Slashdot Mirror
Clinton's Private Email System Gets a Security "F" Rating
Penguinisto writes According to a scan by Qualys, Hillary Clinton's personal e-mail server, which has lately generated more than a little controversy in US political circles, has earned an "F" rating for security from the security vendor. Problems include SSL2 support, a weak signature, and only having support for older TLS protocols, among numerous other problems. Note that there are allegations that the email server was possibly already hacked in 2013. (Note: Mrs. Clinton plans on Giving a press conference to the public today on the issue.)
Thank you for your interest in joining the Gay Wigger Association of DICE* (GayWAD)! GayWADs worldwide are happy that you'd like to become part of our
constantly enlarging member ship (come sail away 8=====D~)
Unlike other geek fraternities that you might have heard about, GayWAD accepts members of all races, creeds, and colors. We don't even have a technical inclination requirement. As our founders stated in the Annals of GayWAD, Chapter 1: "You don't have to be a geek, as long as you like it Greek." They were, of course, referring to the penis in anus style of sexual relations. Don't despair, as attaining full fabulous lifetime status in GayWAD is easy. The only prerequisites for membership in Gay Wigger Association of DICE* are that you meet all of the following conditions:
To submit your Gay Wigger Association of DICE* Membership Application, simply do nothing. Congratulations, you're now a GayWAD!
If you require a specific membership number for purposes such as framing, docking, or prestigious inclusion upon your business cards and resume, please take down this number: 69.
Optionally, you may complete the following survey by replying to this post, indicating affirmative responses with an X in each appropriate box:
GayWAD Membership Survey (OPTIONAL)
[ ] I am gay
[ ] I am a wigger
[ ] I have used SLASHDOT VIDEO to find a sex partner
After completion of this optional survey, your Slashdot post ID shall serve as your unique Gay Wigger Association of DICE* membership ID.
Your GayWAD membership kit** is on its way.
* GayWAD is neither affiliated with nor endorsed by DICE.COM.
** GayWAD membership kit no longer includes HIV self-test catheter.
1st post!
Left office broke and in debt, show arrogance and disregard for established law and regulation, and Bill had a very, very large hand in the housing crisis.
Does anyone really think Hillary is a good choice?
"If any question why we died, Tell them because our fathers lied."
I mean, the only security they seemed to be interested in was keeping the emails out of the hands of people with subpoenas, FOIA requests and such.
Do you have ESP?
THE Qualys! OMG that definitely disqualifies Hillary from even thinking about running in 2016.
And if that wasn't enough, what about Benghazi, Monica-gate and Vincent Foster?
Or is it Qualsys? Whatever.
Funny - I clicked on the link and the rating is a B. No ambiguity about it and not the result of a hasty recent security update (the site was assessed on Sat Mar 07 22:39:37 PST 2015). Where does this headline and summary come from?
Jeb Bush wants to model himself after Lyndon Johnson. I think we can all agree that he is a disaster equal to or greater than Hillary.
It’s 3 a.m. and your children are safe and asleep. But there’s a phone in the White House and it’s ringing.
Something’s happening in the world. Your vote will decide who answers that call, whether it’s someone who already knows the world’s leaders, knows the military — someone tested and ready to lead in a dangerous world.
It’s 3 a.m. and your children are safe and asleep. Who do you want answering the phone?
Not the idiot who set up a private, hopelessly unsecure email server illegally used to conduct official State Department business while skirting public disclosure laws.
I will be very disappointed if Clinton opponents don't use some version of an ad that highlights this.
I click on the https://www.ssllabs.com/ssltest/analyze.html?d=mail.clintonemail.com link and I see the overall rating is a "B" not a "F".
Once again Slashdot can't get headings right.
Curious the woman behind the eponymous HillaryCare lately didn't trust the gubment to manage her email.
Bad H! She should have used them gov't servers, which are D-
Table-ized A.I.
