DHS Tried To Breach Our Firewall, Says Georgia's Secretary of State (cyberscoop.com)

An anonymous reader quotes a report from CyberScoop: Georgia's secretary of state has claimed the Department of Homeland Security tried to breach his office's firewall and has issued a letter to Homeland Security Secretary Jeh Johnson asking for an explanation. Brian Kemp issued a letter to Johnson on Thursday after the state's third-party cybersecurity provider detected an IP address from the agency's Southwest D.C. office trying to penetrate the state's firewall. According to the letter, the attempt was unsuccessful. The attempt took place on Nov. 15, a few days after the presidential election. The office of the Georgia Secretary of State is responsible for overseeing the state's elections. "At no time has my office agreed to or permitted DHS to conduct penetration testing or security scans of our network," Kemp wrote in the letter, which was also sent to the state's federal representatives and senators. "Moreover, your department has not contacted my office since this unsuccessful incident to alert us of any security event that would require testing or scanning of our network. This is especially odd and concerning since I serve on the Election Cyber Security Working Group that your office created." "The Department of Homeland Security has received Secretary Kemp's letter," a DHS spokesperson told CyberScoop. "We are looking into the matter. DHS takes the trust of our public and private sector partners seriously, and we will respond to Secretary Kemp directly." Georgia was one of two states that refused cyber-hygiene support and penetration testing from DHS in the leadup to the presidential election. The department had made a significant push for it after hackers spent months exposing the Democratic National Committee's internal communications and data.

Comments

'"We are looking into the matter"

[Anonymous Coward]

Translation: We will deny this happened while privately scolding the team we ordered to do this. If you keep pushing us, we will be forced to throw our IT guys under the bus.

Re:'"We are looking into the matter"

[BarbaraHudson]

More like "We won't be scolding our guys because they were following orders. Whose orders? Sorry, you're not cleared for that | We'll look into it and (maybe) let you know what we find | The people doing the penetration attempt thought your state was on the approved list | It was a computer glitch | Russia tried to hack you, not us."

Re:'"We are looking into the matter"

[npslider]

"These are not the ports we're looking for... move along"...

Re:'"We are looking into the matter"

[Anonymous Coward]

Sorry, but the Russians were behind getting Trump in. This is just more double agent activity.

Re:'"We are looking into the matter"

[Anonymous Coward]

Basically DHS wanted to shame the state of Georgia. Probably with a surprise 'we iz in your network' sort of dog and pony show. Instead Georgia saw it and caught them and called them out on it.

Hell they probably would have accepted the offer for a free pen test. Instead many orgs react rather violently if they dont know about it and you did it.

Re:'"We are looking into the matter"

[Xenographic]

I had to read this carefully before I realized that the US state of Georgia was complaining, rather than the country of Georgia.

Re:'"We are looking into the matter"

[Anonymous Coward]

Agreed. This is FUD by the Russians to keep Americans at bay. Good job, Putin. We know what you're up to!

Re:'"We are looking into the matter"

[BarbaraHudson]

Problem #1 with your theory is that there is no evidence.

After the election, the Obama administration said it had no proof of Russian interference in the election tallies and that the results “accurately reflect the will of the American people.”

Problem #2 is that, even if they had, they would only be doing the same the US has done so many times. Pot calling the kettle black ...

Re:'"We are looking into the matter"

[Anonymous Coward]

lol@democrats using the russians as an excuse.. It's a page straight from the republican cold war propaganda strategy.

captcha: crackpot

Re: '"We are looking into the matter"

[bn-7bc]

Don't go arround poking bears esp not ones with nukes, well it does not seem like Russia gives a s... Vladimir actually looked flattered that the US accused Russia of messing with the us election

Re:'"We are looking into the matter"

[Anonymous Coward]

"while privately scolding the team we ordered to do this" ... for getting caught.

Re:'"We are looking into the matter"

[Anonymous Coward]

Basically DHS wanted to shame the state of Georgia. Probably with a surprise 'we iz in your network' sort of dog and pony show. Instead Georgia saw it and caught them and called them out on it.

Hell they probably would have accepted the offer for a free pen test. Instead many orgs react rather violently if they dont know about it and you did it.

Which in most states is a felony...

Re:'"We are looking into the matter"

[Ungrounded Lightning]

Hell they probably would have accepted the offer for a free pen test. Instead many orgs react rather violently if they dont know about it and you did it.

An unexpected, unauthorized, "free pen test" is indistinguishable from a bad-guy cracking attempt, and must be treated as if it's a real threat. This causes ENORMOUS extra costs as the victim has to batten the hatches, examine everything for corruption and/or possible persistent threat instalation, compare working databases to backups and examine the differences vs. update audit trails, and so on.

Not to mention the concern that it might be a real attempt by the DHS, or a rogue group within it, to hack the election.

Re:'"We are looking into the matter"

[subk]

I had to read this carefully before I realized that the US state of Georgia was complaining, rather than the country of Georgia.

How careless would one have to be to miss clues like "Homeland Security" and "Secretary of State"?

Re:'"We are looking into the matter"

[MightyMartian]

I love how blaming a Jew always enters these screeds at some point.

Re:'"We are looking into the matter"

[Anonymous Coward]

I thought that unapproved penetration testing was considered by the government to be hacking and a crime, even for unscrupulous federal agencies. I will expect a full denial stating that "after careful investigation we uncovered that this intrusion could not have possibly occurred from a computer inside DHS no matter what evidence you may have to the contrary. We consider this matter closed, end of discussion."

Re:'"We are looking into the matter"

[Wintermute__]

Countries have Secretaries of State, too, you know. And governments have been rumored to occasionally attempt to breach the networks of foreign countries as well. The confusion is warranted in this case.

The part that gave it away was the Secretary of State saying, "Moreover, your department has not contacted my office since this unsuccessful incident to alert us of any security event that would require testing or scanning of our network. This is especially odd and concerning since I serve on the Election Cyber Security Working Group that your office created." At that point, it was clear that this was referring to the U.S. State of Georgia, not the nation of Georgia.

Re:'"We are looking into the matter"

[Wintermute__]

OK, I'll bite. Please name one instance of the US interfering in a foreign election. Pot calling the kettle black indeed...

Re:'"We are looking into the matter"

[Anonymous Coward]

It wouldn't be a complete neo-Nazi rant without one.

Re:'"We are looking into the matter"

[Anonymous Coward]

too drunk to respond

Re:'"We are looking into the matter"

[Anonymous Coward]

Although they frequently occur together, anti-Soros and anti-"da Jooz" are not the same thing. Soros does have an agenda, he presses it aggressively, and he's trying to mold public opinion by doing so. Fine; he can do that. People can criticize him, too. I don't care much for the guy, but it's his flavor of "progressivism" that's the problem, not his religion.

