News for hackers. Stuff that matters.
Re:Infosec implications of the US Capitol physical breach by btmiller on Thursday January 07, 2021 @12:02AM (#25667467)
In terms of physical intrusion, a tremendous amount of security theater was exposed today. Quite astonishing how easily people were able to gain access.
Re:Infosec implications of the US Capitol physical breach by bmitc on Thursday January 07, 2021 @12:33AM (#25667613)
I was really disappointed and disheartened. It showed great weakness.

I recently watched the movie Olympus Has Fallen. We were just wanting a dumb action movie to pass the time. The North Korean terrorists just basically walked in and took the White House. We were like, how stupid is that, no way that could really happen. And here today, we literally saw it happen. People took over one of our nation’s most important buildings with extremely high level people in it without a sweat, without resistance, and basically without repercussions. I remarked today to my family that I bet Russians and North Koreans were watching going, wait, we can just walk in? Of course they couldn’t because they aren’t white “Americans”. And all of this really paints a nasty picture of what happened today. It was a soup of treason, violence, white privilege, disgrace, sadness, and weakness.

I mean, a bomb on the grounds was found and detonated by a bomb squad and people were still allowed to stay on the premises. I really could not believe how they could just take over the place. I even saw a video where police actually just opened the gates for them.

Re:Infosec implications of the US Capitol physical breach by baybal2 on Thursday January 07, 2021 @01:35AM (#25667948)
> The North Korean terrorists just basically walked in and took the White House. We were like, no way that could really happen. And here today, we literally saw it happen.

The total strength of government building security in DC is around 2 battaglions.

You think there is nobody who can bring 2000-3000 people to the rifle, and numerically overwhelm them? And it seems that not insubstantial numbers of DC security personnel did simply desert their posts.

Commando paratroopers with heavy weapons, and moreover armour will leave no chances for a regular army unit, let alone civilian police.

Re:Infosec implications of the US Capitol physical breach by ben_w on Thursday January 07, 2021 @01:49AM (#25668003)
I expect the security personnel to be trained and the mob to not be trained.

I expect (given the consequences of allowing them in and prior use of lethal force against demonstrations by Americans in America) the security personnel to be ready, willing, and able to use lethal force to keep armed protestors out, even if the doors were open.

I expect the doors to be strong enough to withstand anything short of an RPG.

I do not expect security personnel to desert their posts in their own capital city.

Re:Infosec implications of the US Capitol physical breach by stef25 on Thursday January 07, 2021 @03:30AM (#25668660)
> I do not expect security personnel to desert their posts in their own capital city.

Surely that was out of concern for their own safety (to retreat can be a valid strategy) and / or not willing to open fire on US civilians in such a symbolic place.

Re:Infosec implications of the US Capitol physical breach by pjc50 on Thursday January 07, 2021 @04:08AM (#25668909)
https://en.wikipedia.org/wiki/2013_United_States_Capitol_sho... ; I guess if there's just one civilian the symbolism of shooting them is fine.
Re:Infosec implications of the US Capitol physical breach by curryst on Thursday January 07, 2021 @11:09AM (#25672642)
I hadn't heard about that before. In fairness, she did hit several officers with her car, and was actively attempting to run one over when she was shot.

It's still a shame. I do wonder if there's something else they could have done. I don't know anything about how hard it is to stop a car.

Re:Infosec implications of the US Capitol physical breach by anigbrowl on Thursday January 07, 2021 @02:24PM (#25675928)
I expect the security personnel to be trained and the mob to not be trained.

The latter assumption is a serious mistake. Sure, the mob is not as well trained as professionals, but when you consider the number of vets with some military experience, the fairly large numbers of militia organizations which provide amateur levels of training in both virtual and real contexts, and the high availability of training materials (military manuals etc), it's smart to assume that any given mob will contain some people who know what they're doing and are able to direct others.

Re:Infosec implications of the US Capitol physical breach by baybal2 on Thursday January 07, 2021 @03:34PM (#25677060)
If they would've used their military experience, they would've not came unarmed.
Re:Infosec implications of the US Capitol physical breach by anigbrowl on Thursday January 07, 2021 @05:02PM (#25678207)
Not all of them did: https://twitter.com/keith_rosson/status/1346993989057093634

But DC has rather strict laws about firearms, so it was rational to rely on a swarming approach and then try to exploit the gains from that tactic. While the attempt to take over the capitol failed insofar as Congress reconvened to finish the process of counting electoral college votes, and many of the participants have been or are about to be arrested, the far right has scored an outstanding propaganda victory (complete with photogenic martyrs) at little real cost. I would say 2021 has got off to a spectacular start for them.

Re:Infosec implications of the US Capitol physical breach by baybal2 on Thursday January 07, 2021 @05:37PM (#25678645)
Cannot agree with you on firearms point, but more or less on everything else.

https://mobile.twitter.com/JoshuaPotash/status/1347277542588...

If your aim is to stage a putsch for real, you wouldn't be bothered by some gun laws, you would've gone all in.

Re:Infosec implications of the US Capitol physical breach by anigbrowl on Friday January 08, 2021 @01:02PM (#25687612)
The thing is, you don't want to get shut down before you start. There were in fact a few arrests for firearms possession earlier that morning, before the rally near the White House had convened. Once attention had shifted to the Capitol, I imagine there was much less police surveillance on the surrounding streets (until the National Guard were eventually deployed).

But you make a good point; perhaps the plotters over-relied on shock value and ended up half-assing it, or perhaps there was no more plan other than stirring up disorder and hoping to capitalize on an emergency situation.

I'm pessimistic about the long-term implications; the far right gave up on the idea of a political solution some time ago and the less far right is now about ready to join them.

Re:Infosec implications of the US Capitol physical breach by baybal2 on Thursday January 07, 2021 @02:34AM (#25668275)
> I do not expect security personnel to desert their posts in their own capital city.

To me, it felt they were quite demoralised.

Re:Infosec implications of the US Capitol physical breach by Solocomplex on Thursday January 07, 2021 @01:22PM (#25675042)
Your grammar is very strange. Where are you from?
Re:Infosec implications of the US Capitol physical breach by baybal2 on Thursday January 07, 2021 @03:11PM (#25676674)
From a place too terrible to name
Re:Infosec implications of the US Capitol physical breach by clintonb on Thursday January 07, 2021 @12:45AM (#25667669)
The bomb was found at RNC headquarters, a few blocks away from the Capitol, not the Capitol itself.
Re:Infosec implications of the US Capitol physical breach by bmitc on Thursday January 07, 2021 @12:57AM (#25667719)
[An article I read said] There was an additional bomb also found on the Capitol grounds.

Obviously this is a developing situation. And the details don’t actually matter to my point. Clear and present evidence to commit acts of domestic terrorism was available, and people were still allowed to loiter and vandalize as they pleased.

Re:Infosec implications of the US Capitol physical breach by xienze on Thursday January 07, 2021 @01:01AM (#25667746)
Re:Infosec implications of the US Capitol physical breach by Shared404 on Thursday January 07, 2021 @01:08AM (#25667786)
Not a bomb per se, but there was someone near the Capitol with materials for Molotov cocktails.
Re:Infosec implications of the US Capitol physical breach by pvfffghhr on Thursday January 07, 2021 @02:18AM (#25668170)
Bottles and fuel? Isn’t the whole city full of people in possession of such materials? The whole country, even?
Re:Infosec implications of the US Capitol physical breach by wtallis on Thursday January 07, 2021 @03:11AM (#25668554)
Those may be common items to have in cabinets at home. They're not common items to take along for a walk in the park, or a tour of a monument.
Re:Infosec implications of the US Capitol physical breach by peteradio on Thursday January 07, 2021 @11:26AM (#25673031)
This isn't a game of capture the flag...
Re:Infosec implications of the US Capitol physical breach by anigbrowl on Thursday January 07, 2021 @02:28PM (#25675997)
Honestly, it kind of is. Regardless of the legal and administrative elaborations, the psychological impact of whose flag is flying and who has custody of it are at least equally important.
Re:Infosec implications of the US Capitol physical breach by mistermann on Thursday January 07, 2021 @02:48PM (#25676286)
> It showed great weakness.

