cell interception, "man-in-the-middle" devices being left behind...

While not congress, so I can't say for sure, I have been around government and other enterprise systems. Some measures they had in place: - Disabled USB Ports (except whitelisted peripherals) - User accounts don't have permission to install anything at all - If you plug a deceive with a different mac address than expected into an ethernet port the port locks down until a sysadmin verifies it and manually unlocks it -…

> If you plug a deceive with a different mac address than expected into an ethernet port the port locks down until a sysadmin verifies it and manually unlocks it

Reckon they'd immediately block this laptop's MAC address after it gets reported stolen? If not, that's reason enough to steal it - clone the MAC address and plug in your own device which is now whitelisted. Of course this isn't enough on its own and you likely need some compromised credentials too.

Re: Laptop stolen from Pelosi's office during storming of U.S. Capitol, says aide

#337

> belonged to a conference room and was used for presentations Yikes. My first though was - oh this should be no big deal chances are there are good policies in place for laptops that go home with people. Then I realized it is a shared/central machine which means it probably has the most effed up and relaxed security in the fleet, post-it notes with passwords taped to the palm rests, and god knows what else. IT depar…

I worked on a barely do-not-distribute. Someone's spouse took a project member's laptop as hostage for alimony. Within 45 minutes of discovery and a phone call to the army equivalent of the FBI, agents were at the spouse's work and home searching for the laptop. Lucky for the spouse they thought it was the personal laptop (it was not marked) so they weren't prosecuted. This laptop could be much worse, or just fine.

What is a “barely do-not-distribute?”

Re: Laptop stolen from Pelosi's office during storming of U.S. Capitol, says aide

#338
post #300

How was every person leaving the building not searched by police as a condition of exit? The kettling and taking of details of (even peaceful) protesters in the UK is pretty standard now (I don't like it, but it is what seems to happen) - so why did they just let these people leave unchecked?

It was also pretty standard for the Black Lives Matter protests in DC earlier this year.

Re: Laptop stolen from Pelosi's office during storming of U.S. Capitol, says aide

#339

Earlier quoted context omitted.

I believe this activity now falls under the purview of CISA. I read yesterday that all computers issued for Congressional staffers after 2017 have full disk encryption enabled by default.

So all laptops they were issued before 2017 didn't have full disk encryption. Do you hear that? That's the sound of me face-palming.

No, it doesn't mean that. It's a possibility, but it's not what the comment above says. From this date X is enforced doesn't mean that X didn't happen before.

It could also mean a change in policy which makes official what was already happening.

Re: Laptop stolen from Pelosi's office during storming of U.S. Capitol, says aide

#340
post #82

Earlier quoted context omitted.

Seems like it ought to be possible to have both, to some degree. I don't want the capitol to be a fortress, but they need to prevent stuff like this. I mean... the US spends massive amounts of money on the police and military. I think it should be kind of like a non-Newtonian fluid. Walk in slowly and peacefully and it's ok. Try and punch it, it solidifies quickly.

> I don't want the capitol to be a fortress, but they need to prevent stuff like this. And they would have, had the Trump Administration not denied the D.C Mayor's request the day before for the D.C. National Guard to be deployed. The Administration also delayed approval of requests by Virginia and Maryland to send Guard units to the Capitol in response to urgent calls for aid from Congressional leaders when it becam…

They (the people inciting it) were literally dancing and having a party and watching the start of the chaos on livestream while it went down: https://www.youtube.com/watch?v=mZQDgBSSYjI
Post reply on HN