Slashdot Mirror
Every Voter In The Philippines Exposed In Massive Data Breach (infosecurity-magazine.com)
schwit1 writes: "The database of the Philippine Commission on Elections has been breached and the personal information of 55 million voters potentially exposed in what could rank as the worst ever government data breach anywhere," according to Infosecurity Magazine.
The magazine attributes an initial web site breach to Anonymous, who were reportedly trying to persuade the commission to enable more security features on their automated vote-counting system before upcoming national elections on May 9. A second group named LulzSec Pilipinas then later posted the entire voter database online.
Trend Micro wrote that "Every registered voter in the Philippines is now susceptible to fraud and other risks after a massive data breach leaked the entire database of the Philippines' Commission on Elections." They report that the breached data even included 15.8 million fingerprint records, as well as 1.3 million records for overseas Filipino voters, including their passports' numbers and expiration dates, all stored in plain text.
The magazine attributes an initial web site breach to Anonymous, who were reportedly trying to persuade the commission to enable more security features on their automated vote-counting system before upcoming national elections on May 9. A second group named LulzSec Pilipinas then later posted the entire voter database online.
Trend Micro wrote that "Every registered voter in the Philippines is now susceptible to fraud and other risks after a massive data breach leaked the entire database of the Philippines' Commission on Elections." They report that the breached data even included 15.8 million fingerprint records, as well as 1.3 million records for overseas Filipino voters, including their passports' numbers and expiration dates, all stored in plain text.
Well that's not good.
The magazine attributes an initial web site breach to Anonymous, who were reportedly trying to persuade the commission to enable more security features on their automated vote-counting system before upcoming national elections on May 9.
How's that War on Trump going, guys?
Sheesh, evil *and* a jerk. -- Jade
Given the epidemic negligence regarding IT security everywhere in the world, you can expect things like this to happen in every country. People/companies who maintain your data will rather save 10 cents of money and 10 minutes of effort going on with insecure vs. secure solutions. Thus, the only data that remains safe is the data that you never entered or transmitted to anyone.
It doesn't have to be this way!
Digital security is simpler than most people would realize.
The first thing to do is to use software that's developed by people who care a whole lot about security. That means the OpenBSD developers. They've shown us time and time again that they care a lot about security. They thoroughly audit their own code. They audit the code of other projects. They'll even fork, fix and maintain code written by others if it isn't up to their standards! Just look at the wonderful things they've done with the LibreSSL project, which time after time is not vulnerable to problems found in OpenSSL just because the OpenBSD developers put so much effort into making LibreSSL secure.
As long as the code you're using as been created by or vetted by the OpenBSD developers, there's a very good chance that it's as secure as you will practically hope to get. If security is what you're after, then OpenBSD is what you need!
Trend Micro did not break the news. It was CNN Philippines: http://cnnphilippines.com/news... Trend Micro just analyzed the data dump a week after it happened.
The idea that voter information is private is a bit on the ridiculous side. Most election jurisdictions openly provide this information to political campaign groups. This information also needs to be public to prevent election fraud. If you are using fingerprints to identify voters, then someone needs to be able to verify that the fingerprints actually match the person and don't match a hundred other voters.
On archive.org the complete data dump is labeled as public domain. Which it is, because these data belong to the Republic of the Philippines so they should be public, right?
Someone needs to be penalized for this, but I'd bet a million dollars no one will be held accountable in any significant way.
Just cruising through this digital world at 33 1/3 rpm...
It already has, the US voter registration database and attendance record has been sold to each politcal party since it was first digitised.
From that continously updated database, information is broken down my county and distributed to local politico officials (on a CD or DVD).
Yeah, but not fingerprints or SS#. This release of information was worse than addresses and affiliation.
W..w..W - Willy Waterloo washes Warren Wiggins who is washing Waldo Woo.
Here's the reason so many systems are insecure. They are in the process of killing of 95% of us. And they will use every single means at their disposal -- poison us, irradiate us, force GMOs down our throats, pour refugees (often criminals) into better off countries, and of course, attack all of us online in every way possible.
Every single bit of every single "security leak" is DELIBERATE -- if not with the incompetent companies that "leaks" info, then with the deliberate vulnerabilities introduced at countless possible places along the way, from routers through OSes, etc.
Brain cancers, once extremely rare, are now the number one cancer in the young. ::cough:: cell phones ::cough::
Wake up and smell the death in the air.
Who elected you as vigilante? You don't speak for me. Matter of fact you probably speak for very few people. Why don't you slide back into your parents basement and invent new searches for goat porn? MYOFB.