Re:'"We are looking into the matter"

[BarbaraHudson]

Either you don't know your history, or you're too lazy to use google, so the first item that comes up when asking about us interference in other countries elections:

In the 1958 Japanese election, the United States gave the Liberal-Democratic Party damaging political intelligence on its main rival, the Socialists. The CIA acquired it from paid informants within the Socialist Party. In the 1990 Nicaraguan elections, the United States leaked damaging information on alleged Sandinista corruption and Swiss bank accounts, funneling the information to German newspapers. The Nicaraguan opposition then used these German media reports to great effect.

In other words, the CIA was doing the exact same thing that they accuse Wikileaks of doing. US exceptionalism at work - "the rules don't apply to us."

and

“Isn’t it interesting that her (Clinton's) campaign is now experiencing the same thing that she perpetrated on other countries,” Netherton told The Huffington Post, as she awaited Sanders’ speech Monday night.

“She did this in Haiti, she did this in Honduras, and now it’s coming back on her and she’s all verklempt about it,” Netherton added. “It’s a little bit of her own medicine, but unfortunately I don’t think she’s open minded enough to see that for what it is.”

Indeed, meddling in foreign politics is a great American pastime, and one that Clinton has some familiarity with. For more than 100 years, without any significant break, the U.S. has been doing whatever it can to influence the outcome of elections up to and including assassinating politicians it has found unfriendly.

Assassinating politicians is certainly going to keep them from running in an election.

When Iran elected a nationalist politician, Mohammed Mosaddeq, the U.S. intervened to launch a coup in 1953, which CIA agent Kermit Roosevelt led. Mossadegh’s crime was to nationalize a British oil company, a forerunner to BP, and to spark concerns among the paranoid Dulles brothers that he was leaning toward the Soviet Union. The U.S. installed Mohammad Reza Shah Pahlavi, Iran’s monarch, as the head of Iran and his repressive rule led to the Iranian revolution. That uprising, in turn, has given us a brutally repressive regime in Iran, client terrorist groups around the Middle East, savage sectarian violence in Iraq and a nuclear standoff.

Overthrowing a democratically elected politician and getting rid of elections is also interfering in Iran's electoral process.

When the French withdrew from Vietnam in the 1950s, they scheduled an election to be held shortly after. It became increasingly clear that the communist revolutionary leader Ho Chi Minh would win it in a landslide. So the U.S. intervened and installed Ngo Dinh Diem as leader of a new country it recognized as South Vietnam. The national election was canceled, but the U.S. still needed a way to pretend the puppet regime had political support. So it set up an election between Diem, who was widely disliked, and an exiled member of the royal family who was even more hated. Diem won with an absurd tally of 98.2 percent.

Cancelling an election that would have elected someone the US didn't want to win is most certainly interfering in their electoral process.

The election in 2014 didn’t go as the U.S. intended (like the one in 2009, shot through with fraud that gave it to Hamid Karzai). So the U.S. declared it a tie and created a new position not in the Afghan constitution called Chief Executive Officer.

There are plenty of other examples of US interference in other countries.

Re:'"We are looking into the matter"

[Anonymous Coward]

When Iran elected a nationalist politician, Mohammed Mosaddeq, the U.S. intervened to launch a coup in 1953, which CIA agent Kermit Roosevelt led. Mossadegh’s crime was to nationalize a British oil company, a forerunner to BP, and to spark concerns among the paranoid Dulles brothers that he was leaning toward the Soviet Union. The U.S. installed Mohammad Reza Shah Pahlavi, Iran’s monarch, as the head of Iran and his repressive rule led to the Iranian revolution. That uprising, in turn, has given us a brutally repressive regime in Iran, client terrorist groups around the Middle East, savage sectarian violence in Iraq and a nuclear standoff.

Not wrong, but such a gross over-simplification as to be misleading.

Re:'"We are looking into the matter"

[evilviper]

I had to read this carefully before I realized that the US state of Georgia was complaining, rather than the country of Georgia.

The word "state" appears EIGHT times in the title and summary. You can read it quite carelessly, and it's still difficult to miss the context.

There's plenty of problems to complain about, here... This is not one of them.

Re:'"We are looking into the matter"

[dbIII]

And in the dictionary you will find that "state" can also apply to "nation state" - but it's all moot because the guy who said he was mistaken was only making a joke.

Re:'"We are looking into the matter"

[Anonymous Coward]

Considering Soros WAS a Nazi, a collaborator of the worst sort even as a child, complaining about him isn't anti-Jewish - it's anti-Nazi.

Re:'"We are looking into the matter"

[Anonymous Coward]

Soros was 14 on VE-Day.

Re:'"We are looking into the matter"

[Anonymous Coward]

do us a favor -- don't reproduce. almost no one thought it was the US state georgia. does it make it more likely to be an article about florida the more times "naples" is repeated? you're an idiot.

Re:'"We are looking into the matter"

[phantomfive]

It took me a long time before I realized the Beatles song "Back in the USSR" was talking about Georgia the country, not Georgia the state. Song made a lot more sense after that.

Re:'"We are looking into the matter"

[Cederic]

Yep, I want to see a prosecution on this one.

If a private individual tried to do this to assure that their government is secure they'd be seeing jail time. DHS have to obey the law too.

Re:'"We are looking into the matter"

[Anonymous Coward]

to;dr. but I do know two wrongs don't make it right.

Re:'"We are looking into the matter"

[BarbaraHudson]

Iran was a secular democracy, with women dressing the same as elsewhere in the world, going to universities, etc. So no, it's not a gross over-simplification. The US, in conjunction with Britain, f*cked up the middle east and created the conditions for muslim extremism to flourish by overthrowing a democratically elected government.

Re:'"We are looking into the matter"

[BarbaraHudson]

But it certainly makes the US a hypocrite. Again.

It's like when Clinton was saying "those emails were illegally obtained". So what - that didn't make them untrue, and whistle-blowing is the right thing to do. She wouldn't have bitched if the Russians (or anyone else) illegally leaked Trump's tax returns.

Re:'"We are looking into the matter"

[Anonymous Coward]

They should have said "Um, were are just testing your security. Yeah, that's it. Just making sure you don't have any weaknesses. Totally white hat. For sure."

Re:'"We are looking into the matter"

[Agripa]

We have always been at war with Eastasia.

Re:'"We are looking into the matter"

[RockDoctor]

The US, in conjunction with Britain, f*cked up the middle east

Don't excuse France from the blame-fest.

by overthrowing a democratically elected government.

Hey, it's one of the things we do best.

