| ▲ | Silicon Valley engineers were indicted for allegedly sending secrets to Iran(cnbc.com) |
| 66 points by giuliomagnifico 5 hours ago | 30 comments |
| |
|
| ▲ | parliament32 an hour ago | parent | next [-] |
| > The couple also allegedly photographed hundreds of computer screens containing confidential information from Google and Company 2, in what appeared to be an attempt at circumventing digital monitoring tools. I guess all the MDM and document restrictions in the world can't help you against photos of screens. Is it even possible to protect against this, short of only allowing access to confidential files in secure no-cell-phone zones? |
| |
| ▲ | jihadjihad 41 minutes ago | parent | next [-] | | There's not much you can do about it, as sibling comment mentions it's a known gap. There is some work [0] in this space on the investigative side to trace the leak's source, but again the only way it would work is if you can obtain a leaked copy post hoc (leaked to press, discovered through some other means, etc.). 0: https://www.echomark.com/post/goodbye-to-analog-how-to-use-a... | | |
| ▲ | palmotea 26 minutes ago | parent [-] | | > There's not much you can do about it, as sibling comment mentions it's a known gap. There is some work [0] in this space on the investigative side to trace the leak's source, but again the only way it would work is if you can obtain a leaked copy post hoc (leaked to press, discovered through some other means, etc.). Those kinds of watermarks seem like they'd fail to a sophisticated actor. For instance, if that echomark-type of watermark becomes widespread. I supposed groups like the New York Times would update their procedures to not publish leaked documents verbatim or develop technology to scramble the watermark (e.g. reposition things subtly (again) and fix kerning issues). With generative AI, the value of a photograph or document as proof is probably going to go down, so it probably won't be that big of an issue. | | |
| ▲ | gosub100 23 minutes ago | parent [-] | | You could do really sneaky things like alter the space between words or other formatting tricks. | | |
| ▲ | ceejayoz 7 minutes ago | parent [-] | | Print it out, scan it back in, and OCR that. Then have an AI or intern paraphrase it. |
|
|
| |
| ▲ | matthewaveryusa an hour ago | parent | prev | next [-] | | No you can’t. It’s formally called “the analog hole” when security folks yap about it. Usually it’s used to end DLP discussions after too many what-ifs | | |
| ▲ | breppp an hour ago | parent [-] | | Unless your employer is Google and all those photos are uploaded to its servers |
| |
| ▲ | seanhunter 42 minutes ago | parent | prev | next [-] | | Especially when you consider that a phone can record hd video, so you can make a player that scrolls through pages and pages of pdfs very fast for example, you record the screen in hd video on a phone and then write a decoder that takes video back to a pdf of the images. Literally the only thing you lose is the ability to cut and paste the text of the pdf and you can even get that back if you trouble yourself to put the images through ocr. Similarly you could hypothetically exfil binary data by visually encoding it (think like a qr code) and video recording it in the same way. | |
| ▲ | gwbas1c 44 minutes ago | parent | prev [-] | | Just remember that it's significantly more time consuming to photograph a screen than steal large group of files. Thus, even though it's not preventable, it adds enough friction to be effective. | | |
| ▲ | jihadjihad 37 minutes ago | parent [-] | | As sibling comment mentions, with OCR and video tooling these days I'd imagine you could whip up something pretty easily that can comb through several minutes of video footage and convert it to text/PDF/etc. A leaker with a smartphone on a tripod capturing video while they scroll through files etc. could probably deal significant damage without much effort. |
|
|
|
| ▲ | onionisafruit 2 hours ago | parent | prev | next [-] |
| “Company 2” has to be Qualcomm. Or am I misreading this? The only reason I think I’m misreading is because it’s so obviously Qualcomm that it seems silly for the article to call it “company 2”. |
| |
| ▲ | mherkender 2 hours ago | parent [-] | | > Company 2, which develops system-on-chip (SoC) platforms such as the Snapdragon series Only a lawyer could write this with a straight face | | |
| ▲ | rdtsc 2 hours ago | parent | next [-] | | Yup. It’s like saying Company X which develops the iPhone smartphone. It’s either extreme incompetence or cheeky disclosure while also technically not naming the company. | |
| ▲ | akazantsev 2 hours ago | parent | prev [-] | | > On the night before the pair traveled to Iran in December 2023, Samaneh allegedly took about 24 photos of Khosravi’s work computer screen containing Company 2′s trade secrets, including *its* Snapdragon SoCs. Keep reading. | | |
| ▲ | onionisafruit an hour ago | parent [-] | | That’s the point where I realized how thin the curtain is. Earlier the article talked about “Qualcomm’s Snapdragon” as an example of an SoC, but that could have been just to give the reader an idea of what an SoC is. But this line made it clear it wasn’t just an example. |
