Slashdot Mirror
US House Candidates Vulnerable To Hacks, Researchers Say (reuters.com)
About 30 percent of House candidates running for office this year have significant cybersecurity issues with their campaign websites, according to a new study. Reuters: The research was unveiled on Sunday at the annual Def Con security conference in Las Vegas, where some attendees have spent three days hacking into voting machines to highlight vulnerabilities in technology running polling operations. A team of four independent researchers led by former National Institutes for Standards and Technology security expert Joshua Franklin concluded that the websites of nearly one-third of U.S. House candidates, Democrats and Republicans alike, are vulnerable to attacks. NIST is a U.S. Commerce Department laboratory that provides advice on technical issues, including cyber security. Using automated scans and test programs, the team identified multiple vulnerabilities, including problems with digital certificates used to verify secure connections with users, Franklin told Reuters ahead of the presentation. The warnings about the midterm elections, which are less than three months away, come after Democrats have spent more than a year working to bolster cyber defenses of the party's national, state and campaign operations.
Are these the same fake html "hack" vulnerabilities exploited by dozens of children at DefCon that /. reported earlier today?
f u bitch
This article is misleading and poorly written. Those house members are NOT vulnerable and never have been. No proof was provided and all sources were obviously biased towards Democrat party Clinton and Soros fundeds. This writeup of bad journalism is example again of why many regular Americans see mainstream media as enemy of people, and not friend.
Since Krikorian joined the DNC a year ago, the party has moved email and data storage to Google cloud and replaced most Windows computers with easier-to-defend Apple hardware and Google Chromebooks, he said.
Ahh, security by moving things into the cloud and using a different OS. That should fix everything. As we all know nobody has ever gotten a hold of cloud data and there are viruses/vulnerabilities for MAC; at least that's what my users tell me.
Vulnerable to hacks? My local representative IS a hack!
"That's the way to do it" - Punch
From the article "Using automated scans and test programs, the team identified multiple vulnerabilities, including problems with digital certificates used to verify secure connections with users, Franklin told Reuters ahead of the presentation." This may or may not be an issue. If the site is simply providing information and/or collecting email addresses this is not really an issue. If the site is collecting credit card info it would be an issue, but that is usually done through a third party. Basically they ran something that tested the web sites SSL implementation and without more information we cannot determine if that is really an issue.
Just get your own private email server.
Table-ized A.I.
Similar survey of 2016 Senate web sites
http://cybertical.com/2016-senate-cybersecurity.html
US House Candidates Vulnerable To Hacks, Researchers Say
Well, hacked water heaters are a danger. Why not hacked air heaters?
(-1: Post disagrees with my already-settled worldview) is not a valid mod option.
Mine was elected through a special election last year with over $54M spent combined by both parties.
I sent her to Washington to do 1 thing that is screwing my family and hers for $700/month extra before that law was passed. She claimed her family was paying over $1500/month more and I believed her.
I wanted the ACA repealed. Don't care if they replace it or not.
She didn't make that happen. I've been unhappy with almost everything else her and her party have done since she was elected.
Sadly, the other party is worse on 60% of things.
All politicians who accept PAC or corporate money need to be voted out.
The DNC, which has had some rather famous problems, is doing this about it:
So, after devastatingly embarrassing hacks, the DNC's response is to have users promise they're following good practices? Not best practices, not CSC guidelines, not NIST recommendations, just a pledge? A PLEDGE??