'We are a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for us to earn fees by linking to Amazon.com and affiliated sites. As an Amazon Associate I earn from qualifying purchases."
Video from FIRE: Presumed Guilty: Due Process Lessons of the Duke Lacrosse Case.
I R A Darth Aggie
at June 23, 2015 12:18 PM
You technical guys/gals: would a high-ranking gov't official using a private server for gov't business offer a back door channel for a hack?
In what sense? I feel like you're asking if Hillary's email server could be used as an active attack vector.
Answer: yes. But then again, so can any computer that is connected to the internet. Yes, even the one that Bob is sitting at right now. No, you don't want to open that application, Bob. No, no, what are you doing? don't print that document!
Paranoid, yet?
The best way of using an email server like what HRC used would be infiltrate it and use it to send spear phishing spam to her subordinates and other contacts. That would be worth something. One could use it to develop intelligence, to distribute misinformation, and potentially gain access to actual State Department computers.
Almost forgot: make a copy of everything sent and received by that machine to a remote email address. Minus your spear phishing spam. No point in muddying the water.
Ordinarily I would say that anything not owned by State should not be trusted as a matter of course, and not given special access. But given the stunning lack of actual good cyber practices at the NSA and OPM[1], it is possible that someone marked that server as trusted and treated specially. Or were ordered to do so.
[1] I can give OPM a bit of a pass, but NSA? you should know better!
I R A Darth Aggie
at June 23, 2015 12:45 PM
Thanks IRA.
I knew HRC forwarded emails from her non-gov't advisors/friends to her inside circle of employees at State and it just seem like it would be gold mine of opportunity as a back door.
Sigh. We'll never know anyway.
Bob in Texas
at June 23, 2015 1:07 PM
Ordered some shoes for me Mom. Too narrow but have free* shipping for returns.
My dog identifies as a hamster.
Amy Alkon at June 22, 2015 10:08 PM
Is it the cedar shavings or the exercise wheel that clued you in?
Radwaste at June 23, 2015 12:46 AM
Iowahawk asks a question.
I R A Darth Aggie at June 23, 2015 7:15 AM
"TSA agents failed 67 out of 70 tests -- that’s 95 percent of them -- during a recent undercover Homeland Security Inspector General test."
But wait, there's more.
Gog_Magog_Carpet_Reclaimers at June 23, 2015 8:48 AM
This morning's entertainment:
Idiots With Guns
Gog_Magog_Carpet_Reclaimers at June 23, 2015 9:07 AM
You technical guys/gals: would a high-ranking gov't official using a private server for gov't business offer a back door channel for a hack?
(Not a rant, truly curious since the hack (I believe) happened a couple of years ago.)
http://www.foxnews.com/politics/2015/06/23/sources-number-affected-by-govt-cyber-breach-soars-to-at-least-18m/
Bob in Texas at June 23, 2015 10:48 AM
Video from FIRE: Presumed Guilty: Due Process Lessons of the Duke Lacrosse Case.
I R A Darth Aggie at June 23, 2015 12:18 PM
You technical guys/gals: would a high-ranking gov't official using a private server for gov't business offer a back door channel for a hack?
In what sense? I feel like you're asking if Hillary's email server could be used as an active attack vector.
Answer: yes. But then again, so can any computer that is connected to the internet. Yes, even the one that Bob is sitting at right now. No, you don't want to open that application, Bob. No, no, what are you doing? don't print that document!
Paranoid, yet?
The best way of using an email server like what HRC used would be infiltrate it and use it to send spear phishing spam to her subordinates and other contacts. That would be worth something. One could use it to develop intelligence, to distribute misinformation, and potentially gain access to actual State Department computers.
Almost forgot: make a copy of everything sent and received by that machine to a remote email address. Minus your spear phishing spam. No point in muddying the water.
Ordinarily I would say that anything not owned by State should not be trusted as a matter of course, and not given special access. But given the stunning lack of actual good cyber practices at the NSA and OPM[1], it is possible that someone marked that server as trusted and treated specially. Or were ordered to do so.
[1] I can give OPM a bit of a pass, but NSA? you should know better!
I R A Darth Aggie at June 23, 2015 12:45 PM
Thanks IRA.
I knew HRC forwarded emails from her non-gov't advisors/friends to her inside circle of employees at State and it just seem like it would be gold mine of opportunity as a back door.
Sigh. We'll never know anyway.
Bob in Texas at June 23, 2015 1:07 PM
Ordered some shoes for me Mom. Too narrow but have free* shipping for returns.
*"Only a $9.99 fee for this convenient service."
Sigh.
Bob in Texas at June 23, 2015 1:29 PM
Hah, great, Rad.
Amy Alkon at June 23, 2015 2:22 PM
Leave a comment