Re:'"We are looking into the matter"

[BarbaraHudson]

My response was to the poster who demanded that I provide even one incident where the US interfered in a foreign election, and I provided several. Let's also not exclude Great Britain, who, seeing that Iran had elected someone who was going to nationalize the oil industry, including British assets, asked the US to intervene. The CIA did so, with the result being a coup and the installation by the US of the shah of Iran.

I'm pretty sure there are other countries that are also in their own ways responsible for the mess in the middle east.

Re:'"We are looking into the matter"

[RockDoctor]

Let's also not exclude Great Britain, who, seeing that Iran had elected someone who was going to nationalize the oil industry, including British assets, asked the US to intervene.

Oh yes, I know (well, knew - he's probably pushing 100 now, if not dead) people who were tortured by Britain and America's catspaws in the 1950s after the Shah was installed. Very informative for trade unionists in the North Sea oil industry.

That's bad

[Anonymous Coward]

I mean getting caught doesn't exactly inspire confidence...

Re:That's bad

[Ungrounded Lightning]

I mean getting caught doesn't exactly inspire confidence...

That they caught it and went public with it helps inspire confidence in Georgia's election process and results. "The DHS tried to crack us (the dirty sons of Bs), failed, and got caught!"

In the DHS, not so much.

gotta get to the bottom of this

[Anonymous Coward]

I sure hope Obama instructs the nation's intelligence agencies to conduct a full review!

While the majority of states worked with DHS for help in protecting their election systems from hacks, cybersecurity experts were at odds as to what portions of the country would be targeted for Election Day attacks.

[Homeland Security Secretary Jeh] Johnson announced shortly after the election that DHS found no evidence of an attack on Election Day.

No evidence? But..but...what about THE FULL REVIEW?!

Re:gotta get to the bottom of this

[skids]

You truly have no reading comprehension ability, do you?

Re:gotta get to the bottom of this

[Anonymous Coward]

Barack, is that you?

Re:gotta get to the bottom of this

[Anonymous Coward]

Well go on and Correct The Record then.

Re:gotta get to the bottom of this

[Anonymous Coward]

From the joint DHS Office and Director of National Intelligence announcement October 7, 2016
https://www.dhs.gov/news/2016/10/07/joint-statement-department-homeland-security-and-office-director-national

Some states have also recently seen scanning and probing of their election-related systems, which in most cases originated from servers operated by a Russian company. However, we are not now in a position to attribute this activity to the Russian Government

What if..what if it was DHS all along? What if someone at the DHS was tasked with doing these illegal vulnerability and pen testing scans and forgot this one time to run them through Russian proxy servers but was caught by the security company hired by Georgia to protect its networks? W-what if it was Obama that was behind the DNC hacks!!??! What if it was Obama that secretly directed FBI Director Comey to bring up the email scandal just days before the election to keep it fresh in the voters' minds. What if Obama really does hate Hillary's guts like its been rumored?

DHS bot

[magarity]

detected an IP address from the agency's Southwest D.C. office trying to penetrate the state's firewall... "We are looking into the matter"

Probably the DHS servers are all overrun with botnets trying to probe around for more servers to take over.

Re:DHS bot

[npslider]

I'm not sure which is worse:

1. The DHS servers are really botnets
2. The DHS tried to do this
3. The "DHS servers" likely succeeded else where

Re:DHS bot

[Anonymous Coward]

Excellent! The government digital transformation project is gaining its milestones!

Re:DHS bot

[Obfuscant]

I'm not sure which is worse: 1. The DHS servers are really botnets

Unlikely.

2. The DHS tried to do this

Sorry, I don't see how this is bad. One government agency that does this pen tested another government agency that had refused "cyber hygiene" support to see if the commercial service provider was doing its job. They were; nobody got broken into, and the customer was notified of the attempt.

3. The "DHS servers" likely succeeded else where

Yes, that is second worst of the three, and it and option 1 are truly bad. Then we have option 4: DHS failed elsewhere but the server admins didn't notice.

I run a few servers at a university. I used to catch other universities doing pen testing on my servers. When I reported it I was told this was "official network research" being conducted by those universities and it was ok they were doing it. Not from MY admins, but from the admins at those other universities. No permission was ever asked nor was it granted. Admins at school X were telling their people it was ok to pound on my servers at school Y and my opinion on the matter was irrelevant because it was "research" .

The days of outrage over outside groups pen testing servers are long gone.

Re:DHS bot

[Anonymous Coward]

Until you pen test a company server somewhere without permission. Then you will get pen tested at a government lockup facility.

Re:DHS bot

[Anonymous Coward]

#2 is illegal. The two government agencies MUST agree to the "proble" first. And that agreement includes a time interval for it to happen.

#3 is the worst that could happen.

I don't believe DHS is authorized to do this in any situation.

Re:DHS bot

[Anonymous Coward]

Fail on Civics 101 and American History. States are NOT agencies of the Federal Government. States, as the name implies are Sovereign STATES.

Re:DHS bot

[Calydor]

and the customer was notified of the attempt.

Oh really?

Moreover, your department has not contacted my office since this unsuccessful incident to alert us of any security event that would require testing or scanning of our network

Doesn't sound like they were told about it from anything other than analyzing their traffic logs.

Re:DHS bot

[rmdingler]

Georgia went to Trump by a small landslide (230,000 votes) so it's not a likely candidate for hacker fraud, and this probe seems to have occurred (Nov. 15th) long past when any vote-changing might've been feasible.

Other than an exploit by a couple of intoxicated agents, why would the DHS be unable to hide their origin IP address?

Re:DHS bot

[npslider]

So it's either a 3rd party malicious actor using a compromised DHS server, or a rouge DHS actor?

Re:DHS bot

[Obfuscant]

and the customer was notified of the attempt.

Oh really?

You don't read even the summary, do you?

Brian Kemp issued a letter to Johnson on Thursday after the state's third-party cybersecurity provider detected an IP address from the agency's Southwest D.C. office trying to penetrate the state's firewall. How do you think Brian Kemp knew it was happening if he, as the head of the agency that is the customer of the third-party security firm, wasn't notified of the attempt?

As I wrote: ... the commercial service provider was doing its job. They were; nobody got broken into, and the customer was notified of the attempt.

Re:DHS bot

[rmdingler]

So it's either a 3rd party malicious actor using a compromised DHS server, or a rouge DHS actor?

This guy?

Re:DHS bot

[Anonymous Coward]

So you acknowledge that they were told about it through log entries? What's your problem?

Re:DHS bot

[Anonymous Coward]

You don't comprehend well do you? The Brian Kemp knew it was happening because the cyber security provider detected the intrusion. Not because anyone was notified. But I'm not sure why I'm bothering because while this is crystal clear it probably will still go right over your head.

