News for hackers. Stuff that matters.
Re:DOGE Worker’s Code Supports NLRB Whistleblower by jiggawatts on Wednesday April 23, 2025 @07:10PM (#43777667)
All of what you said is either true or likely honest statements from the agency staff… yet completely misses the point.

> We have built in roles that auditors can use

… and we make sure doesn’t reveal our wrongdoing.

— that’s what DOGE is tasked with uncovering. The “deep state”, the lies, hidden costs, etc…

Now you may think this is counterproductive. You may think this is political posturing. You may think it’s borderline conspiracy theory nonsense.

We agree!

Trump, Musk and DOGE don’t agree with us and don’t trust the staff that they believe are providing carefully constrained access and curated data dumps with strategic omissions.

THIS is why they’re side-stepping the official processes and using the skeleton key.

Again, please, focus on disambiguating the politics from the technical steps being taken.

If the task is: “Get all the data, especially the data they’re trying to hide from us” then asking for Tenant Admin is the right technical choice.

I can pick apart every other statement but I don’t have the time. But as a quick note: it’s common for the RBAC permissions to be the inverse of the organisational permission. As a random subcontractor I often get granted Domain Admin or the equivalent and the CIO, CTO, and CISO staff are treated the same on the network as some secretary might. They’re meeting jockeys, not super admins! The fact that the staff member raised this “issue” automatically implies that they know nothing and that their opinions and statements are suspect.

PS: Most systems don’t have a built-in Tenant Reader role, they only have Tenant Admin. DOGE staffers would have been instructed not to trust any custom role, so… Tenant Admin it is.

Re:DOGE Worker’s Code Supports NLRB Whistleblower by thrwaway438 on Wednesday April 23, 2025 @08:41PM (#43778241)
Your argument makes sense. I still speculate they're doing malicious things.
Re:DOGE Worker’s Code Supports NLRB Whistleblower by jiggawatts on Wednesday April 23, 2025 @09:22PM (#43778431)
DOGE was given a mandate by a President with unprecedented (hah) unitary power. They’re executing on that, roughly how you’d expect them to, given their instructions and the time and resources available to them.

I personally feel that they’re being reckless and sloppy, uncovering “waste” that is often simply an artefact of their hubris. In doing so, they’re risking exposing the internal systems of the government to outside attack.

This is the rough equivalent of the guards in a prison turning over everything in a cell looking for contraband.

It’s not nice. It’s rarely productive. It is also a tool of intimidation. That’s part of the point. The prisoner is not supposed to like it. They’re not invited politely to present what they want others to see. They’re humiliated and powerless. That’s what the MAGA and DOGE want.

Re:DOGE Worker’s Code Supports NLRB Whistleblower by thrwaway438 on Wednesday April 23, 2025 @11:08PM (#43778934)
1. DOGE is acting in this way to uncover the "deep state" (unironically).

2. DOGE is committing treason.

3. DOGE is humiliating those who were formerly in control.

A little of column A, B, and C in my opinion. At this point it doesn't matter what's true. I think all parties are involved to commit terrible acts, whether they're directly assets of a foreign power or just have something to gain. Inept, traitorous, opportunistic, inhumane, careless.. the whole party is here.

I hope when all is said and done, a true accounting is performed and those who committed the damage are held responsible. It won't matter what their associations or intent was. Manslaughter is manslaughter.

Re:DOGE Worker’s Code Supports NLRB Whistleblower by zzrrt on Wednesday April 23, 2025 @10:06PM (#43778641)
> DOGE staffers would have been instructed not to trust any custom role, so… Tenant Admin it is.

Ok, arguing with DOGE on their own terms… I confess I’m not knowledgeable with these systems, but how do you even trust it when it tells you you’re the “Tenant Admin”? Why would the deep state be unable to fabricate such a role that looks like the real one but is still lying to you? I did enough research to assume this is a Microsoft thing, so you might be viewing a Microsoft domain signed by a Microsoft SSL cert, and trust that Microsoft is telling you you’re really the highest admin. But… we’re talking a vast conspiracy with billions on the line… why would a true-believer DOGE crusader not believe there are also deep state agents in Microsoft, the certificate authorities, and ISPs?

Asking for Tenant Admin or whatever magic term seems like a start to get “the truth”, but completely inadequate to actually take down “the deep state.”

Of course, that’s the beauty of it. A super-powerful, secret enemy can never be vanquished, so they’re always a great excuse to take the next step to demolish the real government and trample the rights of the people.

Re:DOGE Worker’s Code Supports NLRB Whistleblower by jiggawatts on Wednesday April 23, 2025 @10:29PM (#43778748)
Azure for example has a built in role (actually a checkbox) that is un-fakeable by anyone that can’t MITM the portal web site.

The NSA might be able to do this, but even they’d be finding it a challenge if forced to do so on short notice with someone looking over their shoulder.

Re:DOGE Worker’s Code Supports NLRB Whistleblower by zzrrt on Wednesday April 23, 2025 @11:27PM (#43778999)
Infiltrating Azure, hacking a third-world CA, or evil maiding DOGE employees’ computers would be among the easiest tasks the deep state would undertake. On one hand, sure, criminals fail at easy things all the time, but this is the supposed most powerful secret organization; you can’t assume you have a technical solution they can’t crack. Focus on data they didn’t show you just because you said “tenant admin.”