Worked at Google and can confirm if you typed your password into a non org website you were flagged and asked to reset your PW. The problem is some of the training websites Google used and were Google branded were apparently non org websites. But it shows they are looking for "certain key strokes"

This is the real story.

Yep, thats corporate monitoring software for you. Everyones got it, if you dont see it, assume its there. If the PC is not yours and or built with your own hands, assume its bugged or key logged. This goes for school PCs as well for the youngins, this is not to make people paranoid, just manage expectations on privacy. If you didnt make it, assume its recorded.

I mean, more like does and has been, but I guess that's just semantics. Evil gon be evil.

It wasn't the lag from the employee's computer to Amazon which was being monitored.

It was the lag from the hacker to the employee. Amazon could not have monitored the hacker's computer.

Sorta like north korea then. Understandable why they got the job... Must have felt like home.

Probably a remote kvm system with QOS monitoring. Many secure systems won’t let you connect directly to sensitive resources from your personal workstation.

This is a company that's been reported to use the dwell time of you mouse over a product as a potential indicator of interest. Something like a Citrix remote desktop is extremely chatty trying to keep the origin and server in sync with every move of a mouse or keystroke. If the ACKs from the origin confirming the receipt of screen change data took an abnormally long time it could show in system performance metrics pretty easily.

To save it from North Koreans?

The article says he was remotely controlling a company laptop located in Arizona. A woman located in AZ was facilitating the NK workers, but she was recently charged with the fraud.

Hong Kong to Los Angeles is around 70ms latency (140ms round trip) so I'm not too surprised.

How was he hired 🤯 ? It's a skill