logoalt Hacker News

tantalortoday at 3:40 PM2 repliesview on HN

> secure environment

> copied to a flashdrive

Both of these cannot be true. A secure environment does not allow trivial data exfiltration over USB.


Replies

HillRattoday at 3:46 PM

Contemporaneous reporting was that DOGE people demanded root-level access across multiple systems (disallowed by federal policy, so political appointees had to demand the access) and without background checks or onboarding, after which they extracted protected data and shoved it in some S3 buckets. Just blew a hole right through the entire federal data protection model; you can't plan for "the President orders everyone to ignore all privacy and security controls" as a threat model.

show 1 reply
vntoktoday at 3:44 PM

Maybe it wasn't trivial?