Mrs. Clinton broke no laws at all. The laws requiring saving of emails by officials were passed after Mr. Clinton left office. Like all the other trashing this latest smear attempt is a wretched tactic by immoral right wing nuts to try to gain power. Bill Clinton may be the finest president in American history. If he could have stayed in office our national debt would be history, our economy would be robust and we could afford to fix most of what ails our nation. And that is really saying something after Reagan and Bush Sr. had America on its knees due to absurd economic theories that never had a chance of working. And then the right wingtards put another Bush in office who almost ended our nation and collapsed the economy of the entire world.
I have been in the IT field for 30 years and I specialize in information security. Penetration testing and forensic investigations is what I do.
I do not agree with the assessment. Many argue that homes are more vulnerable, but even if it's the average home, it's far easier to find a disgruntled employee in some "cloud" service company and if you look at headlines in recent years like DRM, Target, SONY, and a number of others, you can see they are very vulnerable and for a lot of reasons.
It only takes one person on the inside, to screw things up. Edward Snowden did it with the NSA and Bradley Manning with the CIA.
Most homes are very vulnerable becuase they are all WIFI and not setup correctly. For those that do, they can be more secure. Add secret service to the mix and you have physical security.
Do you really think Clinton set up her own email server? No. She knows a lot of people in the industry and can be very selective. He data also remains under HER control, HER ownership, and if any of you idiots think your "cloud" data is safe, it just proves how inept you are.
I have to give her security grade a 'C', only because I don't have enough information to do a complete assessment.
People's memory is remarkably short. There is an (IIRC) official annual survey of the web (and other) servers in the USG's estate. That survey has regularly comes up with many, many poor security ratings. This is just one more example.
The Qualys tester only runs against port 443.
What about the ports used by SMTP transport (using STARTTLS)?
To be fair, you can't compare today's SSL standards and possible exploits to the server that has not been used in the capacity of the SoS, since 2012. If we had scans from the server 2010 or 2011 or even 2012 than that might be a different story. But Everybody can play Monday morning QB.
In my view assuming there was a need for security the entire fault should lie with state dept allowing emails to be sent and received to and from any domains outside of their administrative influence when conducting "official business".
SMTP Email always get an "F" security rating no matter what. Checking whether webmail interface has a secure cert is like making sure the front gate of your castle is locked and secured while east and west gates remain open to the creepers at the gates.
If you treat federal law the way the secretary of state does, you go to prison.
If you treat IRS rules the way the IRS treats IRS rules, you go to prison
If you treat immigration controls the way our immigration authorities do, you go to prison.
If you’re as careless in your handling of firearms as the ATF is, you go to prison.
If you cook your business’s books the way the federal government cooks its books, you go to prison.
Not even a good attempt.
Clinton opponents
Have you seen the people running 'against' her? They are actually out there to make her look good!
“He’s not deformed, he’s just drunk!”
http://screencast.com/t/usfMoC...
What is the deal here?
(stolen from DaBum) I am dyslexia of borg - your ass will be laminated.
I will be very disappointed if Clinton opponents don't use some version of an ad that highlights this.
And following that, the Democrats will put up the exact same ad, but featuring Jeb Bush.
There have been a bunch of Republicans who have admitted to using their own (non-governmental) email systems, two of which were also former secretaries of state:
Condoleezza Rice
Colin Powell
Jeb Bush
Bobby Jindal
Rick Perry
Sarah Palin
And that' most likely not all of them. But don't take this as GOP bashing, I'm pretty sure that this sort of thing is rampant on both sides of the aisle. But once one side lifts the veil on it, the other side will respond in kind.
I am Slashdot. Are you Slashdot as well?
Well, I had Democratic opponents in mind, but, yeah, the field so far is very depressing.
I can imagine the demands and the lack of discussion, as Hillary doesn't get into pedantic stuff like data security.
Why not? Current POTUS wasn't tested nor ready to lead.
I am Bennett Haselton! I am Bennett Haselton!
These are just politicians. They probably just forward porn and memes to eachother all day long, and occasionally mail some billionaire to ask for a donation..
