News for hackers. Stuff that matters.
Re:AWS doesn't make sense for scientific computing by walnutclosefarm on Friday October 07, 2022 @09:08PM (#33128884)
Yes. Probably not surprise that the postdoc was a PRC national. Very competent in their field of study, but also in this country with instructions from an APT group.
Re:AWS doesn't make sense for scientific computing by onetimeusename on Friday October 07, 2022 @10:03PM (#33129169)
I had a feeling you would say that. I don't think this was part of our threat model until pretty recently. That was why I asked, because these stories aren't really internalized collectively yet I think and it's valuable to reconsider who we can trust and what threat actors might value.
Re:AWS doesn't make sense for scientific computing by kregasaurusrex on Saturday October 08, 2022 @12:42AM (#33129823)
Sorry you were on the receiving end of that and had to learn the hard way. We had the dean of the college (large public research university) I was working at the time receive a gift of a bunch of new MBPs as a token of goodwill from a foreign country, and heard in the very next sentence that they would be going straight into a shredder. At the time I thought these brand-new laptops could easily be wiped & repurposed; but now realize it was a potential attack surface that can easily leak info to APT/espionage groups the second it connects to a network.

Less than a year later a story made national headlines that a professor with direct access to classified material had mysteriously disappeared & never disclosed his close ties with their home country. So not only should you be worried about back doors and side doors; but also watch what's going through your front door as well!