It did show great weakness, but be careful drawing conclusions from this observation, such as a presumption of actual weakness.

As a commenter below notes:

https://news.ycombinator.com/reply?id=25667558&goto=item%3Fi...

>> Per the capitol police website they have 2,600 officers and a budget of $460 million. It honestly just ... didn't look like they were trying very hard. They managed to arrest what, 14 people? Compare that to the BLM protests on the west coast where unmarked vans of feds were literally rolling up and black bagging people off the street. USCP is charged with protecting Congress, and I think members of congress should be thinking hard about whether the police were complicit in what happened today.

--

> We were just wanting a dumb action movie to pass the time. The North Korean terrorists just basically walked in and took the White House. We were like, how stupid is that, no way that could really happen. And here today, we literally saw it happen.

Technically, you did not see that happen - the people that walked in were not North Korean terrorists. This distinction may be important, or it may not.

> People took over one of our nation’s most important buildings with extremely high level people in it without a sweat, without resistance, and basically without repercussions. I remarked today to my family that I bet Russians and North Koreans were watching going, wait, we can just walk in?

I would bet my money that they're thinking something else entirely, something more along the lines of: Now isn't this an interesting development! What is the range of plausible explanations for this unusual and counter-intuitve series of events, that took place at one of the most strategic locations in America's capital, on a very special day, when large quantities of protesters were known (in advance) to be present, and violence was expected? Is this strange situation purely organic, or might something more interesting be going on?.

Thirty years ago I expect American journalists would be asking similar questions. Unfortunately, the only place you are likely to find such curiosity and diversity of thought in modern America is in conspiracy theory forums - but you know what they imply(!) (over, and over, and over) about them: "If they propose an idea, or explanation for something, it should be considered to be false".

> Of course they couldn’t because they aren’t white “Americans”. And all of this really paints a nasty picture of what happened today. It was a soup of treason, violence, white privilege, disgrace, sadness, and weakness.

Technically, this is just your heuristic prediction of what happened, and what it is. What really happened, what it really is, is unknown (to the general public).

> I really could not believe how they could just take over the place. I even saw a video where police actually just opened the gates for them.

I don't find it hard to believe at all. I don't even find it mildly surprising - but I do find it extremely interesting. So interesting that if any journalists bothered to look into it, I'd be tempted to read such articles to see what they come up with. I wonder if any such articles will be written, or if this remarkable phenomenon will be universally (by all major media outlets) attributed to "white privilege" or some such simplistic, evidence-free answer.

Let's see what CNN has to say about this performance:

https://www.cnn.com/2021/01/07/politics/capitol-police-react...

In this article, we have observations that security was obviously lax despite it being "...known for weeks that President Donald Trump was promoting a rally he said was aimed at preventing the certification of Joe Biden's win."

What we do not have here, is anyone asking questions about why security was so lax.

FTA:

- Lawmakers say they are perplexed at the lack of preparedness among law enforcement given that it had been known for weeks that President Donald Trump was promoting a rally he said was aimed at preventing the certification of Joe Biden's win. Rep. Mike Quigley, an Illinois Democrat who was locked in the House chamber during an armed standoff between Capitol Police and a rioter, praised the officers who were in the building that put their lives on the line to protect the lawmakers. But Quigley made clear that they were outnumbered and law enforcement was under prepared. "The Capitol Police I was around did an amazing job under difficult circumstances," Quigley told CNN. "My concern wasn't with how valiant the Capitol Police were. It was that an hour before the debate started, I looked at the throngs of people surrounding different sections of the Capitol -- and said, we don't have enough security." Quigley added: "I'm no expert in security, but you can tell we were out-manned in an hour before the debate," referring to Congress' proceedings to certify Biden's win.

--

https://www.cnn.com/2021/01/06/politics/capitol-riots-what-h...

In this article we have more observations of unusual anomalies. And again, what we do not have here, is anyone asking questions about why security was so lax.

FTA:

- The chaotic federal response to the Trump rally Wednesday, which was overwhelmed by rioters who stormed the US Capitol, stood in sharp contrast to the heavily-armed presence of thousands of federal authorities during summer protests in Washington, DC, following the police killing of George Floyd.

- The law enforcement response that allowed a typically heavily secured federal landmark to fall under attack, with rioters breaking through windows and into lawmakers' offices and gathering places, came from a hesitant federal bureaucracy after early assurances from DC and Capitol law enforcement agencies. Agencies that had law enforcement that could help Wednesday waited to be asked. "It was a mess. Nobody was communicating. No one knew what we were supposed to be doing there," said one federal law enforcement officer who was dispatched to the Capitol.

- Justice Department officials were in charge of coordinating the federal agencies and US National Guard response ahead of President Donald Trump's rally near the Washington Monument. Some organizers publicly said they planned to conduct a "wild" march to Capitol Hill as the joint session of Congress met to certify President-elect Joe Biden as the next president. But agencies were waiting to be asked by other authorities to help -- even as Trump's election protest unraveled.

- "Law enforcement failed to understand what the likelihood of this threat was," CNN law enforcement analyst Jonathan Wackrow, a former USSS agent, said of the day's events, though "no one should be surprised that this was attempted," given Trump attorney Rudy Giuliani's comments at the rally earlier in the day that this should be a "trial by combat." "There should have been a wall of law enforcement," Wackrow said. Department of Homeland Security spokesman Alexei Woltornist said the agency was running a "virtual situation room" to track communication between agencies, but was "not tracking any active threats." US Customs and Border Protection, a law enforcement agency under the Department of Homeland Security, had dozens of personnel prepared if needed.

- As for the Justice Department, acting Attorney General Jeffrey Rosen deployed more than 300 agents and officers from the FBI, Bureau of Alcohol, Tobacco, Firearms and Explosives and the US Marshals Service, to assist the Capitol Police. But the Capitol Police had already lost control. Some of those deployments came almost an hour after the mob put the Capitol into lockdown.

- "By the time the Capitol Police asked for help, the crowd was already inside the building," another federal law enforcement official said.

- After criticism from Washington, DC, municipal officials over the heavy-handed response during the summer Black Lives Matter protests, federal authorities had a visibly lighter presence for the Trump rally.

- Two federal law enforcement officials said Capitol Police assured Justice officials that they were prepared for the rally, particularly since the Capitol grounds are already barricaded in preparation for the Inauguration ceremonies in two weeks.

Re:Infosec implications of the US Capitol physical breach by ghthor on Friday January 08, 2021 @01:33AM (#25682169)
Dont ask questions you dont want an answer too.
Re:Infosec implications of the US Capitol physical breach by mistermann on Friday January 08, 2021 @10:22AM (#25685531)
You're referring to the media I presume?

It's interesting though....it seems like such an obvious question, doesn't it? Shouldn't at least some journalists have this question?

Or, imagine a scenario where this took place at a business owned by anyone in this forum - wouldn't they be asking some questions about wtf happened? Yet when it is the US Capitol, most people have no curiosity.

To me, there are at least two interesting aspects to this. The first is the conspiracy theory aspect (why was security so lax), and then the psychological/neurological aspect (why do so few people who are highly skilled in logic have no curiosity)?

Re:Infosec implications of the US Capitol physical breach by roenxi on Thursday January 07, 2021 @01:57AM (#25668047)
> remarked today to my family that I bet Russians and North Koreans were watching going, wait, we can just walk in?

The US Congress of of great symbolic and relatively little actual importance. If the North Korean military walked in to the Senate and gunned down everyone in it the outcomes would roughly be: US loses ~80 corrupt leaches. US loses ~20 great people. Northern part of the Korean peninsula becomes a glassy wasteland inhabited by cockroaches.

Mobs of grumpy people routinely yell at US politicians, I've seen various protesters screaming politicians into a defensive corner. The BLM protests at the 2020 RNC convention jumps to mind as having scenes that were probably felt just as scary for the politicians involved (the treatment of Rand Paul jumped out at me as unpleasant). US citizens get to scream at their politicians an they frequently exercise that privilege. There isn't an obvious racial element to it.

