News for hackers. Stuff that matters.
Re:12 Red Flags in Clinton’s Email Setup by OliverJones on Friday June 10, 2016 @07:02AM (#11875507)
Interesting.

Many of the points made by this author relate to rigid government procurement rules: three bids, lowest bidder, hard walls between buyer and seller. The violations for which Mr. Pagliano has received immunity seem to be those sorts of things. The overhead of government rules creates both high costs and long delays. These rules are intended to defend the treasury against terabuck and gigabuck scams. But the server in question cost kilobucks at most, and was paid for with non-governmental funds.

The Feds are famous for obtaining convictions by twisting the words of people they interview to construe them as lies. Witness Scooter Libby of the VPOTUS's office, who was convicted for perjury -- lying to investigators -- rather than for concealing the truth about the Iraq regime's armaments.

The rules of evidence mean, as we all know, that anything we say can be used against us. Less well understood is that NOTHING we say in interviews with police can be used in our favor in court -- it's considered hearsay. If the federal police were interviewing you, your safest course of action would be to say nothing. That's what Mr. Pagliano is doing, according to this author.

One point in the article refers to the privacy and integrity of information on the server. Yes, a private server is vulnerable to intrusion and to advanced persistent threats of various stripes: of course. SO ARE GOVERNMENT SERVERS, notoriously. Secretary Clinton never said this, but there's a possibility she used non-governmental email because she didn't want her correspondence to end up on Wikileaks.

The server setup should have been behind an actively monitored firewall. I've never seen any description of this in the press. If the server and its file systems were vulnerable, that's a problem. But, still, we have to ask "compared to what?" Compared to the General Services Administration HR systems breach, clintonemail.com may have been relatively secure. Compared to the State Department archive that came out in Wikileaks, it WAS relatively secure.

Government political appointees are agents of change. Information tech is an area where large-scale institutional change is absolutely necessary. Why shouldn't some of the people pushing that change be political appointees?

Flap. Flap. Flap.

Re:12 Red Flags in Clinton’s Email Setup by CameronBanga on Friday June 10, 2016 @09:34AM (#11876207)
If her intentions were pure, then she should have worked through the system to drive change, not sidestepped it in an effort to avoid her duties as a civil servant appointed to represent the citizens of our country.

She's never once said she did this to increase her security. If that was her motivation, why hasn't it been her defense of the act this whole time?

Maybe I'm just a tinfoil, but it seems much more likely that this was done in order to prevent information from legal public record keeping, than it was because she was an OpSec and ComSec wizard.

Re:12 Red Flags in Clinton’s Email Setup by cmdrfred on Friday June 10, 2016 @10:09AM (#11876429)
If I decide that my home-made contraption (email server) is more safe than a factory manufactured car seat and then drive your children around with it. Would that be acceptable? Furthermore what if I did so without your knowledge and there are explicit rules preventing me from doing so?
Re:12 Red Flags in Clinton’s Email Setup by fhood on Friday June 10, 2016 @10:41AM (#11876658)
ummm did you really intend to say contraception?
Re:12 Red Flags in Clinton’s Email Setup by cmdrfred on Friday June 10, 2016 @10:48AM (#11876697)
Auto correct, thanks.
Re:12 Red Flags in Clinton’s Email Setup by DanielBMarkham on Friday June 10, 2016 @07:18AM (#11875566)
There are some systemic issues at play -- issues not related to this particular person or incident -- that you raise.

You say that the best course of action is not to say anything. If this is true, and I believe it is, what would be the point of having an Inspector General? I think that working in a government agency would come with some sort of requirement that you cooperate with those people in the agency who are there to make it better. If not? What are you there for?

If the server and its file systems were vulnerable, that's a problem. But, still, we have to ask "compared to what?"

I believe now you are saying that each political person (?) who joins an agency should make their own private decision about network security and take action appropriately. Perhaps this is true, but only in extreme cases? I'm not sure. I don't think this is anywhere near an extreme case.

Political appointees should be agents of change, yes. I think we agree on that. But to be an agent of change, it requires you to, well, change something. In every case I've ever seen where a large organization changes, some people were let go, disciplined, demoted. It's just a rule of large numbers of people that the older and worse the org is, the more of a shakeup there has to be.

Federal agencies don't run like that. You could take any of a dozen different scandals over the last couple of decades -- for the most part, nobody got fired.

So what really happens is that the higher ups in an agency really run it, the political folks are there to provide political cover, and a collusion forms between lifelong bureaucrats and the political appointees. As a member of one federal agency told me, the first rule is that we never appear in the press. Political systems exist for political reasons.

