Showing posts with label Security. Show all posts
Showing posts with label Security. Show all posts

23 August 2026

Lying to the Court Again

One of the arguments given by the Trump administration to allow the construction of the White House Ballroom is that there will be a nuclear proof bunker underneath that is required by current threats.

The problem here is that there is already such a bunker under the White House, and the Trump Administration has not informed the courts of this.

President Donald Trump has claimed that the White House needs a massive new ballroom because it would provide him and future presidents with a secure, hardened facility. But former officials say the argument fails to acknowledge that the presidential complex already has one.

More than a decade ago, federal officials built a highly protected bunker, embedded deep underground, that can shelter the president and his top aides in a national security emergency, according to three former officials.

The facility, which was secretly completed during the Obama administration, can house dozens of people for up to multiple weeks, two former officials said. It’s buried more than 60 feet underneath the White House complex and built to withstand a nuclear blast, two of the officials said, ensuring the president and his team have a secure command center to run the country in times of extreme duress.

The bunker’s existence, the former officials said, undercuts the Trump administration’s emerging legal argument in the ongoing lawsuit over the $600 million ballroom complex’s construction: that the facility must be completed due to its significance for U.S. national security.

They are lying again.  This is why the presumption of regularity has been going out of the window. 

08 July 2026

Some Good News Out of Madrid

Spain has excluded Palantir from public contracts.

What a surprise.  It's in the pocket of the US State Security Apparatus, its founder is a literal vampire, its CEO is increasingly unhinged, and it's f%$#ing evil.

Spain just told Palantir to pack its bags. Or at least, to stop unpacking new ones.

On July 1, the Spanish government issued a directive through SEPI, the state holding company that oversees the country’s publicly owned enterprises, instructing its portfolio companies to avoid entering new contracts with Palantir Technologies. The reason: concerns over classified national security information and what officials see as risks to national sovereignty.

The directive targets firms operating in defense, communications, and infrastructure. We’re talking about heavyweights like Telefónica, defense contractor Indra, and naval shipbuilder Navantia

………

Spain isn’t acting in isolation. France announced similar restrictions on June 10, specifically linked to Palantir’s operations. Germany has been having its own version of this conversation.

The concept driving all of this is “digital sovereignty.” The basic idea is that nations should control their own critical data infrastructure rather than outsourcing it to foreign companies, particularly ones whose other clients include the CIA and the Pentagon.
Toxic assholes should not handle sensitive data.  Musk and DOGE demonstrated this quite clearly.

22 June 2026

The Continuing Adventures of the Criminal Enterprise Formerly Known as Facebook™

I had already noted that Meta is attempting to address rock-bottom morale among its employees with improved snacks, and now it appears that the company is suspending its workplace surveillance of its employees.

This is not due to an outbreak of morality among senior management, but rather because they screwed up and inadvertently released their extensive tracking to the wild.

Facebook careless with employee data?  The next thing that you tell me is that Facebook is careless with user data. 

Meta is pausing a divisive employee tracking program after an internal security issue exposed potentially sensitive data collected through the initiative to other workers.

“We have carefully designed this program with privacy safeguards and while we have no indication at this time that any data was improperly accessed by Meta employees, we're pausing it while we investigate,” says company spokesperson Tracy Clayton.

Meta rolled out the Model Compatibility Initiative (MCI) tool in April to US employees. The tool “collects computer inputs such as mouse movements, click locations and keystrokes, as well as screen content,” according to workers who have been petitioning against it over privacy, security, and personal liberty concerns. When MCI launched, employees couldn’t opt out, but that changed to a limited degree after workers protested.

………

On Monday, a Meta engineer issued an internal security notice stating that databases filled with information gathered by MCI had been exposed to anyone inside the company.

A former employee actively involved in pushing back against MCI describes the lapse as “a mess” —and one that employees had expected would occur. “When workers raised concerns, leadership doubled down and failed to acknowledge the risks workers raised about the safety and privacy of worker and customer data,” the person says. “Leadership has clearly created an authoritarian environment where workers are no longer respected or heard.”