Re:Infosec implications of the US Capitol physical breach by lostlogin on Thursday January 07, 2021 @02:06AM (#25668109)
> The US Congress of of great symbolic and relatively little actual importance.

Others disagree. Nearly half a billion was spent in total in the fight over the seat for Georgia.

https://www.nytimes.com/2020/12/20/us/politics/georgia-senat...

Re:Infosec implications of the US Capitol physical breach by dstick on Thursday January 07, 2021 @02:13AM (#25668149)
I think the parent meant the physical building, not the institution.
Re:Infosec implications of the US Capitol physical breach by roenxi on Thursday January 07, 2021 @02:18AM (#25668172)
No, I mean the people in the institution. The spending in Georgia isn't because of ... whoever the candidates are, I don't know their names. It is to decide which party gets another sympathetic vote in decision making.

The institution of Congress is critical. But the specific people in it at any time are important because of how they got there/who supported them on the way in and not because of who they are. They could be replaced and it wouldn't be a big issue, technically speaking. Practically there'd be huge consequences for whoever was stupid enough to disrespect the US Congress.

Re:Infosec implications of the US Capitol physical breach by pjc50 on Thursday January 07, 2021 @04:11AM (#25668924)
> They could be replaced and it wouldn't be a big issue, technically speaking

The intent was partisan, to remove representatives of one side to change the result of votes.

> Practically there'd be huge consequences for whoever was stupid enough to disrespect the US Congress

A few people have been arrested. I don't expect many of them to serve prison time. Those who organised this, encouraged it, sold tshirts with "Civil War 6 Jan" on, will not experience any consequences. And don't forget the president can still pardon them.

Re:Infosec implications of the US Capitol physical breach by roenxi on Thursday January 07, 2021 @04:32AM (#25669083)
> sold tshirts with "Civil War 6 Jan" on

Selling offensive t-shirts isn't even remotely close to a problem. I too doubt they will experience any consequences.

Hopefully the violent looters and lawbreakers in the protest get prosecuted. But there are recent precedents on this issue; most of the protesters will have been peaceful and shouldn't suffering consequences for exercising basic freedoms.

Re:Infosec implications of the US Capitol physical breach by astrange on Thursday January 07, 2021 @04:01AM (#25668854)
This is pretty big disrespect to Rev. Warnock, who seems like he’s going to be very good at his new job.
Re:Infosec implications of the US Capitol physical breach by lostlogin on Thursday January 07, 2021 @03:13AM (#25668564)
> Practically there'd be huge consequences for whoever was stupid enough to disrespect the US Congress.

Interesting time to make this observation. Let’s see.

Re:Infosec implications of the US Capitol physical breach by nemothekid on Thursday January 07, 2021 @02:40PM (#25676157)
>Northern part of the Korean peninsula becomes a glassy wasteland inhabited by cockroaches.

If North Korean terrorists were to execute 100 senators, you've already lost. Massacring a bunch of poor pawns in North Korea doesn't solve anything except maybe appeasing some people's ideas of revenge. The DPRK hardly cares today about most of population, but in return they would effectively shutdown the US government and possibly put the entirety of the government into a standstill, possibly freezing tons of regular processes. Before any other bomb is launched, people would be more concerned about making sure they are properly secured - after all if north korean terrorists already executed the Senate, your main fear would be that you're next; and glassing peasants wouldn't prevent that.

In other words, your opponent has just taken your all your Rooks, Knights and Bishops and in response you wipe out their pawns while the opponent's queen is about to checkmate you.

Re:Infosec implications of the US Capitol physical breach by ReaganFJones on Thursday January 07, 2021 @12:09AM (#25667493)
I'm not sure if it could be largely characterized as security theater. The videos from the Capitol demonstrate just how outmatched the police were: https://twitter.com/KySportsRadio/status/1347031398176223233

There were clear examples of failures like the police letting them in or taking selfies with them. We'll see what oversight gets applied to the Capitol police... https://www.politico.com/news/2021/01/06/capitol-riots-polic...

Re:Infosec implications of the US Capitol physical breach by quasse on Thursday January 07, 2021 @12:21AM (#25667558)
>outmatched

I wouldn't say that's even a fair characterization. Per the capitol police website they have 2,600 officers and a budget of $460 million. It honestly just ... didn't look like they were trying very hard. They managed to arrest what, 14 people? Compare that to the BLM protests on the west coast where unmarked vans of feds were literally rolling up and black bagging people off the street.

USCP is charged with protecting Congress, and I think members of congress should be thinking hard about whether the police were complicit in what happened today.

[1] https://www.uscp.gov/media-center/uscp-fast-facts

Re:Infosec implications of the US Capitol physical breach by zionic on Thursday January 07, 2021 @12:57AM (#25667720)
Your media consumption bias is showing. It took months of weekly action for a few feds to show up last summer
Re:Infosec implications of the US Capitol physical breach by wtallis on Thursday January 07, 2021 @01:09AM (#25667796)
The standards for response time ought to be rather higher for a large police force that exists primarily to protect a single building complex. And then there's the fact that the Capitol is obviously a much higher-profile target than a random federal courthouse.
Re:Infosec implications of the US Capitol physical breach by neartheplain on Thursday January 07, 2021 @01:17AM (#25667848)
>Compare that to the BLM protests on the west coast where unmarked vans of feds were literally rolling up and black bagging people off the street.

Let's not lose perspective.

In the protests outside the Portland federal courthouse building, police held out for weeks while insurrectionists threw bombs [0] and incendiary devices [1], attacked officers with hammers [2] and blinding lasers [3], and tried to breach the courthouse with crowbars and power saws [4]. Nightly arson attempts set fires at, around, and inside the courthouse [5]. The protestors' goal- as stated in their extensive graffiti [6]- was to attack police, breach the courthouse and destroy public property, much as they had done in earlier riots [7]. One stabbed a black conservative journalist in the stomach [8]. Many were arrested carrying illegal guns and ammunition [9].

In response, and after local law enforcement abandoned the courthouse by order of Portland's Mayor Wheeler, federal agents arrested suspects in accordance with the law. They read suspects their rights, treated them fairly, and in most cases- thanks to an extremely permissive District Attorney [10]- released them within 48 hours of arrest.

What happened in Portland (and Seattle, Minneapolis, Chicago, and other American cities) this summer was also undeniably insurrection, and undeniably much more violent. Despite this, police in Portland never shot anyone in the back, much less fatally.

Call today's insurrection what it is, but be consistent.

[0] https://twitter.com/thetypeofguy69/status/129308897288596275...

[1] https://katu.com/news/local/molotov-cocktail-rattles-portlan...

[2] https://www.justice.gov/usao-or/pr/portland-man-charged-assa...

[3] https://www.king5.com/article/news/politics/federal-officers...

[4] https://twitter.com/Clypian/status/1286906816018841600

[5] https://www.opb.org/news/article/portland-police-less-lethal...

[6] https://www.kgw.com/article/news/local/protests/protesters-h...

[7] https://www.justice.gov/usao-or/pr/portland-man-charged-may-...

[8] https://www.oregonlive.com/crime/2020/07/man-knifed-in-back-...

[9] https://www.usatoday.com/story/news/nation/2020/07/26/portla...

[10] https://www.washingtonpost.com/health/no-charges-for-many-ar...

Re:Infosec implications of the US Capitol physical breach by Others on Thursday January 07, 2021 @02:09AM (#25668120)
1) People are calling this an “insurrection” because it’s so directly an attack on country leadership. (Whereas the incidents you’re referencing are predominantly riots and attacks on the police.) There may be hypocrisy here, but I don’t think that word is a part of it

2) I think the major difference in the left’s eyes is that those protests were against police brutality and racism, whereas this is an attack on our democracy and an attempt to overrule a free and fair election. Motives matter

3) Invading the capital building wielding deadly weapons is (pretty objectively) more serious than attacking the outside of a single federal courthouse (not to minimize that of course)

Re:Infosec implications of the US Capitol physical breach by neartheplain on Thursday January 07, 2021 @02:43AM (#25668351)
Let's not mince words. Insurrection means violent uprising against the government. Attacks on public servants and public buildings for the purpose of overthrowing the government are insurrection.

