<- Back
Comments (132)
- dhosekThey’re too polite to say it explicitly, but when they say:> Most of the activity happens in the evening, Eastern time: about half of it falls between 5 p.m. and midnight, and almost none happens in the early morning. That pattern suggests a person rather than a public guest Wi-Fi network: someone regularly on the White House network late into the evening, whose device is infected with a proxy SDK. Our data shows the exits, not the device or the person behind them.There really aren’t very many candidates for who that person might be and it really seems like it would be someone who, I don’t know, maybe lives where the traffic is originating.
- btownThe danger here, of course, is that while these compromised devices are currently being monetized in a relatively benign way (other than bandwidth costs to the user, which to be sure can be nontrivial)… it would be naive to assume that there isn't a Command and Control capability that can assign less benign tasking - or can be compromised to do so.This also puts some of the troubling reports that politicians were bringing phones into SCIFs into context…
- lakeviewterraceSo they don't actually know what this network is, just who owns the IP space... time for a blog post to advertise our week-old service!There is no evidence that physically ties this to the WH. It could be in a security lab for all they know. Or a guest network for the news media.
- bronco21016Gotta have your SuperBox set up to watch 24 hr cable news working late into the night.
- seethishatI have T-mobile 5g. My IP shows up as a residential proxy. I can't control the T-Mobile 5g device. It's a black-box. And, I only have one Linux desktop on the home network (so no Windows/Mac malware).Not sure why my IP is listed as a residential proxy.
- hackernud3sThose are better than residential proxies. Those are White House proxies. I would pay $10/GB for those babies.
- j2kunOut of curiosity, how would I check my own device for a residential proxy?
- natebcI wish these were the most dangerous thing in the White House.
- anpatHow would one detect this on their home network and protect themselves from?
- gdevenyiIt would be really great to have some info about how to detect such things locally.
- mongrelionWhat is a residential proxy?
- threecheese"Infected with a proxy SDK" wouldn't be my first guess. Am I jaded? A realist?
- jefuriiBut her e-mail server!
- anonundefined
- opengrassNSA honeypots
- anonundefined
- BassiestroepI mean supply chain-attacks are everywhere. Smart-TV's with certain marketplace apps, IoT devices. Also, I'm surprised the white house's network is not monitored more.
- spiderfarmerThat is not an environment for serious people anymore so that's expected.
- hbcdbffSlop
- charcircuit>that poorly secured proxy SDKs can allow internal network access and lateral movement.Let me guess. The SDK being used does properly handle this and this whole article is anti residential proxy FUD.
- gjgtcbkj[dead]
- bashhq_r[dead]
- tonetheman[dead]
- Pissenschaftlom[flagged]
- JudahNyquistprobably something IOT with a vulnerability, happens all the time.
- sfmikeVibe coders really having fun on their side quests these days
- 09712306130Seems like the president found a business opportunity and gave internal orders to rent out the network infrastructure to 'ethically sourced' providers :^) Jokes aside, might be some infected IoT crap.I buy and use residential proxies, though.
- vanyleResidential proxies are a very important part of the internet, they allow scraping for archiving, automation and can be used for extra anonymity.While they have grown a bit too much, they are a natural response to the absurd amount of effort every website is pouring into anti-scraping tech.