Dieser Bereich kann Inhalte enthalten, die nicht für alle Nutzer geeignet sind. Dazu können unter anderem Texte, Medien oder Diskussionen gehören, die als beleidigend, extremistisch, gewaltbezogen oder anderweitig belastend empfunden werden. Wenn du solche Inhalte nicht sehen möchtest, nutze bitte die jeweiligen Filter- und Meldeoptionen der Plattform oder meide entsprechende Threads/Communities.
It’s entirely possible that the geniuses in charge of DHS had a totally insecure master admin password and security policy that allowed access to Okta management. The front door lock can still be called “secure” if the owner just left the back door open.
That’d not even a back door. That’s just them leaving the key to the front door under a doormat.
It’s probably more like they gave the key to someone who told them they were the key inspector.
True. When I was a network administrator I didn’t consider my network to be secure and I don’t trust my home network to be. I do what is feasible and hope that things work out.
So someone with a master password was phished. That doesn’t really make it insecure. Someone had admin rights and they were stupid enough to be phished.
You can’t fix stupid
You can’t fix stupid, but you can build systems to help mitigate it. Rate limiting, alarms/pattern monitoring etc. unsurprisingly the fascists are too stupid to do any of that, even with their infinite corrupt budget.
Or maybe whoever was supposed to secure it was doge’d.
if okta has a halfway decent IT department, they’d be able to find that. it’d be the one non-DHS IP address in their access logs.
it could have been an inside job.