Leak Exposes 41,000 Homeland Security Workers–Including Undercover ICE Agents

1 day ago (wired.com)

I wonder why this comments page isn’t anywhere close to the HN front page (couldnt find it at all through four pages in), in favor of the Reuters article comment page that is on page 2 at time of posting this.

I know some of the individuals in this leak. There are people whose responsibilities are far removed from ICE’s activities. One department – who I will not name to avoid drawing attention to – focuses on investigating imports to ensure importers are not trying to get around tariffs as well as prevent foreign countries from “dumping.” (Intentionally flooding a market with underpriced products to bankrupt domestic suppliers and later raise prices.) Their work also helps to uncover the use of child labor by domestic companies who outsource production, like Nike and Underarmor.

I’m not against employee names and contact info being made public. That’s no different than someone’s business card being passed around. What I worry about is that all DHS employees get lumped together indifferently by disgruntled individuals and harassed using the information made available.

People who are (rightfully) angry by ICE’s activities in recent deportations, wrongful detaining of US citizens, and misuse of force are going to begin harassing these employees indiscriminately. I’ll admit that I don’t care if they do it to anyone listed as employed under ICE, but some departments elsewhere in CBP have actual positive purposes. Customs agents who scan incoming goods for invasive species, for example, help prevent the destruction of domestic plants.

I guess we just have to see how this info is used and what the effects will be.

  • I get where you're coming from, but I find it pretty difficult to sympathize with privacy issues faced by the innocent employees of an agency that routinely violates my privacy rights to get the same info.

  • Once sat in a coffee shop in downtown Chicago and overheard two ICE attorneys chatting about why they joined ICE. The gist of it was that they were both very, very aware of the appearances of their work. But they both agreed that it was worth it for their careers to work there for long enough to build a reputation and then move on.

    They know that they're working for an evil org and they don't care because it gives them nourishment. If my friends were doing that, I'd have an intervention with them. I hope you do too.

    • For ICE I certainly would. I don’t know anybody at HSI but I’d be torn given the recent revelations of spying on left-leaning citizen groups. If you’re relying on violating citizen’s rights to accomplish your job then you really need to rethink your position.

  • Nah. I don't care if you're a sysadmin for ICE. You're supporting the apparatus. You get no sympathy.

    • Seriously. It's like the back office SS workers "just doing paperwork" on the people they slaughter. Congrats, you're just as bad as those pulling the trigger.

  • I don’t disagree there are people doing good things, but they’re doing them for bad people. Doing good things for an evil dictator doesn’t remove that they were done for an evil dictator.

    Also, practically and sadly, they’re precisely the people you’d lean on when you want change because they’re more likely to funnel that pressure upwards in the form of quitting or demanding raises. The ICE folks are “true believers” and I suspect their faculties are immune to the power of logic.

  • I think if I worked in the back offices of modern ICE, I'd quit vs "Just doing my job". Not a great excuse.

  • Taxpayers have a right to scrutinize how their tax dollars are getting spent. When the government acts like it doesn’t derive its power from the citizens, people will revolt. It’s what DOGE was all about, the resistance.

I approve. The problem isn’t surveillance, the problem is that everybody doesn’t have access to the data :D

Can you search for agents near me?

what was the okta config error?

  • Just upvoting to emphasize that Okta, SSO and MDM services in general are an extremely major single point of failure. From the point of view of a non-expert in security, it would seem like segmenting the authentication services of companies should be a security requirement.

    • First, SSO is often non-negotiable. Otherwise employees spend a huge chunk of their working day just logging into different services.

      Second, too complicated security setups often result in trivially hackable global passwords and shit like that because turns out, there are very few people willing to daily rotate and remember 30 different cryptographically random 256-bit arrays.

      Third, no matter how robust your security setup is, there will always be someone who finds a flaw in it, so a much better solution is to just do bare minimum and get insurance.

      It's strange to be that so many security experts are completely detached from how humans actually act.

      3 replies →

    • Dunno why you’re downvoted. You’re not wrong.

      Trusting an SSO system, or anything with security sensitive data on the public internet presents an attack surface with untenable risk when your adversary is thousands of people with LLM tools.

      It’s going to take a lot of this before people realise using someone else’s computer is a pretty fucking stupid idea.

      I mean Entra and Okta got popped. That should have been the point companies looked at this risk and went nope.

      2 replies →

What an interesting times, a hack the “exposes” people who are supposedly and should be publicly known to start with.

  • Right? Let's just keep this list as a list of people who should never hold office, or work in law enforcement ever again once Trump goes.

    "Leaks" like this should just be a FoIA request. Anyone enforcing the law should have their face, and badge number, prominently shown at all times.

    That's how we show that we aren't ashamed of our laws. Any time it takes a mask to do your job... you know you're doing something you ought not be doing.

In a note with the files, the hackers wrote, “They have our information, so it's only fair that we have theirs.”