The Portland courthouse siege- OP's chosen example- was led by violent white anarchists. Their motive was to topple the government. Portland's Black Lives Matter activists complained many times that their cause and movement had been hijacked [0][1][2].

The people who invaded the capitol today, at least some, probably thought they were protecting democracy. They may have thought they were defending election integrity. They were wrong. That doesn't mean they are evil or amoral. It means they are misinformed and misled. Using them as a foil to downplay other, much more violent unrest is neither helpful nor informative.

I haven't seen photos of armed rioters in the capitol. If you have some, please link them.

[0] https://www.kgw.com/article/news/local/professor-focus-of-po...

[1] https://komonews.com/news/local/black-people-in-portland-str...

[2] https://www.latimes.com/opinion/story/2020-09-04/black-lives...

Re:Infosec implications of the US Capitol physical breach by tsimionescu on Thursday January 07, 2021 @05:03AM (#25669286)
> The people who invaded the capitol today, at least some, probably thought they were protecting democracy.

What they thought is irrelevant in a country that believes in the rule of law: they were attacking the highest institution of one branch of government with the express purpose of forcing them to overturn the legal result of the election and install their preferred president. This is an (attempted) insurrection, and there are no two ways around it.

Comparing this to an attack on a courthouse is patently absurd. Especially since the courthouse was not attacked for 'toppling the government' - I can't even imagine where you came up with that - but because it was known that arrested/kidnapped protesters had been held inside the courthouse building. In general, none of the BLM or Antifa protesters are interested in "toppling the government" - they are interested in "toppling" the police and in stopping the white nationalist fascists that police are openly supporting from taking over the country.

Re:Infosec implications of the US Capitol physical breach by neartheplain on Thursday January 07, 2021 @08:05AM (#25670519)
>This is an (attempted) insurrection, and there are no two ways around it.

Yes, I called it insurrection earlier. You've replied to my comment out of context of the reply which preceded it, so your strawman of me doesn't make any sense.

>they are interested in "toppling" the police and in stopping the white nationalist fascists that police are openly supporting

I wrote a longer reply to your comment, but then I deleted it. DC metro police are more than 50% black, it's a joke that they would "openly support white supremacists."

Re:Infosec implications of the US Capitol physical breach by xref on Thursday January 07, 2021 @04:42AM (#25669160)
Uhh, none of your links suggest the aim of the BLM movement is to “topple the government”. Also portland is on the wrong coast from “the government”
Re:Infosec implications of the US Capitol physical breach by SamoyedFurFluff on Thursday January 07, 2021 @11:34AM (#25673165)
If intent mattered when it came to storming the capitol then it should matter when it comes to rioting against the police.
Re:Infosec implications of the US Capitol physical breach by smolder on Thursday January 07, 2021 @04:05AM (#25668882)
They stormed the capitol, some with guns in hand. Five firearms were seized from the rioters.
Re:Infosec implications of the US Capitol physical breach by ghthor on Friday January 08, 2021 @01:38AM (#25682192)
Your doing gods work, thanks for your informative comments.
Re:Infosec implications of the US Capitol physical breach by kenjackson on Thursday January 07, 2021 @03:04AM (#25668514)
Good grief. If you’re using graffiti as the source then compare it to today where signs said their goal was to overthrow the government.

Trying to draw any sort of equivalence is insincere.

And honestly any one who breached or attempted to breach the courthouse or the Capitol (the building or the property) should go to jail for a long time. So in that sense, we agree.

Re:Infosec implications of the US Capitol physical breach by lostlogin on Thursday January 07, 2021 @02:09AM (#25668122)
Whataboutism at it’s finest.

What do you think the establishment would have done if BLM protesters stormed congress?

Re:Infosec implications of the US Capitol physical breach by pvfffghhr on Thursday January 07, 2021 @02:21AM (#25668199)
What do you think?
Re:Infosec implications of the US Capitol physical breach by lostlogin on Thursday January 07, 2021 @03:10AM (#25668549)
I think that the Lafayette Square episode with the Trump church visit would look mild in comparison. ‘When the looting starts the shooting starts’ was what Trump said then, where is that rhetoric now?
Re:Infosec implications of the US Capitol physical breach by throwawaygulf on Thursday January 07, 2021 @02:25AM (#25668223)
>Whataboutism at it’s finest.

Stop projecting about being a hypocrite.

>What do you think the establishment would have done if BLM protesters stormed congress?

Those rioters have a well documented history of destroying federal property, attacking federal officers, employees, etc. What do you think?

Re:Infosec implications of the US Capitol physical breach by ReaganFJones on Friday January 08, 2021 @02:50AM (#25682575)
A follow up article from the Washington Post: https://www.washingtonpost.com/national-security/trump-prote...

It appears the DC leadership and the Pentagon wanted to avoid a show of force that mimicked what happened during the summer, trying to learn from their mistakes during the protests triggered by Floyd’s death.

Re:Infosec implications of the US Capitol physical breach by xienze on Thursday January 07, 2021 @12:57AM (#25667728)
> Compare that to the BLM protests on the west coast where unmarked vans of feds were literally rolling up and black bagging people off the street.

Boy, I wonder if the fact that these guys basically just goofed around and took pictures instead of burning down the capitol (like what happened in the Portland courthouse) had any bearing on that.

Re:Infosec implications of the US Capitol physical breach by dang on Friday January 08, 2021 @12:50AM (#25681921)
Please don't take HN threads further into flamewar. We're trying to avoid the hell we're all sinking into. Comments like this are a sharp push hellward, so please don't.

https://news.ycombinator.com/newsguidelines.html

Re:Infosec implications of the US Capitol physical breach by maybe_ on Thursday January 07, 2021 @01:08AM (#25667795)
Four people died today, I'm not sure if I would classify that as "goofing around".
Re:Infosec implications of the US Capitol physical breach by neartheplain on Thursday January 07, 2021 @01:50AM (#25668008)
One was an unarmed woman shot by law enforcement, as police have confirmed [0]. The other 3 died near the riot due to separate medical emergencies [1].

[0] https://www.fox5dc.com/news/woman-shot-killed-after-pro-trum...

[1] https://www.nbcnews.com/politics/congress/live-blog/electora...

Re:Infosec implications of the US Capitol physical breach by Shared404 on Thursday January 07, 2021 @01:05AM (#25667765)
That appears to be related to competency, not intentions.

https://www.nytimes.com/2021/01/06/us/politics/pipe-bomb-rnc...

Re:Infosec implications of the US Capitol physical breach by altdatathrow on Thursday January 07, 2021 @07:09AM (#25670112)
Please stop defending an attempt to overthrow a lawful election as goofing around.
[dead]
Re:Infosec implications of the US Capitol physical breach by dang on Friday January 08, 2021 @12:51AM (#25681929)
You can't do this here, regardless of how wrong someone else is or you feel they are. We ban accounts that do it. Please don't.

https://news.ycombinator.com/newsguidelines.html

Edit: a large proportion of your most recent, say, 10 comments to HN have been breaking the site guidelines really badly. I don't want to ban you, because you've been a user here for a long time and you've posted many good things. But if you keep doing this, we're not going to have any choice. Having something like this be your first comment in months is extremely dismaying.

Re:Infosec implications of the US Capitol physical breach by Shared404 on Thursday January 07, 2021 @01:13AM (#25667816)
There are all sorts of negative emotions it's reasonable to feel right now.

That being said, we can do better than personal attacks.

[dead]
Re:Infosec implications of the US Capitol physical breach by Shared404 on Thursday January 07, 2021 @01:55AM (#25668040)
I don't know whether or not anyone is going back and downvoting all your older posts.

However, having looked at your last several, I am not shocked that they are negative.

Re:Infosec implications of the US Capitol physical breach by xienze on Thursday January 07, 2021 @08:03AM (#25670503)
They have, for the record. I.e., posts from the morning that were effectively were dead got additional downvotes rapidly after posts in this thread. And I got plenty of HN’s passive aggressive “you’re posting too fast” messages.

Are you a mod? For example, look at this comment[0], which stood at 1 all day long, which is now -3 after last night.

0: https://news.ycombinator.com/reply?id=25658587&goto=threads%...