Re:DHS bot

[Obfuscant]

You don't comprehend well do you? The Brian Kemp knew it was happening because the cyber security provider detected the intrusion.

You don't comprehend well, do you? That's what I said. The third party provider detected the intrusion attempt and notified their customer that it happened.

Not because anyone was notified.

Of course someone was notified. Don't be stupid. Brian Kemp didn't write the letter to DHS based on nothing. His security company NOTIFIED HIM of the event.

Re:DHS bot

[Anonymous Coward]

Different AC here.

The earlier AC, among others, wrote that DHS did not contact the state's office before launching the pen test (i.e., An exchange like "Hey Bob in Georgia? Yeah, this is Jim over at DHS. We are going to scan your network between xx and xx. Ta Ta," never happened!)

You are saying that the 3rd party company detected the pen test, recorded the DHS IP address, and alerted the state as it was in progress.

They are two separate things.

Re:DHS bot

[Anonymous Coward]

Trump got 51.3%. That is not a landslide of any scale.

Re: DHS bot

[Zero__Kelvin]

How do you know he didn't win by said margin due to hacker fraud?

Re: DHS bot

[Zero__Kelvin]

You know damn well that the point being made was that DHS did not notify them.

Re:DHS bot

[Anonymous Coward]

You don't comprehend well, do you? That's what I said. The third party provider detected the intrusion attempt and notified their customer that it happened.

While true, that's not the point.

The point is that the DHS did not notify the state of the attempt.

I hope that helps you understand why you are arguing against something nobody else is actually saying.

Re: DHS bot

[rmdingler]

In as much as one can know these things, the State of Georgia was not expected to go any other way.

Remember, fraud would have to be perpetrated at the precinct level since Statewide totals available at the Secretary of State's office would just be the sums of previously recorded vote counts. It seems much more likely election fraud would be attempted in State races which are considered toss-ups... pre-election polls showed a close race in Ohio, for instance, and it went to Trump by a wide margin.

Re:DHS bot

[Anonymous Coward]

Sorry, I don't see how this is bad. One government agency that does this pen tested another government agency that had refused "cyber hygiene" support to see if the commercial service provider was doing its job. They were; nobody got broken into, and the customer was notified of the attempt.

You really don't see this is bad? For one thing IT IS ILLEGAL! You have to have PERMISSION BEFORE pen testing. I know I pen test for a living. I MUST have a waiver signed by the owner or CEO of the target company or agency. A time frame for the testing is set and noted in this waiver BEFORE testing. Without this it is no longer a pen test but a OUTSIDE ATTACK which is punishable by law. Remember the "Computer Crimes Act"?

So this isn't bad or illegal? so what you are saying since I am a Pen Tester if I decide to test the CIA at Langely and fire off an attack since I am a Pen Tester it's OK. I'm glad I know better for I know I'd be up under the jail if caught.

I run a few servers at a university. I used to catch other universities doing pen testing on my servers. When I reported it I was told this was "official network research" being conducted by those universities and it was ok they were doing it

Dude your talking about a school. In the real world when you grow up if you attempt to hack private companies or especially government agencies either city, state, or federal without your Permission Waiver YOU GO TO JAIL!!! Like I said I know I do this for a living and have to be very careful and stick to the rules of engagement signed off in the Wavier.

Personally your Sysadmin is a lazy fool for saying what they did and having that attitude towards network security. He/she should be fired

I live in Georgia and again I work in this field so I have two dogs in this fight. My State paid an outside company to test and monitor the network NOT DHS which I am very happy the State when to an outside contractor. This also shows the company did a great job of detecting this and the PRIVATE COMPANY report this to the State NOT THE DHS. DHS NEVER HAD PERMISSION. Do you understand what the word "permission" means?

This just clearly shows that the greatest danger to The People of this country IS ITS OWN GOVERNMENT!

And all the DHS has to say it "Sorry we got caught". Damn I wish I could get away with this.

Really when you get out of school don't try this in real life you will go to jail and we will be reading about you here on /.

Re: DHS bot

[Obfuscant]

You know damn well that the point being made was that DHS did not notify them.

And you know damn well that I never said they did. My statement that the customer was notified was contradicted by someone, and that's what I've been correcting. If you want to make some other point in some other part of the discussion, do so. But don't tell me I'm wrong when I say that the system worked; the company being paid to detect these things did so and notified their customer.

Re:DHS bot

[Obfuscant]

While true, that's not the point.

That was not my point, and my statement was true. "Oh really?" is contradiction the truth of a statement, and that's what I've been replying to.

I hope that helps you understand why you are arguing against something nobody else is actually saying.

You have it backwards. People are arguing with me for saying the customer was notified. Other people have actually claimed they were not. Your concept of what "nobody else is saying" is flawed.

Re: DHS bot

[Zero__Kelvin]

Go fuck yourself you ignorant douchebag

Text of Letter

[Anonymous Coward]

https://assets.documentcloud.org/documents/3234551/Georgia-Secretary-of-State-Letter-to-DHS-Secretary.txt

The Office of Secretary of State
23mm Kemp
SECRETARY OF STATE
December 8, 2016
The Honorable Jeh Johnson
Secretary of Homeland Security
Department of Homeland Security
Washington, DC. 20528

Secretary Johnson,

On November 15, 2016, an IP address associated with the Department of Homeland Security made an
unsuccessful attempt to penetrate the Georgia Secretary of State's firewall. I am writing you to ask whether
DHS was aware of this attempt and, if so, why DHS was attempting to breach our firewall.

The private-sector security provider that monitors the agency's firewall detected a large unblocked scan
event on November 15 at 8:43 AM. The event was an IP address (216.81.81.80) attempting to scan certain
aspects of the Georgia Secretary of State?s infrastructure. The attempt to breach our system was unsuccess-
ful.

At no time has my office agreed to or permitted DHS to conduct penetration testing or security scans of our
network. Moreover, your Department has not contacted my office since this unsuccessful incident to alert
us of any security event that would require testing or scanning of our network. This is especially odd and
concerning since I serve on the Election Cyber Security Working Group that your office created.

As you may know, the Georgia Secretary of State?s office maintains the statewide voter registration data-
base containing the personal information of over 6.5 million Georgians. In addition, we hold the information
for over 800,000 corporate entities and over 500,000 licensed or registered professionals.

As Georgia's Secretary of State, I take cyber security very seriously. That is why I have contracted with a
global leader in monitored security services to provide immediate responses to these types of threats. This
firm analyzes more than 180 billion events a day globally across a 5,000+ customer base which includes
many Fortune 500 companies. Clearly, this type of resource and service is necessary to protect Georgians'
data against the type of event that occurred on November 15.

