Slashdot Mirror
Election Assistance Commission Hacked Using SQL Injection (reuters.com)
whoever57 writes: The commission that is responsible for ensuring the integrity of voting machines was itself hacked. The hacker gained access to non-public reports on weaknesses in voting machines. The hack occurred after the election, so it is unlikely that this hack resulted in changing the result. However, if one hacker can break in, how does anyone know that there was not a prior hack? The hack used an SQL injection flaw to gain access to usernames and passwords which were then cracked.
wiredmikey adds: Researchers have discovered that a Russian-speaking hacker broke into the U.S. Election Assistance Commission (EAC) systems, and has been trying to sell stolen access credentials -- including admin-level -- on the underground. On December 1, researchers with Recorded Future discovered internet chatter that appeared to relate to an EAC breach. A hacker, called "Rasputin" by Recorded Future, was discussing the sale of more than 100 EAC access credentials to a middle-eastern government broker. The hacker claimed to have accessed the systems via an SQLi vulnerability, which Recorded Future was able to locate and report. EAC said Thursday that was aware of the "potential intrusion" and was investigating the incident.
Agreed. /default/ coding practice, not what you reluctantly pick up after a breach or an audit!
I get that developers are lazy and can be expected to shy away from security features that get in the way, but come on, Prepared Statements have been around for a very long time, and in a lot of ways, they make your life easier (prettier code, streamed-blob-handling, no escaping, datatype checks):
They should be your
Seems unlikely because Russian hacking has consistently helped Trump. If they had been able to produce evidence of that, even just reports from the CIA or FBI, it would have badly damaged his campaign.
I'm sure de-legitimizing Trump's administration was Russia's plan all along. Weaken the US with someone they think will make a poor leader, who is easily goaded and who will be too busy fighting his fellow citizens over everything on multiple fronts to oppose Russia. Plus they already lent him a lot of money, so have plenty of leverage if plan A fails.
const int one = 65536; (Silvermoon, Texture.cs)
SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
Every day, more clinton email scandal and no chance for policy discussion.
Because we the media didn't spend a large chunk of its time talking about Trump's pussy grabbing or his tweets. I honestly heard more about Trump's tweets than I did Clinton's e-mails.
So lets not pretend if the e-mails weren't released they would have talked about 'policy' at all.
Bullshit, how would you involved the Russian hackers? How would you fake the evidence for the CIA and FBI both to confirm it?
http://www.aol.com/article/2016/12/16/fbi-backs-cia-assessment-of-russia-2016-election-hack/21629706/
The hacked election registration websites have been confirmed.
The hacked DNC emails were released DURING the election, you claim "sat on information" yet no such sitting occurred.
CIA says they hacked the RNC emails too. They just haven't released them, and haven't sexed them up.
That means that Putin has both chosen the USA President, AND has the secrets of the elected lot for future leverage.
Can I remind you that Hillary got more millions votes than Trump. And Trump has not sold off his foreign businesses, despite promising to do so by Thursday, a deadline passed already. He still has offshore accounts, he still received foreign income.
You want to put him, with fewer votes, into the Whitehouse, using the rules, yet he is in violation of those rules. You are helping turn USA into a Russian puppet state.
It's strange how many ACs there are out there telling us how Russia is our friend.
The world's burning. Moped Jesus spotted on I50. Details at 11.