Re:Infosec implications of the US Capitol physical breach by Shared404 on Thursday January 07, 2021 @09:30AM (#25671403)
> Are you a mod?

Nope. Not even close.

You should be able to get the modmail from the guidelines or FAQ or someplace.

Re:Infosec implications of the US Capitol physical breach by the-dude on Thursday January 07, 2021 @04:46AM (#25669182)
Downvoting only is possible for the last 24 or 48 hours or so. Also, you are complaining about voting. Boring.
Re:Infosec implications of the US Capitol physical breach by xienze on Thursday January 07, 2021 @08:04AM (#25670510)
Did I say it was downvotes past 48 hours? Just ones that people had stopped paying attention to because the posts fell off the front page got additional downvotes moments after a new post in this thread.
Re:Infosec implications of the US Capitol physical breach by neartheplain on Thursday January 07, 2021 @02:49AM (#25668398)
If you believe someone has done this (downvoting all your old comments on unrelated posts), try emailing the modstaff. It happened to me once and dang quickly fixed it.
Re:Infosec implications of the US Capitol physical breach by preommr on Thursday January 07, 2021 @12:20AM (#25667554)
> The videos from the Capitol demonstrate just how outmatched the police were

Not sure if I understand the point you're trying to make.

They shouldn't have been outmatched in the first place. The protest was planned and the information was extremely overt. Something went horribly wrong for this to happen.

Re:Infosec implications of the US Capitol physical breach by sterlind on Thursday January 07, 2021 @12:36AM (#25667633)
Any one of those protestors could have brought in a bomb. They weren't exactly going through metal detectors. Given that a pipe bomb was found at the RNC, and a suspicious package of some sort at the DNC, I'm surprised someone didn't try. I wonder how worried security there was about explosive devices and weighing whether to open fire.
Re:Infosec implications of the US Capitol physical breach by seanp2k2 on Thursday January 07, 2021 @01:58AM (#25668056)
Many of them were also carrying guns. No idea who thought it'd be a good idea to just stand down and let them in, but my guess is that making martyrs of them would push us closer to something like the beginning of a civil war.
Re:Infosec implications of the US Capitol physical breach by zionic on Thursday January 07, 2021 @01:00AM (#25667741)
And yet they didn’t. Consider the implications of that
Re:Infosec implications of the US Capitol physical breach by morsch on Thursday January 07, 2021 @03:48AM (#25668791)
We're at the stage where we're giving out merit awards for not bombing a seat of government after having stormed it?
Re:Infosec implications of the US Capitol physical breach by munk-a on Thursday January 07, 2021 @01:14AM (#25667827)
There were two IEDs discovered in the capital today - neither in the state house but still... super bad for security.
Re:Infosec implications of the US Capitol physical breach by Natsu on Thursday January 07, 2021 @02:28AM (#25668227)
One of those was at the RNC, I haven't heard of the other one yet.
Re:Infosec implications of the US Capitol physical breach by Shared404 on Thursday January 07, 2021 @01:06AM (#25667779)
There was someone arrested with materials for Molotov cocktails.

https://www.nytimes.com/2021/01/06/us/politics/pipe-bomb-rnc...

Re:Infosec implications of the US Capitol physical breach by macawfish on Thursday January 07, 2021 @04:33AM (#25669092)
I believe there were full on bombs found, as in IEDs with electronic parts.
Re:Infosec implications of the US Capitol physical breach by munk-a on Thursday January 07, 2021 @01:13AM (#25667821)
At least according to NYT[1] it seems like the police being outmatched was rather intentional.

1. https://www.nytimes.com/live/2021/01/06/us/washington-dc-pro...

Re:Infosec implications of the US Capitol physical breach by smolder on Thursday January 07, 2021 @03:57AM (#25668835)
The police seem to have stood down because they are sympathetic. There's video circulating of the rioters being let through barricades by the officers manning them. I'll say it's plausible they were not prepared to resist the crowd, but the way it looks is like they wanted to participate.
Re:Infosec implications of the US Capitol physical breach by krapp on Thursday January 07, 2021 @12:40AM (#25667651)
Nothing went wrong. The police overwhelmingly support Trump, they were complicit.
Re:Infosec implications of the US Capitol physical breach by gibolt on Thursday January 07, 2021 @12:26AM (#25667583)
They had weapons (lethal and non-lethal) and decided not to use them, even though they were well within their right (and probably duty) to do so.
Re:Infosec implications of the US Capitol physical breach by guscost on Thursday January 07, 2021 @01:45AM (#25667989)
Was there to document and distribute some propaganda, we did not get very close to the militant action, but a few things to report:

- At least one flash-bang (probably) and one tear gas grenade (definitely) were used on the capitol steps.

- Their duty as police is to protect and serve, so shooting would have been a terrible idea. Evacuation is not difficult in an ultra-hard target like the capitol, and a lot of civilians had bags, some of which definitely contained firearms. I also heard some shouts about fetching guns from hotel rooms (we did not stay overnight in the city). A gun battle would have been catastrophic on both sides.

Re:Infosec implications of the US Capitol physical breach by 8note on Thursday January 07, 2021 @02:06AM (#25668108)
Their duty is not to protect to serve though, it's to enforce. Get the bad guy as long as you don't put yourself in danger; collateral damage is fine
Re:Infosec implications of the US Capitol physical breach by guscost on Thursday January 07, 2021 @02:18AM (#25668181)
What I’m saying is that they almost certainly would not have been able to “get the bad guys” without being shot themselves, unless the tactic was machine-gun emplacements turning everyone into hamburger, with the side effect of starting a shooting war nationwide.
Re:Infosec implications of the US Capitol physical breach by DarkWiiPlayer on Thursday January 07, 2021 @04:43AM (#25669169)
I think you have a very weird and wrong idea of what "collateral damage" means. Actually, the police should avoid collateral damage at all cost, even if it means not catching the bad guys.
Re:Infosec implications of the US Capitol physical breach by modo_mario on Thursday January 07, 2021 @09:32AM (#25671421)
I think he refers to the fact that there's been (supreme)court cases about this that generally rule in the polices favour saying they're under no obligation to protect, etc.

And repeated examples of disregard for collateral damage and proportionality during enforcement like: https://www.independent.co.uk/news/world/americas/ups-driver...

Protocol changes are made like ones with regards to high speed chases but often only after a lot of hubris in which police and/or bystanders die

Re:Infosec implications of the US Capitol physical breach by craftinator on Thursday January 07, 2021 @02:42AM (#25668345)
Living in Portland, I can say I'm simply amazed at their restraint! Our own police here will taze, pepperspray, baton, without any law being broken first. It's sort of like Affirmative Action, but for violence.
Re:Infosec implications of the US Capitol physical breach by xienze on Thursday January 07, 2021 @12:59AM (#25667735)
Did you miss the young woman who was shot and killed?
Re:Infosec implications of the US Capitol physical breach by lostcolony on Thursday January 07, 2021 @01:05AM (#25667762)
We still don't know who fired that shot, and there were no reports of shots fired otherwise. Given the scope of what happened, a single lethal shot fired is kind of a miracle. And shocking given how many injuries and deaths we saw from protests earlier in the year which were under far better control, with far more law enforcement involved.
Re:Infosec implications of the US Capitol physical breach by seanp2k2 on Thursday January 07, 2021 @02:04AM (#25668093)
If you poke around a bit on YouTube, there are multiple videos of it happening on there. My guess is that the woman was trying to get into a corridor that the Secret Service was protecting, and they really didn't want anyone in there. Capitol Police seemed unaware of this as a few of them armed with long guns stood on the same side of the door literally right next to the woman who was shot, when she was shot after trying to enter through that broken window.
Re:Infosec implications of the US Capitol physical breach by ibejoeb on Thursday January 07, 2021 @02:10AM (#25668133)
> D.C. Police Chief Robert Contee confirmed late Wednesday that Babbit was shot by a Capitol police officer

https://www.fox5dc.com/news/woman-shot-killed-after-pro-trum...

Re:Infosec implications of the US Capitol physical breach by rwmurrayVT on Thursday January 07, 2021 @08:09AM (#25670556)
This article gives some background color on her public social media. [1] It's pretty depressing honestly to think that she was so caught up in conspiracies and it got her killed.

