Post AUeOb24HBCsvMsNIVE by jschuh@infosec.exchange
(DIR) More posts by jschuh@infosec.exchange
(DIR) Post #AUeIne7ius4H94cQMK by lauren@mastodon.laurenweinstein.org
2023-04-14T17:04:34Z
0 likes, 0 repeats
Suspect in leak held TS/SCI clearance due to his technical support role.
(DIR) Post #AUeJD3HQWQfQPGGueG by idiot@mastodonapp.uk
2023-04-14T17:08:38Z
0 likes, 0 repeats
@lauren L1 support L9 access.
(DIR) Post #AUeJkAbyHjxQhUfoCO by arvrrob@twit.social
2023-04-14T17:15:06Z
0 likes, 0 repeats
@lauren I sure hope he likes the weather in Kansas. 😜
(DIR) Post #AUeL2CLCh2sXEOzTxg by cross@discuss.systems
2023-04-14T17:28:59Z
0 likes, 0 repeats
@lauren we have never built systems that support compartmentalized access, even for maintenance, well. Hence, root access (or "system", since this is almost certainly a set of machines running Windows) gives access to all resources.Here, real-world security is impacted by bad design.
(DIR) Post #AUeLMcRLMq1by3bGIS by lauren@mastodon.laurenweinstein.org
2023-04-14T17:33:19Z
0 likes, 0 repeats
@cross We tried at UCLA in the ARPANET days with UNIX. It was a good effort but ...
(DIR) Post #AUeOb24HBCsvMsNIVE by jschuh@infosec.exchange
2023-04-14T18:09:22Z
0 likes, 0 repeats
@lauren This is all pretty normal and predictable. When we'd get reservists we'd give them basic clerical work, because there's not much else to do with someone who shows up for a few weeks and then you never see again. But clerical stuff in a SCIF is still gonna require a JWICS terminal, and based on the blanket compartments I've seen in the news reports, all of the stuff he shared would have been readily available to anyone on JWICS.
(DIR) Post #AUesNlTeY8IWlzpmj2 by PJ_Evans@mastodon.social
2023-04-14T23:43:15Z
0 likes, 0 repeats
@lauren I feel like they need to pay more attention to who gets these jobs. Need lots more training, too.