I mean, they’re not wrong…

  • Lie to us, and we'll lie to you.

    Spy on us, and we'll spy on you.

    Poison us, and we'll poison you.

    -- The East

Not sure how I feel about this but I am sure about one thing

There should never ever be a masked police force in this country, it's disgusting

Think about all the things we've written off in the past two years and faded from the news

Like military helicopters landing on a city building and them blowing the doors off all the apartments dragging everyone from their apartments

And all bets are off for the next two years, looks like Dems will get the Senate but even then they can't stop the scorched-earth that is coming

  • Remember when these people had issues wearing masks (Covid). Now all of a sudden its not a problem.

    • I am not so sure people started saying "this is fine"

      more like he started 1000 other fires, several each week if not a new one each day to make far worse problems

      It's not just the most corrupt administration, it's the most chaos and definitely by design

      btw all investigations dropped for the execution of two citizens, I mean that's definitely not fine with anyone, just way too many other problems going on now at the same time

      well there's no statute of limitations on murder at least, so 800 more days

      6 replies →

    • It's wrong when they feel like it infringes on them, it's okay when it empowers and emboldens them to cause harm to others without repercussions.

    • It feels more like a reverse psyop, like “look we are wearing masks now, isn’t this what you wanted”?

      As long as the sides keep reducing common ground, the farther away from government for the people, by the people we go.

      8 replies →

  • >Like military helicopters landing on a city building and them blowing the doors off all the apartments dragging everyone from their apartments

    I don't know what this is referencing

    Edit: what the fuck https://www.nbcchicago.com/news/local/helicopters-tear-gas-b...

    • "On Friday, agents dispersed tear gas in the middle of a busy city street. Chicagoans were hit with chemical agents while walking their children home from school. A couple ran from tear gas with a 2-year-old child in their care," Johnson told reporters Monday.

  • Anytime I see one I can’t shake off the feeling I got when I first saw Watchmen. I thought “this is so dystopian and bizarre; so out there”. Didn’t have this in my bingo card for the decade.

  • The Senate can hold people in contempt with a 50% vote. So they could do something to reign in the fascists starting January, but I'm not holding my breath. And that's still a long road.

    • Senate has no mechanism to prosecute contempt charges

      That goes to the DOJ, which of course means nothing happens, at least for next 800 days

      2 replies →

    • That opens a can of worms that you're never going to close.

      Maybe this is such an emergency that it's worth the risk. But the risk is extremely high; if you do it to them, even with the best of reasons, they are going to do it back to you for any reason they can think of.

      7 replies →

  • Many will say that they wouldn’t need to protect their safety and privacy if they werent doing something wrong.

    But in terms of if its ever appropriate for law enforcement to wear masks, isnt the question if its ever possible to threaten a law enforcement officers safety who isnt doing something wrong?

    The FEDs wear masks in cartel operations all the time and that seems fine.

    • I'm not really sure what your getting at. The entire reason that masked LEs are opposed is because (1) it makes it impossible to hold them to account and (2) it makes it trivial to impersonate any LE (ICE hasn't exactly tried all that hard to make special gear for themselves, just buying what's on EBay and similar, so literally anyone could just buy the same gear they're using and impersonate an ICE officer, and since ICE doesn't like identifying themselves, you would have no immediate way of distinguishing between a random citizen who wants to ruff you up or murder you versus a LEO)

      1 reply →

    • They don’t have a right to privacy when they’re at work. The Supreme Court has said it is legal to film officers, including their faces, while carrying out their duties.

This should already be public information imo.

  • If this was in another country that is not predominantly inhabited by people of western/central European heritage, US mainstream media would've been calling these "undercover" agents the "secret police" or "stasi" or some other term heavily connotated with tyranny and oppression.

At first I hoped that fears about ICE abuses were overblown, but then I saw video after video of masked, badge-free agents manhandling and throwing grandmas and elderly/weak people to the ground and generally acting like thugs, stalking immigration courts for people trying to comply, doing nazi salutes, etc. It quickly became clear that ICE is largely made up of KKK or proud boy thugs who see it as a chance to brutalize a vulnerable population that they despise.

Now that this data has been leaked, identities can be correlated with facial recognition, gait analysis, and other biometrics to conclusively identify the agents who committed crimes. Much of the video footage shows agents flagrantly breaking the law, abusing power, violating the rights of citizens and noncitizens alike.

Now that his leak has occurred, criminal ICE agents will be brought to justice for many of the crimes committed already, and the data will also inform the prosecution of crimes they will likely commit during the rest of Trump's term in office. Many of the crimes are violations of state law, so there is nothing the executive branch can do to stop the prosecutions.

It'd be a shame if people started checking potential hires, tenants, dates, and business transactions against this info, cutting off ICE from large segments of the economy and society. I bet they'd feel really dehumanized.

  • As individual as dating is, I agree with checking for this, I'd rather not spend my time with someone whom had such past

  • Interesting to note that this would be illegal if said person decided to serve in a war you oppose. I think this law is unjust and you should be able to discriminate when hiring for occupational history.