[1]https://www.businessinsider.com/ashli-babbitt-tweeted-qanon-...

Re:Infosec implications of the US Capitol physical breach by guscost on Thursday January 07, 2021 @01:53AM (#25668024)
There were concealed guns everywhere on both sides this time, so not as surprising to me. Nobody wanted to start a bloodbath.
Re:Infosec implications of the US Capitol physical breach by gonzo41 on Thursday January 07, 2021 @01:47AM (#25667993)
Any cop that took a selfie should face charges along with the rioters. That's crazy.

But the systemic failure was the lack of support from the President himself and the deployment of the national guard.

Re:Infosec implications of the US Capitol physical breach by splintercell on Thursday January 07, 2021 @08:33AM (#25670794)
Wait, why?

You want cops to be more like stoic stormtroopers? If every cop out there took a selfie with rioters, it would have been easier to manage them by a degree. Imagine hundreds of selfies with cops were posted in right wing social media, how will that not make right wing protestors have a nicer attitude towards the cop in the future?

what's really the downside of letting this happen? Not focused on crowd control? This is also crowd control.

Re:Infosec implications of the US Capitol physical breach by gonzo41 on Thursday January 07, 2021 @09:03AM (#25671121)
As demonstrated by the mobs actions, they weren't there to protest. They were there to wreck the joint. The cops let their guard down. It's silly to think that being chummy with the crowd would deescalate them when they've been prepping for this for ages.
Re:Infosec implications of the US Capitol physical breach by ghthor on Friday January 08, 2021 @01:42AM (#25682212)
If they were there to wreck the joint, it would have been wrecked. From what I saw many protestors were stopping the anarchist from causing any real damage.
Re:Infosec implications of the US Capitol physical breach by enumjorge on Thursday January 07, 2021 @10:04AM (#25671831)
If this is how cops de-escalate then it’s a massive double standard to how they dealt with protesters over the summer, including the time they tear gassed peaceful protesters to make way for Trump’s photo op right there on DC in June [0]

[0] https://www.npr.org/2020/06/01/867532070/trumps-unannounced-...

Re:Infosec implications of the US Capitol physical breach by rasz on Thursday January 07, 2021 @01:28AM (#25667905)
Outmatched or just letting people in? Mixed messages in this video, some cops standing ground while others just deciding to remove themselves from the post https://www.youtube.com/watch?v=AZ9oThRuMVs
Re:Infosec implications of the US Capitol physical breach by megameter on Thursday January 07, 2021 @02:08AM (#25668116)
Riot cops are regularly outnumbered. They are trained to use less-lethals to outmanuever, disperse and kettle crowds like this. They had advance warning and could have dispersed the early crowds. It was just this past summer that Trump had a crowd near the White House dispersed with tear gas to give a speech where he held a Bible upside down.

But when the time came today, there were no tear gas or 40mm rounds, no LRAD. The security simply didn't show up when the expected crowd was percieved to be aligned with the police.

This is a consistent pattern throughout our law enforcement system.

Re:Infosec implications of the US Capitol physical breach by rasz on Thursday January 07, 2021 @02:34AM (#25668279)
There was at least one LRAD Humvee parked out front with mob jumping on its roof. Someone made a decision not to use it.
Re:Infosec implications of the US Capitol physical breach by OminousWeapons on Thursday January 07, 2021 @12:41AM (#25667653)
Out of curiosity, are there general best practices for dealing with a sudden, massive loss of access control like this?
Re:Infosec implications of the US Capitol physical breach by throwawaybutwhy on Thursday January 07, 2021 @12:50AM (#25667693)
Run through the other exit if there's still time, and take the time to hide your id card so it's not visible. You don't want to be lynched.
Re:Infosec implications of the US Capitol physical breach by tsimionescu on Thursday January 07, 2021 @02:31AM (#25668259)
I think it was obvious from everything we've seen, especially in comparison to the recent protests, that the police response was deliberately small. Whether they received orders to allow the protesters in, whether they themselves decided to do it, whether they were denied reinforcements - its obvious that something caused police response to be almost non-existent to an obvious threat.

If there had been a BLM rally instead of a MAGA rally on the steps of the capitol the day the election is certified, they would have been kept well away from the building with riot gear.

Re:Infosec implications of the US Capitol physical breach by craftinator on Thursday January 07, 2021 @02:38AM (#25668303)
> If there had been a BLM rally instead of a MAGA rally on the steps of the capitol the day the election is certified, they would have been kept well away from the building with riot gear.

Living in Portland, I had this same thought. Random one way streets in downtown Portland get a much more violent, immediate, and overwhelming police response on a nightly basis than the Capitol building did when there was an obvious riot forming.

If it had been a BLM rally, the tear-gas would have started before any protester had made it up the steps, the same way it still happens in Portland. What a fucked up country I live in.

Re:Infosec implications of the US Capitol physical breach by dzdt on Thursday January 07, 2021 @12:34AM (#25667617)
Police take orders from above. Clearly the order of the day was to have minimal presence and avoid conflict with the protesters.
Re:Infosec implications of the US Capitol physical breach by SheinhardtWigCo on Thursday January 07, 2021 @01:19AM (#25667856)
What makes it clear to you that this was an order and not the result of incompetence?
Re:Infosec implications of the US Capitol physical breach by runarberg on Thursday January 07, 2021 @01:37AM (#25667953)
e.g. comparison to similarly sized BLM protests
Re:Infosec implications of the US Capitol physical breach by curryst on Thursday January 07, 2021 @11:16AM (#25672796)
Part of me wonders if this was malicious compliance with the demands to downsize police. "You want less police? See what happens?" That doesn't seem beyond belief.
Re:Infosec implications of the US Capitol physical breach by runarberg on Thursday January 07, 2021 @11:46AM (#25673383)
Don’t attribute ignorance which can be safely explained by malice

I think it is much more likely that this downsizing had everything to do with who the protestors were—i.e. their political views and skin color—in each case.

Re:Infosec implications of the US Capitol physical breach by colordrops on Thursday January 07, 2021 @01:32AM (#25667928)
The police are overwhelmingly Trump supporters, and the comparison to the response to BLM protests is stark:

https://twitter.com/Tender_oni/status/1346916038269689862?s=...

https://twitter.com/theangiestanton/status/13469560673019412...

Edit: anyone want to respond about what's wrong with my comment rather than arbitrarily down voting?

Re:Infosec implications of the US Capitol physical breach by m0llusk on Thursday January 07, 2021 @02:31AM (#25668258)
Your point about the difference in police responses seems valid. There was advance warning of potential conflict.

However, your statement that the police are overwhelmingly Trump supporters seems weak and inflammatory and is what I suspect drove downvoting. There are several examples of individual police taking stands against the crowd. Directly linking police performance today to politics is also questionable. When dealing with rowdy crowds it may be best to take things easy and act to calm tensions. A large number of cops ended up behind the crowd surge where the best course of action becomes ambiguous.

Re:Infosec implications of the US Capitol physical breach by splintercell on Thursday January 07, 2021 @08:36AM (#25670812)
I didn't downvote you but you did not provide any proof that police is a) overwhelmingly Trump supporters and b) would shirk their responsibility because of that.

And you posted irrelevant links as if they somehow support your argument.

Re:Infosec implications of the US Capitol physical breach by standardUser on Thursday January 07, 2021 @11:22AM (#25672942)
The FOP endorsed Trump twice and a 2016 Police Magazine poll showed that 84% of officers intended to vote for Trump. There have also been a handful of news stories about current and former police officers getting in trouble for supporting Trump/opposing Democrats in illegal ways...

