News for hackers. Stuff that matters.
Re: by bad_username on Sunday February 09, 2025 @05:35PM (#42994818)
> all usual controls were bypassed and the DOGE people had very low level access to systems

Before DOGE, somebody obviously had to have this access as well, and similarly could have copied and stored. Why be concerned with DOGE but not their predecessors? Honest question.

Re: by acdha on Sunday February 09, 2025 @05:59PM (#42995018)
Here’s how that sounds to anyone with security experience: “Before the bank president gave his nephew the vault keys, somebody must have had access as well.”

Federal IT has tons of policies designed to prevent unauthorized access and mistakes. People go through background checks, they only work on secured networks using official devices, everything is logged and audited, and circumventing it is a crime with penalties potentially leading to jail time. Some of those policies have strong legal requirements for oversight: even if you’re not doing anything other than your job, the agency needs to be able to show how work is done to auditors, Congress, FOIA requests, etc. Anything with national security implications should be designed to avoid a single compromised person from being able to avoid detection, too, especially for people trusted with administrative access to IT systems.

These guys are widely reported to be using personal emails and devices (violating the record and transparency laws) and even if they’re acting entirely in good faith they are bypassing policies designed to contain the damage due to mistakes. For example, what happens if one of them gets an email with an attachment claiming to have evidence of politically incorrect activities and runs the payload on a device/network which has had safeguards removed by executive fiat?

Re: by adgjlsfhk1 on Sunday February 09, 2025 @05:41PM (#42994868)
Because before the people that had access to this data got that access after passing background checks, had years in the treasury, supervision from higher-ups, and other processes in place. Now it's being accessed by cyber-criminal Nazis in their 20s who describe themselves as wanting to "Normalize Indian hate", " want a eugenic immigration policy", and who "were racist before it was cool" https://www.npr.org/2025/02/06/nx-s1-5289337/elon-musk-doge-....
Re: by A4ET8a8uTh0_v2 on Sunday February 09, 2025 @05:58PM (#42995005)
Hmm. I am hesitant to engage this post, but it may be well worth to point out, that some of issues with status quo are precisely the result of "people that had access to this data got that access after passing background checks, had years in the treasury, supervision from higher-ups, and other processes in place". Until now it was old boys club that did not dare to shake things up a little.

My point is that there is plenty to dislike here, but if your argument against him is: he is a nazi, you have already lost, because you do not understand the sentiment out there.

Re: by Aeolun on Sunday February 09, 2025 @07:04PM (#42995467)
And the sentiment is we should have nazis rifling through the personal information of all US citizens? (and mine I suppose, because that ESTA form asks you everything up to your waist size)
Re: by iugtmkbdfil834 on Sunday February 09, 2025 @08:26PM (#42995997)
The sentiment is "words like nazi are not helping the conversation". In fact, they may be actively hurting the point you are trying to get across.
Re: by throw0101d on Sunday February 09, 2025 @06:18PM (#42995151)
> Hmm. I am hesitant to engage this post, but it may be well worth to point out, that some of issues with status quo […]

Is one of the issues that an audit log of actions was created? Because it seems to me some of the levels of access given to the DOGE folks mean that auditing and traceability has now gone out the window like a Russian oligarch.

I'm a sysadmin who 'just' runs a bunch of HPC stuff—nothing 'important' like HIPAA or SOX—and even my systems have some level of auditing and logging.

Re: by A4ET8a8uTh0_v2 on Sunday February 09, 2025 @06:24PM (#42995202)
See? This is already a much better argument than what parent posted. If you tone down Russian hysteria angle ( not wrong, just pointing out how it is coming across ) the other side may be able to hear you.

This is basically my point and that point is the same point I make for Zuck, Thiel and others. There is already plenty of real things to complain about.

How about we focus on those?

Re: by donmcronald on Sunday February 09, 2025 @08:33PM (#42996036)
I think what the posts above you are trying to say, and not doing a great job because of the emphasis on rhetoric, is the actions being taken are hypocritical.

The argument from the DOGE side is that entrenched interests are operating opaque systems and gating access to the information needed to identify inefficiencies. It's not a bad argument because it's no secret that you end up with waste in big companies or government programs and everyone should want to improve efficiency.

However, it's a bad faith argument because the public's being told they're being disenfranchised by a lack of transparency at the same time they're being told to accept a solution that has no transparency or oversight.

When you have tech billionaires with a lifelong goal of controlling payments since starting PayPal in the 90s, is it unreasonable to be skeptical of their motivations when they've managed to gain access to the government's payment system? Aren't these the same people sucking up our private information and telling us if we've got nothing to hide we've got nothing to fear? Why do they need to operate in the shadows?

Re: by A4ET8a8uTh0_v2 on Monday February 10, 2025 @08:43AM (#43000187)
I have zero issue with the arguments you presented, because I know you are being factually accurate ( to the best of my knowledge anyway; I wonder if there is a person out there that has a full unrestricted view of everything ).