I'm not sure what the correct course of action here should have been. I know, however, that it's extremely difficult to set an example for employees if you disregard the rules you don't like. I also know that employees have a lot more say in what an organization is like than management. This is not a good situation for any organization to be in.

Re:12 Red Flags in Clinton’s Email Setup by ap3 on Friday June 10, 2016 @11:22AM (#11876984)
Why did she delete emails in violation of the FOIA?
Re:12 Red Flags in Clinton’s Email Setup by extra88 on Friday June 10, 2016 @12:38PM (#11877633)
As a personal system, FOIA doesn't apply, that's the complaint about using a personal system at all, yes? She only deleted emails that were personal and not related to her work as Secretary, the problem is she decided what was personal or not as opposed to an impartial third party.
Re:12 Red Flags in Clinton’s Email Setup by cmdrfred on Friday June 10, 2016 @02:22PM (#11878645)
Officer give me that bag and turn your back, I'll throw away the drugs that aren't drugs.
Re:12 Red Flags in Clinton’s Email Setup by extra88 on Friday June 10, 2016 @02:35PM (#11878773)
Deleting email to hide something nefarious is plausible but so is legitimately protecting her privacy and that of those she communicated with. Politically, it was not smart to delete because it created an opportunity for her enemies to attack her integrity. Then again, her critics will never be satisfied so fuck 'em.
Re:12 Red Flags in Clinton’s Email Setup by cmdrfred on Friday June 10, 2016 @02:45PM (#11878862)
She wouldn't have to 'protect her privacy' if she followed procedure in the first place. The workplace communications of public officials are considered public records, she knew this, she was informed of this, if you wish to mingle personal communications with those do so at your own peril. She is 100% wrong on this.
Re:12 Red Flags in Clinton’s Email Setup by extra88 on Friday June 10, 2016 @02:59PM (#11878985)
Yes, she was wrong to use a personal account even though some previous Secretaries of State did. I also lean towards it being wrong for her to be denied the same communication setup made for Obama, I don't know enough of the details to be sure.

She made some bad choices around this but in the grand scheme of things, it isn't that big a deal to me, certainly not to the point of disqualifying her to be President. I would be very skeptical of anyone claiming that they would have voted for her if not for this.

Re:12 Red Flags in Clinton’s Email Setup by cmdrfred on Friday June 10, 2016 @03:11PM (#11879116)
In other words:

> Yes, she was wrong to use a personal account even though some previous Secretaries of State did

"Officer, I've witnessed other people using drugs so it's ok for me as well"

> I also lean towards it being wrong for her to be denied the same communication setup made for Obama

"Officer, the CEO is allowed to use the private jet, so I'm allowed to steal it"

> She made some bad choices around this but in the grand scheme of things, it isn't that big a deal to me

"I want someone who makes poor decisions making decisions for me"

Re:12 Red Flags in Clinton’s Email Setup by fhood on Friday June 10, 2016 @10:52AM (#11876735)
Please take this with a grain of salt. The author has spent a good deal of her time lately denouncing Hillary and endorsing Trump, which may imply bias. I make no claims about the content though, as I did not finish reading it due to the authors incessant use of sarcasm and open ended questions. I am sorry but a non-biased analytical article does not end paragraphs with "The logic of an innocent person at work, no doubt."

I am a little disappointed. I generally hold the HN community in the high esteem, and don't expect to see content like this. I would love to read up on this topic in an article without an overt agenda though.

Re:12 Red Flags in Clinton’s Email Setup by nkurz on Friday June 10, 2016 @12:49PM (#11877722)
I would love to read up on this topic in an article without an overt agenda though.

I would highly suggest that you (and others) should read the Office of the Inspector General's recent report itself: https://oig.state.gov/system/files/esp-16-03.pdf

Don't read just the out-of-context quotes that someone else has chosen --- read them in context so they can be discussed in context. Maybe a mod could even change the URL to this?

Re:12 Red Flags in Clinton’s Email Setup by squizzel on Friday June 10, 2016 @09:50AM (#11876298)
Why does this guy get immunity? If they aren't going to press charges against her then what's the end game?
Re:12 Red Flags in Clinton’s Email Setup by jrockway on Friday June 10, 2016 @06:59AM (#11875501)
I was hoping this would be a technical analysis of the email infrastructure or something. But it's just a general rehash of some vague facts about how Clinton is hiding something from us all and must immediately be eliminated so the One True Bernie can legalize Reddit or whatever.