"Alabama Police Captain Resigns After Saying Biden Voters Deserve a ‘Bullet in Their Skull’"

"Arkansas police chief resigns after threatening to abuse Democrats"

"Ex-Houston Police Officer Charged In Attack Over Bogus Election Fraud Plot"

"Officer suspended for blaring 'Trump 2020' from NYPD vehicle"

Re:Infosec implications of the US Capitol physical breach by simonswords82 on Thursday January 07, 2021 @02:21AM (#25668195)
Don't take down votes personally I find that for a short time after most of my recent comments on HN I get (automated?) downvotes which are then wiped out a few hours/days later.
Re:Infosec implications of the US Capitol physical breach by seventytwo on Thursday January 07, 2021 @12:11AM (#25667504)
I wonder why there wasn’t more security given this protest was known, and literally all of congress was in session.
Re:Infosec implications of the US Capitol physical breach by bublyboi on Thursday January 07, 2021 @12:34AM (#25667618)
Didn’t the mayor of DC literally request that the feds NOT provide federal agents due to experiences with the BLM protests? She probably saved many lives with that decision. https://thehill.com/homenews/administration/532739-bowser-to...
Re:Infosec implications of the US Capitol physical breach by wtallis on Thursday January 07, 2021 @01:23AM (#25667878)
The mayor of DC oversees the police force that's responsible for policing off the Capitol grounds, in the rest of DC that's not federal land. They're not the ones who would be asking for reinforcements to help secure the Capitol, they're one of the potential sources of reinforcements for the agency that is responsible for protecting the Capitol.

The mayor's request was basically that the Feds not unilaterally start escalating and militarizing police efforts in her jurisdiction without her involvement. In hindsight, that does seem to have been the correct strategy for her police department, because all the violence seems to have been concentrated within the jurisdiction of a different police department.

Re:Infosec implications of the US Capitol physical breach by matham on Thursday January 07, 2021 @12:41AM (#25667654)
Sure, but there's a difference between coming with riot gear and attacking protestors, and posting 10 cops to guard all of congress and then have them walk away when protestors show up leaving the doors wide open.

They could have easily guarded the building itself. Close the doors and post 30 guards at each entrance?

Re:Infosec implications of the US Capitol physical breach by colejohnson66 on Thursday January 07, 2021 @12:42AM (#25667657)
Interestingly, everything I read today said that they did request assistance. A day or two ago. It just took until the events unfolded for anything to happen. A very quick Google search turned up: https://abcnews.go.com/Politics/wireStory/urging-calm-dc-may...
Re:Infosec implications of the US Capitol physical breach by PeterisP on Thursday January 07, 2021 @02:36PM (#25676107)
On the other hand, council of DC asserts that they requested DC national guard support for this event but were denied - https://twitter.com/councilofdc/status/1346918966707499008
Re:Infosec implications of the US Capitol physical breach by powersnail on Thursday January 07, 2021 @01:33AM (#25667934)
They could have guarded the building, though, even if they don't want the agents to engage outside of the building. Guarding the entrance should be feasible. If it isn't, Congress should not have meetings there.
Re:Infosec implications of the US Capitol physical breach by tolbish on Thursday January 07, 2021 @12:26AM (#25667582)
Based on today's event, why would you think that they wanted to stop these rioters? Security was taking selfies with them.
Re:Infosec implications of the US Capitol physical breach by bostik on Thursday January 07, 2021 @02:21AM (#25668202)
Not just that.

Based on the reports, some of the rioters were carrying blue lives matter flags. I would say it's pretty obvious there were shared sympathies between the mob and those protecting the Capitol.

Being overrun by attackers is one thing. Ignoring them would be dereliction of duty. But assisting and siding with them? I don't even know what you'd call that anymore.

Re:Infosec implications of the US Capitol physical breach by openasocket on Thursday January 07, 2021 @10:47AM (#25672319)
The main issue is that this isn't what the Capitol police are optimized for. They are meant to handle the run-of-the-mill protesters, and prepare for an active shooter or bomb threat. A mob of people breaking in is very different. Handguns are much less useful when you've got 20 people breaking through the windows. You can't try to arrest one of them without being swarmed by the others, and if you end up firing a shot the crowd will panic and attack you and you simply don't have enough firepower or distance. To defend against a mob, you need many more officers (enough to stand side by side at relevant choke points) equipped with riot gear and tear gas to disperse the crowd. And then a Quick Reaction Force on standby with guns and nonlethal weapons who can reinforce any area where the mob is threatening to break through.

Without the numbers and the right equipment for the situation, the mob was able to break through and then the priority had to become securing the congresspeople until sufficient force could arrive to help clear.

Re:Infosec implications of the US Capitol physical breach by giarc on Thursday January 07, 2021 @10:55AM (#25672417)
We've all seen the side by side image comparison of the BLM protest response (guys in military get-up standing shoulder to shoulder on the steps) and the Trump "Stop The Steal" protest (a handful of cops). For whatever reason, they didn't think a group of angry protestors who said they were going to do this, would actually do this.
Re:Infosec implications of the US Capitol physical breach by openasocket on Thursday January 07, 2021 @11:13AM (#25672741)
Yeah, and you can bet there will be some very long and very serious investigations over this. Congress is plenty pissed off, and the Capitol Police work for them (I believe they technically are a part of the legislative branch, not the executive). And I think every law enforcement agent in the district should be ashamed of what happened.

I should point out that the photo going around showing the difference between the BLM response and the response to this mob is of the DC national guard, not Capitol Police. The DC national guard was not mobilized when the rioting started yesterday. Apparently it was requested but the DoD had not approved it. You can bet there will be some investigations there, and people involved will try to hide themselves in the bureaucracy and pointing fingers.

My bet is that, in a year or two, we'll see some serious reforms in this area. Probably an expedited procedure for mobilizing the DC National Guard, or Congress will be so angry they will demand an expansion of the Capitol Police force, since that force works directly for them.

Re:Infosec implications of the US Capitol physical breach by giarc on Thursday January 07, 2021 @11:18AM (#25672848)
My issue (and I'm not even an American) is why wasn't a large police presence there from the start? The Proud Boys, Q groups etc made it very clear this was going to happen. People can claim they weren't being serious, it was all just chest pounding prior to Jan 6 but why weren't they prepared for the most obvious outcome?
Re:Infosec implications of the US Capitol physical breach by Consultant32452 on Thursday January 07, 2021 @02:21PM (#25675888)
One thing that's not security theater is if you try to get into the room where the VP and Congress are you will be shot in the face (neck). Taking a podium or making a mess of some paperwork isn't all that meaningful. I think it shows that the security professionals have it figured out.
Re:Infosec implications of the US Capitol physical breach by vinni2 on Thursday January 07, 2021 @01:56AM (#25668043)
Isn’t this lapse in security somehow intentional? Most likely ordered by Trump not to interfere or he intentionally weakened the security.
Re:Infosec implications of the US Capitol physical breach by brobdingnagians on Thursday January 07, 2021 @04:31AM (#25669079)
Or ordered by someone else so that they could call it an attempted coup.
Re:Infosec implications of the US Capitol physical breach by adventured on Thursday January 07, 2021 @12:16AM (#25667532)
We saw the same thing during the Kavanaugh protests. The protestors were able to gain access to several locations in Federal buildings that they weren't supposed to be in. Nothing was changed to improve security, rather stupidly. During both Kavanaugh and the BLM / Antifa protests members of Congress were repeatedly threatened with death and or general physical violence (eg Rand Paul, a pacifist, being surrounded by a hyper violent mob and having to be shielded by half a dozen police officers as the mob tried to attack him and his family), little appears to have been modified to adjust for the atmosphere of increasing partisan violence that is enfulging the US. It's obvious what that's going to inevitably result in unless some appropriate security steps are taken. The partisan violence will get dramatically worse this decade as the sides split further apart. Some people foolishly think Biden is the end of it; Trump was only a symptom of what's happening, which is the beginning of a cultural civil war (the two major political sides in the US have absolutely nothing in common now), and increasingly intense acts of violence will go along with that.
Re:Infosec implications of the US Capitol physical breach by wolverine876 on Thursday January 07, 2021 @04:17AM (#25668963)
Can you cite bases for these claims and characterizations? Nobody has stormed the Capitol and violently disrupted Congress since the war of 1812, as I understand it. Certainly I've never seen anything like it. I don't agree that the protests described are remotely the same, nor with the characterization of the summer protests as "BLM/Antifa". I saw plenty of massive BLM protests, zero Antifa except occasionally on TV. It's like calling Redmond WA the town of Microsoft / Joe's Diner.

