CISA controls the .gov domain registrar and the national public key infrastructure (PKI). This means Elon Musk has the ability to shut down any federal, state, or city government using a .gov domain. Musk can also now prevent .gov agencies and officials from registering their .gov BlueSky handles - ThreadSky

chadloder.bsky.social • 71 days ago

CISA controls the .gov domain registrar and the national public key infrastructure (PKI). This means Elon Musk has the ability to shut down any federal, state, or city government using a .gov domain.

Musk can also now prevent .gov agencies and officials from registering their .gov BlueSky handles

Reposted from Marisa Kabas

New — Edward "Big Balls" Coristine of DOGE now has digital access to the Cybersecurity and Infrastructure Security Agency (CISA), an agency source has confirmed to me.

Comments

jlt00.bsky.social•71 days ago

Oh shit.

greythecritter.bsky.social•71 days ago

He really is just going after people that were legitimately investigating him or his cronies.

steintr.bsky.social•71 days ago

This is bad for many other reasons (and probably academic if they also control the agencies), but does CISA actually run the DNS servers for the various agencies, or just the registrar? The latter shouldn't be able to restrict specific records such as the TXT records needed for Bsky verification.

chadloder.bsky.social•71 days ago

I'm talking more about deleting or disabling resolution for any domains directly within the .gov TLD, which may be able to be done via CISA's EINSTEIN3 resolver (from within agencies) or may require DOGE to send requests over to NTIA.

That said, zones like https://ca.gov are their own TLDs so not an issue

brokenprime.bsky.social•71 days ago

Better get those last minute Amazon orders in.

drspeer.bsky.social•71 days ago

Curious what PKI access could have impacts on? Wouldn’t they be able to revoke access to anything using a .gov api? Weather data, health data, etc. they could easily just shut it down or “oops we reissued the public key. Forgot to publish it…” kinda thing? I’m a hobbiest here so legit curious.

slabgorb.com•71 days ago

they also regulate software safety standards, conveniently for Musk

slabgorb.com•71 days ago

security standards in this regard-- rather than policing cars crashing into poles, they try to make sure no one can hack into someone's car and make it crash into the pole

slabgorb.com•71 days ago

or hack a neuralink *shudder*

mmfass.bsky.social•71 days ago

Oh wow. 😮

syzygeus.bsky.social•71 days ago

Straight-up fascist scum

ngrippel.com•65 days ago

What happens to a nation run by a group of extremely wealthy anti-fact, anti-democracy, anti-humanity crackpots, who firmly believe that they know everything? The USA is now in the process of finding out.

https://www.ngrippel.com/ngr-politics.html

jgrahn.bsky.social•71 days ago

Genuine question: Has any single individual had as much privileged IT access as that guy allegedly has, anywhere, ever?

There's a reason segregation of duties is a thing.

"Big Juicy Intelligence Target" might be a better moniker.

paulrevere2.bsky.social•71 days ago

Basically, Musk is turning X into a state propaganda platform and excluding all other communication platforms that he does not have control of.

cmhoskins.bsky.social•71 days ago

Where is the CIA when you need them most. Sigh.

shanavwhite.bsky.social•71 days ago

That's not good at all.

funkaspuck.bsky.social•71 days ago

Also generate keys that allow MITM snooping on encrypted traffic.

rotarychainsaw.bsky.social•71 days ago

I don't think you need man in the middle when you have access to the certificate of wherever you're going.

chadloder.bsky.social•71 days ago

caffeinated-dreams.bsky.social•71 days ago

Why is a sign in required to view this post? Seems like a weird way to limit who can view it.

retronymous.com•71 days ago

Not good

DoD controls .mil right?

chadloder.bsky.social•71 days ago

Yup

chadloder.bsky.social•71 days ago

Now would be a good time for @bsky.app to implement alternative handle verification techniques that do not require DNS TXT entries, for example well-known URIs as per RFC 8615.

chadloder.bsky.social•71 days ago

The federal PKI is much harder for DOGE to mess with. The US government does not operate a publicly trusted Certificate Authority (CA). Instead, .gov is cross-certified to multiple commercial CA's like DigiTrust.

