the article also has a crucial detail: Starlink is NOT FedRAMP compliant. Verizon is.
this shouldn't even be a question to be plugging unvetted devices into safety-critical government networks. anyone who's ever suffered through FedRAMP knows exactly how much work goes into it. what an insult.
this shouldn't even be a question to be plugging unvetted devices into safety-critical government networks. anyone who's ever suffered through FedRAMP knows exactly how much work goes into it. what an insult.
Of course, Ted Malaska has a whopping conflict of interest here.
He is both:
- a SpaceX employee (identifying himself as a "SpaceXer" on his Twitter/X profile),
&
- federal employee -- and important one at that --"leading an engineering unit inside the FAA."
...
He is both:
- a SpaceX employee (identifying himself as a "SpaceXer" on his Twitter/X profile),
&
- federal employee -- and important one at that --"leading an engineering unit inside the FAA."
...
March 9, 2025 at 9:19 PM
the article also has a crucial detail: Starlink is NOT FedRAMP compliant. Verizon is.
this shouldn't even be a question to be plugging unvetted devices into safety-critical government networks. anyone who's ever suffered through FedRAMP knows exactly how much work goes into it. what an insult.
this shouldn't even be a question to be plugging unvetted devices into safety-critical government networks. anyone who's ever suffered through FedRAMP knows exactly how much work goes into it. what an insult.
@waldo.net Thought you'd get a kick out of this
April 19, 2025 at 12:52 AM
@waldo.net Thought you'd get a kick out of this
AOC knows about FedRAMP 🫢
Imo, yes. One caveat is that many gov and public service accounts (at least at the fed level) require a platform assessment prior to joining, which likely require more safety features than are currently available (ex: 2FA)
It’s a bit early for now, but depending on how things grow it could happen!
It’s a bit early for now, but depending on how things grow it could happen!
Should we try to get these types of alerts that have real utility over here? @aoc.bsky.social
https://fortune.com/2023/04/27/new-york-mta-twitter-service-alerts-elon-musk/amp/
https://fortune.com/2023/04/27/new-york-mta-twitter-service-alerts-elon-musk/amp/
April 29, 2023 at 11:29 PM
AOC knows about FedRAMP 🫢
Staging these sites under the EOP & circumventing fedramp means we can’t see who’s doing what, who’s writing the code, etc - things required for govt sites. This is scary stuff. They could fabricate voter registration fraud and use it to throw out votes, for example, and we couldn’t check it. END/
June 1, 2026 at 5:12 AM
Staging these sites under the EOP & circumventing fedramp means we can’t see who’s doing what, who’s writing the code, etc - things required for govt sites. This is scary stuff. They could fabricate voter registration fraud and use it to throw out votes, for example, and we couldn’t check it. END/
i would be fired for this and we aren't even fedramp certified
I've been traveling so forgive me for not posting this yesterday, but: That Signal clone app for archiving messages that Mike Waltz has been using, TeleMessage? It's unlicensed. Signal was unaware of its existence until they saw it in that Reuters photo. There's no known security vetting.
Photo appears to show Mike Waltz using Signal-like app that can archive messages
More than a month after he drew criticism for using Signal to discuss an impending military attack, Waltz was seen using what appears to be a different messaging app to message others in the Trump adm...
www.nbcnews.com
May 3, 2025 at 5:25 PM
i would be fired for this and we aren't even fedramp certified
11) Microsoft acknowledged the yearslong confrontation with FedRAMP but also said it provided “comprehensive documentation” throughout the review and would “continue to work with FedRAMP to continuously review and evaluate our services for continued compliance.”
March 25, 2026 at 6:06 PM
11) Microsoft acknowledged the yearslong confrontation with FedRAMP but also said it provided “comprehensive documentation” throughout the review and would “continue to work with FedRAMP to continuously review and evaluate our services for continued compliance.”
oracle not willing to do fedramp is crazy work
June 16, 2026 at 8:00 PM
oracle not willing to do fedramp is crazy work
i’m sure he complied with fedramp, which is famously very easy to do
The federal government has intense limits on data sharing in order to protect privacy. Sharing IRS tax data to another part of government *requires an act of Congress.*
What constraints are being placed on Musk hoovering up people's personal data?
What constraints are being placed on Musk hoovering up people's personal data?
February 1, 2025 at 10:14 PM
i’m sure he complied with fedramp, which is famously very easy to do
"Signalgate" app is not approved under FedRAMP, the security process for government software
When I looked at the publicly available Android repo (which I had nothing to do with posting publicly, to be 100% clear), it was clear they had invested very little in securing the app because it was purely designed as an archival tool — not a security tool.