Troll is not a replacement for I disagree.
Now there's no excuse. The NSA should definitely have backups of those emails. Crisis averted everyone.
vast right-wing conspiracy
Why do you think clouds and BYD are so popular?
Because those annoying cost centers keep getting in the way with their change controls and tickets
We don't have time for that! The big boss needs this done now and will get his way in the end. We can focus on change management later etc.
Why is Hillary no different than any other boss who can't afford to wait on IT?
Right now I am in a dilemma? Our policy is to leave our computers on. No one follows it. We have a big update tonight and this app will throw an exception if it is matched with the server update. So I come and stay til 1am turning on computer every DAM time!
So I am tempted to give them hell and not do it tonight because SOP are to be ignored unless it is ITs fault. Point being people do not respect IT
http://saveie6.com/
The first thing I did when I saw the discrepancies is look for a test date listed on the page, and here it was: ue Mar 10 09:50:02 PDT 2015 .
So this "B" score was earned literally minutes ago. People who are seeing an "F" are probably seeing cached data.
Post may contain irony: discontinue use if experiencing mood swings, nausea or elevated blood pressure.
Don't forget to vote November 9th!
the preceding comment is my own and in no way reflects the opinion of the Joint Chiefs of Staff
For 36 years, except for the period 2013-2017, there will have been either a Clinton or a Bush, in or next to the Big Chair.
Let's try something else for a while, OK.
Here's two things you don't do when you want to run for president. First, have the NSA revelations then digital threats from foreign countries and then run a secret, rule-breaking email system with pathetic security. Second, be a Democrat in a country with over 10 trillion in debt and run a failed political campaign that ends multiple millions in debt. Seriously you lunatic, if you can't run your own campaign's budget, why the hell would we let you be in charge of the country's budget?
Here's a bonus one. Don't point at people in the audience and pretend to know them when they're not actually there and you're doing it to look more folksy.
The Social Security website gets and "F", too. And it has been that way for quite some time.
https://www.ssllabs.com/ssltes...
So damned if you do, damned if you don't.
Do you really think that just because you constantly lie, that others are going to believe it?
I prefer the "u" in honour as it seems to be missing these days.
I had someone who did SECRET-grade e-mails setup in the military write the following to me:
Not sure there are biometrics installed in the Clinton home in Chappaqua. ..bruce..
Bruce F. Webster (brucefwebster.com)
The previous one was tested and ready to lead?
I guess Govenerner of Texas is not a good test.
Sarah Palin
I don't know about anyone else on the list; I'd never heard it, but in this instance, a hacker broke into her personal email looking for dirt and found absolutely nothing. If anything, the hack as completely exculpatory. So this makes me doubt the rest of your list, as well.
One funny thing about the Obama White House is that past Republican behavior has become the new bar by which Democrats are judged - even by Democrats.
"But - but - Dick Cheney did the same thing!"
Democrats have already lost.
I will be very disappointed if Clinton opponents don't use some version of an ad that highlights this.
And following that, the Democrats will put up the exact same ad, but featuring Jeb Bush.
There have been a bunch of Republicans who have admitted to using their own (non-governmental) email systems, two of which were also former secretaries of state:
Condoleezza Rice
Apparently not: http://www.politico.com/story/...
Convenient?Secy Of State , has an offical E-mail to use.All that she emailed, Would not be on an private e mail.She did it for a reason,if her emails were private.Now the State Dept are going to release all her e mails,There will be nothing on them,She sent them out Private.
... because Palin is well known to have used private email and was hacked you don't believe any of the other listed individuals, who have admitted to using private email, actually used private email. Yeah, you really got him there with your inescapable logic.
holy shit that is some good stuff you are smoking.
Either that or somehow she sent sensitive data some other way, not likely if she sticks to the one email story...
#clinton #worseThanSnowden
Cynicism aside, show me a Democrat who will not vote for a Republican if she gets the nomination. Oh, and show me a Democrat who can gain enough support among Democratic Party primary voters to beat her. As long as voter turn out is as low as it is, "bringing out the vote" will be the way elections are won.
