Slashdot Mirror
Election Assistance Commission Hacked Using SQL Injection (reuters.com)
whoever57 writes: The commission that is responsible for ensuring the integrity of voting machines was itself hacked. The hacker gained access to non-public reports on weaknesses in voting machines. The hack occurred after the election, so it is unlikely that this hack resulted in changing the result. However, if one hacker can break in, how does anyone know that there was not a prior hack? The hack used an SQL injection flaw to gain access to usernames and passwords which were then cracked.
wiredmikey adds: Researchers have discovered that a Russian-speaking hacker broke into the U.S. Election Assistance Commission (EAC) systems, and has been trying to sell stolen access credentials -- including admin-level -- on the underground. On December 1, researchers with Recorded Future discovered internet chatter that appeared to relate to an EAC breach. A hacker, called "Rasputin" by Recorded Future, was discussing the sale of more than 100 EAC access credentials to a middle-eastern government broker. The hacker claimed to have accessed the systems via an SQLi vulnerability, which Recorded Future was able to locate and report. EAC said Thursday that was aware of the "potential intrusion" and was investigating the incident.
If Russia, or some other entity, was hacking, why did the White House wait so long to act? Why did they only complain after Hillary lost?
If they're not protecting against SQLi in 2016 then it's not hard to imagine there being many other holes open for exploiting.
They didn't. It was brought up in private discussions in October (September? I forget), but the white house decided not to go public with the findings out of fear of unduly influencing the election.
Never underestimate the stupidity inherent in all human beings.
If I were to guess they didn't know until they investigated the matter.
so it is unlikely that this hack resulted in changing the result
"Unlikely"? More like "impossible".
The CIA agent.
They should have come out with it before the vote. Now the winner has no credibility.
const int one = 65536; (Silvermoon, Texture.cs)
SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
Isn't it fun to take a phrase out of context to completely change its meaning?
Russia knows that Americans will misinterpret stuff all day long while ignoring how pathetically easily they are being manipulated by KGB hackers and propaganda.
he had credibility before?
No... We're not actually.
They should have come out with it before the vote. Now the winner has no credibility.
Now the winner has no credibility?
But it would still have been too late, people already found out that the loser also had no credibility.
I don't believe it would have changed much, half the country already hated Hillary and voted Trump out of spite.
I like forward to the reasonable, rational, well cited discussion to follow herein. I'm sure everyone will remain professionally calm and quite intelligible and on point in this. I look forward to it all, and god save the Lizard Queen.
Seriously?! Sounds like a bunch of outdated red scare nonsense to me. Like anyone from a "security group" knows the difference between any Cyrillic language audibly. I watched Goldeneye too. And "underground?" "Rasputin?" Ok, so a an emo teenager with an Anastasia fetish. All this Russia stuff needs to stop before we really do make "America great again" with people reporting neighbors for being "commies" and children ducking under desks like they did in the 50s. You wanna waist your money on a bunker, go right ahead. These fear tactics are the reason behind justifying big brother watching everything in the first place and it'll just get worse. It's all bogus.
Bulllshit and spin.
They didn't report it, because They thought Hillary would win in a landslide. The Undue influencing of elections was done by the MSM which was exposed by the so-called "hacks". I mean, by all accounts it MUST BE THE RUSSIANS!!! how else could she have lost???
Agent K: A *person* is smart. People are dumb, stupid, panicky animals, and you know it.
Maybe that was the plan all along. They sat on this information so they could bury it if their candidate won and bring it to light if their candidate lost so as to throw the legitimacy of the vote into question.
Perhaps, incredulously, the reason Señor Trump seemingly wildly accused the election of being rigged is that he knew more than we did, but mistakenly assumed he was not the beneficiary.
Hell, perhaps he's a savant with the ability to grasp immunity by merely convincing us all he's a clown.
Happiness in intelligent people is the rarest thing I know.
Ernest Hemingway
Who the fuck let Mike out of his cage again?
People who actually believe this is not fake news, well there are plenty of great fake news organisations out there now for you to sign up to.
-- Sent form my iphone, hacked by Russia,
-- Regards,
-- Vlad
I think Trump was boasting about the system being rigged.
First we had a story about a drone that was 'captured' not 'stolen', now we have a report about a hack that occurred after the election with the statement that it 'is unlikely this hack resulted in changing the result'...how about is was IMPOSSIBLE for this hack to have changed the result...last time I looked time travel wasn't worked out yet...
Did he leave a voice-mail in the system? Again, you can cook up any origin and nationality when breaking into a system. Nobody is buying this any more.
Well, clearly it is Vladimir preparing for the next election.
they reacted privately to preserve secrecy of course. shaking in their boots anout what could happen
Fuck you guys for not hiring me.
Senate Majority leader objected, if I recall, to the information being made public so close to election day.
Post may contain irony: discontinue use if experiencing mood swings, nausea or elevated blood pressure.
If Hillary won it would have been hushed up.
Why would a hacker reveal that it was a SQL injection?
Well, this explains why I never see Robert Tables on the ballot...
http://xkcd.com/327/
All votes are on paper. All counts are scrutineered at the polling booth, a quick and painless process. (Real scrutineering where the votes are seen, not some bullshit where scrutineers look through a window.) And then the subtotals are independently tallied by the parties.