May 7, 2025 at 3:52 PM
"Signalgate" app is not approved under FedRAMP, the security process for government software
My company is spending tons of time, effort, and money on fedramp certification.
Why.
Clearly the government doesn’t give a shit about security.
Why.
Clearly the government doesn’t give a shit about security.
April 11, 2025 at 6:48 PM
My company is spending tons of time, effort, and money on fedramp certification.
Why.
Clearly the government doesn’t give a shit about security.
Why.
Clearly the government doesn’t give a shit about security.
20+ years of fedramp compliance experience vibrates violently within my soul reading this.
June 1, 2026 at 5:56 AM
20+ years of fedramp compliance experience vibrates violently within my soul reading this.
Another banger on the federal government's cyber screw ups from @propublica.org. FEDRAMP approvals are highly coveted and can open up billions of dollars in federal agency contracting dollars for a company that gets one.
NEW: Federal Cyber Experts Thought Microsoft’s Cloud Was “a Pile of Shit.” They Approved It Anyway.
A program created to protect the government against cyber threats authorized a sprawling Microsoft cloud product, despite the company’s inability to fully explain how it protects sensitive data.
A program created to protect the government against cyber threats authorized a sprawling Microsoft cloud product, despite the company’s inability to fully explain how it protects sensitive data.
Federal Cyber Experts Thought Microsoft’s Cloud Was “a Pile of Shit.” They Approved It Anyway.
A federal program created to protect the government against cyber threats authorized a sprawling Microsoft cloud product, despite the company’s inability to fully explain how it protects sensitive data.
www.propublica.org
March 18, 2026 at 12:22 PM
Another banger on the federal government's cyber screw ups from @propublica.org. FEDRAMP approvals are highly coveted and can open up billions of dollars in federal agency contracting dollars for a company that gets one.
12) But we found there aren’t many people left at FedRAMP to work with, and the program is essentially a rubber stamp. The General Services Administration, which houses FedRAMP, defended the program, saying it has undergone “significant reforms.” It did not answer questions about GCC High.
March 25, 2026 at 6:06 PM
12) But we found there aren’t many people left at FedRAMP to work with, and the program is essentially a rubber stamp. The General Services Administration, which houses FedRAMP, defended the program, saying it has undergone “significant reforms.” It did not answer questions about GCC High.
Curious how they will just bypass everything to put it on FedRamp as “approved”.
September 29, 2026 at 2:58 PM
Curious how they will just bypass everything to put it on FedRamp as “approved”.
*sighs heavily, staring at the FedRAMP controls list*
Important to remember that audit logs are official records. Destroying them (or preventing them from being logged) is itself a federal crime. DOGE is by definition performing criminal activity simply by disabling logging. Period.
They disabled the logs.
Berulis says DOGE demanded account creation with no recordkeeping.
They even ordered security controls bypassed and disabled tools like network watcher so their actions wouldn’t be logged.
Berulis says DOGE demanded account creation with no recordkeeping.
They even ordered security controls bypassed and disabled tools like network watcher so their actions wouldn’t be logged.
April 19, 2025 at 10:38 PM
*sighs heavily, staring at the FedRAMP controls list*
for $3B I'll put FedRAMP on a toaster AND it'll run Doom
June 16, 2026 at 7:56 PM
for $3B I'll put FedRAMP on a toaster AND it'll run Doom
Enhance transportation logistics with our scalable, FedRAMP-compliant infrastructure, ensuring government-grade security. rebrand.ly/IBM-Infrastr... #PrivateCloud #RegulatedIndustries #HIPAACompliant #Senwill #IBM #Transportation #FedRAMP
September 28, 2026 at 3:23 AM
Enhance transportation logistics with our scalable, FedRAMP-compliant infrastructure, ensuring government-grade security. rebrand.ly/IBM-Infrastr... #PrivateCloud #RegulatedIndustries #HIPAACompliant #Senwill #IBM #Transportation #FedRAMP
Yes, and hide it on a non fedramp commercial Cloudflare account out of reach of oversight.
June 22, 2026 at 6:19 PM
Yes, and hide it on a non fedramp commercial Cloudflare account out of reach of oversight.
Circumventing FedRamp is also against the law. Article of impeachment #595.
June 1, 2026 at 7:34 AM
Circumventing FedRamp is also against the law. Article of impeachment #595.
September 25, 2026 at 5:40 PM