News for hackers. Stuff that matters.
Re:Residential Proxies Detected on White House Network by dhosek on Wednesday November 04, 2026 @06:09PM (#50372737)
They’re too polite to say it explicitly, but when they say:

> Most of the activity happens in the evening, Eastern time: about half of it falls between 5 p.m. and midnight, and almost none happens in the early morning. That pattern suggests a person rather than a public guest Wi-Fi network: someone regularly on the White House network late into the evening, whose device is infected with a proxy SDK. Our data shows the exits, not the device or the person behind them.

There really aren’t very many candidates for who that person might be and it really seems like it would be someone who, I don’t know, maybe lives where the traffic is originating.

Re:Residential Proxies Detected on White House Network by dpark on Wednesday November 04, 2026 @06:25PM (#50372871)
A lot of people work at the White House. Many of them doubtless work a night shift. The set of candidates here is actually quite large.
Re:Residential Proxies Detected on White House Network by therein on Wednesday November 04, 2026 @06:33PM (#50372926)
Could even be cleaning or security.
Re:Residential Proxies Detected on White House Network by dpark on Wednesday November 04, 2026 @06:35PM (#50372946)
As someone elsewhere in the thread noted, this could well be the press. Could also be that this isn’t the White House network at all despite that attribution.
Re:Residential Proxies Detected on White House Network by xp84 on Wednesday November 04, 2026 @06:45PM (#50373018)
Right, we know the White House owns that public IP, but this could be as bad as an unsecured, unmanaged device that is joined to a private network that is supposed to be secured, OR, on the “all the way good” side, that IP could be the exit for a completely throwaway, untrusted, isolated LAN segment meant only for some iOT device and which has no route to any other peer on the LAN side, and some civilian who has access to that for work brought in his laptop with a “free VPN!” Plugin and joined it to that network because it’s all he had credentials for.
Re:Residential Proxies Detected on White House Network by duskwuff on Thursday November 05, 2026 @12:26AM (#50375551)
One would expect network activity related to the press to be concentrated during daytime hours, not between 5 PM and midnight.
Re:Residential Proxies Detected on White House Network by devindotcom on Wednesday November 04, 2026 @06:39PM (#50372970)
the show that came out recently, The Residence, while obviously fiction, made me think about the white house as a semi-public event venue in near constant use by dozens if not hundreds of people. It made for an interesting setting for a whodunit.
Re:Residential Proxies Detected on White House Network by CGMthrowaway on Wednesday November 04, 2026 @07:25PM (#50373370)
Of course it is. It's "The People's House." Look up the Great Cheese Levy of 1837, Lincoln's Office Hours, Coolidge's reception on New Years 1927 or Jackie Kennedy literally giving an "MTV Cribs" on TV in 1962. Or consider, if you can remember, the outcry when they permanently closed Pennslvania Avenue in 1995. Or when they closed Lafayette Square in 2020.
Re:Residential Proxies Detected on White House Network by samudrijan on Wednesday November 04, 2026 @07:43PM (#50373504)
There used to be around the clock anti-nuclear vigils in Peace Park, with soup kitchens feeding folks who lived at their signs.
Re:Residential Proxies Detected on White House Network by ethbr1 on Thursday November 05, 2026 @07:45AM (#50378442)
It's amazing thinking about Teddy Roosevelt following the New Year's Day tradition of shaking every single person's hand who showed up at the White House.

Which in the 1907 case meant 8,513 people's hands.

Re:Residential Proxies Detected on White House Network by deskamess on Wednesday November 04, 2026 @06:39PM (#50372972)
But countable.
Re:Residential Proxies Detected on White House Network by eloisius on Wednesday November 04, 2026 @07:07PM (#50373210)
But if you’re the cleaning staff at the White House do you just get on the WiFi?
Re:Residential Proxies Detected on White House Network by dpark on Wednesday November 04, 2026 @07:34PM (#50373426)
No idea. I’ve never been to the White House. For all I know they have an Potus WiFi and Aides WiFi and a EndlessFoxNewsAndRacistMemes WiFi. Maybe there’s also a Peasant WiFi for the cleaning staff and press corps.
Re:Residential Proxies Detected on White House Network by nxobject on Wednesday November 04, 2026 @08:33PM (#50373915)
Well, there's certainly still a DOGE Starlink terminal up on the roof. (The one they didn't demolish.)
Re:Residential Proxies Detected on White House Network by mbreese on Wednesday November 04, 2026 @09:49PM (#50374503)
Even if it was active, that wouldn’t be part of this network, would it?
Re:Residential Proxies Detected on White House Network by viraptor on Wednesday November 04, 2026 @09:56PM (#50374563)
You can see lots at wigle.net But it's a noise of quite a few meme submissions and lots of useless HP OfficeJet and DIRECTV entries...
Re:Residential Proxies Detected on White House Network by nomel on Wednesday November 04, 2026 @08:37PM (#50373951)
Do you believe the availability of wifi for staff is somehow unreasonable?
Re:Residential Proxies Detected on White House Network by RobotToaster on Thursday November 05, 2026 @12:51AM (#50375673)
I'd hope the guest network is completly separate.
Re:Residential Proxies Detected on White House Network by rightnutwingjob on Thursday November 05, 2026 @01:34AM (#50375904)
I don’t understand. Is it not?
Re:Residential Proxies Detected on White House Network by nomel on Thursday November 05, 2026 @02:01AM (#50376037)
Maybe I'm confused.

