3 ms·
Yeah I really enjoyed the technical details in Gary Brown's deposition: https://www.documentcloud.org/documents/3515476-Declaration-of-Gary-Brown-PUBLIC.html ht
by dantiberian 10y ago
Yeah I really enjoyed the technical details in Gary Brown's deposition: https://www.documentcloud.org/documents/3515476-Declaration-of-Gary-Brown-PUBLIC.html https://www.documentcloud.org/documents/3515476-Declaration-....
It looks like they could see:
* When the device made check-ins to their management server, and appeared on the Google network
* That the Windows OS was re-installed
* MoMA search queries (some kind of internal system?) for "chauffeur svn login"
* Downloading and installing TortoiseSVN
* Transferring files from SVN
* When a card reader was plugged in
* When the OS was reformatted to Linux
* File downloads from Google drive
- jsmthrowaway 10y agoJust think of "MoMA" as "the intranet," which is about the best way to explain it. Not super interesting. Weird that he'd allegedly type "I've never logged into Subversion before, but suddenly I need access" into MoMA, but hey. The whole saga just reminds me that people are really bad at opsec. The Google Drive/GAIA linkage is the most interesting technical revelation from a quick read. I'm surprised they didn't redact that little trick, because that seems to be the best way to catch the very people doing this. Most people would be forgiven for assuming that a Google consumer product might be a little more obfuscated in terms of forensics (logs access, PII, etc), and I could see that train of thought even though it's dumb. I guess they're willing to burn the technique, because the next person who attempts this will definitely avoid Google Drive.
- chx 10y agoI now read that deposition in full, this guy is dead and buried six feet under.