Hacker News new | past | comments | ask | show | jobs | submit login
[flagged] DOGE Exposes Once-Secret Government Networks, Making Cyber-Espionage Easier Than (cyberintel.substack.com)
99 points by jc_811 35 days ago | hide | past | favorite | 29 comments



This post should NOT be flagged. Plenty of substantial research in this article and it is disturbing. There is a concerted effort to silence anything that sounds like criticism.


January 8?

Are you familiar with calendars or how time works?


Yes, I can read a calendar and a clock. Thank you for the concern. I believe you are trying to say that the evidence is null because it happened earlier than the new admin got into power. Administrative handover happens within 30 days previous. So they began early January. Another way to look at this is, why didn’t they show up earlier? Like in 2023 or 24? Why only in 25, right after doge? It’s a little coincidental.


Now that we're talking about doge, could anyone from us tell me if doge.gov/join has a cloud flare chaptcha when interacting with the form from the USA? I can only visit it via VPN and I have a chaptcha before the submit button. No, I don't wanna join doge, it's for... Educational purposes


I don't get any captchas at all (haven't tried submitting), and I have a custom patched build of Chromium presenting an old user agent and several privacy features and extensions that usually get me captcha'd by cloudflare all the time.


COOL, I wasn't definitely working on a bot that spams requests with junk fake data, but if I were could I send you a trial version to see if you get chaptcha'ed? If yes lemme know if I can contact you on telegram or via mail or whatever


No, I think I'd prefer not to get involved in that.


That's fair, thank you anyway


You're treading dangerously close to violating the CFAA... and you're here admitting it on a public forum. And you're trying to get others involved in your scheme.


I just wanted to try whether the chaptcha was for US people as well, all in all I just wanted to see how easy (or not easy) it would have been to do so.

Honestly, I was more curious than other things. Unfortunately, I do not believe that people could actually make a dent on doge even if things like what I were talking about were adopted by the large public

Aside from raising public awareness on the topic, I would have done nothing else. But, well, it's not feasible so I just abandoned it whole

As weird as it might seem, I never sent any data to doge, it was all done locally


I don’t see one immediately, it doesn’t appear only after you click the submit button, does it?


With a VPN I see it after a few seconds/when I interact with the text fields of the form. You only see it when submit is clicked?


I read this article and it is alarming, but what's the DOGE connection to once-private systems showing up on the public internet? That doesn't seem to be explained outside of the correlation with the Treasury system access.

Also, the authors of this SubStack appear to be anonymous?


The first sentence of the article:

this alarming trend seems to coincide with DOGE’s unrestricted access to federal networks.

the first 2 paragraphs: Beginning on January 8, 2025, a surge of U.S. government infrastructure began appearing on what’s known as “the search engine of Internet-connected devices,” Shodan.io.

Federal agencies typically secure their systems behind multiple layers of protection, ensuring that critical services – such as mail servers, directory services, VPNs, internal IP addresses, and remote access gateways – remain isolated from public access.

Now is this conclusive proof that DOGE did it? Hardly. However, can you think of anything else that changed since 8 Jan that would override decades of policy in the matter of hours?


>However, can you think of anything else that changed since 8 Jan that would override decades of policy in the matter of hours?

Surely this is the wrong question- if the change happened on 8 Jan, we'd need to look at events before 8 Jan to find what precipitated the change, no?


Wasn't the inauguration after January 8? Ruling any post inauguration related shenanigans


It appears to be conflating things that may or may not be real with other things that are being misreported in the news and making up sensational stories out of them.

Unclassified government networks are mostly connected to the internet. The government is mostly bad at cyber security. These are well known facts. Whether or not "DOGE" has any actual connection to this is not really in evidence at this point, this is a highly partisan person's attempt to influence other people to their point of view.


I'm not sure this is partisan, looking back the (very light) post history of this substack and the nonexistent explanation of who the authors are, it looks like just a pure FUD machine.


I think it isn't only DOGE. Giving the chaos, the government employees are probably exfiltrating data, personal and governmental, to preserve as evidence to "CYA" or for possible future use say in their lawsuit for unlawful termination or whatever comes, like various investigations where by the time of the investigation the evidence my get removed from the government systems, etc...


"Alarmingly, a Department of Energy server allowed anonymous login with write access, raising the risk of hackers uploading malicious code or installing backdoors for persistent network access."

I sincerely hope that's a honeypot


The world is laughing at us, when they're not busy booing us. Hopefully we've all learned a valuable lesson here.


[flagged]


And yet, you shouldn't give your attackers information to make their lives easier.

That sentence is about relying on 'obscurity' instead of security, not _in addition to_


Ignoring that security through obscurity is a part of a layered security approach (and the rote "security through obscurity is bad" noise is silly), this isn't about security through obscurity: These profoundly incompetent clowns are taking private networks and port mapping RDP servers, web apis, and other systems to the public internet. Much of what they are doing is profoundly criminal (quite aside from the grotesque incompetence), but they have the out that they'll just get a pardon.

This submission will be flagged off the front page soon enough as the raw, profound incompetence of this crew of misfits leads to too much strife, but it is simply staggering to think that anyone thinks these clowns know what they're doing. Government is fat and has loads to improve, but having a group of big ball morons looking at line item descriptions and going with whatever their first impression of its meaning is is just so catastrophically stupid, yet here we are.


Keeping stuff airgapped and away from public networks isn't security through obscurity, what are you even talking about?


It's definitely the principle of least privilege applied to network access.


> Beginning on January 8, 2025, a surge of U.S. government infrastructure began appearing on what’s known as “the search engine of Internet-connected devices,” Shodan.io.

Seeing as how Trump was inaugurated on Jan 20th, it's hard to come to the conclusion that this is something that DOGE is responsible for.


Trump announced DOGE on Nov 12th, 2024 [0] and the transition doesn't all just happen on Jan 20th. The Presidential Transition Act has provisions that allow some members of transition staff to get access to federal IT systems, and with both Congress turning over on Jan 3rd, 2025 and Biden already completely checked out, it wouldn't be even a bit surprising to me if Congressional staffers or DOGE staffers started opening things up as soon as they could.

I don't have any evidence that it's the case, but if the claim about a surge of govt infrastructure appearing on shodan is accurate, I don't have any other hypotheses to explain it.

[0] https://www.nbcnews.com/tech/tech-news/trump-says-elon-musk-...


How do we know this is a real researcher and not a disgruntled (former) US government employee? It feels extremely politically-motivated, anyway.


> Beginning on January 8, 2025, a surge of U.S. government infrastructure began appearing on what’s known as “the search engine of Internet-connected devices,” Shodan.io.

DOGE didn't exist on January 8th.




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: