3 ms·

> I would already be operating under the assumption that all the clients are hostile. You can't operate assuming all computers in the Capitol are hostile. Ho

> I would already be operating under the assumption that all the clients are hostile. You can't operate assuming all computers in the Capitol are hostile. How are the members supposed to do work if their computers are assumed hostile? Why even give them computers then? > I would already assume Member computers are a huge attack vector, and act accordingly. What would "acting accordingly" look like for you in that example scenario you outlined.

structural 6y ago
You absolutely do assume that that network is hostile/compromised. There are a number of other networks in other places where more important communications are done. It's a giant PITA, and a lot of stuff leaks from Congress because most people believe that they are too important to have to keep things secure. Being in Congress is not an automatic ticket to having all the country's secrets on your desktop, and things actually are compartmented quite heavily when necessary.
- admax88q 6y ago
  > Being in Congress is not an automatic ticket to having all the country's secrets on your desktop I'm not suggesting that they have _all_ the country's secrets on their desktops, but surely the speaker of the house needs access to their emails on their desktop. Those are private, but without them, why even give the speaker a desktop at all?
spoonjim 6y ago
The actual Members are in many ways, a bug of the system, and recent events have demonstrated that very clearly. Capitol IT probably puts them on a "Guest WiFi" and lets them surf Twitter without bothering anyone. The majority of the US government apparatus functions on a day-to-day basis without any input or functional oversight from anyone, and that is the so-called "Deep State" which in reality is the only reason anything works at all. Can you imagine the country if Donald Trump was functionally the CEO the way that Elon Musk is the CEO of Tesla?

structural 6y ago

You absolutely do assume that that network is hostile/compromised. There are a number of other networks in other places where more important communications are done. It's a giant PITA, and a lot of stuff leaks from Congress because most people believe that they are too important to have to keep things secure. Being in Congress is not an automatic ticket to having all the country's secrets on your desktop, and things actually are compartmented quite heavily when necessary.

admax88q 6y ago
> Being in Congress is not an automatic ticket to having all the country's secrets on your desktop I'm not suggesting that they have _all_ the country's secrets on their desktops, but surely the speaker of the house needs access to their emails on their desktop. Those are private, but without them, why even give the speaker a desktop at all?

spoonjim 6y ago

The actual Members are in many ways, a bug of the system, and recent events have demonstrated that very clearly. Capitol IT probably puts them on a "Guest WiFi" and lets them surf Twitter without bothering anyone. The majority of the US government apparatus functions on a day-to-day basis without any input or functional oversight from anyone, and that is the so-called "Deep State" which in reality is the only reason anything works at all. Can you imagine the country if Donald Trump was functionally the CEO the way that Elon Musk is the CEO of Tesla?