Guest networks are configured to disallow intranet connectivity, so the "security" risk would be from the device having access to the internet, on a guest network IP. But a guest network exists for the purpose of giving untrusted devices access to the internet, without compromising the security of the intranet. My local library, the local airport, Home Depot, the movie theater, etc all have public wifi, yet nobody would claim they were directly compromised. I understand the connection could be used for receiving and sending packets over the internet, like a DDoS (which would trigger rate limits, even at Home Depot), but framing a guest network, giving an untrusted device access to the internet, as some security issue seems very odd.

Re:Residential Proxies Detected on White House Network by asdff on Thursday November 05, 2026 @04:18AM (#50376991)
The difference is the home depot does not have spies applying for custodial roles. I’d expect nonessential staff to put their phone in a box at the security check. We also live in a world where israel can remotely explode telecom devices they rig in supply chain intercepts.
Re:Residential Proxies Detected on White House Network by nomel on Thursday November 05, 2026 @03:32PM (#50384105)
Again, why is it worse than a device with cellular access? Again, is the belief here that there are no internet connected devices on premises? We know this isn't true, from the twitter feeds of guests!
Re:Residential Proxies Detected on White House Network by __MatrixMan__ on Wednesday November 04, 2026 @07:40PM (#50373481)
Not if you exclude the ones who behave as if the rules apply to them.
Re:Residential Proxies Detected on White House Network by typeofhuman on Wednesday November 04, 2026 @07:44PM (#50373522)
Remember when they found literally a bag of cocaine in the White House last administration? I mean, how louder could one yell, "rules for thee"?
Re:Residential Proxies Detected on White House Network by throwaway-blaze on Wednesday November 04, 2026 @08:40PM (#50373984)
We're not allowed to say bad things about the _other_ guys. Bad things are only done by the current crop of inhabitants.
Re:Residential Proxies Detected on White House Network by BLKNSLVR on Wednesday November 04, 2026 @08:53PM (#50374079)
I like to be unipartisan (or is it panpartisan?), all politicians do bad things.
Re:Residential Proxies Detected on White House Network by saaaaaam on Thursday November 05, 2026 @12:59AM (#50375726)
Non partisan
Re:Residential Proxies Detected on White House Network by dpark on Thursday November 05, 2026 @12:18AM (#50375501)
This fake martyrdom is so tiresome. “No one lets us talk bad about Biden/Pelosi/Newsome/Whoever. You can only say bad stuff about Trump!”

Boo hoo. No one’s stopping you. No one’s cancelling you. If you have something you say, then say it. Otherwise stop crying fake tears about the mean liberals who are somehow censoring you.

But if it want to talk about the baggie of coke, maybe do any research at all instead of listening to lying politicians who claimed it belonged to Hunter Biden with zero evidence (and zero logic).

Re:Residential Proxies Detected on White House Network by rafram on Wednesday November 04, 2026 @11:19PM (#50375131)
In the cubbies at the visitors’ entrance, yes.

https://en.wikipedia.org/wiki/2023_White_House_cocaine_incid...

Re:Residential Proxies Detected on White House Network by Libcat99 on Wednesday November 04, 2026 @11:37PM (#50375247)
Found in storage cubby #50, an area where tour groups and visitors leave phones and personal belongings before entering secure or guided spaces.

This almost certainly had nothing to do with the administration. A single search would show that, for those interested in taking that time.

Re:Residential Proxies Detected on White House Network by lostlogin on Wednesday November 04, 2026 @11:45PM (#50375305)
Cocaine in the White House would be be of the least concerning things that’s ever happened there in my view.
Re:Residential Proxies Detected on White House Network by dpark on Thursday November 05, 2026 @12:12AM (#50375469)
This is why politicians keep repeating the same lies. Said often enough, people believe them.