If Mark Zuckerberg were to be killed in a plane crash, I expect spontaneous celebrations in most of the offices of Meta.

06 June 2026

Today in Unbelievably Crappy OpSec

I have done a Google reverse image search, and this image, and there are literally dozens of copies of this floating around the web.

We know the size of the boom, the size of the F-16, and the size of Palm Jumeirah precisely.

This means that the location of this shot can be determined with a big of basic map work and trigonometry to well within 10 meters.

Not a good look, unless, of course, you are a member of the IRGC. 

12 May 2026

Today in Bat Sh%$ Inane

First, we have Trump calling for Barack Obama's arrest again, basically, "Yadda, Yadda, Yadda, Russiagate," which these days is not particularly remarkable, and then we have elements of the Trump administration calling Tucker Carlson and Nuck Fuentes terrorists.

As Anna Russel would say, "I'm not making this up, you know."

Two right-wing figures — Tucker Carlson and Nick Fuentes — have been named by the White House as possible domestic terrorists, according to the Trump administration’s top counterterrorism official.

Sebastian Gorka, himself a former right-wing influencer turned National Security Council principal, has been making his rounds on conservative media, describing the meaning and purpose behind the President’s new National Counterterrorism Strategy (which I reported on previously).

Between grandiose monologues about his vision of a crusade to save Western civilization from “anti-American” and “anti-Christian” extremism, Gorka let slip that the administration’s war on “domestic terrorism” isn’t just aimed at the left. It targets anyone who isn’t in line with the broader MAGA agenda. While Trump’s national security directive NSPM-7 explicitly singles out the left with its list of so-called terrorism indicators, many of them could describe people on the right as well.

………

Asked by Breitbart editor-in-chief Alex Marlow if there’s any “right-wing terror” or “right-wing extremism” threat, Gorka replied by pointing to former Fox News host Tucker Carlson and streamer Nick Fuentes — both of whom have become vocal critics of the Trump administration — arguing they aren’t actually conservatives anyway. Here’s the exchange:
MARLOW:  “ I wanna get your thoughts on any right-wing terror … Do you regard it as a threat at all or anything that's important to be considering right now?”

GORKA: “…I'm not sure that Nick Fuentes or Tucker Carlson are conservatives. If you are lauding Sharia law, if you are saying that there are Muslim states that seem to be better qualitatively than America in terms of freedom and prosperity, I'm not sure that means you're part of the conservative movement.  So if you remove those individuals and you understand that they're not conservatives, what's left?”
Gorka’s charge that Carlson lauds Sharia law is, to put it lightly, ridiculous.

To be fair, Carlson and Fuentes have been promulgating stochastic terrorism, wherein they realize that someone in their large audience will take matters into their own hands, but what Gorka is talking about is the idea that any criticism of Dear Leader is terrorism.

We really need to make sure that everyone in this corrupt administration sees the inside of a courtroom as a defendant. 

26 April 2026

Of Course He Has

Donald Trump is using the shooting incident at the White House Correspondents Dinner to justify building his lame-ass ugly White House ballroom.

This is despite the fact that:

  • Security worked as intended, the gunman never made it through the entry point.
  • The WHC Dinner is a private event, which could not be held in the Trump's monument to kitsch.

I'm not surprised, nor am I disappointed by this, (my expectations are low) but it pisses me off. 

18 April 2026

Today in Failed OpSec

I am not sure what the most important role to ensure security on a war ship, not I'm pretty sure that number 2 on the list is promptly check your physical mail for GPS trackers.

Militaries around the world spend countless hours training, developing policies, and implementing best operational security practices, so imagine the size of the egg on the face of the Dutch navy when journalists managed to track one of its warships for less than the cost of some hagelslag and a coffee.

The security snafu was reported by Dutch regional broadcaster Omroep Gelderland. In a Thursday report, Omroep Gelderland journalist Just Vervaart said the broadcaster was able to track HNLMS Evertsen, a Dutch air-defense frigate deployed to help protect France’s aircraft carrier Charles de Gaulle against missile threats, by mailing a Bluetooth tracker concealed in a postcard to the ship.