<< is it unreasonable to be skeptical of their motivations when they've managed to gain access to the government's payment system? Aren't these the same people sucking up our private information and telling us if we've got nothing to hide we've got nothing to fear? Why do they need to operate in the shadows?

I don't want to argue for DOGE, because their fanbase is doing it on various fora already ( including this one ).

But to answer your question, it is not unreasonable at all. Those questions should be asked and, ideally, answered.

It is vital that the government officials are watched, their performance evaluated and our political will enforced by means we deem necessary. From where I sit, what is good for goose, is good for gander.

If I hesitate, it is around the level of emotion this generates. Some of it is warranted ( I would lie if I said I am not concerned ), but it does not help with making an appropriate response. In fact, that level of emotion actively inhibits making good choices.

You have to give it to him. It does look like Trump actually had a plan this time around.

Re: by dani__german on Monday February 10, 2025 @10:43AM (#43001561)
I don't think the constant news cycles covering each and every dime that USAID misused is indicative of a lack of transparency. I think given just a little more time, DOGE could uncover (and reveal to the American people) a lot more than 50 billion of waste and corruption.

As for the oversight requirement, it is fully and completely satisfied by: 1.) A guy who has the technical acumen, drive, and attention to detail to catch a rocket out of mid air with chopsticks. 2.) A man who won a presidential election twice (and could possibly have been 3 times if the Hunter Biden laptop story wasn't corruptly and improperly squashed).

The largest proportion of the complaints from media outlets come from defunded operations. Its in everyone's fiscal best interest for these audits to continue, and for them to be completed by people completely outside of the government's patronage (grant and funding) networks.

Re: by throw0101d on Monday February 10, 2025 @08:26PM (#43007831)
> I don't think the constant news cycles covering each and every dime that USAID misused is indicative of a lack of transparency.

Every dime that the USAID spent was allocated via Congress through the budgeting process.

And many (11/12) of the published stories about supposed wasteful spending were not true:

* https://www.washingtonpost.com/politics/2025/02/07/usaid-tru...

More importantly, even if sending money to USAid is wasteful, that is Congress's prerogative. The President's job is to "take Care that the Laws be faithfully executed": if Congress wants to spend money on Foo then that's what he is supposed to do.

Re: by throw0101d on Tuesday February 11, 2025 @07:57AM (#43012236)
> Every dime that the USAID spent was allocated via Congress through the budgeting process.

A thread on the general process:

> Every year, the White House (via OMB) puts together a federal budget proposal to Congress. Every federal agency (incl USAID) sends OMB their budget wishlist.

[…]

> So to be clear: every dollar that USAID requests from Congress goes through White House review.

[…]

> Once USAID gets its budget from Congress, it must go straight back to Congress again with a further level of detail on how it will satisfy the various budget directives - via "Congressional Notifications."

* https://twitter.com/JeremyKonyndyk/status/188866737886876071...

Re: by dani__german on Wednesday February 12, 2025 @08:59AM (#43025473)
Many of those fact checks make a huge deal about minor distinctions that in no way redeem the amount of money that was spent on their """""intended""""" purposes. Example:

" “$32,000 for a ‘transgender comic book’ in Peru”

This is wrong. USAID did not fund this, and it was not specifically transgender. Instead, the grant says the State Department provided $32,000, under the guise of public diplomacy, to Peru’s Education Department “to cover expenses to produce a tailored-made comic, featured an LGBTQ+ hero to address social and mental health issues.” "

So the comic existed, but it was funded by another equally corrupt department? This doesn't make USAID look any better at all, it just means Trump and Elon's team need to do MORE of what they have been doing, and expand their scope further.

I don't really care that a 2500 page omnibus spending bill that no one could read in full (minus an AI) specifically said that some pork goes to some unethical and corrupt action. Its evil and it needs to stop. If the government's normal checks and balances cant fix it, the answer is not to give up and let corrupt liberals desecrate the union. The answer is to fulfill the promise of the 2nd Amendment and to break the system of government in whatever way is necessary until it is no longer tyrannical. Remember that a 2% tax on tea without sufficient and effective representation is an acceptable threshold for such actions.

Re: by juujian on Sunday February 09, 2025 @05:42PM (#42994869)
Process for security clearance might have caught this kids background, and then decision makers would have at least had a conversation about it. This kid is more a symptom of a wider lack of controls though, who knows whether any of Musk's script kiddies has a criminal background. Important to note that previous Trump administration has already followed out/bypassed security clearance process, so this is really just the next evolution of the disregard for criminal elements or foreign interests.
Re: by bad_username on Sunday February 09, 2025 @05:50PM (#42994932)
You say there's security clearance which was a prerequisite for the predecessors but was bypassed by the DOGE team. Understood.