Georgia was one of the only few states that did not seek DHS assistance with cyber hygiene scans 0r pen-
etration testing before this year?s election. We declined this assistance due to having already implemented
the security measures suggested by DHS. Under 18 U.S.C. 1030, attempting to gain access or exceeding
authorized access to protected computer systems is illegal. Given all these facts, a number of very important
questions have been raised that deserve your attention:

214 State Capitol oAtlanta, Georgia 30334 - (404) 656-2881 (404) 656-0513 Fax

Did your Department in fact conduct this unauthorized scan?
If so, who on your staff authorized this scan?
Did your Department conduct this type of scan against any other states? systems without authorization?
If so, which states were scanned by DHS without authorization?

I am very concerned by these facts provided by our security services provider, as they raise very serious
questions. I would appreciate your prompt and thorough response.

Sincerely,
Brian P. Kemp
[follows is long list of CC: Congressman, etc.]

Re:Text of Letter

[Xenographic]

I don't think they need to worry about their firewalls, they need to worry about falling prey to obvious phishing scams (note the bit.ly link...) and not working together to compromise their own OPSEC by bypassing all the controls.

Re:Text of Letter

[Anonymous Coward]

This appears to be nothing but an ordinary port scan. What, however, is an 'unblocked' scan supposed to be?

More interesting, there are literally thousands of those scans per day. What made this one stick out?
The IP address? That would mean someone, i.e. the private-sector security provider, is not only maintaining a list with US Government IP addresses for their security product, but also that someone has decided that raising an alarm because of one of those specific US Government IP addresses scanning the firewall warrants an exceptional alarm and attention. Without that it would not have been noticed at all.

Who has this level or paranoia, the provider or Georgia's Secretary of State ? and why?
Do they really think real attacks would be coming from registered IP addresses?

Re:Text of Letter

[Anonymous Coward]

Gosh, the most informative post of the whole thread is getting modded down. WHAT ARE YOU HIDING DHS?!

Re:Text of Letter

[Anonymous Coward]

Well, the point of the letter and TFA is to ask why the DHS is conducting scans (though Kemp mentioned pen testing so it may be more than just port scans) without notification or authorization from Georgia.

Re: Text of Letter

[Anonymous Coward]

Do they really think real attacks would be coming from registered IP addresses?

Re: Text of Letter

[Anonymous Coward]

I dunno. Why did the Russians supposedly use their own IP domains to hack the DNC email server and other election hacking shenanigans that they're accused of? Sometimes you just get sloppy.

Re: Text of Letter

[Anonymous Coward]

You would not believe the shit-storm of belligerent phone calls, emails, escalations and accusations I have seen triggered by single nmap scan on default settings. I would not be the least bit surprised if someone at the DHS couldn't access a state of Georgia website and simply ran a quick nmap to see if it was down.

Important clarification

[Verdatum]

The STATE Georgia, not the COUNTRY.

Re:Important clarification

[Anonymous Coward]

Pfft, everyone knows Georgia isn't a country.

Just like these other made up ones, Hungary and Turkey. Who are they trying to fool?

Re:Important clarification

[Anonymous Coward]

In fact, the country named Georgia happens to be a state too.

So this is about the FEDERAL state Georgia, not the UNITARY state.

Oh noes

[Anonymous Coward]

DHS ran an nmap scan against our public ip address space! Bloody hackers!

Re:Oh noes

[spire3661]

"I was just going down the street turning doorknobs to ensure people's houses are locked up safe. Whats the big deal officer?"

Re:Oh noes

[Anonymous Coward]

"I was just going down the street turning doorknobs to ensure people's houses are locked up safe. Whats the big deal officer?"

Yeah, that's what I was thinking - just some innocent knob-wiggling...

Re: Oh noes

[Anonymous Coward]

Yeah, that's what I was thinking - just some innocent knob-wiggling...

Anthony Weiner, is that you?

pinging?

[Anonymous Coward]

Yawn, probably just some pinging going around by the gov

Snoop Doggy Dog

[Tablizer]

In an online political discussion, one conservative complained about Obama's alleged excess snooping. I pointed out that Bush and Trump are pretty much pro-snoopers also.

At first (s)he seemed to argue otherwise, but after a lot of probing on my part, the truth finally came out: He was more nervous with a Democrat snooping than a Republican. It wasn't the snooping itself, but WHO was snooping.

I can see how the personal trust issue can play a part, but to keep switching the laws back and forth depending on which party is in power is not realistic.

Re:Snoop Doggy Dog

[Anonymous Coward]

Translation: "I made up a story to make a point that makes conservatives look bad. I had to make it up with no references because I tend to get called out for lying quite frequently."

Another post brought to you by Tablizer. Every post I see from him I look up references and they are almost always contradict his point or are easily proven false. I see he now is just making shit up completely that can't be looked up.

Facts: Obama said he was going to end surveillance of citizens. He had Clapper lie to Congress about it under oath and has not been prosecuted by the DOJ or forced to resign for his false statements. Obama has GREATLY INCREASED spying on citizens during his administration, including building the NSA site in Utah. Obama has been the least transparent administration on this topic ever, refusing to answer questions or when answering lying every single time. Tablizer is a shill for Obama and only posts on political topics putting up DNC talking points not even attempting to understand the issues or if what he is posting is factual.

Re:Snoop Doggy Dog

[Tablizer]

[Obama] had Clapper lie to Congress about it under oath

Do you have evidence of this? (Ironic, since you just got on my case for not presenting sources.)

(I'll ignore the general ranting, being it lacks specifics.)

Re:Snoop Doggy Dog

[Anonymous Coward]

The difference is that Trump is hated by the same people who expanded the snooping laws. If we assume that government corruption is the impetus, then it follows that the long term effects of Trump's term is decreased snooping overall.

Re:Snoop Doggy Dog

[Tablizer]

If we assume that government corruption is the impetus...

That was NOT a difference maker this election. Trump has a long, slimy business record such that to expect him to stop being slimy once in office is unrealistic. He even blatantly admitted to bribing most of the candidates on the stage during the GOP debates. I don't see that a pimp is holier than a whore.

I believe he won because he sold the idea that most our security and job problems are caused by outsiders. It's a simple and powerful message from a political marketing standpoint: Nationalism 101.

It's wrong and foolish, but I'm just addressing the sales angle here. Wrong but simple ideas sell better than nuanced but correct ones. Human Nature 101.

Re:Snoop Doggy Dog

[Motherfucking Shit]

The difference is that Trump is hated by the same people who expanded the snooping laws.

The FBI seemed pretty hell-bent on getting Trump elected...

If we assume that government corruption is the impetus, then it follows that the long term effects of Trump's term is decreased snooping overall.