Per Vervaart, the Dutch Ministry of Defence makes it easy to send mail and packages to soldiers and sailors in the Dutch armed forces and posts full instructions online. It's that freely available open-source intelligence data that Vervaart was able to use to send the tracker to the Evertsen. 

 Oopsie!

08 December 2025

Gee, Ya Think?

I'm not a big fan of corporate consultants.  

Mostly, they state the3 blatantly obvious, and give permission for companies to behave unethically (I'm looking at you, McKinsey)  and charge millions of dollars for this.

That being said, Gartner just stated the obvious and provided a very real public service when they recommended that companies not use AI browsers because their security is complete pants.

Everyone with half a brain should know this, but everyone is also afraid that they will be blamed for causing the tulip AI mania to collapse, so they remain silent:

Agentic browsers are too risky for most organizations to use, according to analyst firm Gartner.

The firm offered that advice last week in a new advisory titled “Cybersecurity Must Block AI Browsers for Now,” in which research VP Dennis Xu, senior director analyst Evgeny Mirolyubov, and VP analyst John Watts observe “Default AI browser settings prioritize user experience over security.”

The analysts’ definition of an AI browser encompasses tools like Perplexity’s Comet and OpenAI’s ChatGPT Atlas that include two elements:

  • An “AI sidebar” that offers users the chance to summarize, search, translate, and interact with web content using AI services provided by the browser’s developer
  • An agentic transaction capability that allows the browser to autonomously navigate, interact with, and complete tasks on websites, especially within authenticated web sessions.
………

But if you decide the back-end AI is too risky, Gartner recommends blocking users from downloading or installing AI browsers.

Gartner’s fears about the agentic capabilities of AI browser relate to their susceptibility to “indirect prompt-injection-induced rogue agent actions, inaccurate reasoning-driven erroneous agent actions, and further loss and abuse of credentials if the AI browser is deceived into autonomously navigating to a phishing website.”

Shorter version:  AI browsers are a Petri dish for phishing. 

27 August 2025

Et Tu Grok(ey)?

Once again, one of Elon's projects screws up.

In this case, it's his AP program Grok, which leaked thousands of prompts.

This is not a surprise.  What is a surprise is that the chat-bot offered tips on how to assassinate ……… Elon Musk.

Gee, I guess that Grok is like all the rest of the Apartheid Era Emerald Heir Pedo Guy's employees.

Wall Street tech watchers that had only recently recovered from Elon Musk’s AI chatbot going rogue are now quietly reassessing the technology, after a new leak of thousands of user conversations show it teaching people how to make drugs, assassinate Musk himself, and build malware and explosives.

Luckily for xAI, the company that created Musk’s AI chatbot Grok, it is not a publicly traded company, so no public investor or shareholder backlash has forced down its share price or pressured its executives to address the public about privacy concerns.

Yeah, "Lucky," not, "Stupid and corrupt."

………

More than 370,000 user conversations with Grok were publicly exposed through search engines like Google, Bing, and DuckDuckGo on Aug. 21. That led to the posting of a wide range of disturbing content and sent xAI scrambling to contain the fallout and fix the malfunction that reportedly caused the leak.

What kind of disturbing content? Well, in one instance, Grok offers up a detailed plan on how to assassinate Musk himself, before walking that back as “against my policies.” In another exchange, the chatbot also helpfully pointed users to instructions on how to make fentanyl at home or build explosives.

Forbes, which broke the story, reports that the leak stemmed from an unintended malfunction in Grok’s “share” function, which allowed private chats to be indexed and accessed without user consent.
Needless to say, I am amused.

04 July 2025

If the FBI Can Use It, so Can the Sinaloa Cartel

Various law enforcement agencies love them some data bought from third party data brokers to cast a wide dragnet that would otherwise not be allowed by law.

They love insecure phone systems and communications providers who sell user data for the same reason.

