Elon Musk barred from accessing US Treasury payments data
Will that actually stop him at this point?
https://www.ft.com/content/097b286f-376e-40eb-8804-69a6d217803dOpen linkView original on lemmy.ca571
Comments64https://www.ft.com/content/097b286f-376e-40eb-8804-69a6d217803dOpen linkView original on lemmy.ca
I imagine this looks a lot like what people in the cyber security sector do after a breach. Audit all the code, scan all the servers, monitor everything for several months. It's a ton of work and very expensive, but there are people with lots of real-world experience unhacking systems.
But the data is siphoned off now. We can, nay, have to assume this.
yup. the real answer is to rotate EVERYTHING
Ahh yes. Lets just rotate every americans social security number and every organizations tax-payer id.
Easy,
SSN = SSN + 1Ah, I see someone has been to Hilbert's Grand Hotel.
ROT13 all the things!
you joke but that may be the only way
That data is largely worthless. Mostly because so much of it has leaked so many times over the past decade or two. That is why so many people have a special tax code or whatever.
The real "value" of having access to the treasury is not the data itself. It is the ability to change that data in a manner that directly defies congress, the budget, and everything else.
It pretty valuable even if you don't change it. He can see what his competitors are being paid. He can correlate it with Twitter's user data to tie political enemies to physical addresses and more.
Not that they won't corrupt it. They will almost certainly alter it to their own ends as well.
The US could finally become a modern country with actual national ID!
If it comes to pass, it'll probably in the form of an arm tattoo...
nah. Only for people like me.
You know. Queer. Jewish descent. Leftist in ideology.
I wish these jokes didn't write themselves...
Just rotate the bank account numbers, everyone gets someone else's.
Worse: you don’t know which administrators have been compromised or were voluntarily complicit. It is unprecedented.
yup. we're going to have to rotate the administrators, too
I rotated my monitor and I don't feel any more secure and my neck hurts.
Yeah leaked data stays leaked. You can often find out what was leaked tho.
By running into it on ze dark veb?
Elon Musk is technically a job creator because so many people have to be hired just to fix his fuck ups.
I still cannot believe this total dumbass is considered by so many to be some kind of genius.
Besides all the obvious stuff, like trying to deliberately break America, and giving Nazi salutes (and then hearing all the gaslighting and bothsiderist bullshit from the "liberal media" on that) on top of that, I have to still see stuff about what a sooper-dooper genius this fucking gomer is. Because having money == genius.
I can't read the article because paywall, but I assume access was blocked by some sort of court injunction. So what'll really happen is that that stuff is how actual-patriot treasury employees will occupy their time until the ruling gets appealed to some MAGA judge and Musk waltzes right back in again.
Yes, you will be able to trust the system, after an independent team have ripped out the old system and built a new from the ground up.
Yep. It can only be secure after it's crushed, now.
Guy should be sitting in prison for breaking into our government systems. Having a mere say-so from the felon-in-chief is not enough.
Fuck, I hate this timeline.
Agreed. If I ever tried "accessing" government data like that, I'd be in jail. So should he
In a just world his entire administration would be in prison and we would forcefully redistribute the wealth of all the nepo babies who trotted on stage at his inauguration.
🤣😂🤣
Like when he started a lottery to bribe people into voting for trump. Or he forced back workers during COVID. Or when he bought twitter stock and spread rumors to lower the price .. the list goes on
Like when he promised Twitter an employees a 'buy out' package, then stiffed all of them for upwards of $500M dollars, then won the subsequent court battle, fucking over thousands of people.
"Applicable" doing a lot of heavy lifting there
Last I saw they still have two "special employees" with "read only" access. So he still has "read only" access
But also? They already made code changes. And while I doubt they would be able to do anything meaningful, it is not hard to add another user account or an ssh tunnel to get through the "air gap". And it would not be beyond musk et al to call that "hacking".
Just to be clear, I will absolutely create new domain users or add my own ssh keys to an authorized_keys file to escalate privs or move laterally through a network while I’m “hacking”.
Also a malicious actor opening a reverse port forward tunnel with ssh allows them to punch a hole to them on the WAN side of the network when they’re dealing with NAT or firewall rules. If a system is truly airgapped then that accomplishes nothing. You’d need something plugged in to the airgapped system or airgapped network to bridge that air gap, like a usb adapter that has a SIM card in it.
Since we are talking about payment systems that interact with other banking systems, they will not be actually air gapped. By the nature and purpose of the systems in question, they must have access to the physical Internet (even if it is entirely abstracted away under layers of VPNs and encryption).
Assuming them compromised is prudent. Physical access is total access.
That's like saying "we gave him root but then took it away."
No, once someone has root it's kinda it.
(Butbutbut selinux) No, not gonna help.
(Butbutbut we took it away) Chroot binaries are fun.
Etc.
Side note; in Aussie slang, root means to fuck.
Fair dinkum!
We don't use that much here. It's more like fucken oath
I lived in Sydney for 3 years (I'm from Norway), and only heard about it, but never met anyone who actually used it in daily speach. That was until I took a RSA, the teacher used it, and it blew my mind. I'll never forget you, John!
Maybe Adelaide is different, we say it all the time, I love it haha.
"We gave him root access, then waited for about the amount of time it would take him to copy off everything he needs, then took it away again so its all good now."
hahahahahaha now that they installed every back door known to man and beast alike
Can’t read the article it’s paywalled
https://archive.ph/TYioP
Fucking worst timeline
They don't care about legal, so why should that bother him?
They are in the middle of a coup, they don't fear what currently is still the law.
Why would it stop him? All he has to do is have Trump pardon him. They can do anything they want they have the guy that can hand out get out of jail free cards.
Just need to keep repeating, "Trump looks weak next to President Musk." over and over, and everywhere. That could get under his craw.
Need media to keep asking "Who actually is the president" and accidentally saying "President Musk" over and over
Too late, his 19 year old blood boy already hit em with the select *
Has anyone checked these kids over for neuralink implants?
Maybe just a tiny emp, as a treat, just to check
What?
Musk brought in a team of very young devs to do work on these dogs projects
"hit em with the select"?
It's a command to read everything out of a database. The * is a wildcard in SQL.
Gotcha.
yes, bar him after he already has the data. brilliant move.
Somewhere out there is one command in a text file waiting to transfer the US economy out before the power goes off and the military looks for its football.
"Dale! NO POWER TOOLS!"
"Well I WAS DONE ANYWAY"
What does it say?