Trump is back baby!

[BlarneyMan]

Here we go, major move to authoritarianism coming.

Ábrego García deported to El Salvador by mistake. The US Supreme Court has order that he's returned to the US. El Salvador's president says he doesn't have the power to return him back to the US, Trump administration claims they don't have the power to bring him back to US soil.


Now Trump, on a hot mike, has said he wants to deport the "home grown ones are next" and that "you guys are going to have to build 5 more places, it's not big enough".

Americans should be afraid. Very afraid.

This is a deal Ireland should do with Albania, they can build big big big, for very little money

 

[How bad boy]

This is a deal Ireland should do with Albania, they can build big big big, for very little money

Why would Ireland do that?

 

[How bad boy]

Here we go, major move to authoritarianism coming.

Ábrego García deported to El Salvador by mistake. The US Supreme Court has order that he's returned to the US. El Salvador's president says he doesn't have the power to return him back to the US, Trump administration claims they don't have the power to bring him back to US soil.


Now Trump, on a hot mike, has said he wants to deport the "home grown ones are next" and that "you guys are going to have to build 5 more places, it's not big enough".

Americans should be afraid. Very afraid.

That was quick

U.S.-born American citizen under ICE hold in Florida after driving from Georgia

Juan Carlos Gomez-Lopez is being held even though a county judge found his birth certificate “authentic” and said there wasn’t reason to consider him an “illegal alien.”

www.nbcnews.com

 

[Handy Run]

Pwnd

 

[catcha]

 

[catcha]

serious shit:

A federal whistleblower just dropped one of the most disturbing cybersecurity disclosures I’ve ever read.

He's saying DOGE came in, data went out, and Russians started attempting logins with new valid DOGE passwords

Media's coverage wasn't detailed enough so I dug into his testimony:
Who’s the whistleblower?

Daniel Berulis — a senior DevSecOps architect at the National Labor Relations Board (NLRB), formerly with TS/SCI clearance.

He just told Congress the Department of Government Efficiency (DOGE) pulled off a covert cyber op inside a federal agency.
DOGE demanded root access.
Not auditor access. Not admin.

They were given “tenant owner” privileges in Azure — full control over the NLRB’s cloud, above the CIO himself.
This is never supposed to happen.
They disabled the logs.
Berulis says DOGE demanded account creation with no recordkeeping.

They even ordered security controls bypassed and disabled tools like network watcher so their actions wouldn’t be logged.
And then the data started flowing out.
10+ GB spike in outbound traffic

Exfiltration from NxGen, the NLRB's legal case database
No corresponding inbound traffic
Unusual ephemeral containers and expired storage tokens
They used an external library that used AWS IP pools to rotate IPs for scraping and brute force attacks.

They downloaded external GitHub tools like requests-ip-rotator and browserless — neither of which the agency uses.
The most daming claim in this statement IMO:

Within 15 minutes of DOGE accounts being created…
Attackers in Russia tried logging in using those new creds.
Correct usernames and passwords.

2 options here. The DOGE device was hacked. And I don't think I need to explain the 2nd.
Multi-factor authentication? Disabled.
Someone downgraded Azure conditional access rules — MFA was off for mobile.
This was not approved and not logged.
Cost spikes without new resources.
Azure billing jumped 8% — likely from short-lived high-cost compute used for data extraction, then deleted.
Then came the intimidation.

While preparing this disclosure, Berulis found a drone surveillance photo of himself taped to his front door with a threatening note.

This was just a few days ago.
US-CERT was about to be called in.
CISA’s cyber response team.
But senior officials told them to stand down — no report, no investigation.
I'm going to cover this more as I find out more.

 

[Nollaig O Muracu]

Why don't maggots just admit they voted for an idiot in the White House?

Jean-Marie Valheur's answer: Did you ever see a Filipino prison cell? For the sake of explaining the phenomenon, I want you to imagine it… picture a cell, built to hold maybe ten men at most. Only instead of ten men, it houses fifty or more. They’re crawling over one another like rats, sharing a ...

www.quora.com

 

[How bad boy]

serious shit:

A federal whistleblower just dropped one of the most disturbing cybersecurity disclosures I’ve ever read.

He's saying DOGE came in, data went out, and Russians started attempting logins with new valid DOGE passwords

Media's coverage wasn't detailed enough so I dug into his testimony:
Who’s the whistleblower?

Daniel Berulis — a senior DevSecOps architect at the National Labor Relations Board (NLRB), formerly with TS/SCI clearance.

He just told Congress the Department of Government Efficiency (DOGE) pulled off a covert cyber op inside a federal agency.
DOGE demanded root access.
Not auditor access. Not admin.

They were given “tenant owner” privileges in Azure — full control over the NLRB’s cloud, above the CIO himself.
This is never supposed to happen.
They disabled the logs.
Berulis says DOGE demanded account creation with no recordkeeping.

They even ordered security controls bypassed and disabled tools like network watcher so their actions wouldn’t be logged.
And then the data started flowing out.
10+ GB spike in outbound traffic

Exfiltration from NxGen, the NLRB's legal case database
No corresponding inbound traffic
Unusual ephemeral containers and expired storage tokens
They used an external library that used AWS IP pools to rotate IPs for scraping and brute force attacks.

They downloaded external GitHub tools like requests-ip-rotator and browserless — neither of which the agency uses.
The most daming claim in this statement IMO:

Within 15 minutes of DOGE accounts being created…
Attackers in Russia tried logging in using those new creds.
Correct usernames and passwords.

2 options here. The DOGE device was hacked. And I don't think I need to explain the 2nd.
Multi-factor authentication? Disabled.
Someone downgraded Azure conditional access rules — MFA was off for mobile.
This was not approved and not logged.
Cost spikes without new resources.
Azure billing jumped 8% — likely from short-lived high-cost compute used for data extraction, then deleted.
Then came the intimidation.

While preparing this disclosure, Berulis found a drone surveillance photo of himself taped to his front door with a threatening note.

This was just a few days ago.
US-CERT was about to be called in.
CISA’s cyber response team.
But senior officials told them to stand down — no report, no investigation.
I'm going to cover this more as I find out more.

Jesus, any one of those would be a fireable offence from pretty much any enterprise out there.

If you have tenant level permissions and have disabled logging like that then yeah, who knows what the fuck went on, you can do whatever the hell you want, nobody will be able to trace it if you know how to cover your tracks.

 

[catcha]

https://twitter.com/x/status/1913241658579440126

 

[How bad boy]

https://twitter.com/x/status/1913241658579440126

Jesus fucking Christ