It turns out that Mexican drug cartels like these things for all the same reasons, except, of course they are not constrained by things like due process:

The Sinaloa drug cartel in Mexico hacked the phone of an FBI official investigating kingpin Joaquín “El Chapo” Guzmán as part of a surveillance campaign “to intimidate and/or kill potential sources or cooperating witnesses,” according to a recently published report by the Justice Department.

The report, which cited an “individual connected to the cartel,” said a hacker hired by its top brass “offered a menu of services related to exploiting mobile phones and other electronic devices.” The hired hacker observed “'people of interest' for the cartel, including the FBI Assistant Legal Attache, and then was able to use the [attache's] mobile phone number to obtain calls made and received, as well as geolocation data, associated with the [attache's] phone."

“According to the FBI, the hacker also used Mexico City's camera system to follow the [attache] through the city and identify people the [attache] met with,” the heavily redacted report stated. “According to the case agent, the cartel used that information to intimidate and, in some instances, kill potential sources or cooperating witnesses.”

What happened here is a direct response of law enforcement, both in the US and worldwide, leaning on communications providers to leave back doors open.

To paraphrase E.E. "Doc" Smith, any technology that can be devised by law enforcement can also be deployed by criminal entities. 

21 April 2025

You Know, Morons


Source of the headline

It appears that while sharing sensitive dsetails of a stroke on Yemen with his fellow government bureaucrats, Pete Hegseth was also sharing these same details on his personal phone to his wife, brother, and lawyer. 

I did not know that a pathetic drunk could multitask so effectively: 

Defense Secretary Pete Hegseth shared detailed information about forthcoming strikes in Yemen on March 15 in a private Signal group chat that included his wife, brother and personal lawyer, according to four people with knowledge of the chat.

Some of those people said that the information Mr. Hegseth shared on the Signal chat included the flight schedules for the F/A-18 Hornets targeting the Houthis in Yemen — essentially the same attack plans that he shared on a separate Signal chat the same day that mistakenly included the editor of The Atlantic.
(Emphasis mine)
Mr. Hegseth’s wife, Jennifer, a former Fox News producer, is not a Defense Department employee, but she has traveled with him overseas and drawn criticism for accompanying her husband to sensitive meetings with foreign leaders.

Mr. Hegseth’s brother Phil and Tim Parlatore, who continues to serve as his personal lawyer, both have jobs in the Pentagon, but it is not clear why either would need to know about upcoming military strikes aimed at the Houthis in Yemen.

I've got a guess as to why, it's because Secretary Pete is an addicted co-dependent idiot?

Then again, I'm an engineer, not a psychologist, Dammit!*

The previously unreported existence of a second Signal chat in which Mr. Hegseth shared highly sensitive military information is the latest in a series of developments that have put his management and judgment under scrutiny.
Gee, you think?

Their stupidity may yet save the Republic.

*I love it when I get to go all Dr. McCoy!

22 February 2025

Things that I Never Thought that I Would Write

Apple Did the Right Thing.

Specifically, instead of adding a back door into their end to end encryption as demanded by UK authorities, they have pulled the service from the island nation.

Adding a back door for law enforcement adds a back door that could be accessed by any malefactor who wants you data:

Apple disabled its most secure data storage offering for new customers in Britain on Friday rather than comply with a secret government order that would have allowed police and intelligence agencies to access the encrypted content.

The order under the country’s Investigatory Powers Act, reported by The Washington Post two weeks ago, requires the California maker of iPhones and Mac computers to create a backdoor capability allowing authorities to snoop on iCloud storage anywhere in the world.

That would nullify the technology in Apple’s Advanced Data Protection service, which provides such strong encryption that the company itself is unable to retrieve users’ information. Apple rolled out that optional end-to-end encryption globally starting in late 2022.

Compromised security, even when complying with law enforcement, makes for less security. 

It is likely to actually result in more crime, because criminals know that they will have easier access.

14 February 2025

When You Treat Your Customers Like Criminals

Only criminals are your customers.

