News for hackers. Stuff that matters.
Re:Treasury agrees to block DOGE's access to personal taxpay... by mattmaroon on Thursday February 20, 2025 @06:01PM (#43121580)
It's not really a breach if it is from the same organization (i.e. the executive branch). It may lead to one.
Re:Treasury agrees to block DOGE's access to personal taxpay... by lozenge on Thursday February 20, 2025 @07:52PM (#43122735)
Although authorised by some members of the executive branch, it is missing some of the oversight the executive branch is supposed to have.
Re:Treasury agrees to block DOGE's access to personal taxpay... by rayiner on Thursday February 20, 2025 @08:28PM (#43122998)
Such as what oversight exactly?
Re:Treasury agrees to block DOGE's access to personal taxpay... by afavour on Thursday February 20, 2025 @09:11PM (#43123260)
Security clearances are surely one? Government employees with access to that data are heavily vetted. DOGE, not so much.
Re:Treasury agrees to block DOGE's access to personal taxpay... by rayiner on Thursday February 20, 2025 @09:13PM (#43123276)
Security clearances for classified information and most IRS employees don’t have security clearances.
Re:Treasury agrees to block DOGE's access to personal taxpay... by philistine on Thursday February 20, 2025 @09:59PM (#43123502)
Yeah, let's just assume there are no safeguards in place at the IRS to protect personal data.
Re:Treasury agrees to block DOGE's access to personal taxpay... by xyzzyz on Thursday February 20, 2025 @10:25PM (#43123677)
These IRS safeguards will not be of the “security clearance required” form. IRS data, while private, is not classified.
Re:Treasury agrees to block DOGE's access to personal taxpay... by master_crab on Thursday February 20, 2025 @11:35PM (#43124064)
This. IRS data isn’t protected because it’s classified. It’s protected because of confidentiality enforced by laws passed by Congress (the Tax reform act I believe)

(and the fact that the executive branch can be sued out of their pants for civil damages).

Re:Treasury agrees to block DOGE's access to personal taxpay... by jrs235 on Friday February 21, 2025 @07:00AM (#43126553)
*(and the fact that the executive branch can be sued out of their pants for civil damages)

if the government agrees to allowing itself to be sued...

Re:Treasury agrees to block DOGE's access to personal taxpay... by genewitch on Friday February 21, 2025 @02:48AM (#43125120)
They have 500MB email boxes! Actually I wonder, now, because they wanted to hire 84k people last year...
Re:Treasury agrees to block DOGE's access to personal taxpay... by rayiner on Friday February 21, 2025 @06:37AM (#43126399)
You’re the one assuming DOGE is ignoring “safeguards” you don’t even know exist.
Re:Treasury agrees to block DOGE's access to personal taxpay... by afavour on Friday February 21, 2025 @12:15PM (#43130147)
We know they are?

> The USAID systems the DOGE team tried to access included personnel files and security systems, including classified systems beyond the security level of at least some of the DOGE employees, according to three of the sources. The systems also included security clearance information for agency employees, two of the sources said.

https://www.nbcnews.com/politics/national-security/usaid-sec...

Re:Treasury agrees to block DOGE's access to personal taxpay... by evanjrowley on Friday February 21, 2025 @01:39AM (#43124665)
I'm familiar with IRS contracts and while security clearances are not involved, they do have a unique background investigation process that involves a tax audits.
Re:Treasury agrees to block DOGE's access to personal taxpay... by figassis on Friday February 21, 2025 @02:45AM (#43125106)
It would not be security clearances, but some form of assurances for protecting PII. Think of it this way. If this system contained people’s credit cards numbers, the entire system would be required to be PCI certified, and that requires that processes and procedures be in place so that even employee access is extremely limited. Data shouldn’t even be plaintext at rest. No one really needs to see anyone’s credit card number. Anonymized data is just fine.

So some agency, authorized by the president or not, barging in asking for read/write access to card numbers should not be allowed, because the data aren’t the president’s to give.

Same should be valid for social security numbers. You can’t guarantee that 100% of DOGE’s employees are benign, or that they are have the best opsec, or that their devices are not exploitable (or exploited already). So you minimize this attack surface by minimizing access.

Because if anything happens, then you can be 100% certain that Musk/Trump will not voluntarily answer for it/make people whole. They will at best be taken to court where they will fight for years while the victims suffer the consequences in the present.

So you do everything you can to prevent this nebulous, blameless “we meant well, we couldn’t know this would happen, we’re sorry for all the pain, let’s move forward together” outcome.

Re:Treasury agrees to block DOGE's access to personal taxpay... by snowwrestler on Friday February 21, 2025 @11:07AM (#43129122)
Congress is in charge of the IRS, and the president is charged with operating it.