|
|
|
|
| ▲ | lenerdenator an hour ago | parent | prev | next [-] |
| > If convicted, each defendant faces up to 10 years in prison for each trade secret charge and up to 20 years for obstruction of justice, along with fines of up to $250,000 per count. This is part of why we are where we are as a country. We have this whole web of charging instruments in our legal system that dance around the main thrust of what investigations are about. It makes people who would think of doing these things think that they could get off easy if they were caught. They're handing over sensitive info (we have sanctions and embargoes on Iran) to an enemy power. If you're an anal-retentive lawyer, you call it "stealing trade secrets". If you're a person with any amount of common sense, you call it espionage. One is something that should be applied when a company steals info from its competitor; the other should be applied when people are handing over sensitive info to an enemy power. One would be punishable by a decade in prison, the other punishable by life in prison or worse. |
| |
| ▲ | seanhunter 39 minutes ago | parent | next [-] | | Corporate espionage. Stealing secrets from a company and sanctions-busting are of course bad things to do, but the legal consequences are not the same as stealing confidential information from the government. | | |
| ▲ | breppp 22 minutes ago | parent [-] | | I imagine the receiving party is an Iranian intelligence agency, due to the interest in sigint adjacent technology (Mobile cryptography). That probably makes it espionage, not of the corporate kind |
| |
| ▲ | bushbaba 14 minutes ago | parent | prev [-] | | Should be charged under treason with penalty of death |
|
|
| ▲ | codeddesign an hour ago | parent | prev [-] |
| Scenario: company hires immigrants, and then are surprised and upset immigrants are loyal to their country. Shocking. On the other hand, it’s corporate espionage which is actually fairly common. However, due to the influx of immigration around the world you are going to see this occur a lot more often. |
| |
| ▲ | gosub100 18 minutes ago | parent | next [-] | | But hey, they work for 20% off, so there's that. | |
| ▲ | codechicago277 an hour ago | parent | prev | next [-] | | Unless you’re claiming all immigrants are spies, your logic doesn’t make sense. People loyal to their country tend to stay there. | | |
| ▲ | blell 36 minutes ago | parent | next [-] | | >People loyal to their country tend to stay there. You'd be surprised. If I were to emigrate because of economic reasons (which is by far the most popular reason to emigrate) my loyalty would stay with my paychecks. I don’t see how it could be otherwise. What binds me to my new country? My history, my character, my race, my religion…? Guess not. | |
| ▲ | sushshs 5 minutes ago | parent | prev | next [-] | | Many modern immigrants to America are purely economic. The rich are fine with this because they profit, but the labor class suffers. | |
| ▲ | booleandilemma 15 minutes ago | parent | prev | next [-] | | Some immigrants are loyal to their country. A company hires immigrants. It's possible the company has hired immigrants loyal to their country. Logically, it works like that. | |
| ▲ | AlexandrB an hour ago | parent | prev [-] | | > People loyal to their country tend to stay there. Not necessarily true. Source: I have friends and family who came to the US from Russia and are still loyal to Russia. When the topic comes up, they tell me they would fight for Russia in a hypothetical US/Russia war. It's entirely possible to love your country and still seek out a better life elsewhere for practical reasons. Edit: To clarify, this isn't universal. Some folks who came over absolutely hate the country of their birth, some still love it, while others are ambivalent. But you can't make a blanket statement like "people loyal to their country tend to stay there" when there are stark financial and quality of life advantages to moving from one place to another. |
| |
| ▲ | ecshafer 25 minutes ago | parent | prev [-] | | We have cases where people grow up in the US, are natural born Americans, and they are taking paychecks to go compete against America in the Olympics. Americans are excusing this as "at least she got her bag". The effects of post-modernism, and this idea that there is no objective truth nor morality is slowly destroying society. When someone immigrates to the US it should be clear to them that their loyalty belongs to the US. | | |
| ▲ | ceejayoz 12 minutes ago | parent | next [-] | | > When someone immigrates to the US it should be clear to them that their loyalty belongs to the US. But your example cites a "natural born American", not an immigrant? | |
| ▲ | raincole 20 minutes ago | parent | prev [-] | | This is satire right? You're comparing stealing intelligence for Iran to... playing sports in the Olympics? | | |
| ▲ | ecshafer 5 minutes ago | parent [-] | | Its all part of the same idea. The idea that you can be in America, and not be loyal to America, that America is fundamentally evil and not worth loyalty. That things like money are more important than your country. |
|
|
|