    • I think you only come out with this type of thinking if you've never really spent much time with people who served in the armed forces. Wars are declared by politicans not soldiers. Soldiers are enlisted to serve (at least in the US and most western nations) at the behest of the democratic body that employs them.

      I.e they shouldn't be blamed if politicans force them to fight battles they think are unjust. If they are ordered to they don't have a choice its fight or go to miltary prison per UCMJ. Other jobs (law enforcement) are not like that. Generally speaking its quite unfair to double blame soldiers forcing them to fight unjust wars and than punish them for being forced into stupid wars. They can choose to not be soldiers but not everyone will be in a position economically to ignore the possible benefits. Miltary service is a strong path to escape poverty especially in the US.

      Law enforcement is entirely different they are immune to judgement errors they make even if they kill someone. They have little accountablity, and often abuse of the law is just overlooked or covered up because they are the ones who enforce it. They don't even have to know how to do their job or law, if they mess up its someone elses problem due to qualifed immunity. Hence the craziness with the ICE they can violate rights with impunity and much of that has to due with the fact their oversight body is apparently just the president who says don't care about any law breaking.

      30 replies →

    • > decided to serve in a war you oppose

      In the United States, citizens may decide to join the armed forces. Politicians decide whether and when they serve in a war.

      The exception would be if a person volunteered directly in a foreign war, eg a US civilian volunteering to fight in Ukraine.

[flagged]

  • The data is said to have been “vetted and cleaned up” and the front end is designed to navigate the hierarchy.

    The leak was via a compromised Okta SSO login (why anyone still uses them is a complete mystery to me).

So cool, terrorist Karen can now easily email/LinkedIn/whatever escalate to a skip-level manager if an officer is misbehaving.

  • Or a trail of documentation can add to a future criminal prosecution.

    Hypothetically if you were running an organisation that was corrupt and the political winds turned against you, would you carefully preserve accurate records that documented crimes you or your underlings performed and provide an accurate handover? Or would you shred, obfuscate and destroy as much information as possible on the way out?

    If the latter, would detailed map of your command and control structure as understood by your IT department / HR be a risk to you?

  • I can now without leak. 5 top out of 11 levels of managers in leak seems tend to have LinkedIn anyway.

Whatever your feelings about ICE and this administration, there are probably some undercover folks in real danger at the moment. Probably doing some real work to stop some real abuses that you’d want them to stop. (Not saying all - but likely some / many to be in that program)

So - while I might agree that secretive domestic organizations like MI5 should not exist and sunlight is good for government, I feel for the families of the folks that might catch a bullet because of this.

  • > Whatever your feelings about ICE and this administration, there are probably some undercover folks in real danger at the moment.

    I'll say the same thing that no one with access to a microphone said during the 2013 NSA data leaks:

    What makes you think that the Bad Guys didn't already have access to this information? The folks that should have detected this clearly didn't. [0] Given that the Good Guys didn't learn about this until it was made public, neither they nor we have any idea of knowing how many Bad Guys have been siphoning off this data and for how long.

    [0] In this specific incident, Okta appears to be claiming that there has been no breach despite claims that it is the source of the information. Back in 2013 -given that the NSA would often claim something that would be quickly countered by the publication of yet another leaked document- it was pretty clear that the NSA had little idea of what data had been released to the press.

    • I’m not saying that at all. I’m merely suggesting that there’s potential that non-state actors like a local human smuggling ring, drug ring, or human trafficking operation may now be able to easily type in some name and figure out they have been infiltrated.

      Of course it’s possible some bad guys had this. But probably not all of them.

      EDIT: I would also not equate these leaks to the NSA leaks in terms of resources and sophistication required to know about the NSA programs vs potential public access on the open internet with this one. Resources and intelligence required seems quite a higher bar, but that’s just me being an armchair quarterback.

      3 replies →

  • Hell nah. They signed up for this. They knew exactly what their mission was. Stop defending people who were recruited to deport, and in many cases assault, innocent people.

    Making lame excuses for "the good guys" reinforces that these people are doing good. They arent.

    Your excuse will be used against you as soon as it's convenient to them.

    • I don’t personally believe that everyone at ICE is specifically focused on this administration’s efforts (most are of course and many have quit in protest). In the past, the agency has done work that you’d probably want done around human smuggling and trafficking, anti-terrorism (actual terrorism) etc, and I wouldn’t paint all agents with such a broad brush. People stick around in the hopes they can do a good job again when the next guy lands. Sometimes!

      Anyway - I just wanted to point out that these things can have consequences in the real world for people that aren’t necessarily the evil people you paint a picture of in your head. This isn’t a “oh just a few bad apples” thing - on the contrary that agency is quite rotten and should be disbanded.

      Not a value judgment. Just sayin’ that this dump is 53+ certified undercover legal names out in the open.

      4 replies →