• Deconceptualist@leminal.space
    link
    fedilink
    English
    arrow-up
    27
    ·
    4 hours ago

    Over several hours, the brothers deleted approximately 96 databases storing government information, including systems tied to case management and Freedom of Information Act request processing. The affected systems were hosted on servers in Ashburn, Virginia.

    Damn. If they deleted NSA or CIA data they could have been heroes. Deleting FOIAs and people’s equal opportunity cases is just shitty.

    • stoly@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      53 seconds ago

      This is definitely a case of hurting anyone they could rather than targeting their rage. Now members of the public have to suffer it.

  • RabbitBBQ@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    2 hours ago

    It takes a lot of restraint to have total access to important systems and be in a poorly ending situation with a company.

  • subignition@fedia.io
    link
    fedilink
    arrow-up
    95
    ·
    8 hours ago

    Are we gonna gloss over the fact that the EEOC was storing plaintext passwords? Fucking incompetent

    • orclev@lemmy.world
      link
      fedilink
      English
      arrow-up
      43
      arrow-down
      1
      ·
      8 hours ago

      Yeah and whoever designed that system needs to be fired. 40 years ago you could maybe call it a reasonable mistake (although it wasn’t really acceptable even back then), but these days anyone storing plaintext passwords anywhere is bordering on criminal negligence. Unless you have a damned good reason passwords should be hashed, but at a minimum at least encrypted with something reasonably secure.

      • PlantJam@lemmy.world
        link
        fedilink
        English
        arrow-up
        22
        ·
        6 hours ago

        I would argue that there is no such thing as a good reason to store plain text passwords.

        • SeductiveTortoise@piefed.social
          link
          fedilink
          English
          arrow-up
          2
          ·
          2 hours ago

          They are not saying that you should have a good reason to store plain text, but to have a good reason not to hash, but only to encrypt.

      • Soulphite@reddthat.com
        link
        fedilink
        English
        arrow-up
        2
        ·
        6 hours ago

        If it was anyone hired by the current administration to be the security software engineer, I’d imagine it being someone severely under qualified with some kind of reality TV, media background who probably only mentioned “I stayed at a Holiday Inn last night…” when asked if they had any security authentication background. The interviewer probably just got a grand kick out of that response and after an intense belly laugh said, “Fuck it, you’re hired!”

    • CmdrShepard49@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      1
      ·
      3 minutes ago

      At least we can feel content in the knowledge that one of them was dragged from their car and had the shit beat out of him.

  • stoy@lemmy.zip
    link
    fedilink
    English
    arrow-up
    51
    ·
    8 hours ago

    The managers who gave him that access should also be put on trial