Case in point, Walgreens backtracking on its program of locking up everything on their shelves: 

In a challenging retail landscape, Walgreens Boots Alliance shared plans to revamp its strategy in a Q1 2025 earnings call. Despite reporting a 23% year-over-year decline in adjusted EPS to $0.51, the pharmacy giant outperformed expectations, buoyed by robust cost management and strength in U.S. pharmacy services. CEO Tim Wentworth emphasized the company’s commitment to a “retail pharmacy-led turnaround,” underpinned by strategic store closures, enhanced customer engagement, and a renewed focus on health and wellness offerings.

The company plans to close approximately 450 additional stores in 2025, noting that the stores that remain open outperform the ones designated for closure by approximately 250 basis points. Wentworth also acknowledged the ongoing struggle with shrink as a “hand-to-hand combat battle.” After reporting a 52% increase in shrink, or lost inventory, in 2020 and 2021, Walgreens invested in increased security that proved to be “largely ineffective.” And while many drug stores have taken to locking up commonly looted goods, Wentworth admitted, “When you lock things up…you don’t sell as many of them. We’ve kind of proven that pretty conclusively.”

Gee, ya think?

04 January 2025

Mental Incapacity, My Ass

Against the recommendations, Joe Biden rejected the merger of Nippon and US Steel.

I agree with the decision, but even if I didn't, this is completely on brand for Biden to reject the importunities of the so-called experts in the field.

It should be noted that these experts, who have given us NAFTA, CAFTA, WIPO, the decline of the American working and middle class, investor–state dispute settlement boards, and almost the Trans Pacific Partnership.

These deals have rarely served the general populace, and have more often served the interests of big donors.

The experts who advocate for these deals frequently set up lucrative consultancies to profit from their administration, so they make money, and businesses whose profits come from rent seeking through these deals, like Pharm and Media, make money, but the rest of us lose.

President Joe Biden’s blocking of a Japanese company’s bid to purchase U.S. Steel overrode the advice of numerous top aides, ending a long-running debate that had divided the president’s inner circle, according to seven officials familiar with the matter.

The decision to nix Nippon Steel’s $14.9 billion takeover bid helps cement Biden’s image as a staunch defender of U.S. unions but leaves the fate of thousands of workers unclear and tees up a potentially protracted legal battle over whether politics influenced a security review that is supposed to be left to experts.

Biden had long said he opposed the purchase of U.S. Steel, arguing the iconic company needed to stay in domestic hands, a position that many observers saw as political pragmatism to shore up the union vote in an election year. But with the election over and President-elect Donald Trump set to take office, some aides thought there might be a slim chance to persuade Biden to relent in his last days in office, according to the officials, who spoke on the condition of anonymity to describe internal deliberations.

At a White House meeting convened by Biden’s chief of staff Jeff Zients on Thursday evening, some of these aides, such as national security adviser Jake Sullivan, noted that one option was a conditional block of the acquisition. That would have allowed Nippon Steel to advance more proposals to minimize potential national security risks, effectively pushing the matter to the next administration, according to three officials.

Over the last several months, more than a half-dozen senior administration officials — including Sullivan deputy Jonathan Finer, Secretary of State Antony Blinken, his deputy Kurt Campbell, U.S. Ambassador to Japan Rahm Emanuel, Treasury Secretary Janet L. Yellen, Chair of the White House Council of Economic Advisers Jared Bernstein and top Commerce officials — argued against or expressed reservations about the position Biden ultimately took, said officials familiar with the deliberations.

………

But for some members of the president’s domestic economic team and for his political advisers in particular, blocking the deal gave the White House a rare opportunity to protect U.S. jobs, deliver a clear victory to the nation’s labor unions and burnish Biden’s legacy. Skeptics of the deal, which was strongly opposed by United Steelworkers President David McCall, thought Nippon had an uneven track record of protecting workers. They also felt that Nippon Steel had a year to advance a meaningful mitigation plan but repeatedly failed to do so, according to one U.S. official familiar with their views. 
Also, any mitigation plan would have been ignored.