Any guest worker system is indistinguishable from indentured servitude.
I had someone who did SECRET-grade e-mails setup in the military write the following to me:
Not sure there are biometrics installed in the Clinton home in Chappaqua. ..bruce..
Precisely. You or I (I am assuming that you are not at the SoS level; I am not) could never do this for a job that involved secret discussions, as we could never get SIPRNet at our house, the servers secured, etc. Now, I am sure either the SoS or a former President can get SIPRNET at their house - they may need to take a call at 3:00 AM, after all, and that call may be secret in nature. (The current POTUS may well want to call a former POTUS in a crisis to ask about something mission critical, send him pictures etc. as part of the call, and I am sure they would not want to have to use an unsecured network to do this.) So, to me, the real question is, was this done properly, by properly vetted personnel with security clearances, training, etc.? It might have been (she certainly had access to these resources, and so did Bill), but if it wasn't, she IMO isn't fit to be President (and some network security guys need to be fired).
In my humble opinion, this is the real "nut" here - the rest is just a false crisis (turning over records is fixed once the records are turned over*), but if Vladimir Putin (or Rupert Murdoch) was reading all of her emails, that is a real issue. (Note that she could fix this today by simply saying "I just took advantage of the security structure set up for my husband after he left the White House," if something like that were true, this goes away.)
* Her opponents can of course use this against her, but, really, it's not going to go anywhere without evidence of other malfeasance.
Of those you listed only Rice and Powell were subject to federal records keeping laws that Clinton is accused of violating.
Rice didn't use email (and on those rare occasions she did, reportedly used a .gov account) and Powell claims to have not retained his personal emails but claims to have cc'd someone at State when his emails involved official work (at the time that was an accepted records retention practice). All others you mentioned are only covered under state laws, if they even exist, and in at least 2 cases (Bush and Palin) their private emails have all been made public and nothing secretive or really of much interest found (in Jeb's case a bit too public for some peoples liking).
Of course that's just my opinion...... you could be wrong!
Here's a heads up for you, state politicians are subject to state records retention laws NOT the Federal retention laws that Clinton is accused of violating; their use of private emails is irrelevant. Only Powell and Rice were subject to similar laws and at the time Powell's reported practice of cc'ing someone at State was considered acceptable retention policy and Rice didn't use email.
Of course that's just my opinion...... you could be wrong!
What was she using? Who set it up for her?
A PIN and an RFID fob are quite sufficient to access facilities that house Secret information. No need for biometrics.
After all, you can send Secret info through mail, if you use registered mail.
http://fas.org/sgp/isoo/safeguard.html (Read Sec 2004.8(c)(2) ) (or search for "(2) Secret. Secret information shall be transmitted by:")
Thank you. And in addition, computer systems that store and process US government are (and were when she was SoS) required to be certified according to the requirements of the Federal Information Security Management Act of 2002. My understanding is that complying with that is not a trivial undertaking. So who did that for her? Who were her server admins? I guess they'll be getting some Congressional subpoenas, once we know who they are.
Q: What does the "B." in Benoit B. Mandelbrot stand for? A: Benoit B. Mandelbrot
All of y'all aren't clear at all. The argument isn't about WHO is where in the list. The argument is about numbering and how one expresses ordered lists. The original statement was "Hillary is second in line". You guys are arguing that factually she is not, but assume for a moment that it was factually correct. The second part of the statement was "The VP is", which is wrong. The President isn't in line, so he can't be the head of the line, therefore the VP is first making Hillary second. Acoustix attempted to conglomerate both arguments into one statement which obviously fooled you into ignoring the actual argument and instead made you worry about the contents of the list and its accuracy. Your observations are probably more important, but that isn't what we're worried about in this little sub thread. The OP basically said that we count starting with zero, which is the president. Now that I type that out, I think OP may have been attempting some subtle inference...
A stand alone server is the only way to go.
Email -- it's not for security.