He was white washing the documents via Apple Notes and it worked initially. From the indictment I posted here...
>In total, DING uploaded more than 500 unique files containing Google Confidential Information, including the trade secrets alleged in Counts One through Four. DING exfiltrated these files by copying data from the Google source files into the Apple Notes application on his Google-issued MacBook laptop. DING then converted the Apple Notes into PDF files and uploaded them from the Google network into DING Account 1. This method helped DING evade immediate detection.
>> This method helped DING evade immediate detection
Evidently not. It just shows that the guy is not a foreign intelligence operative - a professional could easily operate there for years undetected with fairly basic opsec. That said, aside from things like hardware designs and perhaps certain model weights, I struggle to think of anything at Google that anyone would want that’s not already on GitHub.
> I struggle to think of anything at Google that anyone would want that’s not already on GitHub.
It was this person's ploy to pretend there is extremely valuable IPs in the docs he illegally obtained.
It just shows that this person indeed was clueless about large-scale engineering. I.e., stealing all of the code wont give any org the capability to do large-scale engineering. It most likely would cripple the org, as the foreign objects act as poison.
The ideal trick is to pretend that he possess the secret.
>In total, DING uploaded more than 500 unique files containing Google Confidential Information, including the trade secrets alleged in Counts One through Four. DING exfiltrated these files by copying data from the Google source files into the Apple Notes application on his Google-issued MacBook laptop. DING then converted the Apple Notes into PDF files and uploaded them from the Google network into DING Account 1. This method helped DING evade immediate detection.