When push came to shove, in a world where there is already a glut of steel, Nippon Steel would have cut US jobs, and not Japanese ones.

I was around in 1993 when NAFTA was being debated, and Clinton insisted that there would be side deals to address the concerns of critics.  

Surprise, these side deals were never made, because harming ordinary workers was a feature, not a bug.

As to whether or not this is an actual security risk, who cares.

Good on Joe.

25 November 2024

I Agree with THIS Turd?

John Bolton, batsh%$ insane war monger, has roundly condemned Sebastian Gorka's selection as counter-terrorism chief.

F%%$# me, I f%$#ing agree with f%$#ing John f%$#ing Bolton.

Trump’s former national security adviser John Bolton has laid into Sebastian Gorka, the president-elect’s pick for counter-terrorism chief, as a “conman” whose selection is not “going to bode well for counter-terrorism efforts when the [national security council’s] senior director is somebody like that”.

Trump praised Gorka, who was born in the UK to Hungarian parents, as a “tireless advocate for the America First Agenda and the MAGA Movement”.

But Bolton came out swinging at Gorka on Friday. The arch-conservative, who served in the Reagan, George W Bush and first Trump administrations, has set out his stall against many of Trump’s picks, including former Democrat and Iraq veteran Tulsi Gabbard for director of national intelligence, and told CNN that he “wouldn’t have him in any US government”.

Earlier this week, Bolton told NewsNation’s The Hill that up until Gorka was nominated by Trump as a deputy assistant to the president and the senior director for counter-terrorism, he would have said that Gabbard’s nomination “was the worst cabinet appointment in recent American history”.

This guy is an unqualified and a bigger lunatic than John Bolton.

I would not say that he was the worst cabinet appointment in recent American history though, there is an awful lot of competition there.

15 October 2024

The Internet of Sh%$

Yes, internet connected vacuum cleaners can spy on you and shout racist slurs at you.

Why on earth would someone want an internet connected vacuum cleaner?

I could understand Bluetooth, but the only people who get anything of value out of an internet connected vacuum are people who want to spy on you, like the FBI, CIA, NSA ……… Oh, now I get it.

It’s a tale as old as… well, the Internet of Things era. Robot vacuums made by Ecovacs have been reported roving around people’s homes, yelling profanities at them through the onboard speakers after the company’s software was found to be vulnerable to intrusion.

ABC News in Australia reports that there were recently multiple instances across the U.S. when owners of Ecovacs vacuums noticed their devices acting unusually.

“It sounded like a broken-up radio signal or something,” Daniel Swenson, an owner of an Ecovac Deebot X2, told the outlet. “You could hear snippets of maybe a voice.” He opened the vacuum’s app to find a stranger was accessing its live camera feed and remote control feature, but assumed it might be an error. After resetting the password and rebooting the X2, the vacuum quickly started moving again:

This time, there was no ambiguity about what was coming out of the speaker. A voice was yelling racist obscenities, loud and clear, right in front of Mr Swenson’s son.

“F*** n******s,” screamed the voice, over and over again.

Perhaps the best part of this anecdote was Swenson’s incredulous conclusion that the situation “could have been worse.” But he’s right that it was nice of the hacker to let him know his vacuum was hacked instead of spying on him indefinitely.

Delightful.

10 October 2024

Security Experts Have Been Warning About This Forever

It appears that the systems mandated by the US government to allow our state security apparatus to easily spy on people were hacked by the Chinese state security apparatus to spy on people.

Security experts have been saying that mandatory government back doors are a bad idea, because other people can use them as well.

QED

Chinese government hackers penetrated the networks of several large US-based Internet service providers and may have gained access to systems used for court-authorized wiretaps of communications networks, The Wall Street Journal reported Saturday. "People familiar with the matter" told the WSJ that hackers breached the networks of companies including Verizon, AT&T, and Lumen (also known as CenturyLink).

"A cyberattack tied to the Chinese government penetrated the networks of a swath of US broadband providers, potentially accessing information from systems the federal government uses for court-authorized network wiretapping requests," the WSJ wrote. "For months or longer, the hackers might have held access to network infrastructure used to cooperate with lawful US requests for communications data, according to people familiar with the matter."