Considering Trump's appointees are all coming from the same old places like Goldman Sachs, I'm not sure where you get the idea that corruption will be on the decline.

Re:Snoop Doggy Dog

[Anonymous Coward]

At first (s)he seemed to argue otherwise, but after a lot of probing on my part, the truth finally came out: He was more nervous with a Democrat snooping than a Republican. It wasn't the snooping itself, but WHO was snooping.

And then everyone applauded, right?

Re:Snoop Doggy Dog

[Anonymous Coward]

Pretty common.

Law enforcement tries to execute a search warrant on an iphone? TYRANNY!!!
Google physically tracks and records everywhere everyone ever goes, 24/7? Meh, nobody's *forcing* you to use the internet or cell phones.

Re:Snoop Doggy Dog

[Anonymous Coward]

Video of him lying to Congress under oath. If you haven't seen this video as you claim, you really shouldn't be commenting on this topic at all and I believe everyone else here on /. would agree with me on that point.

Go ahead and claim he wasn't told to, but you will have to follow up with a statement from the White House contradicting him, Clapper being forced to resign for lying, the DOJ prosecuting him for lying, ANY CONSEQUENCES at all for lying.

They don't exist. He lied, Obama knew, and Obama did NOTHING about it.

Face it, for all your ranting about conservatives, Obama has been the absolute worst in ALL OF HUMAN HISTORY for spying on citizens. Yes, the worst in all of HUMAN HISTORY on this topic. No one else has ever come even close.

Go ahead and spin spin away.

Re:Snoop Doggy Dog

[Anonymous Coward]

Google physically tracks and records everywhere everyone ever goes, 24/7?

How does Google track people who use iPhones?

Re:Snoop Doggy Dog

[Tablizer]

You claimed Obama MADE him do it ("had him..."). Are you changing your story now? Perhaps I should put you under oath.

Re:Snoop Doggy Dog

[bmo]

>In an online political discussion, one conservative complained about Obama's alleged excess snooping. I pointed out that Bush and Trump are pretty much pro-snoopers also.

I'm about as liberal as they come.

I am more than disappointed by Obama's expansion of domestic spying. I am also more than disappointed by Obama's removal of due process and Habeas Corpus - Tangerine Bolen is in my Facebook friends list (because she's a good friend of my wife).

This is her:

https://www.theguardian.com/co...

There are a shitload of us over on the left who are fucking pissed. It's not just conservatives.

--
BMO

Re:Snoop Doggy Dog

[Anonymous Coward]

Who is Clapper's direct boss?

Re:Snoop Doggy Dog

[Anonymous Coward]

Oh please, the point AC is making is that a competent subordinate (Clapper) would have discussed his testimony to a co-equal branch of the government with his boss (Obama) before doing so. What kind of executive (Obama) would not have discussed this ahead of time? I for one EXPECT the executive branch to have their ducks in a row, and if they don't then that's incompetence.

Besides, Obama has already tried using the excuse "I read about it in the papers just like you" already, and we know that's not true.

captcha: bluest

Re:Snoop Doggy Dog

[Tablizer]

While probably true, that's not enough evidence to claim that O "made" him say it. It's a lie, or in the very least speculative spin to word it as such.

My original statement was not intended to be directly partisan anyhow. Voters seem okay with snooping as long as it's "their guy" snooping.

Do YOU trust DHS?

[gavron]

" DHS takes the trust of our public ..."
Yes, because the public doesn't GIVE it our trust.

E

Permittted?

[Anonymous Coward]

Sorry, but since when does one need "permission" for a basic pen test on a public-facing system, assuming they didn't get in? The secretary of state should be seeing this stuff all the time from the open internet. Those at DHS may have not really thought it that significant that they should "warn" the Georgia secretary of state about it. And if they didn't get in, there was no reason to follow up. If there have been burglaries in my neighborhood, I don't think I'd really be surprised if a cop walked up to my house and checked the doorknobs and maybe a couple of windows, found they were all locked and then just moved on. If I later see him on surveillance footage, I'm not going to call the paper complaining that I wasn't notified. The bluster in the letter appears to be a ridiculous attempt by the Georgia SOS to score political points. Sadly it will probably work.

Re: Permittted?

[Anonymous Coward]

Since like always

DHS Weaponized?

[Jerry]

The last two administrations have weaponized a lot of Federal agencies against the American people, violating the 1st, 2nd, 4th, 5th, 8th and other Amendments of the Bill of Rights, and their oath of office to "uphold and defend the Constitution of the United States".

Were they trying to break into the election computers and change the counts?

Re:DHS Weaponized?

[Anonymous Coward]

Change the counts? No. They were changing them back to what they were supposed to be prior to the Russian hacking. How difficult is that to understand?

Re:DHS Weaponized?

[Xenographic]

Georgia isn't really a state that would have much value for them to flip even assuming they could do so.

That said, you have to think there's some kind of political shenanigans going on behind it.

Then again, maybe if this is a thing going forward, we'll end up selecting for fewer luddites and more people interested in proper opsec, rather than compromising it the moment it becomes too inconvenient.

Re:DHS Weaponized?

[Anonymous Coward]

have at it
216.81.80.0/20

Re:Obama ordered this!!!

[Anonymous Coward]

Do you have any basis for this (i.e. evidence) or are you just like all other conspiracy nuts and just making shit up. The unfortunate thing is other conspiricy nuts are just as gullible as you are and will quote you as a fact.

I await your personal attacks because you can't come up with anything better.

Homelasnd "Security" Ha Ha Ha

[frovingslosh]

The Federal Government just does whatever it wants. Damn the laws or the Constitution or anyone's rights. Get used to it.

Re:Homelasnd "Security" Ha Ha Ha

[Rick Schumann]

This is more along the lines of what I was thinking.
To quote the Baron Acton, "Power tends to corrupt and absolute power corrupts absolutely". DHS has quite a bit of autonomy and little or no transparency, and that's a very tempting combination for ambitious -- or just plain power-seeking types. Who watches the watchers? We've seen this sort of phenomenon happen on a smaller scale with the TSA; now scale it up to the size and reach of DHS, and you begin to see what I'm talking about. They could, theoretically, 'find' reasons to detain elected officials, without charging them, claiming it's 'for reasons of National Security'. Perhaps a bit far-fetched, perhaps not. Attempting to covertly dig through a State governments information systems makes you wonder.

ATEENTION! MoD PaReNt Up

[Anonymous Coward]

The parent post needs to be seen!

Re:Obama ordered this!!!

[Anonymous Coward]

Do you have any basis for this (i.e. evidence) or are you just like all other conspiracy nuts and just making shit up. The unfortunate thing is other conspiricy nuts are just as gullible as you are and will quote you as a fact.

I await your personal attacks because you can't come up with anything better.

