top 50 comments

sorted by: hot top controversial new old
[–] 83 points 2 days ago* (last edited 2 days ago) (3 children)

The CISA employees repeatedly told the political appointees that their request was impossible, in part because the agents capable of pulling off such an operation had just been laid off by Elon Musk’s Department of Government Efficiency initiative. The appointees eventually stopped pressing CISA.

So once again, democracy saved only due to the incompetence of this administration and Musk.

  • source
  • hideshow 3 child comments
  • [–] 22 points 2 days ago (1 child)

    Hopefully they'll try and rig the election but do so in such an incompetent manner that it all just falls apart on its own.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 142 points 3 days ago (12 children)

    The likely motive:

    “My thought was they could keep it in their back pocket to invalidate any [election] results they don’t like,” one of the former officials told ProPublica. “This goes against everything CISA represents.”

  • source
  • hideshow 12 child comments
  • [–] 39 points 3 days ago (10 children)

    Well that was...unexpected. Surely the more likely scenario is that they exploit the hack to change the results?

  • source
  • parent
  • hideshow 10 child comments
  • [–] 53 points 3 days ago (8 children)

    That's a much more findable paper trail than "holy shit we just found a vulnerability we didn't know about, that means someone might have cheated so we have to invalidate the results"

    Instead of "whoopsie this thing says I won even though everyone you talk to says they voted against me"

  • source
  • parent
  • hideshow 8 child comments
  • [–] 18 points 3 days ago (7 children)

    His only real move in elections is to scream cheating. This is exactly what he wants to just declare the elections fake.

  • source
  • parent
  • hideshow 7 child comments
  • [–] 2 points 2 days ago

    Yeah, I wouldn't put it past him to cheat since he was caught cheating before, but I do believe the reason the Trump admin asked to keep any vulnerabilities under wraps is not so they could exploit them, but so they could delay the announcement of finding them after the results came in and invalidate the results if they ended up losing.

  • source
  • parent
  • [–] 9 points 3 days ago (5 children)

    He has two moves: to scream cheating, and to cheat himself.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 2 points 2 days ago* (3 children)

    If he cheats, he still leaves the presidency. If he screams cheating, he can weasel a new election and provisory government. He doesn't care about the party either.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 2 days ago (2 children)

    Why do you think he still leaves if he cheats? Who's going to find out, and who's going to hold him accountable. Even if it's discovered, he just yells that he's framed, and if that fails he yells that he had to, and if that fails then he just yells that he's allowed to, and there's nothing the government, under his control, is going to do to stop that.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 5 points 2 days ago (1 child)

    Nah, just fake news , RELEASE the EPSTEIN FILES

  • source
  • hideshow 1 child comment
  • [–] 48 points 3 days ago (8 children)

    I don't really understand why voting machines are complicated enough that there are feasible vulnerabilities. They have one job, and it's to count. It really shouldn't be too tough for a crack team of competent devs to write the software required to make them work securely. No network access, a memory safe language, and strict business rules should be relatively trivial to setup. Double that will external audits and you've got yourself a stew.

  • source
  • hideshow 8 child comments
  • [–] 16 points 3 days ago

    How do you know the software running on the voting machine you're about to vote on is the software that was audited?

    You go get all the machines together, make sure all the software runs on the newest version and it's correct and it's configured properly with the candidates. When you've got to distribute them to the polling stations, they've got to be kept securely between audit and polling day. Your adversaries are foreign state actors who want to manipulate your elections.

    And then at the end of the day you have to get the results off the machines. You have to trust that the machine gave you the correct numbers and then you have to get those numbers all together without anyone having the opportunity to manipulate them.

    Usually at this point someone comes up with the idea of a paper backup so the machine prints like a receipt of who you voted for that you can put in a ballot box.

    If you're doing that and then count all of the paper ballots to verify the machine count, why even bother with the machines? Just have people vote on a paper ballot with a pencil and count them by hand. The ways to attack paper ballot just don't scale. You might be able to manipulate a few votes in one polling station, but you'd need a massive operation to do it across the whole country.

  • source
  • parent
  • [–] 5 points 2 days ago*

    Or, just use a pencil and paper. This a solution in search of a problem with the additional issue (or feature, depending on who you're talking to) of being able to undermine elections in a number of ways.

    (Time taken to count is a shit rationale)

  • source
  • parent
  • [–] 3 points 2 days ago (2 children)

    In theory you are right.

    In practice you need an OS, visual software, and a way to read from it.

    OS is probably Windows XP or whatever because reasons nobody can explain.

    Software is shit because they take the cheapest one.

    And to read it from you just put in a usb stick and can hack it with know window xp burn abilities.....

  • source
  • parent
  • hideshow 2 child comments
  • [–] 4 points 2 days ago (1 child)

    When the shareholders are casting votes on things in the company I work for they use an iPad. I'm reasonably confident that the side loaded iPad app they use is more secure than the US voting systems.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 16 points 2 days ago (8 children)

    Are there true electronic only voting machines in use? At least in my county, you go to one machine, pick out your choices, it prints out a slip with your choices (in plain English) and barcodes. You then go feed it into another system that scans it to record it and puts it into a locked box.

    If a recount is ever called you have a paper copy with the actual names that were voted for.

  • source
  • hideshow 8 child comments
  • [–] 4 points 2 days ago

    no, its mostly in republican controlled areas, states. and the machines are all owned by a gop-aligned company. its been well known these are rigged for the last 2 decades, but the msm will never report it though.

  • source
  • parent
  • [–] 12 points 2 days ago (6 children)

    It's classic America. Have an overly complicated stupid system that doesn't work, and is inherently unsafe, but don't fix it because doing so would require some billionaire to lose a revenue stream.

  • source
  • parent
  • hideshow 6 child comments
  • [–] 6 points 2 days ago (1 child)

    That didn’t quite answer the question. I said county not country. I’m in America, elections are run at the county level usually.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 0 points 2 days ago (3 children)

    The US doesn't have a system. Elections are run/supervised by the county and regulated by the state. That makes for a robust system that pretty much can't be subverted, no single throat to choke.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 2 points 2 days ago (2 children)

    Electronic voting has been compromised multiple times in the United States so that's demonstrably untrue

  • source
  • parent
  • hideshow 2 child comments
  • [–] 22 points 3 days ago
    [–] 16 points 3 days ago (3 children)
  • [–] 18 points 3 days ago

    Do vulnerabilities in voting software typically get disclosed to the public? Is there a CVE list somewhere that I can browse?

  • source
  • [–] 12 points 3 days ago

    Just open source the code, that's the best way to help validate the systems used. Though, no telling if they'd be modified, update/patched, or using a compromised fork, so who knows....

  • source
  • [–] 3 points 3 days ago

    all that russian bloatware is installed in GOP controlled machines.

  • source
  • load more comments
    view more: next ›