These "attackers also had access to other tranches of more generic Internet traffic," according to the WSJ's sources. The attack is being attributed to a Chinese hacking group called Salt Typhoon.

The Washington Post reported on the hacking campaign yesterday, describing it as "an audacious espionage operation likely aimed in part at discovering the Chinese targets of American surveillance." The Post report attributed the information to US government officials and said an investigation by the FBI, other intelligence agencies, and the Department of Homeland Security "is in its early stages."

The Post report said there are indications that China's Ministry of State Security is involved in the attacks.

Considering the possibilities, from Daesh to the Sinaloa Cartel to whatever is left of al Qaeda, the Chinese are probably the least worrisome group to penetrate these systems. 

This is why mandatory back doors are a bad idea.

05 October 2024

The Grifting Continues

The cybersecurity firm IronNet, founded by former senior US intelligence officials, has shut down with a general odor of corruption.

Sounds to me like they thought that they could use their professional connections to sell nothing to the government.

The future was once dazzling for IronNet.

Founded by a former director of the National Security Agency and stacked with elite members of the U.S. intelligence establishment, IronNet promised it was going to revolutionize the way governments and corporations combat cyberattacks.
That former director would be General Keith Alexander.
Its pitch — combining the prowess of ex-government hackers with cutting-edge software – was initially a hit. Shortly after going public in 2021, the company’s value shot past $3 billion.

I cannot imagine that their special sauce was anything beyond the potential to hire government employees after their retire.

I'm sure that Alexander made a lot of money after the IPO.

………

Last September the never-profitable company announced it was shutting down and firing its employees after running out of money, providing yet another example of a tech firm that faltered after failing to deliver on overhyped promises.

The firm’s crash has left behind a trail of bitter investors and former employees who remain angry at the company and believe it misled them about its financial health.

IronNet’s rise and fall also raises questions about the judgment of its well-credentialed leaders, a who’s who of the national security establishment. National security experts, former employees and analysts told The Associated Press that the firm collapsed, in part, because it engaged in questionable business practices, produced subpar products and services, and entered into associations that could have left the firm vulnerable to meddling by the Kremlin.

“I’m honestly ashamed that I was ever an executive at that company,” said Mark Berly, a former IronNet vice president. He said the company’s top leaders cultivated a culture of deceit “just like Theranos,” the once highly touted blood-testing firm that became a symbol of corporate fraud.

Remember how I noted that generals are in bed with defense contractors because of an implicit promise of a comfortable sinecure on retirement.

This is just a particularly egregious example of this.

………

IronNet’s founder and former CEO Keith Alexander is a West Point graduate who retired as a four-star Army general and was once one of the most powerful figures in U.S. intelligence. He oversaw an unprecedented expansion of the NSA’s digital spying around the world when he led the U.S.’s largest intelligence agency for nearly a decade.

Alexander, who retired from the government in 2014, remains a prominent voice on cybersecurity and intelligence matters and sits on the board of the tech giant Amazon. Alexander did not respond to requests for comment.

IronNet’s board has included Mike McConnell, a former director of both the NSA and national intelligence; Jack Keane, a retired four-star general and Army vice chief of staff, and Mike Rogers, the former Republican chairman of the House Intelligence Committee who is running for the U.S. Senate in Michigan. One of IronNet’s first presidents and co-founders was Matt Olsen, who left the company in 2018 and leads the Justice Department’s National Security Division.

Alexander’s reputation and the company’s all-star lineup ensured IronNet stood out in a competitive market as it sought contracts in the finance and energy sectors, as well as with the U.S. government and others in Asia and the Middle East.

Translation to that last paragraph:  They were the selling personal and professional connections of senior executives and board members, not any unique knowledge of cybersecurity threats or cybersecurity strategies.

………

Top officials were prohibited from unloading their stock for several months, but Alexander was allowed to sell a small amount of his shares. He made about $5 million in early stock sales and bought a Florida mansion worth the same amount.

