3 ms·
> One employee expressed concerns that outside actors could send resignation emails on staffers’ behalf by spoofing their email addresses. I'd be shocked if th
by mullingitover 2y ago
> One employee expressed concerns that outside actors could send resignation emails on staffers’ behalf by spoofing their email addresses.
I'd be shocked if this wasn't happening. A hostile actor could throw the whole federal workforce into chaos with a one-liner script? Obviously that's something you'd do immediately.
- thaumasiotes 2y agoThey'd need to be able to send the emails from the same IP space they would normally come from. A hostile actor who can do that probably has better things to do with the same access.
- mullingitover 2y agoWhat better thing can you do with that than to send three million federal employees and the institutions that depend on them into absolute chaos? Even better, do it randomly to some significant fraction to throw critical groups into confusion. Imagine a third of all the air traffic controllers sending 'resign' right now. It'd shut down air travel in the whole country. The brain trust behind this didn't think more than a tenth of a step ahead, to be generous. This of course assumes that the intent with these people isn't outright treason.
- soupfordummies 2y agoWould they though? If by same IP space you just mean US-based, maybe. But that's not really a huge hurdle is it?
- thaumasiotes 2y agoI mean whatever IP space is registered as the legitimate sender of email from the domain of the victim's email address. Theoretically, it could be "anywhere in the US", but that's not the way I'd bet.