News for hackers. Stuff that matters.
Re:A physical breach is a nightmare scenario for Capitol IT by watwut on Thursday January 07, 2021 @03:27PM (#25676933)
Random visitors don't go into offices. They don't look into cupboards. They don't sit behind desk with computer.
Re:A physical breach is a nightmare scenario for Capitol IT by Rebelgecko on Thursday January 07, 2021 @03:48PM (#25677253)
I am a random nobody and I was able to waltz in to my congresswoman's office. Obviously I wasn't digging through the desk drawers, but it's not like I was closely observed while I waited for my congresswoman's secretary to get off her phone call
Re:A physical breach is a nightmare scenario for Capitol IT by moate on Thursday January 07, 2021 @04:11PM (#25677533)
This is not similar to having 4 ours of unfettered access during a riot. They literally were digging in desk drawers, using the phone, leaving threats, carving hate speech into wooden doors, etc.

I once saw a citizen with a 6-shooter strapped to his hip at a Colorado county clerk's office peacefully fill out some paperwork for 5 minutes. What does this story tell us about what rioters did or didn't do while tearing up the capital building?

Re:A physical breach is a nightmare scenario for Capitol IT by defen on Thursday January 07, 2021 @05:55PM (#25678822)
> I once saw a citizen with a 6-shooter strapped to his hip at a Colorado county clerk's office peacefully fill out some paperwork for 5 minutes. What does this story tell us about what rioters did or didn't do while tearing up the capital building?

1 minute of Googling tells me that Colorado is an open-carry state, and there is no specific exclusion for county offices, so unless this was in Denver or another municipality that prohibits open carry I don't see the relevance of your story to what happened in the Capitol.

Re:A physical breach is a nightmare scenario for Capitol IT by kthxbye123 on Thursday January 07, 2021 @07:22PM (#25679616)
That's his point. There's no comparison between entering the public part of an office during business hours and what happened yesterday.
Re:A physical breach is a nightmare scenario for Capitol IT by chefkoch on Thursday January 07, 2021 @03:35PM (#25677070)
But perhabs visitors like lobbyists, donors etc. could be often alone long enough with a computer to something bad. And don't forget all the viruses that tweet porn links.
Re:A physical breach is a nightmare scenario for Capitol IT by bregma on Friday January 08, 2021 @07:18AM (#25683892)
I'm sure it happens. According to what I've seen on TV, all you need to do is stick a thumb drive in a laptop and utter the magic incantation "OK, I'm in" and you can either download the entire content of the network or implant a virus in the time it takes for someone to come back into the room.
Re:A physical breach is a nightmare scenario for Capitol IT by watwut on Thursday January 07, 2021 @05:13PM (#25678352)
Unlikely, given that it does not happen in commercial companies either and there no one particularly has reason to care.
Re:A physical breach is a nightmare scenario for Capitol IT by MacsHeadroom on Thursday January 07, 2021 @05:21PM (#25678462)
Private companies are compromised by visitors every single day. Outsiders on-premise are one of the largest attack vectors after insiders.

This is why both the local network and endpoints are no longer trusted in security models.

Re:A physical breach is a nightmare scenario for Capitol IT by AnimalMuppet on Thursday January 07, 2021 @03:35PM (#25677068)
How about staffers working for members from the other party? Yes, you'd expect a "gentlemen's agreement" not to do such things. You might not be wise to trust it, though...
Re:A physical breach is a nightmare scenario for Capitol IT by watwut on Thursday January 07, 2021 @04:50PM (#25678057)
I doubt there is anything like gentlemens agreement last 8 year's. Everyone was aware it is sociopaths run the place.

So I think other party stsffers are not trusted to be left alone.

Re:A physical breach is a nightmare scenario for Capitol IT by XorNot on Thursday January 07, 2021 @07:12PM (#25679533)
"You will go to jail forever" and "You will be completely unemployable forever" are still two surprisingly effective deterrents against the vast majority of the population when they have a job.

There's lots of stuff you "could" do everyday, but the probability of getting caught is high, the ultimate impact to anyone else is low, and the severity of punishment immense.

All that changes quite significantly when even basic access control is lost and the building is overrun by unidentified belligerents for a few hours. I'm betting a number of foreign intelligence agencies were scrambling to see if they could take advantage usefully.

Re:A physical breach is a nightmare scenario for Capitol IT by alisonkisk on Friday January 08, 2021 @02:21PM (#25688948)
There's no "unemployable" for political crimes. It makes you more employable by the side you did the crimes to help.
Re:A physical breach is a nightmare scenario for Capitol IT by generalizations on Thursday January 07, 2021 @03:30PM (#25676986)
And yet you still have to assume they might.
Re:A physical breach is a nightmare scenario for Capitol IT by lumost on Thursday January 07, 2021 @03:33PM (#25677031)
Authorized individuals have classified documents on Capitol hill computers, there have been many options available to support breaching a workstation given physical access for years.

In this event you don't even know if such authorized persons had time to lock their computers.