Would be annoying if the main Electoral Computers computers were compromised, but no big deal. It would be obvious when the subtotals did not tally, and a recount would quickly rectify it.
So, what is so different in the USA!
"The hack used an SQL injection flaw. . ."
Jesus wept...excuse me while I execute a nuclear-grade facepalm. Have none of these people ever heard of sanitizing data?
Just cruising through this digital world at 33 1/3 rpm...
Billions of tax dollars went to purchase electronic voting machines that were designed to be hacked. If they were hacked perhaps the real issue was that they were hacked by the wrong people?
Only somebody that should be stuck in jail writes SQL by tacking strings together.
"half the country already hated Hillary and voted Trump out of spite."
Except that didn't happen. She got more votes, she won, that is the whole essence of democracy: men being equal, their votes being equal.
Now you can say "rules = Electoral College", but then you think the Electoral College is required to be a binding vote. but that isn't the rule. It's a free vote except for a few states.
The departure from democracy was so they could make an informed decision and enforce the constitution.
Trump HAS NOT sold off his foreign business, and he has not closed his offshore accounts, and he still has direct interest in his USA businesses. He cannot be President. He was supposed to announce a solution last week, like everything else he claims, he doesn't do it.
But that's OK, because the voters reject Trump, so the Electoral College should reject him before he is impeached.
Bullshit, how would you involved the Russian hackers? How would you fake the evidence for the CIA and FBI both to confirm it?
http://www.aol.com/article/2016/12/16/fbi-backs-cia-assessment-of-russia-2016-election-hack/21629706/
The hacked election registration websites have been confirmed.
The hacked DNC emails were released DURING the election, you claim "sat on information" yet no such sitting occurred.
CIA says they hacked the RNC emails too. They just haven't released them, and haven't sexed them up.
That means that Putin has both chosen the USA President, AND has the secrets of the elected lot for future leverage.
Can I remind you that Hillary got more millions votes than Trump. And Trump has not sold off his foreign businesses, despite promising to do so by Thursday, a deadline passed already. He still has offshore accounts, he still received foreign income.
You want to put him, with fewer votes, into the Whitehouse, using the rules, yet he is in violation of those rules. You are helping turn USA into a Russian puppet state.
"The leaked emails are certainly legit - that's not the question"
Not they're not, they're a mass of legit emails with a bit of propaganda added (or critical information removed) to sex them up a bit. That's how Russian propaganda works.
" Every day, more clinton email scandal and no chance for policy discussion. That's how propaganda works."
Exactly, every day you would make some innuendo against emails provided for the purpose by Manafort (Trump's propagandist who's a lobbyist known for doing similar pro-Russia elections around the world), and many of you were doing Putin's work for him.
Trump isn't the choice of the America people, they voted for Hillary. He isn't the GOP's choice, he just hijacked their primaries. He's Putin's choice of President.
They want to put him in power using the Electoral College, yet he won't even abide by the Emolument clause. He'll literally have offshore bank accounts and a company to launder that money (name brand licenses) AND be running the country at the same time.
I am:
"That played well before the election. Now? We don't care."
or maybe this one is better:
"You people were vicious, violent, screaming, 'Where's the wall? We want the wall!' Screaming, 'Prison! Prison! Lock her up!' I mean you are going crazy. I mean, you were nasty and mean and vicious and you wanted to win, right? But now, you're mellow and you're cool and you're not nearly as vicious or violent, right? Because we won, right?"
Someone had to do it.
Seriously. Rasputin ?
This is just part of the show people, don't you see that ?
You have bigger enemies within your own country than Russia will ever be.
The ones that are "manufacturing" these retarded articles/news for a start.
If you succeed you will have a civil war. Cheers !
It cannot be that Hillary, who declared war on the White Man, was defeated by her declared opponent.
Cannot be, because Sodom&Gomorra is the natural state of mankind.
America has fucked up Iraq, Syria and quite a few more nations in the last ten years only. Millions have been killed BECAUSE OF YOU NATION OF CRIMINALS.
No you eat a tiny dose of your own medication and you cry wolf.
Get over it and grow up. Or eat more of the poision.
Your choice.
You are the Masters of The Universe and your puppets can never fail, otherwise the dozens of billions burned for the Mainstream Media Whores ("Journalists") would be in vain. According to the first law of Banksterism, that cannot be. Big money must have big effect. Or so you folks think.
Those who willfully aided George Bush, Tony Blair, Hillary Clinton and Obama in the rape of Iraq and Syria ?
We are now supposed believe these criminals ?
What do these people think ? Do they seriously think their voice and vote matters ? We all know, the rule is "one dollar, one vote", correct ?
New York Banksters fucked Russia only from 1990 to 2005, only made the Russians nearly starve. And now the evil Russians do this to America ! How evil these Russkies must be !
Seriously, the White Man defeated the witch who had openly declared to destroy the white man, together with her Middle East paymasters.
Tell your sorrows to the millions of killed, raped and maimed Iraqis and Syrians. Who did that ? NY International Banksters and their stooges, including Hillary.
...had hired a Pakistani instead of you. For you they have food vouchers. Is it her fault the Paki did not know about SQL injections ? Don't be such an Old White Man, who wants to earn money to fund a family in America. Don't be selfish and think of the Banksters !
Comment removed based on user account deletion