AYFKM?!!?

#DOGE assigned to work at agency where it illegally removed data

The ad hoc Department of Govt Efficiency team is assigning 2 staffers to work at the independent agency where a #whistleblower alleged Tues DOGE may have already removed sensitive #labor #data from its systems.

Just 1 day after #NPR reported on the disclosure filed by whistleblower Daniel #Berulis, DOGE reps visited NLRB’s office in DC for a meeting.

#law #NationalSecurity #InfoSec #Trump #Musk
https://www.npr.org/2025/04/16/nx-s1-5366851/doge-nlrb-whistleblower-musk-data

Transmasculine has consistently outperformed transfeminine in the Gender Census, by a large margin.

34/x

@Nonilex ... there are some basics that are being missed when it comes to any/all #DOGE actions, is that it is raw granular #data. It is indexed under a specific person, or company, or organization, and in such detail that _anyone_ who has it can 'become' that identity.

Fake a voting ballot for every living (or dead) citizen? Absolutely! Write a #campaign #contribution check? Of course! Transfer funds from your charity into my some fascist 'wealth fund'? You got it!

The raw data is the prize.

The battle inside the #SSA led the #DOJ to intervene to deny #DOGE access to the #data, even as the #Trump admin installed & promoted DOGE-friendly leaders to dramatically cut back services at #SocialSecurity. It involved staff, from rank-&-file employees to senior leaders, including acting commissioner #LelandDudek, who was appointed to his position after displaying public loyalty to DOGE.

More on this:

Inside #DOGE’s push to defy a #CourtOrder & access #SocialSecurity data

Reps of #ElonMusk’s US #DOGE Service have sought for weeks to get around a court order barring their access to sensitive #data & internal systems at the #SSA, prompting career staff to repeatedly resist their efforts, acc/to a half dozen people familiar w/the DOGE team’s actions & records obtained by The Washington Post.

#law #Trump #Musk #privacy #InfoSec #NationalSecurity #judiciary
https://www.washingtonpost.com/politics/2025/04/15/doge-social-security-data-judge/

Beluris came to that conclusion…after he saw a traffic spike in DNS requests parallel to the #data being exfiltrated, a spike 1,000 times the normal number of requests.

When someone uses this technique, they set up a domain name that pings the target system w/questions or queries. But they configure the compromised server so that it answers those DNS queries by sending out packets of data, allowing the attacker to steal info that has been broken down into smaller chunks.

While investigating the #data taken from #NLRB, Berulis tried to determine its ultimate destination. But whoever had exfiltrated it had disguised its destination too….

#DOGE staffers had permission to access the system, but removing data is another matter.

Berulis says someone appeared to be doing something called DNS tunneling to prevent the data exfiltration from being detected.

Berulis noticed 5 PowerShell downloads…, a task automation program that would allow engineers to run automated commands. There were several code libraries that got his attention—tools that appeared to be designed to automate & mask #data exfiltration. There was a tool to generate a seemingly endless number of IP addresses called "requests-ip-rotator," & a commonly used automation tool for web developers called "browserless" — both repositories starred or favorited by Wick, the #DOGE engineer….