Programmer Humor

20499 readers

1340 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

Keep content in english
No advertisements
Posts must be related to programming or programmer topics

founded 2 years ago

MODERATORS

[email protected]

469

doge.gov got hacked (web.archive.org)

submitted 21 hours ago by [email protected] to c/[email protected]

39 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 13 points 15 hours ago* (last edited 15 hours ago) (1 children)

the muSSk team learn from it, and figure out how actual internet security works, and harden their systems accordingly.

They won't. Musk is a narcissist who thinks his every instruction is perfection, and his merry gang of racist goons are wet-behind-the-ears grads who have yet to be humbled by experience.

My predicted outcome is they fix this hole, send the FBI after the grey-hats to make an example out of them, and continue on business as usual while a foreign nation laughs from the shadows with a rootkit installed. DOGE is a treasure trove of data, and network security is a cat and mouse game that takes real manpower and time to set up, maintain, and actively monitor. I don't think these chucklefucks know anything about being a high-value target of state actors, and they're too prideful to admit it and get help.

[–] [email protected] 4 points 14 hours ago (1 children)

Yeh, the difference between being high value (twitter) and an actual high value (government) target are entirely different. I bet many countries were salivating over the mere idea of these servers.

I guess they will pass some laws about "hacking being illegal", arrest some poor self-hosters that did nothing wrong, declare a victory, and change absolutely nothing - other than ruining people's lives.

I remember an article about a batch of compromised NICs from China that had backdoor firmware in them. You can harden your software system all you want, but when the literal hardware is backdoored, you are doomed.
I think it was Supermicro. So am American company and not a small Mfr.
I wonder if DOGE have reputable hardware, or if they cheapest out on servers.

[–] [email protected] 5 points 13 hours ago* (last edited 13 hours ago)

Yeh, the difference between being high value (twitter) and an actual high value (government) target are entirely different.

Exactly. Tesla or Twitter might be on a country's radar for juicy IP theft reasons, but that's a speck of dust in comparison to a network full of classified government secrets. A country doesn't burn multiple zero-days and backdoor supply chains to find out the contents of the next Tesla firmware update. They sure as hell do when it gives them access to military information and civil infrastructure of a world power.

I wonder if DOGE have reputable hardware, or if they cheapest out on servers.

I doubt it. If the way Elon talks about software is indicative of his understanding of hardware or cybersecurity, he has absolutely no idea what the fuck he's actually doing. Knowing that, it's probably an off the shelf commercial rack-mount with IME enabled and the management port plugged into the same switch as the regular network interface.