4 ms·

>Trump rarely uses email or computers, despite his frequent tweeting.. If 2016 taught us anything, this is a reasonable infosec strategy - Although I assume, w

by divbit 10y ago

>Trump rarely uses email or computers, despite his frequent tweeting.. If 2016 taught us anything, this is a reasonable infosec strategy - Although I assume, when he becomes President there is some high powered govt. agency that can do it securely if he uses whatever protocols they suggest.

yabatopia 10y ago
I don't know if using Twitter on a smartphone is a reasonable infosec strategy. More than a few Twitter accounts have been hacked or taken over with social engineering. And he's using a Samsung Android smartphone, so you don't know how up-to-date he is with security patches. But then again, according to Trump himself: “I know a lot about hacking." And he also knows “things that other people don’t know. And so they cannot be sure of the situation.” The man could be a brilliant hacker for all I know.
- mirimir 10y ago
  > The man could be a brilliant hacker for all I know. Or he's been briefed by brilliant hackers.
KVFinn 10y ago
>>Trump rarely uses email or computers, despite his frequent tweeting.. >If 2016 taught us anything, this is a reasonable infosec strategy - Although I assume, when he becomes President there is some high powered govt. agency that can do it securely if he uses whatever protocols they suggest. I do wonder about problems even with Twitter. If the current @POTUS account announced a nuclear attack had just been launched I think most people would assume the account was hacked because it doesn't have a pattern of being used used for information like that. But with Trump it doesn't seem completely impossible that Trump might actually tweet out some information he had just learned or decided, no matter what it is. Imagine the worldwide chaos you could cause by hacking Trump's twitter Saturday night at 3AM and announcing a nuclear strike to or from someone!
- jrapdx3 10y ago
  AFAIK Trump hasn't used Twitter for anything but brief public statements and comments on the current (and usually minor) issues at hand. Basically just gets around editorial slants of news media to address his huge following. Reasonably enough, so far haven't seen anything suggesting he'd use Twitter or similar when there's something substantial at stake. However the possibility someone could hack in and use his account is a risk he must have considered. As you say it would be a hot target for that sort of mischief. Obviously it could be bad if that happened. Given the fact that his accounts haven't been hacked into in that way despite the ample exposure over many months, it suggests we could consider it a good sign of taking security seriously.
  - secstate 10y ago
    Two things. One, he's used Twitter to post some seriously absurd but significant charges, like an fact-less opinion that there was widespread corruption in our last election cycle. Second, I'm in the middle of reading the Undoing Project by Micheal Lewis, and your last statement is a prime example of how bad humans are at statistics. Months (or even years) of security have no bearing on the likely hood or ability of an account to be hacked in the future. Only hard data on many accounts over years can begin to allow us to estimate that, and even then it's just a probability. If I flip a coin one hundred times and see heads one hundred times, what's are the odds I see heads on the next flip?

by divbit 10y ago

yabatopia 10y ago

I don't know if using Twitter on a smartphone is a reasonable infosec strategy. More than a few Twitter accounts have been hacked or taken over with social engineering. And he's using a Samsung Android smartphone, so you don't know how up-to-date he is with security patches. But then again, according to Trump himself: “I know a lot about hacking." And he also knows “things that other people don’t know. And so they cannot be sure of the situation.” The man could be a brilliant hacker for all I know.

mirimir 10y ago
> The man could be a brilliant hacker for all I know. Or he's been briefed by brilliant hackers.

KVFinn 10y ago

>>Trump rarely uses email or computers, despite his frequent tweeting.. >If 2016 taught us anything, this is a reasonable infosec strategy - Although I assume, when he becomes President there is some high powered govt. agency that can do it securely if he uses whatever protocols they suggest. I do wonder about problems even with Twitter. If the current @POTUS account announced a nuclear attack had just been launched I think most people would assume the account was hacked because it doesn't have a pattern of being used used for information like that. But with Trump it doesn't seem completely impossible that Trump might actually tweet out some information he had just learned or decided, no matter what it is. Imagine the worldwide chaos you could cause by hacking Trump's twitter Saturday night at 3AM and announcing a nuclear strike to or from someone!

jrapdx3 10y ago
AFAIK Trump hasn't used Twitter for anything but brief public statements and comments on the current (and usually minor) issues at hand. Basically just gets around editorial slants of news media to address his huge following. Reasonably enough, so far haven't seen anything suggesting he'd use Twitter or similar when there's something substantial at stake. However the possibility someone could hack in and use his account is a risk he must have considered. As you say it would be a hot target for that sort of mischief. Obviously it could be bad if that happened. Given the fact that his accounts haven't been hacked into in that way despite the ample exposure over many months, it suggests we could consider it a good sign of taking security seriously.
- secstate 10y ago
  Two things. One, he's used Twitter to post some seriously absurd but significant charges, like an fact-less opinion that there was widespread corruption in our last election cycle. Second, I'm in the middle of reading the Undoing Project by Micheal Lewis, and your last statement is a prime example of how bad humans are at statistics. Months (or even years) of security have no bearing on the likely hood or ability of an account to be hacked in the future. Only hard data on many accounts over years can begin to allow us to estimate that, and even then it's just a probability. If I flip a coin one hundred times and see heads one hundred times, what's are the odds I see heads on the next flip?