Well, that beats working for a living.

………

It did not take long for IronNet’s promises to slam into a tough reality as it failed to land large deals and meet revenue projections. Its products simply didn’t live up to the hype, according to former employees, experts and analysts.

Stiennon, the cybersecurity investing expert, said IronNet’s ideas about gathering threat data from multiple clients were not unique and the company’s biggest draw was Alexander’s “aura” as a former NSA director.

The AP interviewed several former IronNet employees who said the company hired well-qualified technicians to design products that showed promise, but executives did not invest the time or resources to fully develop the technology.

Of course they didn't.  This was about insider access, not technology.

27 July 2024

Gee, You Think?

The US Secret Service has asked (begged) the Trump campaign to stop holding outdoor rallies because of the difficulties in securing a venue.

I don't think that they will stop holding outside rallies though, they are a lot cheaper, and Trump is cheap: 

Secret Service officials encouraged Donald Trump’s campaign to stop scheduling large outdoor rallies and other outdoor events with big crowds after the assassination attempt on the former president in Butler, Pa., according to people familiar with the matter.

In the aftermath of the shooting, agents from the Secret Service communicated their concerns about large outdoor rallies going forward to Trump campaign advisers, three people familiar with the matter said.

The people familiar with the matter spoke on the condition of anonymity to describe private discussions.

………

Trump has held hundreds of outdoor rallies since launching his first presidential bid, often bragging about — and sometimes falsely inflating — his large crowds. They have become something of a cult favorite among his most passionate fans, with tailgate parties in parking lots, vendors lining open areas near the rally and large parades of traffic, often with gargantuan pickup trucks.

They usually include large rosters of speakers before Trump takes the stage, with crowds sometimes enduring the heat or the cold for many hours. The crowd sometimes departs before Trump, who is regularly late, finishes speaking.

The rallies are often held at airports but are also held at fairgrounds, football stadiums or other large outdoor venues.

………

Indoor rallies are more expensive, campaign advisers said. But one campaign official who spoke on the condition of anonymity to describe private plans said the indoor events are inherently safer because it is easier to control who comes through a finite number of doors, and there are fewer line-of-sight issues. 

This sh%$ is security 101, but the Trump campaign wants the optics and the lower cost of outdoor events.

Not bright.

20 July 2024

White Boys Failing Up

I missed one of the more significant bits of information about the CrowdStrike debacle, that its CEO, George Kurtz, was CTO at McAfee over a decade ago when they were responsible for a similar disaster.

The degree to which people like Kurtz continue to succeed at jobs for which they are patently ill suited just buggers the mind:

A good portion of the world stood still on Friday, resulting in one of the most widespread tech outages of all time.

The outage disrupted operations at major banks, airlines, retailers, and other industries after CrowdStrike, a cybersecurity giant used by Microsoft and others, pushed a faulty update.

Many industries were still digging out of the debacle on Saturday. The fallout is expected to last weeks.

………

Naturally, blame has begun to target the man at the center of it all: CrowdStrike CEO George Kurtz.

Tech industry analyst Anshel Sag pointed out that this isn't the first time Kurtz has played a major role in a historic IT blowout.

On April 21, 2010, the antivirus company McAfee released an update to its software used by its corporate customers. The update deleted a key Windows file, causing millions of computers around the world to crash and repeatedly reboot. Much like the CrowdStrike mistake, the McAfee problem required a manual fix.

Kurtz was McAfee's chief technology officer at the time. Months later, Intel acquired McAfee. And several months after that Kurtz left the company. He founded CrowdStrike in 2012 and has been its CEO ever since.

"For those who don't remember, in 2010, McAfee had a colossal glitch with Windows XP that took down a good part of the internet," Sag wrote on X. "The man who was McAfee's CTO at that time is now the CEO of CrowdStrike."

Seriously, how has this guy risen in the ranks of IT security after being at the helm of a huge f%$# up?

Oh, right, CrowdStrike.  The CIA's favorite security firm.

The CIA loves incompetence.