4 ms·
Security clearances are surely one? Government employees with access to that data are heavily vetted. DOGE, not so much.
by afavour 2y ago
Security clearances are surely one? Government employees with access to that data are heavily vetted. DOGE, not so much.
- rayiner 2y agoSecurity clearances for classified information and most IRS employees don’t have security clearances.
- philistine 2y agoYeah, let's just assume there are no safeguards in place at the IRS to protect personal data.
- xyzzyz 2y agoThese IRS safeguards will not be of the “security clearance required” form. IRS data, while private, is not classified.
- master_crab 2y agoThis. IRS data isn’t protected because it’s classified. It’s protected because of confidentiality enforced by laws passed by Congress (the Tax reform act I believe) (and the fact that the executive branch can be sued out of their pants for civil damages).
- jrs235 2y ago*(and the fact that the executive branch can be sued out of their pants for civil damages) if the government agrees to allowing itself to be sued...
- genewitch 2y agoThey have 500MB email boxes! Actually I wonder, now, because they wanted to hire 84k people last year...
- rayiner 2y agoYou’re the one assuming DOGE is ignoring “safeguards” you don’t even know exist.
- afavour 2y agoWe know they are? > The USAID systems the DOGE team tried to access included personnel files and security systems, including classified systems beyond the security level of at least some of the DOGE employees, according to three of the sources. The systems also included security clearance information for agency employees, two of the sources said. https://www.nbcnews.com/politics/national-security/usaid-security-leaders-removed-refusing-elon-musks-doge-employees-acce-rcna190357 https://www.nbcnews.com/politics/national-security/usaid-sec...
- evanjrowley 2y agoI'm familiar with IRS contracts and while security clearances are not involved, they do have a unique background investigation process that involves a tax audits.
- figassis 2y agoIt would not be security clearances, but some form of assurances for protecting PII. Think of it this way. If this system contained people’s credit cards numbers, the entire system would be required to be PCI certified, and that requires that processes and procedures be in place so that even employee access is extremely limited. Data shouldn’t even be plaintext at rest. No one really needs to see anyone’s credit card number. Anonymized data is just fine. So some agency, authorized by the president or not, barging in asking for read/write access to card numbers should not be allowed, because the data aren’t the president’s to give. Same should be valid for social security numbers. You can’t guarantee that 100% of DOGE’s employees are benign, or that they are have the best opsec, or that their devices are not exploitable (or exploited already). So you minimize this attack surface by minimizing access. Because if anything happens, then you can be 100% certain that Musk/Trump will not voluntarily answer for it/make people whole. They will at best be taken to court where they will fight for years while the victims suffer the consequences in the present. So you do everything you can to prevent this nebulous, blameless “we meant well, we couldn’t know this would happen, we’re sorry for all the pain, let’s move forward together” outcome.