Slashdot Mirror


Should We Ignore the South Carolina Election Hacking Story? (securityledger.com)

chicksdaddy provides five (or more) "good" reasons why we should ignore the South Carolina election hacking story that was reported yesterday. According to yesterday's reports, South Carolina's voter-registration system was hit with nearly 150,000 hack attempts on election day. Slashdot reader chicksdaddy writes from an opinion piece via The Security Ledger: What should we make of the latest reports from WSJ, The Hill, etc. that South Carolina's election systems were bombarded with 150,000 hacking attempts? Not much, argues Security Ledger in a news analysis that argues there are lots of good reasons to ignore this story, if not the very real problem of election hacking. The stories were based on this report from The South Carolina Election Commission. The key phrase in that report is "attempts to penetrate," Security Ledger notes. Information security professionals would refer to that by more mundane terms like "port scans" or probes. These are kind of the "dog bites man" stories of the cyber beat -- common (here's one from 2012 US News & World Report) but ill informed. "The kinds of undifferentiated scans that the report is talking about are the internet equivalent of people driving slowly past your house." While some of those 150,000 attempts may well be attempts to hack South Carolina's elections systems, many are undifferentiated, while some may be legitimate, if misdirected. Whatever the case, they're background noise on the internet and hardly unique to South Carolina's voter registration systems. They're certainly not evidence of sophisticated, nation-state efforts to crack the U.S. election system by Russia, China or anyone else, Security Ledger argues. "The problem with lumping all these 'hacking attempts' in the same breath as you talk about sophisticated and targeted attacks on the Clinton Campaign, the DCCC, and successful penetration of some state election boards is that it dramatically distorts the nature and scope of the threat to the U.S. election system which -- again -- is very real." The election story is one "that demands thoughtful and pointed reporting that can explore (and explode) efforts by foreign actors to subvert the U.S. vote and thus its democracy," the piece goes on to argue. "That's especially true in an environment in which regulators and elected officials seem strangely incurious about such incidents and disinclined to investigate them."

22 of 139 comments (clear)

  1. Someone is attempting to hack everything by elrous0 · · Score: 5, Insightful

    I pretty much just assume that any computer attached to the internet is being tested by hackers all the time. Why should election computers be any different?

    --
    SJW: Someone who has run out of real oppression, and has to fake it.
    1. Re:Someone is attempting to hack everything by Anonymous Coward · · Score: 5, Insightful

      Because they shouldn't be attached to the internet?

    2. Re:Someone is attempting to hack everything by davide+marney · · Score: 2

      Exactly. The NSA data center in Utah gets something like 300 MILLION hacking attempts a day. A non-story if ever there was one. Probably the reason it doesn't have legs is because some reporter breathlessly runs it by their IT folks, and they just roll their eyes.

      --
      "We receive as friendly that which agrees with, we resist with dislike that which opposes us" - Faraday
    3. Re:Someone is attempting to hack everything by rthille · · Score: 2

      Election computers should be different, because they shouldn't be attached to the internet!

      --
      Awesome furniture, accessories and cabinetry in Santa Rosa, CA: http://humanity-home.com/
    4. Re: Someone is attempting to hack everything by interkin3tic · · Score: 2

      I am not Obama, Obama is not the president, and Obama does not speak for me, so what's your point?

  2. All in a day's business... by Frosty+Piss · · Score: 5, Insightful

    The public-facing srvers I'm reponsible for are port-scanned thousends of times a day in addition to the SSH access attempts, but these are all so common that only a fool falls victim to this sort of thing, the basic protections are fairly elementary and catch most if not all such common garbage.

    --
    If you want news from today, you have to come back tomorrow.
    1. Re:All in a day's business... by 93+Escort+Wagon · · Score: 4, Informative

      those scans are so prevalent because they are regularly successful.

      Those scans are so prevalent because they're trivially easy to implement - regardless of the success percentage. That percentage can be very low and still be worthwhile.

      --
      #DeleteChrome
  3. Re:Ignore? by Freischutz · · Score: 3, Funny

    Hell, we don't even have to investigate. An election has never been hacked, and cases of attacks are so few and far between that it doesn't make sense to even try to figure out how often this happens.