Since the president and members of Congress are not posted up in there 24/7, the IRS has created internal controls and procedures so that when the president or Congress asks for a report, the IRS can give them an accurate one. It’s these controls that people are thinking of. The article has an example:

> Political officials do not have access to the Integrated Data Retrieval System, or IDRS. The IRS’s commissioner, national taxpayer advocate and even senior officials in the office of the chief information officer, do not have IDRS access either.

“Do not have access” in this case means they have made internal rules, essentially denying themselves access, in order to better document that they are doing what Congress wants them to do.

This is true in many agencies, and one of the concerns with DOGE is that they seem to be trying to circumvent these controls. That may impair the ability of an agency to meet their legislative mandate (e.g. protecting taxpayer privacy), and also impair the agency’s ability to even document what they are doing.

So the answer to “what oversight” is that Congress ultimately has the power of oversight, and the executive branch has the responsibility to operate in such a way that they can accurately satisfy requests from Congress.

Re:Treasury agrees to block DOGE's access to personal taxpay... by freejazz on Friday February 21, 2025 @11:39AM (#43129603)
The legislation and the judiciary, this is Civics 101.
Re:Treasury agrees to block DOGE's access to personal taxpay... by Applejinx on Thursday February 20, 2025 @07:53PM (#43122747)
It is if it's actually to a foreign adversary.
Re:Treasury agrees to block DOGE's access to personal taxpay... by scarab92 on Thursday February 20, 2025 @08:14PM (#43122898)
People hate Musk too much to remain curious and these threads always just devolve into this type of uninformed ranting.

Reddit might be more suitable for most commenters in these threads.

Re:Treasury agrees to block DOGE's access to personal taxpay... by dang on Friday February 21, 2025 @12:03AM (#43124217)
Could you please stop posting flamebait comments and please stop duplicating comments? You've been doing way too much of this and are over the line at which we'd ban an account.

I don't want to ban you because everyone goes on tilt sometimes, but please stop now.

https://news.ycombinator.com/newsguidelines.html

Re:Treasury agrees to block DOGE's access to personal taxpay... by fjjjrjj on Thursday February 20, 2025 @08:02PM (#43122817)
Re:Treasury agrees to block DOGE's access to personal taxpay... by johnnyanmac on Thursday February 20, 2025 @06:26PM (#43121866)
Technically yes. I'd still be just as worried as a breach given the context though.
Re:Treasury agrees to block DOGE's access to personal taxpay... by dboreham on Thursday February 20, 2025 @08:48PM (#43123127)
It's like if your CEO sent you an email saying you should give the production DB credentials, and any encrypted at rest keys to their cousin.

Probably you wouldn't do that.

Re:Treasury agrees to block DOGE's access to personal taxpay... by Spivak on Thursday February 20, 2025 @09:13PM (#43123275)
Like technically he does have the authority to compel you to do that but at the same time it's a massive red flag if he asks you in the first place.

I do understand why this administration is trying very hard to centralize authority because it's faster than vetting a bunch of people they can trust to act on their behalf. But on the other hand federal employees making it as hard as possible to do what they perceive as bad/immoral is a soft-check on the executive.

Re:Treasury agrees to block DOGE's access to personal taxpay... by aforwardslash on Friday February 21, 2025 @02:48PM (#43132085)
He may not actually have the authority for it; Imagine you're a cto receiving this request - you don'respond to the ceo, but to the administration board instead, just like the ceo.

In fact, if you were a cto and you carried out this request without any kind of due diligence or vetting, you'd probably be legally and criminally liable for it.

The same applies to anyone under the cto management (so basically all IT); they don't respond to the ceo, their top boss is the cto. I know, in smaller companies, where the ceo is also the owner, there is a tendency to confuse the boundaries of the roles - in my experience, it is up to the cto to politely deny these requests and educate the ceo on the "why"; if he still wants to move forward, he can hire another cto

Re:Treasury agrees to block DOGE's access to personal taxpay... by mattmaroon on Friday February 21, 2025 @01:29AM (#43124615)
You might resist, but if you didn’t it would hardly be a data breach.
Re:Treasury agrees to block DOGE's access to personal taxpay... by kevin_thibedeau on Thursday February 20, 2025 @08:49PM (#43123132)
We can be all but certain that the CCP has its tendrils into Big Balls' phone and computers. A bunch of idiots with no opsec skills makes for easy pickings.
Re:Treasury agrees to block DOGE's access to personal taxpay... by cced on Friday February 21, 2025 @01:28AM (#43124607)
Why does the ccp always come up in these discussions? You have Rogue billionaire taking an axe at the pillars of government and there’s still someone bringing up the ccp.