Also, Certificate Transparency makes PKI shenanigans immediately detectable.

natanael.bsky.social•71 days ago

Already possible, but makes no difference if the whole domain is MITM'ed

https://bsky.social/about/blog/4-28-2023-domain-handle-tutorial

chadloder.bsky.social•71 days ago

MITM of .gov domains for this purpose would be nearly impossible given that the RFC requires HTTPS certificate matching and the CA's are all run by independent commercial operators. Certificate transparency logs would make this easily detectable.

natanael.bsky.social•71 days ago

It would certainly be visible that they requested new certs after pointing the domains to new servers, but this wouldn't generate errors anywhere unless certificate pinning was used

chadloder.bsky.social•71 days ago

I don't see an easy way for them to request new certs.

natanael.bsky.social•71 days ago

Unless the CA enforces policies for the domain limiting who can make a request, all you need is control of the DNS entries to request a cert. And in this situation, they already control the orgs who can make requests. I don't see a restriction on the .gov tld

nysea.bsky.social•71 days ago

While I agree additional verification techniques would be good, this doesn't seem to solve the specific problem? Sure, state/local govt can serve up whatever they want via HTTPS, but the same folks who might deny their ability to update TXT records can also just... nuke their domain entirely, no?

chadloder.bsky.social•71 days ago

They can, and that is a concern. But this denies them the invisible scalpel and replaces it with a very visible sledgehammer.

artwells.com•71 days ago

I'm not going to whois https://bigballs.gov. The results could cause me to turn into a brief enraged pink mist.

pataz1.bsky.social•71 days ago

There is no rational reason for anyone in DOGE to have this access.

ktimes2101.bsky.social•71 days ago

This should be criminal!

sonofmrmopps.bsky.social•71 days ago

It already certainly is. The bottleneck is in enforcement.

teresamcmahan.bsky.social•71 days ago

he has that chip experiment.

sonofmrmopps.bsky.social•71 days ago

What is this world coming to, when I agree with Steve Bannon about literally anything at all?

teresamcmahan.bsky.social•70 days ago

Right

subtlefire.bsky.social•71 days ago

I was not expecting "every accusation is a confession" to potentially apply to vaccine conspiracy theories but wow

bigladydragon.art•70 days ago

It’s like the old saying, a broken clock is correct twice a day

cassandraoftroy.bsky.social•71 days ago

This could be the modern equivalent of seizing the radio stations in a 1930s coup.

esandbeck.bsky.social•71 days ago

The father of DOGE techno-Nazi is Edward Coristine, is Charles Coristine, CEO of "LesserEvil" snack company. LesserEvil has just finished a major facilities upgrade, so this is probably the perfect time to put them out of business with a boycott. BOYCOTT LesserEvil! Make those bastards hurt!

v1g1lantesh1t.bsky.social•71 days ago

How to contact them: https://bsky.app/profile/v1g1lantesh1t.bsky.social/post/3li5ywaalyk2t

esandbeck.bsky.social•70 days ago

Just boycott. Chatting with evil people accomplishes nothing.

v1g1lantesh1t.bsky.social•70 days ago

Feedback from customers / the public does often change business leaders' minds and actions. So I prefer to do both 😊

esandbeck.bsky.social•69 days ago

I am not trying to change the mind of a man who raised a DOGE techno-Nazi. I just want to drive him out of business. This is kind of an exceptional case. The damage has already been done; I am in vengeance mode.

m-rachelthomas.bsky.social•71 days ago

Madness.

deborah122.bsky.social•70 days ago

‘Big Balls’ = a load of old bo**ocks?

er-h.bsky.social•71 days ago

Musk has entered and corrupted everything. We know he has Trump by the short hairs, but what does he have on Republicans to get away with this shit?

altnih4science.bsky.social•71 days ago

Notably that includes https://senate.gov and https://house.gov. So much for separation of powers.

chadloder.bsky.social•71 days ago

That also includes https://ca.gov for California, etc

nortrup.dev•71 days ago

I see it what you mean, but it also seems low stakes for what they can do with CISA.

cdm.expert•71 days ago

Does this not create a golden opportunity for Anonymous et al to create a lot of interesting .gov?

Eh, not my place to worry. All hail the king.

columbojones2.bsky.social•71 days ago

What now?

paulmd199.bsky.social•71 days ago

Or, register Wikileaks dot gov and go wild. 🙃

danielperlin.bsky.social•70 days ago

This is bad. Here’s a little tool in case you need to get back to check a .gov site. Just a quick shortcut the pre jan 20

https://govwayback.com/

zeldas-mommy.bsky.social•71 days ago

😳😰😟

marietoto.bsky.social•71 days ago

Will share. Thanks

southernspring.bsky.social•71 days ago

📌

koogle5546.bsky.social•71 days ago

Doesn’t it also mean that if leaked by his team of hackers (whether knowingly or unknowingly) that other bad people could create .gov sites and snag info?

obinr.bsky.social•71 days ago

I'm hearing a lot about Techno Fascism and musk...thoughts?

davemanynumbers.bsky.social•71 days ago

With the knowledge these quislings have acquired, directly or vicariously, they have:
Become recruit target #1 by every Intel dept worldwide, or
Assassination target #1 by every Intel dept worldwide.
And their families
Big leagues is big leagues

bonniezilla.bsky.social•71 days ago

I know that at least one of the largest ISP's in the US is working to implement RPKI. So, there's that somewhere off on the horizon, if we can last that long.

Comments

Posting Rules

Reply