logoalt Hacker News

dhosek • yesterday at 11:09 PM • 18 replies • view on HN

They’re too polite to say it explicitly, but when they say:

> Most of the activity happens in the evening, Eastern time: about half of it falls between 5 p.m. and midnight, and almost none happens in the early morning. That pattern suggests a person rather than a public guest Wi-Fi network: someone regularly on the White House network late into the evening, whose device is infected with a proxy SDK. Our data shows the exits, not the device or the person behind them.

There really aren’t very many candidates for who that person might be and it really seems like it would be someone who, I don’t know, maybe lives where the traffic is originating.


Replies

dpark • yesterday at 11:25 PM

A lot of people work at the White House. Many of them doubtless work a night shift. The set of candidates here is actually quite large.

➕ show 8 replies
ajcp • today at 12:29 AM

Even at midnight I can't imagine there being less than 100 people working at the WH in various capacities. While it's probably not the duty/desk officers in the Situation Room/Security Council, there are plenty of maintenance staff that work at night. 5-midnight seems like it overlaps perfectly with a shift schedule.

➕ show 1 reply
3RTB297 • today at 4:38 AM

The White House doesn't shut down at 5pm. There's whole books, TV series, and movies about the people that are working late every night at the White House. Likely dozens of people are on staff and work shifts that last until midnight every night of the week.

Service staff, including the storied hundred or so White House butlers, work whatever hours are needed. Then you have Secret Service, Kitchen staff, Natalie, house admin staff like the Chief Usher, maybe even NPS staff as the WH grounds are a national park as well, any of whom I would assume might be given access to the secure but unclassified WH wifi and likely a government-issued device. One device with a proxy among all of those people? Entirely unsurprising.

Maybe it's just the printer that Natalie carries around in her purse.

mikeweiss • today at 2:13 AM

Actually sound like the opposite of someone who lives there...Sounds like a shift worker.

xdavidliu • today at 2:24 PM

the politeness appears to be mutual?

TheDong • today at 5:05 AM

That timing could also align with a device that is turned on and off at specific times, for example an insecure smart TV that is generally turned on to watch TV in the evening, and turned off around midnight.

Though the fact that it lines up with an 8 hour shift also makes it seem human-like, so I think I'd rank a human carrying an infected device as more likely than an infected periodically-active device.

gcollard- • yesterday at 11:32 PM

Or the cleaning or security staff working the night shift.

dofm • today at 3:36 AM

Unless it is running on a government issued iPhone, it is not the Individual #1 you are alluding to.

He very famously does not know how to use computers and can only basically manage tweeting from his phone, which he is mostly not, actually, doing himself.

Now, there are two or three terminally online people around him. I would be more quick to point the finger at his foul-mouthed spokesman but it’s admittedly because I hate that guy and he seems rather stupid. But perhaps it could be the devoted portable printer lady, or the overpromoted unblinking former golf caddy guy.

All of them are around to help with the, er, modern day presidential communications.

➕ show 2 replies
ggm • today at 1:25 AM

If you regard 1,000 or less people as few, then this is true. If you regard 1,000 people as "too many" then you rate the national security of the USA at the cost of 1 in 1000 means it's not worth bothing to find out.

Is that really how national security works?

➕ show 1 reply
what • today at 12:39 AM

There’s a ton of people it could be. Any staffer that works 5-12, which wouldn’t be a particularly weird shift for cooks, cleaners, etc that bring their infected phone with them.

If it was someone who lived there it wouldn’t be exclusively that time period. Why wouldn’t it happen overnight or in the morning or any other time of day?

shrubble • today at 1:34 AM

There’s at least 500 people on just the staff of the White House, not including many others who work nearby.

➕ show 1 reply
avodonosov • today at 4:17 AM

Do you imply this residential proxy is also a Presidential proxy?

redwood • today at 11:06 AM

Does it continue when the prez is in Florida? Seems a good test on the hypo

jachee • today at 5:23 AM

It’s probably Natalie.

poopiokaka • today at 12:40 AM

[dead]

aaron695 • today at 5:20 AM

[dead]

lakeviewterrace • today at 12:05 AM

[flagged]

➕ show 1 reply
RockRobotRock • today at 12:13 AM

Yeah dude you’re right Trump bought an android tv from banggood and got pwned. You’re a genius.

➕ show 1 reply