Deleted tweet detection is currently running at reduced
capacity due to changes to the Twitter API. Some tweets that have been
deleted by the tweet author may not be labeled as deleted in the PolitiTweet
interface.
Showing page 517 of 2161.
Eric Geller @ericgeller
@robknake @vermontgmg @kevincollier I'm a free spirit, no one can tame me — PolitiTweet.org
Eric Geller @ericgeller
Sasse: Any past breaches that probably required as many operatives to engineer and conduct as SolarWinds did? Smith: Can’t think of any. “It's the largest and most sophisticated operation of this sort that we've seen.” — PolitiTweet.org
Eric Geller @ericgeller
Sasse on Amazon ducking this hearing: "I think they should be [here], and I think we should pursue whatever is necessary, and hopefully they'll do that voluntarily." — PolitiTweet.org
Eric Geller @ericgeller
@robknake @kevincollier never! — PolitiTweet.org
Eric Geller @ericgeller
Feinstein is asking Mandia how he would craft legislation requiring cyber "first responders" to share incident response intelligence with USG. Mandia lays out plan for designated companies reporting to one agency. No mention of CISA, which seems like a natural fit for this. — PolitiTweet.org
Eric Geller @ericgeller
@kevincollier technically the proper format for "ok" should be "OK" or you can spell it out as "okay" — PolitiTweet.org
Eric Geller @ericgeller
@kevincollier actually 9/11 was in september so it hasn't technically been 20 years yet — PolitiTweet.org
Eric Geller @ericgeller
@RachAClark @kateconger I'm not owned — PolitiTweet.org
Eric Geller @ericgeller
Mandia and Smith both tell Blunt that they concluded that they didn't have a legal requirement to report the SolarWinds breach when they discovered it. Blunt asks if that should change. Smith reiterates yes. — PolitiTweet.org
Eric Geller @ericgeller
Collins: How difficult would it have been for the hackers to be disruptive rather than to do espionage? Mandia: “Disruption would have been easier than what they did. ... They actually did more work than what it would have taken to go destructive.” — PolitiTweet.org
Eric Geller @ericgeller
Collins: “A large business group” derailed my 2012 cyber info sharing bill, and ironically, they were being hacked at that time. The FBI told them later. “I take no pleasure in that. I think that shows how widespread this problem is.” — PolitiTweet.org
Eric Geller @ericgeller
Collins on AWS refusing to testify: “I think they have an obligation to cooperate with this inquiry, and I hope they will voluntarily do so. If they don't, I think we should look at next steps.” — PolitiTweet.org
Eric Geller @ericgeller
@dnvolz i will always go encryption — PolitiTweet.org
Eric Geller @ericgeller
Warner: “The problem is, we may not know the puck was even in the goal. But if you’ve got good cyber hygiene, chances are you will discover the puck at some point.” — PolitiTweet.org
Eric Geller @ericgeller
Warner: I agree with Burr that “a firewall alone cannot keep out a sophisticated actor.” But that doesn’t mean that basic cyber hygiene doesn’t matter when you’re facing sophisticated actors. Burr acknowledges that this is true. — PolitiTweet.org
Eric Geller @ericgeller
METAPHOR WATCH: Asked if hacks will stop without retaliation, Mandia says no and adds, “We're all playing goalie and we're taking slapshots from Wayne Gretzky. I mean, the puck is going to get in the net sooner or later. And that's what's happening in cyberspace right now.” — PolitiTweet.org
Eric Geller @ericgeller
@gregotto bitcoin blockchain botnet — PolitiTweet.org
Eric Geller @ericgeller
Burr: "Listen, this is sophisticated, they're way past this. So, yeah, [firewalls are] a good thing for companies to adhere to. But don't think that that's going to solve it with the adversaries we're up against right now." — PolitiTweet.org
Eric Geller @ericgeller
Burr goes after Wyden for suggesting that strict firewalls should be mandatory. He notes that most witnesses said firewalls were insufficient. He compares Wyden's firewall point to washing your hands without wearing a mask during Covid-19. (Wyden didn't say just use FWs.) — PolitiTweet.org
Eric Geller @ericgeller
Mandia says cyber "first responders" (companies that do incident response) should be required to share threat intel with the USG so that "we're getting intel into people's hands to figure out what to do about it.” — PolitiTweet.org
Eric Geller @ericgeller
Smith on that limitation: “It does not strike me as the type of practice that makes a lot of sense for the future. … There is an opportunity for reform.” — PolitiTweet.org
Eric Geller @ericgeller
Heinrich asks Smith to elaborate on his concerns about 2015 info sharing law. Smith: “What we found was that our contracts prohibited us from telling any other part of the U.S. government” when we discovered a breach in one part. — PolitiTweet.org
Eric Geller @ericgeller
Heinrich asks witnesses if they believe the hackers used U.S. infrastructure and compromised U.S. software to avoid IC surveillance (which is more limited domestically). Everyone basically says yes. — PolitiTweet.org
Eric Geller @ericgeller
In response to a Bennett Q about the ongoing nature of this cyber campaign, Mandia notes that the Russian group in question has "been around for a decade or more." "We're probably responding to the kids of the people I responded to in the 90s when this group was active." — PolitiTweet.org
Eric Geller @ericgeller
In response to a Carper Q about the ongoing nature of this cyber campaign, Mandia notes that the Russian group in question has "been around for a decade or more." "We're probably responding to the kids of the people I responded to in the 90s when this group was active." — PolitiTweet.org
Eric Geller @ericgeller
Kurtz: “If you start impacting systems, it's a pretty good way to get caught. So, could it be turned into that? Absolutely. But in general, what we've seen is collection, and that simply goes into the big machine, the big apparatus, to be used again for further missions.” — PolitiTweet.org
Eric Geller @ericgeller
Cotton: How much of this was espionage versus sabotage? Mandia: They were focused on collecting intelligence on specific people. — PolitiTweet.org
Eric Geller @ericgeller
@kateconger actually kate I don't know if you know this but Uber drivers aren't workers there's a law now — PolitiTweet.org
Eric Geller @ericgeller
SolarWinds CEO didn't directly answer, so Wyden asks the question again of every witness. Mandia: "It depends. … We do over 600 red teams a year, and firewalls never stopped one of them." SW CEO: Yes. Smith: "It depends." Kurtz: "Firewalls help but are insufficient." — PolitiTweet.org
Eric Geller @ericgeller
Wyden asks SolarWinds' CEO if govt agencies should use strict firewall rules to block software from unnecessarily connecting to the internet. He asked CISA about this in a recent letter we scooped: https://t.co/VlCmgWsRZx — PolitiTweet.org
