The leaked records include the locations of ICE and CBP facilities, workers’ cell phone numbers, and the members of groups tied to wiretap programs, Palantir software, and xAI’s Grok chatbot.
It’s entirely possible that the geniuses in charge of DHS had a totally insecure master admin password and security policy that allowed access to Okta management. The front door lock can still be called “secure” if the owner just left the back door open.
So someone with a master password was phished. That doesn’t really make it insecure. Someone had admin rights and they were stupid enough to be phished.
You can’t fix stupid, but you can build systems to help mitigate it. Rate limiting, alarms/pattern monitoring etc. unsurprisingly the fascists are too stupid to do any of that, even with their infinite corrupt budget.
True. When I was a network administrator I didn’t consider my network to be secure and I don’t trust my home network to be. I do what is feasible and hope that things work out.
It’s entirely possible that the geniuses in charge of DHS had a totally insecure master admin password and security policy that allowed access to Okta management. The front door lock can still be called “secure” if the owner just left the back door open.
So someone with a master password was phished. That doesn’t really make it insecure. Someone had admin rights and they were stupid enough to be phished.
You can’t fix stupid
You can’t fix stupid, but you can build systems to help mitigate it. Rate limiting, alarms/pattern monitoring etc. unsurprisingly the fascists are too stupid to do any of that, even with their infinite corrupt budget.
Or maybe whoever was supposed to secure it was doge’d.
True. When I was a network administrator I didn’t consider my network to be secure and I don’t trust my home network to be. I do what is feasible and hope that things work out.
it could have been an inside job.
if okta has a halfway decent IT department, they’d be able to find that. it’d be the one non-DHS IP address in their access logs.