    Donald? Is that you?

  4. Ask me how I can tell you're a Democrat by SuperKendall · · Score: 2, Insightful

    Perfectly willing to claim Trump was elected from vote hacking, utterly unwilling to investigate or question any votes - and in fact attempts to block those seeking to investigate voter hacking.

    It is absurd to claim with as loose as protocol is around most voting systems, that there is not widespread voter fraud ongoing - probably "benefitting" both parties and screwing honest voters over with rigged elections across the country.

    --
    "There is more worth loving than we have strength to love." - Brian Jay Stanley
    1. Re: Ask me how I can tell you're a Democrat by buss_error · · Score: 3, Informative

      The UN makes third world countries use real ID to vote. That doesn't ring true to my knowledge. Do you have a citation for that? Years ago when I was keeping up with this sort of thing, what they did was use ink on the finger or thumb showing that person voted. If you think about it, third world countries have problems getting clean drinking water, food security, sanitation, and clothing - let alone health care, so I guess the US does share a little in common with them. I expect that in a place like India, where 60% of the population doesn't have access to a toilet, an ID would come pretty far down on their list of important needs.

      Why can't we do the same in the first world? Fine. Let's also require ID to purchase a gun and ammunition. But really, there is no need for either of those solutions. After all, I'm told gun violence is fake news, and I don't see any cases of mass voter fraud, just the one off Republican voting in two states.

      As far as how prevalent fraud is... you put cart before horse claiming it's nothing. Impossible to say when the cheaters won't allow an investigation. I think purple elephants are a problem in my front yard, so I drew a huge KEEP OFF sign. Sure works. Haven't seen a purple elephant in years now. Of course that's nonsense, but I hope that you can at least see my view of your argument. It's nonsensical to me. If there were massive voter fraud, I think the authorites would be locking people up. As it stands, the FBI crime report shows fewer than 200 convictions of voter fraud in 2014.

        We investigate the hell out of everything else but oh no don't look behind the vote fraud curtains! Nothing to see there! Trust me! No one is saying there is no vote fraud, we're saying it's not six million votes big. Slight difference there. And President Trump is the one that in my opinion, over uses the words "Believe me" and "Trust me". I do neither because I have a memory, a intellect, a moral compass, and a bit of compassion for my fellow human beings.

      --
      Necessity is the plea for every infringement of human freedom. It is the argument of tyrants; it is the creed of slaves.
  5. "The very real problem of election hacking" by cunina · · Score: 4, Insightful

    If it's such a "very real problem," then why has not one single media outlet actually explained how the election was "hacked?" We hear "Russians" twenty times a day, but no one actually points a single compromised voting system, nor any research that show Clinton would have won if hadn't been circulated. This, from a media that has become otherwise quite good at explaining things like quantum teleportation and CRISPR/CAS9 to the general population - but somehow lots of hand-waving about the "hacked election."

    1. Re:"The very real problem of election hacking" by gatfirls · · Score: 5, Informative

      There has been nonstop coverage about how the election was "hacked", of course that may not fit into your or others narrative that if they didn't directly hack voting machines then there is no "hacking" (let's call this the glove does not fit so you must acquit theory). There was the DNC hack and leaks and the disinformation campaigns that have been well covered and sourced to be either Russian government lead or by Russian parties with which we are unsure of their ties. You hear about Russia 20 times a day because the Trump campaign and Cabinet and close ties are oozing in unanswered questions/connections with regard to Russia and every day a new connection either direct or indirectly made.

      That is all non-partisan fact. Take of it what you will.

    2. Re:"The very real problem of election hacking" by Anonymous Coward · · Score: 2, Interesting

      Story for you

      Its also a non-partsian fact that not a SINGLE person is willing to testify in court that they have seen evidence of hacking the election.

      Under oath, Comey said the DNC refused the FBI's help in checking their servers. The company the DNC did hire is a DNC shell company that said the Russians did it. That company is also unwilling to testify that Russia did it now after some more information came out about them. That leaves the FBI with no ACTUAL evidence of Russia doing anything. When asked why Comey still thought it was Russia he said, and I shit you not, "It just makes sense".

