I need clarification from the #cososec community on this.
Even if Texiera had access to SIPR with the appropriate clearances for that work, docs like these wouldn't be sent in the clear no matter how secure the network is, because any network can be compromised. They would be sent in encrypted containers, with decryption keys only the intended recipients would have, right?
Too many explanations I'm seeing online don't add up.
@voltronic
I have these questions also.
The distribution chain, has not been adequately described.
@corlin
Not at all.
I keep my sensitive personal docs such as tax returns and associated info in veracrypt containers. The US intelligence services have to be using procedures way beyond that.
@corlin @voltronic So it's been said a lot if the people in the discord were foreign nationals and many from Eastern Europe. 🤔 What if he had "help" ? Some sort of encryption key? Admin passwords? Idk...
@Klaatu_Veratta_Nectarine @voltronic
I don't think this is likely.
As any state sponsored help would go to other more important information.
I think this kid just has a very good memory, and recreated the docs, form memory.
@voltronic
Nope.
I think they have solid best practices.
The flaw is always human.
Someone, or someone's, dropped the ball, and circumvented best practices.