Why

Re:Treasury agrees to block DOGE's access to personal taxpay... by flowerthoughts on Friday February 21, 2025 @02:37AM (#43125060)
It's a good story. Having a tangible villain helps some people internalize the message more easily than if it was a dry account with vague connections to reality. If you're out to "rally the troups", stirring up emotion is a required component.

Take CCP is an example to form an emotional attachment to.

Re:Treasury agrees to block DOGE's access to personal taxpay... by omnimus on Friday February 21, 2025 @03:27AM (#43125338)
But the tangible villain is already there no? Musk?
Re:Treasury agrees to block DOGE's access to personal taxpay... by jrs235 on Friday February 21, 2025 @06:57AM (#43126525)
The CCP is used to shake and wake the folks that see Musk as the hero and everything taking place as lovely. Since they only see a hero in the story a villian is introduced to attempt to make think about how things could go wrong.
Re:Treasury agrees to block DOGE's access to personal taxpay... by Kelvin506 on Friday February 21, 2025 @01:47AM (#43124729)
A lot of people are so brainwashed by U.S. propaganda they cannot comprehend that American billionaires are independently evil. Add to that the fanboyism where his sycophants can't see how utterly rotten Musk is and always has been.

Their sense of world order requires there be a shadowy threat actor such as Russia or China, instead of the obvious truth that this is American capitalism operating as designed.

Re:Treasury agrees to block DOGE's access to personal taxpay... by andriesm on Friday February 21, 2025 @03:09AM (#43125227)
What makes Musk so utterly rotten? Otherwise "it's just like your opinion, man..."

"Requires a shadowy threat actor such ad Russia and..."? Trump is trying to normalize US-Russian relations.

"This is American capitalism operating as designed" - Honestly what do you mean?

Trump and Musk's reforms looks different enough from anything else tried in the last 25 years that I am super curious to see where it goes. I'm not into fear porn that this is the end of the world, H*tler, or whatever.

I'm also curious about Billionaires being independently evil - what do you mean, are virtually all billionaires evil? Are they really morally worse people than the average or do they just have access to more resources and influence?

Re:Treasury agrees to block DOGE's access to personal taxpay... by fjjjrjj on Friday February 21, 2025 @03:19AM (#43125285)
> I'm not into fear porn that this is the end of the world, H*tler, or whatever.

Are you are okay with Trump splitting Ukraine with Russia and blessing Russia's war on Ukraine?

There are historical parallels with Hitler annexing other countries. You not being into that reality is a choice.

Re:Treasury agrees to block DOGE's access to personal taxpay... by andriesm on Friday February 21, 2025 @03:43AM (#43125437)
It is possible to be unhappy with the end result of Ukraine or Trump's views of Ukraine without psyching ourselves up that these two dudes are literally H*tler.
Re:Treasury agrees to block DOGE's access to personal taxpay... by fjjjrjj on Friday February 21, 2025 @03:59AM (#43125533)
Trump has blood on his hands. Full stop. He made Putin's war his own and embraced the idea of the US annexing other countries.

Things will get better once more brown people are at Guantanamo. /s

Re:Treasury agrees to block DOGE's access to personal taxpay... by rightbyte on Friday February 21, 2025 @08:01AM (#43126942)
I guess the alternative to cut the loss and move on would be to go for the global extended suicide option.
Re:Treasury agrees to block DOGE's access to personal taxpay... by AlecSchueler on Friday February 21, 2025 @08:16AM (#43127058)
It's possible but the concentration camps, the removal of trans rights, the push towards a unitary executive, referring to the disabled as "parasites," and the scapegoating, etc etc etc all add up to one thing.
Re:Treasury agrees to block DOGE's access to personal taxpay... by freejazz on Friday February 21, 2025 @11:37AM (#43129591)
>Trump and Musk's reforms looks different enough from anything else tried in the last 25 years that I am super curious to see where it goes. I'm not into fear porn that this is the end of the world, H*tler, or whatever.

Arbitrarily firing arbitrary amounts of federal employees on the belief that this will make the gov't function better? Are you also currently in talks to buy the Brooklyn Bridge?

Re:Treasury agrees to block DOGE's access to personal taxpay... by pragmatic on Friday February 21, 2025 @09:42AM (#43127979)
Because that's what an intelligence agency from a rival nation state would do?
Re:Treasury agrees to block DOGE's access to personal taxpay... by wodenokoto on Friday February 21, 2025 @12:31AM (#43124327)
You can have data breaches within an organization.
Re:Treasury agrees to block DOGE's access to personal taxpay... by mattmaroon on Friday February 21, 2025 @01:28AM (#43124609)
Ok, you’re right, but this is not that. This is the leader of the organization specifically wanting them to have the data.