      Yea, there is no evidence anywhere. Glad to see you posting DNC talking points that have been thoroughly debunked, but I'm sure it won't stop you.

    3. Re:"The very real problem of election hacking" by Anonymous Coward · · Score: 2, Funny

      Those e-mails hacked/leaked were confirmed to be genuine, i.e. real information about what those politicians stand for.

      Knowing what the politicians stand for is an important part of democracy.

      So, if you include those, you are really accusing Russia of democracy. If that's the worst accusation you can come up with - well, I'm sure Russia has been accused of worse things.

  6. Even More "Strangely Incurious about investigating by Tulsa_Time · · Score: 2

    Voter Fraud via the Presidential Commission.

    --
    5 out of 6 people enjoy Russian Roulette & 6 out of 7 Dwarfs are not Happy
  7. Dog bites man story? by bobbied · · Score: 3, Insightful

    More like man inhales story...

    I ran a basic web server for awhile at home a few years ago just for amusement on a Linux box running apache. It served up ONE static page that said something like "this is the only page on this server" and that was it. I got "attacked" thousands of times a week by the script kiddies running the IIS exploit attempt scripts, port scans and all sorts of things that I found a little bit amusing.

    Surely, during an election, ANY computer on the net associated with anything to do with voting would be a primary target of all the hackers out there trying to make a name for themselves....Oh Look at me! I broke in and disrupted the election!

    The fact is, this is not unusual..

    --
    "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
  8. Re:Of course by HornWumpus · · Score: 5, Informative

    Plus voter ID, clear ballot boxes and indelible ink marks on voters thumbs to prevent double voting. The UN has a set of best practices.

    --
    John McAfee 'It was like that time I hired that Bangkok prostitute; to do my taxes, while I fucked my accountant'
  9. Computerized voting is *Supposed* to be hacked by aberglas · · Score: 4, Interesting

    By the partizan electoral officials that control them. Heck, the Diabold machine was even found to have and "Adjust Votes" option on the menu, no need for any actual hacking.

    It amazes me that Americans put up with this grossly dubious system.

    I am sure that the Australian election was not hacked. I was one of the scrutineers who watched while every paper ballot (at a particular booth) was tallied. And then forwarded those subtotals on to the candidate themselves. No fuss. No court cases. Just transparency.

    1. Re:Computerized voting is *Supposed* to be hacked by argStyopa · · Score: 2

      Remember the entire motivation behind electronic voting was because Florida Democrats were deemed too stupid to handle paper ballots. This "tragedy" cost Mr Gore the election.

      The 'proper' person didn't win, ergo, the system 'must be' broken.

      Like many theoretical exercises in logic, if you begin with such premises the rest make perfect sense.

      --
      -Styopa
  10. Re:Of course by thrich81 · · Score: 4, Insightful

    Is that Voter ID really free of charge or is it free after you pay a fee to get a certified copy of your birth certificate which is required in order to get your free ID? Paying money for anything in order to vote has a bad history in this country, as do literacy tests (hey, you should be able to read, else how can you cast an informed vote!), etc. You can always make an argument why there should be some test or other extra-constitutional requirement to vote -- they've all been tried in the past.

  11. Oh, Occam, we hardly knew ye by SlaveToTheGrind · · Score: 2

    Of all the states where someone might be trying to (undetectably) swing the result of an election through hacking, who in their right mind would pick South Carolina where Trump was already expected to win within the range of the 15 point margin he did?

    Yes, we should ignore this story for desperately grasping at straws to the point of extinguishing critical thinking.

  12. Re:Of course by magzteel · · Score: 2

    You mean the thing that is actually a discriminatory burden?

    These court cases are crap and I'm sick of this argument that people are just incapable of getting an ID somehow. Everyone should have an ID. Here's a list of reasons why, provided by the NYC government:

    http://www.nyc.gov/html/id/htm...

    People object no matter how easy the local government makes it. People objected even when they were sending mobile voter ID vans into neighborhoods to make it easy. If those vans were giving out free phones people would have waited on lines for hours.

    Voters are supposed to be adults. Treat them accordingly.