The idea that it's both sides and civil war is coming is certainly a claim of the militant right wing that seeks violence. Nobody else says it that I know of.

Re:Infosec implications of the US Capitol physical breach by dhruvdh on Thursday January 07, 2021 @02:13AM (#25668147)
I would say that both sides do have common ground, where common ground is lacking is mostly between politicians and the lower/middle class.
Re:Infosec implications of the US Capitol physical breach by 8note on Thursday January 07, 2021 @02:12AM (#25668145)
True pacisfism isn't not congruent with his capitalist leanings. Rand Paul is someone who's very ok with the police beating up and killing black people, so it makes sense that they'd be yelling at him
Re:Infosec implications of the US Capitol physical breach by sershe on Thursday January 07, 2021 @09:14AM (#25671225)
Well, how were they supposed to prevent it? I personally support killing rioters (of both political wings), but that is not palatable anymore. The building is not exactly and armored bunker. If they don't use force, there's quite literally nothing they can do to secure it. The same reason you can almost never win conventional wars in enemy territory anymore (that one might be for the best, but true nonetheless).
Re:Infosec implications of the US Capitol physical breach by i_haz_rabies on Thursday January 07, 2021 @09:48AM (#25671625)
You support killing rioters, eh? Care to define rioter? At what point does a worked up crowd of protestors become a riot? What if the police use agitators? What if a couple of protestors start damaging things, but the rest of the crowd remains peaceful? What if the rioters are running away, is it still okay to kill them? What if the rioters are legitimately trying to prevent a fascist regime from taking over? Do motivations count at all? Is it rioting to run from black-blocks? Is it rioting to shout at police lines? Is resisting arrest rioting?
Re:Infosec implications of the US Capitol physical breach by sershe on Thursday January 07, 2021 @12:09PM (#25673788)
You lost me at "What if the rioters are legitimately trying to prevent a fascist regime from taking over?". I bet many at the Capitol believed they are "legitimately trying to prevent a communist regime from taking over"... what you are basically saying is "violence is ok as long as I personally believe it's ok".

I'd say require the police line to wear body cams, have them on, and then require connecting a shot to a specific act. That would also serve as good Pavlovian training for people who think violence is ok as long as they personally think it's ok. The definition of what act can vary, but what I meant above is limited to this instant, targeted reaction - what I want to see is a specific "protester" throw a rock at police, or force entry, or set something on fire, and instantly gets shot; with camera evidence of both. Of course, I'd also accept arresting (and prosecuting with real punishment, not releasing after a few hours), but I don't believe it matters which one is used in the case of violent riots.

Re:Infosec implications of the US Capitol physical breach by lolc on Thursday January 07, 2021 @05:41PM (#25678687)
> Of course, I'd also accept arresting [...], but I don't believe it matters which one is used in the case of violent riots.

It matters a lot when you decide that rioting people can simply be shot. Because it means you've given them up as humans. One of our claims to civilization is that we handle violence sufficiently, not proportionally. And certainly not excessively.

Re:Infosec implications of the US Capitol physical breach by someperson on Thursday January 07, 2021 @09:39AM (#25671494)
> I personally support killing rioters (of both political wings), but that is not palatable anymore.

That's incredibly scary you hold that view: You're suggesting massacring protesters who are only causing property damage. Tear gas, rubber bullets and pepper spray are the way to disperse mobs/protesters/rioters from causing excessive property damage.

Of course if some protesters started shooting people then obviously using lethal force might be required.

Re:Infosec implications of the US Capitol physical breach by sershe on Thursday January 07, 2021 @12:18PM (#25673928)
Yeah, I should have clarified that other effective means of dispersal/incapacitation are also acceptable. However, I believe Draco of Athens was right about this in particular, so I don't personally think there's a difference.
Re:Infosec implications of the US Capitol physical breach by nepeckman on Thursday January 07, 2021 @09:28AM (#25671382)
We spent all summer watching as police subjected peaceful protesters to violent methods of crowd control. Why were there no rubber bullets, tear gas, etc? When BLM marched in DC, there were more armed guards in front of the Lincoln memorial than in front of the Capitol building yesterday. This was absolutely preventable.
Re:Infosec implications of the US Capitol physical breach by sershe on Thursday January 07, 2021 @12:12PM (#25673830)
First, there was tear gas, and in fact there were rioter(s?) shot by police. Then, you are comparing one protest to hundreds. There were tons of protests in Seattle where a group of a few dozen would go around marauding and looting and police would stand down and watch. Same here I guess.
Re:Infosec implications of the US Capitol physical breach by standardUser on Thursday January 07, 2021 @11:27AM (#25673069)
In the United States we hold the ideal that individuals should be subject to due process before being punished by the state. The idea that people should be executed extrajudicially is incompatible with a core philosophy of the American system and is way out of line with mainstream American values and beliefs.
Re:Infosec implications of the US Capitol physical breach by sershe on Thursday January 07, 2021 @12:24PM (#25674021)
It's not execution; in many/most states, you are allowed to defend life, health and property with deadly force. It may be getting watered down these days due to unfavorable public opinion, but a law in the books in WA is/was, iirc, that you can use deadly force to prevent a felony.
Re:Infosec implications of the US Capitol physical breach by standardUser on Thursday January 07, 2021 @01:56PM (#25675496)
In modern law the use of deadly force is only allowed to prevent a felony IF that felony create a substantial risk of death or bodily harm.

I mean, get real. You can't just shoot people for breaking windows or stealing. The fact that this is unclear to anyone is appalling.

Re:Infosec implications of the US Capitol physical breach by sershe on Friday January 08, 2021 @12:14AM (#25681743)
Why, from the first principles, though? It's a slope and not a switch, but even in the case of "regular" crime, I'm not entirely convinced someone showing willful, unambiguously intentional disregard for basic social contract/others' negative rights, has full claim to the same rights, i.e. full moral value.

In this case we are talking about trying to achieve political means via violence. The kind of people who do that outside of very extreme circumstances definitely renounce their moral value as human beings in my view. It's not that they /should/ be shot as a punishment or something; it's more like dealing with malarial mosquito - the evil is on the level where ends justify the means.

Re:Infosec implications of the US Capitol physical breach by standardUser on Friday January 08, 2021 @04:06PM (#25690503)
"The kind of people who do that outside of very extreme circumstances definitely renounce their moral value as human beings in my view. "

Your logic could be applied to any number of movements, including the Women's Suffrage movement, the Civil Rights movement, the Revolutionary War, and thousands more.

Re:Infosec implications of the US Capitol physical breach by sershe on Friday January 08, 2021 @09:48PM (#25695767)
Excluding the Revolutionary war, it would only characterize a small subset of these movements, often acting explicitly against the wishes of its spiritual leaders. It's not really about values; I am an atheist and I believe that the world would be a better place without religion, but if someone firebombed an empty church out of the same impulse I'd still place them in the same dehumanized category.
Re:Infosec implications of the US Capitol physical breach by kart23 on Thursday January 07, 2021 @12:29PM (#25674136)
Go to the middle east and you'll see what killing rioters looks like. Its not protests anymore, it turns into literal wars that devastate cities and innocent peoples lives.
Re:Infosec implications of the US Capitol physical breach by xienze on Thursday January 07, 2021 @12:56AM (#25667715)
You mean a courthouse in Portland being burned down during the summer didn’t already shake your faith in the security of our federal buildings?

And I’m not sure if people are aware but the capitol is a public building. Meaning, on a normal day anyone can just go in there. There wouldn’t have been the physical intrusion everyone is catching the vapors over if they hadn’t put up barriers and shut down the whole city in the first place. You know, I’m actually starting to understand that whole argument about how preemptive shows of force by the police can actually escalate a situation...

Re:Infosec implications of the US Capitol physical breach by coddingtonbear on Thursday January 07, 2021 @01:10AM (#25667806)
As a person who lives in Portland, I can tell you “burned down” is an incredible exaggeration. Somebody did set a desk on fire, though.
Re:Infosec implications of the US Capitol physical breach by dboreham on Thursday January 07, 2021 @01:03AM (#25667752)
Hmm. I've been in the capitol building. From memory you can't just waltz in there like it's grand central station.