Just think of "MoMA" as "the intranet," which is about the best way to explain it. Not super interesting. Weird that he'd allegedly type "I've never logged int

Just think of "MoMA" as "the intranet," which is about the best way to explain it. Not super interesting. Weird that he'd allegedly type "I've never logged into Subversion before, but suddenly I need access" into MoMA, but hey. The whole saga just reminds me that people are really bad at opsec. The Google Drive/GAIA linkage is the most interesting technical revelation from a quick read. I'm surprised they didn't redact that little trick, because that seems to be the best way to catch the very people doing this. Most people would be forgiven for assuming that a Google consumer product might be a little more obfuscated in terms of forensics (logs access, PII, etc), and I could see that train of thought even though it's dumb. I guess they're willing to burn the technique, because the next person who attempts this will definitely avoid Google Drive.