Top
Best
New

Posted by Rasbora 19 hours ago

Residential proxies detected on White House network(layer3intel.com)
https://krebsonsecurity.com/2026/11/want-to-rent-an-internet...
1208 points | 395 commentspage 5
dools 14 hours ago|
But … HER EMAILS!!
opengrass 18 hours ago||
NSA honeypots
geephroh 17 hours ago|
I would actually feel better if this were the case, but given that we have "the very best people" currently running our cybersecurity infrastructure I doubt it.

Most likely scenario is a 20-something holdover from DOGE who accidentally had his phone p0wned while downloading groyper memes.

betterunix2 12 hours ago||
Most likely scenario is a janitor who installed an app (I'm guessing it was called LegitWorldCupWatch420696969) on his phone (which might be connecting to the wifi network from whatever locker he leaves it in while he's on the clock, the WH is not a giant SCIF). Or any number of other mundane, easy to overlook employees who work outside of the actual secured areas of the building.
killjoywashere 16 hours ago||
Let's assume the worst, that it's a VIP. Ok, now let's do some basic frequency statistics:

If you click the AS2650 link (1) in the article, you will learn that AS2650 is announcing 65,792 addresses in 5 prefixes. Roughly 40-70% of the IP addresses in a typical corporate ASN are associated with actual computers humans are using. Let's go with 40%. You're looking at 26,317 people. Assume they're all adults (please, dear lord, let them all be adults). 3-8% of the workforce is in IT. Let's go with 3%, that's 789 people. I'm guessing one of those 789 folks has thought this through and has a few VLANs set up to keep VIP and family-of-VIP, pattern of life stuff in a box.

As for the thesis that these are all window-licking low-IQ goons, that's just not how the US government cultivates its workforce. It's no accident that Harvard Business School characterizes themselves as "the West Point of capitalism." West Point isn't someone else's anything. The US Government is in it for the long haul and captures folks young with impossible-to-resist opportunities like the military academies, ROTC, SMART scholars, etc. Let's just stick with the academies: 12,000 people a year who were likely competitive for the Ivies, Division 1 athletics, or both, but chose their parents poorly. Free, top tier education and a job is very attractive for kids from fly-over states. Hell, in big states like California, New York, and Texas, it can actually be even more competitive. Something north of 60% of those graduates stick around for at least 20 years of service (because the high three pension + VA benefits is a pretty nice floor for retirement when your options back home are line supervisor at the cotton mill, the sugar mill, the coal mine, or ramp manager for United), usually addicted to the crazy level of mission. Sort of the opposite of finance where people really struggle mentally if they're not making pallets of money at an accelerating rate. Government service pays dogshit, but the work can super interesting, especially as you gain seniority.

Those folks then often loop back into other agencies and do another 20 years. Are there goombas in the Government? Oh, for sure. Absolutely. But it's roughly the same fraction as any other workforce in the rest of the economy.

But by the time you get to top tier stuff like the White House staff, the sorting function has been strong. To make the point: you also see top tier folks in other organizations with government stink on them. I can think of at least two directors at Google who are prior military. A fat pile of McKinsey folks. Something like 8% of Fortune 500 CEOs have served in the military, above the national average (6-7% of Americans have served in the military at some point).

And it's hilarious to watch people simultaneously assert the government is a bunch of idiots, and then get all excited about fighter pilots, the CIA, the CDC, ambassadors, the NIH. As though those people just appeared from the head of Zeus fully formed. Where do you think they worked when they were young? They were stamping visas for the Department of State in some embassy in central Asia. They were rolling blankets and digging wells in Gambia for the Peace Corps. Checking corporate filings for mostly unknown companies at SEC. Studying aerospace engineering at Embry Riddle and then flying cleared checks between clearing houses across the state overnight in a Cessna.

(1) https://layer3intel.com/context/AS2650

BLKNSLVR 14 hours ago||
... and then Donald Trump as President, Stephen Miller as, whatever he is, and Peter Hegseth as Defense Secretary (he did serve in the military, if that's worth anything).
walrus01 5 hours ago||
I think it's pretty wild to make all these bold assertions about the absolute top tier of elite talent that the US federal gov recruits and retains, and then compare/contrast that with the current staffers of the present incarnation of the executive branch. It just doesn't jive. Seriously, do a deep dive into Hegseth's resume and background of the nonprofit he was the figurehead for. He's more qualified than some known 3/4-star generals? Seriously? Tulsi Gabbard was the most qualified person for DNI? Seriously?
Bassiestroep 19 hours ago||
I mean supply chain-attacks are everywhere. Smart-TV's with certain marketplace apps, IoT devices. Also, I'm surprised the white house's network is not monitored more.
thombat 19 hours ago|
Monitoring is the easy part, remedying the problems has proved harder. From early in the first Trump administration:

https://lieu.house.gov/media-center/in-the-news/what-can-we-...

spiderfarmer 19 hours ago||
That is not an environment for serious people anymore so that's expected.
JudahNyquist 19 hours ago||
probably something IOT with a vulnerability, happens all the time.
Good4boothee 6 hours ago||
The joke that S in "IoT" stands for Security is as old as the term itself, but there were no such clear incentives for exploiting them before, beyond basic DDoS and more recently crypto mining.
budding2141 19 hours ago||
[dead]
LocalH 11 hours ago||
Typical modern government bullshit.

Root it out or let it rot us

charcircuit 18 hours ago||
>that poorly secured proxy SDKs can allow internal network access and lateral movement.

Let me guess. The SDK being used does properly handle this and this whole article is anti residential proxy FUD.

ravivarmat 10 hours ago|
[dead]
More comments...