Some visitor forgot their nearly empty baggie of coke and conservatives convinced you Hunter Biden was doing blow with Joe in the Oval Office.

Re:Residential Proxies Detected on White House Network by rightnutwingjob on Thursday November 05, 2026 @01:42AM (#50375945)
Likewise, if the nearly empty bag of cocaine was found* while Musk & Trump were working together, Progressive Liberals would be calling for their execution.

I mean, the nearly empty bag of cocaine isn’t necessary, Progressive Liberals do call* for their execution.

Re:Residential Proxies Detected on White House Network by mrandish on Wednesday November 04, 2026 @07:47PM (#50373554)
> A lot of people work at the White House.

I'm no expert but even I've read that "Works at the White House" goes much further than the executive residence and oval office, including the West Wing and the big office building that's directly connected to it by basement walkways.

I asked Gemini if my recollection was correct and got: "The EOP network (managed by the EOP Office of Administration in coordination with Presidential Information Technology Community entities like the White House Communications Agency) operates as a single campus enterprise network. Its high-speed backbone links the West Wing, the EEOB, the East Wing, and nearby administrative facilities such as the New Executive Office Building (NEOB) on 17th Street."

Re:Residential Proxies Detected on White House Network by HaZeust on Wednesday November 04, 2026 @09:43PM (#50374465)
"and the big office building that's directly connected to it by basement walkways"

I ask in good faith, but why didn't you just say the Treasury Building?

Re:Residential Proxies Detected on White House Network by praxulus on Wednesday November 04, 2026 @09:55PM (#50374554)
Most people don't know that the Treasury Building is a big office building directly connected to the White House by basement walkways.
Re:Residential Proxies Detected on White House Network by HaZeust on Wednesday November 04, 2026 @10:54PM (#50374972)
Fair point!
Re:Residential Proxies Detected on White House Network by Wistar on Thursday November 05, 2026 @12:53AM (#50375688)
I didn’t.
Re:Residential Proxies Detected on White House Network by 14u2c on Thursday November 05, 2026 @01:40AM (#50375932)
Why is this omission of any note? I know the building and I can tell you that it is not particularly remarkable.
Re:Residential Proxies Detected on White House Network by KptMarchewa on Thursday November 05, 2026 @04:58AM (#50377304)
Because it's about Eisenhower Executive Office Building
Re:Residential Proxies Detected on White House Network by sailfast on Thursday November 05, 2026 @06:38AM (#50377961)
[delayed]
Re:Residential Proxies Detected on White House Network by EA-3167 on Wednesday November 04, 2026 @08:34PM (#50373933)
If it keeps happening I think that at least suggests the source is someone or some people who are “above the rules” most people would be bound by. You can tell the cleaning crew to get off the damned WiFi, others not so much.
Re:Residential Proxies Detected on White House Network by cozzyd on Wednesday November 04, 2026 @08:36PM (#50373941)
it is easy to correlate with known public travel...
Re:Residential Proxies Detected on White House Network by rob74 on Thursday November 05, 2026 @04:39AM (#50377165)
Even if many sometimes work at night, you would expect them to also regularly work in the morning, which isn't the case here? So the fact that almost none of the traffic is in the early morning is a further clue...
Re:Residential Proxies Detected on White House Network by wtch98 on Thursday November 05, 2026 @05:07AM (#50377366)
Cleaner that comes in after normal office hours, with a phone which connects to guest wifi, which is segregated on the LAN side, but has public IPs from the Whitehouse AS
Re:Residential Proxies Detected on White House Network by wtch98 on Thursday November 05, 2026 @05:06AM (#50377357)
Most people working shifts will work varied shifts, sometimes nights, sometimes days, sometimes they'll be missing for days or weeks on end
Re:Residential Proxies Detected on White House Network by OtherShrezzing on Thursday November 05, 2026 @05:50AM (#50377650)
I can't imagine you'd need very many days of traffic to narrow it down to a very small group of people though. If a device is coming into and out of the campus, that should be fairly easy to reconcile with visitor records. Given that this is one of the most secure locations in the world, I'm reasonably sure a comprehensive list of "who is and isn't on campus" at any given time is available.
Re:Residential Proxies Detected on White House Network by maccard on Thursday November 05, 2026 @07:25AM (#50378280)
My prosumer ubiquiti gear will give me the MAC address and AP that the device is connected to, along with signal strength. WiFiman and a 5 minute walk will give me the mapping of where had that signal strength from that AP and at that point I could find the device with a physical search. There is no way that this device can’t be found in a few hours by anyone who is even vaguely paying attention.
Re:Residential Proxies Detected on White House Network by gwbas1c on Thursday November 05, 2026 @09:28AM (#50379498)
To know that, you'd have to know the pattern of days that it's active.