Yo AC Here's the real truth!
https://yro.slashdot.org/comments.pl?sid=9977609&cid=53455847

See, it wasn't Obama trying to fix the election FOR Hillary. It was AGAINST her. Think about it. Who else with the mighty US intelligence apparatus at his command could have more easily broken into the DNC email servers and pizza aficionado John Podesta's gmail account and delivered them to Wikileaks? Who else could have secretly orchestrated Anthony Weiner's exposure as sex freak who propositioned an underage girl and necessitated a reopening of Hillary's email scandal just days before the election? Who could do this? Only the guy that hates Hillary Clinton more than her own husband: Barack Hussein Obama, that who.

Re:Obama ordered this!!!

[Anonymous Coward]

Yo AC to you too.

Proof is not a link to another AC's post on slashdot. It is just another gullible person that another gullible person believes (i.e. you).

Want me to google proof for you? I sure wikipedia has an article on it, I could find it you like..

Pen Test Effectiveness

[Anonymous Coward]

I can see both sides of this issue, frankly.

When conducting White Hat penetration testing, it's important to get an official OK to conduct those operations. It is not legal or ethical to conduct them otherwise. However SOP is to keep the circle of those informed of what was going on, as small as possible.

Pen Tests become less effective (read: less true to life and revealing) the more people know about them. Thus you often see the CEO and maybe the CSO or CIO knowing, but almost no one else on the inside knows. And of course the White Hat team knows.

The concern is that insiders want their organization to perform well, so they leak. Or they tip someone off inadvertently, which has much the same result: Operations and Security know that the attack is coming. Then organizational defenses go higher than normal, everyone is on alert, and the organization is unrealistically effective at detecting and responding to the Pen Test.

How does that translate here? It could be (pure speculation here, bear with me) that DHS knew about and authorized the Pen Test. However they elected to keep Georgian officials mostly or completely in the dark.

Another possibility is that this was a communications screw up.

DHS: "We've hired you to Pen Test all state IT systems. We'll get back to you with a list of exceptions later."
White Hats: "OK!"
White Hats later, on scheduled Pen Test Day: "Well, DHS never got us that exception list and they aren't responding to our update requests. It's Go time!"

So is this legit? Well it's certainly awkward politically. However one of the consequences of most Pen Tests is that certain ranking individuals discover, they weren't in the loop. That was by design and they may have bruised egos about it.

My take? Someone in Georgia State politics or administration should have been told of this, and probably should have approved it too. And that could still be true!

Re:Pen Test Effectiveness

[Obfuscant]

When conducting White Hat penetration testing, it's important to get an official OK to conduct those operations. It is not legal or ethical to conduct them otherwise.

Were I to go back through very old access logs, I could point you to at least one or two Universities that disagree with you. I caught them testing my servers (and a lot of desktop systems) and they didn't have my authorization to do it. No, sorry, authorization from an admin at a different University to scan systems here isn't valid.

And I've caught my own university scanning my home system without my permission. When I reported THAT the response was "meh, so what?".

Like I said, the days of moral outrage over one government agency scanning another one are long gone. If your system faces the public, it faces the public -- all of them.

Re:Obama ordered this!!!

[Anonymous Coward]

>Want me to google proof for you? I sure wikipedia has an article on it, I could find it you like..

I find that hard to believe, but, sure, I'm just waiting on a script to finish so I'll be here a while.

Probably requested by someone at the state

[Anonymous Coward]

I do IT for small-town banks, and some have signed up with a service from the DHS where they do a (rudimentary) external vulnerability scan once a week, and then generate reports with trends in open ports/services/etc. My guess is someone in IT for the state probably signed up for these scans, and then their firewall/IDS/IPS vendor put out a scary report about hacking attempts. That report probably got handed to someone with an anti-federal agenda and here we are.

https://yro.slashdot.org/story/15/12/01/1741223/dhs-offering-free-vulnerability-scans-penetration-tests

I didn't realize this program has existed for so long, as we've only started using it this year.

Re:Obama ordered this!!!

[Anonymous Coward]

https://en.wikipedia.org/wiki/...

There you go, extra bonus, this one is also relevant.

https://en.wikipedia.org/wiki/...

Well...

[Anonymous Coward]

The Ukraine keeps attacking everyone's wordpress installations... lets just call it even.

What's the date?

[Okian Warrior]

In an online political discussion, one conservative complained about Obama's alleged excess snooping. I pointed out that Bush and Trump are pretty much pro-snoopers also.

The rest of us are still in early December, 2016.

What's the date where you live?

Re:Obama ordered this!!!

[Anonymous Coward]

Oh shit, you were being literal. You literally provided the Wikipedia lind to "proof!" LOL. I thought you were gonna google proof that Bill Clinton loves his wife, which I find very hard to believe. Hey, while your at it could you google "epistemic certainty?"

Re:Obama ordered this!!!

[Anonymous Coward]

I'm not saying Obama doesn't hate the Clintons - clearly he does - but what's his follow-on move? He got outmaneuvered when they dug up whatever disastrous oppo research made Biden choose not to run. I don't think he has a plan for how to make himself a future kingmaker.

Re:Obama ordered this!!!

[Anonymous Coward]

Oh shit, you were being literal

I have no idea why the idea of providing proof to back up statements is such a surprise to you. If you make a statement you should be able to back it up.

If you can demonstrate epistemic certainty I will accept that though.

Probably IP Spoofing

[Anonymous Coward]

I'm very doubtful that the DHS actually did something like this. Two possibilities seem much more likely: the real attacker somehow managed to compromise a DHS IP to attack Georgia or this is just a demonstration of governmental incompetence. I have my doubts that Georgia's IT team is sophisticated enough to actually make a proper determination of the true origin of this attack. "Never assume malice when stupidity will suffice." http://rationalwiki.org/wiki/Hanlon's_razor

Too Late Kemp already gave it away

[Gim Tom]

Brian Kemp is the same Georgia (U.S.) Secretary of State that had his IT department send out CD's to dozens of places with the entire Georgia Voters list info including Names, Addresses, Social Security Numbers,and what primary's the voter voted in (Democratic or Republican). Anybody could get them they just had to pay the fee! When this hit the local news he sent a letter asking everyone who got them to return them so that "fixed" the problem. I don't think he even knows that any number of copies could have been made nor does he care. Get real. This guy doesn't know an IP address from a gnats ass.

Re:Too Late Kemp already gave it away

[Anonymous Coward]

Brian Kemp is the same Georgia (U.S.) Secretary of State that had his IT department send out CD's to dozens of places with the entire Georgia Voters list info including Names, Addresses, Social Security Numbers,and what primary's the voter voted in (Democratic or Republican). Anybody could get them they just had to pay the fee! When this hit the local news he sent a letter asking everyone who got them to return them so that "fixed" the problem. I don't think he even knows that any number of copies could have been made nor does he care. Get real. This guy doesn't know an IP address from a gnats ass.