If it's someone who lives there, it would be different than a shift worker.

Re:Residential Proxies Detected on White House Network by gcollard- on Wednesday November 04, 2026 @06:32PM (#50372919)
Or the cleaning or security staff working the night shift.
Re:Residential Proxies Detected on White House Network by lakeviewterrace on Wednesday November 04, 2026 @07:05PM (#50373191)
Oh man you really cracked the case with zero evidence hacker news does it again
Re:Residential Proxies Detected on White House Network by what on Wednesday November 04, 2026 @07:46PM (#50373545)
Basically the worst of Reddit is here now.
Re:Residential Proxies Detected on White House Network by lakeviewterrace on Wednesday November 04, 2026 @08:03PM (#50373670)
With all the recent changes, they are actually encouraging each other to migrate here — I've seen the comments. It's no longer a myth.
Re:Residential Proxies Detected on White House Network by RockRobotRock on Wednesday November 04, 2026 @07:13PM (#50373264)
Yeah dude you’re right Trump bought an android tv from banggood and got pwned. You’re a genius.
Re:Residential Proxies Detected on White House Network by buildsjets on Wednesday November 04, 2026 @08:37PM (#50373948)
He never buys what he can grift for free. Probably a gift from some autocrat in exchange for politcal favors. Much like the Great Seal bug.
Re:Residential Proxies Detected on White House Network by pjc50 on Thursday November 05, 2026 @04:42AM (#50377187)
He got gifted an entire jet!
Re:Residential Proxies Detected on White House Network by buildsjets on Thursday November 05, 2026 @09:58AM (#50379894)
He sure did! And it’s most likely full of listening devices.
Re:Residential Proxies Detected on White House Network by ajcp on Wednesday November 04, 2026 @07:29PM (#50373394)
Even at midnight I can't imagine there being less than 100 people working at the WH in various capacities. While it's probably not the duty/desk officers in the Situation Room/Security Council, there are plenty of maintenance staff that work at night. 5-midnight seems like it overlaps perfectly with a shift schedule.
Re:Residential Proxies Detected on White House Network by jeremyjh on Wednesday November 04, 2026 @07:33PM (#50373421)
But how many of them would risk their job by smuggling in a device that violates government policies? Every device in the White House should be accounted for and meeting a number of security criteria. There are really only two or three people there who would know that those rules don't apply to them.
Re:Residential Proxies Detected on White House Network by jp_sc on Wednesday November 04, 2026 @07:37PM (#50373452)
They are not saying that is _on purpose_, in fact they are saying the opposite: a compromised device, could be even an Android phone. It could also be as device planted on purpose, of course.
Re:Residential Proxies Detected on White House Network by asdff on Thursday November 05, 2026 @04:22AM (#50377028)
Given that, why are there so many loose phones at all? Here is one compromised that we know about, in the biggest target for espionage on planet earth.
Re:Residential Proxies Detected on White House Network by tclancy on Wednesday November 04, 2026 @07:42PM (#50373495)
You’re misreading what this says. It’s someone bringing in a device they managed to get infected.

Oh and also the part where no one has caught this internally which is possibly the bigger takeaway. It’s a zero-trust network made out of incompetence.

Re:Residential Proxies Detected on White House Network by esikich on Wednesday November 04, 2026 @11:39PM (#50375263)
There's nothing in the article that suggests it's not just the guest wifi. Which wouldn't be monitored. Why would you? The whole point is that it's segmented and can't actually interact with anything important.
Re:Residential Proxies Detected on White House Network by what on Wednesday November 04, 2026 @07:44PM (#50373518)
Why are you assuming the person knows and is actively smuggling in the device? And why would you then assume that person is more significant than a shift worker there?
Re:Residential Proxies Detected on White House Network by asdff on Thursday November 05, 2026 @04:27AM (#50377062)
Probably because hegseth decided to actively use signal to discuss military planning instead of secure channels that don’t invite such screwups like adding random citizens to these discussions.
Re:Residential Proxies Detected on White House Network by skipkey on Wednesday November 04, 2026 @08:19PM (#50373801)
Eh, I would not be surprised if they have a separate wifi that guests can use and you can hook up your private devices to. Basically every large company i have worked for, for the last two decades had that. I suspect deep in the bowels of the White House you don’t get good reception.
Re:Residential Proxies Detected on White House Network by what on Wednesday November 04, 2026 @07:39PM (#50373472)
There’s a ton of people it could be. Any staffer that works 5-12, which wouldn’t be a particularly weird shift for cooks, cleaners, etc that bring their infected phone with them.