You got just about every single fact wrong.

Re:Too Late Kemp already gave it away

[Anonymous Coward]

Bingo!

Unfortunately the internet outrage machine has no room for critical thinking or any skepticism that isn't mindless denial.
So consider your post to be a complete waste.

Mod parent down!

[Anonymous Coward]

Only a crackpot would think HRC wasn't the REAL WINNER of the electrion. SMH

Attribution

[manu0601]

Perhaps the DHS did not do it? It could be the work of a hacker that infiltrated DHS and use it to probe states.

Given that most states gave permission to DHS to perform penetration testing, it makes the DHS the perfect base for such activity.

Computers

[SumterLiving]

A Republican in Georgia was smart enough to turn on a computer? I doubt that.

stupid fucking beurocratic crybabies

[Anonymous Coward]

eat shit and die

No state fought back when the feds declared war.

[Anonymous Coward]

If you've never acted out at government / school officials chances are you deserve this. The rest of us are trying to mount a merger defence up in New Hampshire. It's extremely difficult when you and our parents and our parents parents generation did little to nothing to curtail the federal government. We now have a very expansive federal (and state) governments and little to no control over our own lives. I can't take a shit without being forced to comply with some regulation or other. There are certain things you should do, but they shouldn't be mandated in law. From seat belts to drugs there should be no law on these things.

And the justification for it is often the result of other terrible laws: socialism. If people's wages weren't stolen from them we wouldn't need a big government bureaucracy to keep out the 'illegals' because they'd have to compete on the same terms and they wouldn't come (supposedly if you believe the conservatives) for the free money (welfare).

What we need to do is end the government indoctrination programs (ie public 'schools'), welfare programs, tax breaks and loop holes of corporations, and so forth. Instead we should get rid of the taxes altogether and put responsibility back into the hands of the people. Yea- it comes with risk. If you make stupid life choices you may end up in a worst state. But the reality is if everybody's wages doubled people could contribute to charity again and more efficiently solve the problem of social injustices.

We brought this on ourselves. If you want freedom and liberty and control over things like who you marry (gay/straight/whatever) and how many people you can marry (polygamists) or just want some other type of relationship then check out the Free State Project and the Shire Society. We're not conservatives or republicans or democrats. We're people who want to end government. End the police state. Heck. End the police. There is a history in this country where there have been times where there weren't any state police. Until 1930s the state police didn't even exist in New Hampshire. We still don't have mandatory car insurance and people survive. Adults aren't required to wear seat belts either.

Now if we can get rid of drivers licenses, taxes, and various other licenses/fees/and registrations there might be a chance we can form a truly free state. But that won't happen until there are enough people up in New Hampshire who believe in liberty and are willing to sacrifice. Fortunately there are 20,000 people who've signed up and are moving. 10% have moved already in fact. Now we will have a minority still, but a disproportionately active minority can have a huge impact on state politics. And state politics is where the majority of people get harmed. We have more people in prisons at the state level then the feds. The state government despite all the bad supreme court decisions still retain quite a bit of power and can refuse federal mandates if states refuse to take federal bribes. The states can refuse to enforce federal laws. They can repeal laws against pot and other no-victim 'crimes'. And while this won't entirely solve every issue it'll have a big impact on freedom. We can also pass laws to hinder other unjust laws like copy"right" that states do not control. It's as simple as passing a law to criminalize logging by ISPs. And you could probably solve this in a better way without more regulation by expanding access to the market by tearing down the regulations that inhibit new ISPs from forming. The regulations increase the costs and if we get more ISPs some very well may stop logging voluntarily to gain a nitch in the privacy market (or if that isn't big enough the piracy market).

Re:Obama ordered this!!!

[Anonymous Coward]

Biden didn't run because his son had just died and he wasn't interested in having news crews on him 24/7. Not everything has to be some giant conspiracy, for god's sake.

Knowing the IQ at DHS ...

[PPH]

... they were probably looking for Chechen rebels.

Re:Knowing the IQ at DHS ...

[Hognoxious]

Them Russkies got a Georgah too? Gashdarnit, they can change the name. We had ours firstest!

Re:Obama ordered this!!!

[Anonymous Coward]

DHS

mighty US intelligence apparatus

Oh, god, stop it! I'm going to die laughing here.

On the internet

[Anonymous Coward]

If you make access possible to the internet, then you are effectively putting out a welcome mat. You can't bitch that someone "tried the door knob" when you yourself put that door knob there in the first place, not to mention the door, the path to the door and the neon sign pointing to your house.

Re:Obama ordered this!!!

[ebvwfbw]

So funny. When GW Bush was President, no proof was necessary. Any whacky thing that happened - See, GW at it again. They're already trying to blame Trump for stuff even though he's not even POTUS yet.

So let's blame Obama. He's POTUS still and it was one of the agencies that he runs. So he should be personally responsible, just like CEOs are under Sarbanes/Oxley.

Perfectly said

[Anonymous Coward]

Reading parent was like déjà vu. It allowed me to re-live the confusion, and later understanding, of reading the summary.
    -- The National Inspire-er

The story printed above perfectly mirrors my experience of reading the summary. I was surprised at how well the author both understood and conveyed my most private feelings on this matter.
    -- The New York Globe

This rings true. It perfectly captures the feelings of Joe Everyreader.
    -- Book Club subcommittee on internet comments

AAA++doublesuperplus. Fast shipping! Would buy again!

God Damn Russians!

[Anonymous Coward]

God damn Russians have taken over DHS and are trying to hack the great state of Georgia.

Commy pinko DHS bastards!

DHS is a criminal organization

[Anonymous Coward]

and freedom loving people should DEMAND it's dismantling.

Georgia is an electronic election fraud State

[Anonymous Coward]

I think the mos telling statement in the article is that
"Georgia was one of two states that refused cyber-hygiene support and penetration testing from DHS in the leadup to the presidential election."

The State of Georgia elections have been a fraud since 2002 when unverifiable, privatized electronic voting systems were mandated state wide. The systems run closed source vendor software and provide no voter verified physical evidence (aka paper ballots or audit printouts) to verify or authenticate the systems against technical failures or malicious tampering at any scale. The State Supreme Court hid behind an totally unadvertised loophole that any voter can choose to use a paper absentee ballot to keep the systems in place, but the requirements of anonymity in voting mean that none of the vote totals from electronic systems can be legitimately verified and voting on the zero-evidence systems here, as about 98% of the voters do, is nothing but political masturbation.