If it was someone who lived there it wouldn’t be exclusively that time period. Why wouldn’t it happen overnight or in the morning or any other time of day?

Re:Residential Proxies Detected on White House Network by ggm on Wednesday November 04, 2026 @08:25PM (#50373848)
If you regard 1,000 or less people as few, then this is true. If you regard 1,000 people as "too many" then you rate the national security of the USA at the cost of 1 in 1000 means it's not worth bothing to find out.

Is that really how national security works?

Re:Residential Proxies Detected on White House Network by nomel on Wednesday November 04, 2026 @09:09PM (#50374214)
What makes you believe this is related to national security?
Re:Residential Proxies Detected on White House Network by shrubble on Wednesday November 04, 2026 @08:34PM (#50373925)
There’s at least 500 people on just the staff of the White House, not including many others who work nearby.
Re:Residential Proxies Detected on White House Network by abofh on Wednesday November 04, 2026 @08:38PM (#50373957)
With the authority to walk in with a streaming stick, plug it into a TV and connect to WiFi!
Re:Residential Proxies Detected on White House Network by mikeweiss on Wednesday November 04, 2026 @09:13PM (#50374235)
Actually sound like the opposite of someone who lives there...Sounds like a shift worker.
Re:Residential Proxies Detected on White House Network by dofm on Wednesday November 04, 2026 @10:36PM (#50374825)
Unless it is running on a government issued iPhone, it is not the Individual #1 you are alluding to.

He very famously does not know how to use computers and can only basically manage tweeting from his phone, which he is mostly not, actually, doing himself.

Now, there are two or three terminally online people around him. I would be more quick to accuse his foul-mouthed spokesman but it’s admittedly because I hate that guy. But perhaps it could be the printer lady, or the unblinking former golf caddy guy, who are both around to help with the, er, modern day presidential communications.

Re:Residential Proxies Detected on White House Network by lostlogin on Wednesday November 04, 2026 @11:47PM (#50375316)
> He very famously does not know how to use computers and can only basically manage tweeting from his phone, which he is mostly not, actually, doing himself.

Despite the constant negative press covfefe

Re:Residential Proxies Detected on White House Network by dofm on Thursday November 05, 2026 @12:02AM (#50375408)
Most of it is Harp or Scavino, as far as I have read.
Re:Residential Proxies Detected on White House Network by avodonosov on Wednesday November 04, 2026 @11:17PM (#50375115)
Do you imply this residential proxy is also a Presidential proxy?
Re:Residential Proxies Detected on White House Network by 3RTB297 on Wednesday November 04, 2026 @11:38PM (#50375252)
The White House doesn't shut down at 5pm. There's whole books, TV series, and movies about the people that are working late every night at the White House. Likely dozens of people are on staff and work shifts that last until midnight every night of the week.

Service staff, including the storied hundred or so White House butlers, work whatever hours are needed. Then you have Secret Service, Kitchen staff, Natalie, house admin staff like the Chief Usher, maybe even NPS staff as the WH grounds are a national park as well, any of whom I would assume might be given access to unsecured WH wifi and likely a government-issued device. One device with a proxy among all of those people? Entirely unsurprising.

Maybe it's just the printer that Natalie carries around in her purse.

Re:Residential Proxies Detected on White House Network by TheDong on Thursday November 05, 2026 @12:05AM (#50375425)
That timing could also align with a device that is turned on and off at specific times, for example an insecure smart TV that is generally turned on to watch TV in the evening, and turned off around midnight.

Though the fact that it lines up with an 8 hour shift also makes it seem human-like, so I think I'd rank a human carrying an infected device as more likely than an infected periodically-active device.

Re:Residential Proxies Detected on White House Network by jachee on Thursday November 05, 2026 @12:23AM (#50375529)
It’s probably Natalie.
Re:Residential Proxies Detected on White House Network by redwood on Thursday November 05, 2026 @06:06AM (#50377757)
Does it continue when the prez is in Florida? Seems a good test on the hypo
Re:Residential Proxies Detected on White House Network by xdavidliu on Thursday November 05, 2026 @09:24AM (#50379438)
the politeness appears to be mutual?