Foreign Actors compromise voters

Old-school cracks exploited the Arizona and Illinois State Board of Elections.
The story is weak on specifics regarding the Arizona crack, this statement is ambiguous.

While the hackers did not compromise the state network, they stole the username and password of an election official in Gila County, located in central Arizona.

That doesn’t tell us if the stolen username was the origin of the crack attempt or the result. If the origin, then it was either an infected machine the user used or s/he used the same username/password combination on other websites.
From the McLean County Clerk’s Facebook page regarding the Illinois crack:

The pathway into IVRS was NOT through our firewalls but through a vulnerability on our public web page that an applicant may use to check the status of their online voter registration application.
The method used was SQL injection. The offenders were able to inject SQL database queries into the IVRS database in order to access information. This was a highly sophisticated attack most likely from a foreign (international) entity.

As a side note, headlines aside, no story that I’ve found actually says it was the Russians.

16 Replies to “Foreign Actors compromise voters”

  1. SQL injection may have been a “highly sophisticated attack” in 2003. Any web app in 2016 that isn’t sanitizing its inputs deserves to get hacked.
    I see they’ve asked everyone to change their passwords. That will certainly help.

  2. If they can hack the NBA then they can just about any government entity. Not. Good.

  3. Order out of chaos…been going on a long time. Just a little more so now. The breakout of populism, people dissatisfied with all the corruption. All will be used to give us a new improved centralism. Can’t have the new until the old is broken.
    Consolidation of power will almost happen…already read tomorrow’s newspaper.

  4. Ditto “highly sophisticated” is not something I’d use to describe a sql injection attack.

  5. It’s a fig leaf.
    “We were hacked via SQL injection.”
    “*SQL injection??* What the ****, was your web app designed by toddlers?”
    “Yeah, but this was a highly sophisticated SQL injection…”
    “Oh, well then.”

  6. “…designed by toddlers?”. No, more like hacked by toddlers, aka script kitties.
    Paper, pencil, “X”, taped shut ballot box. Slit box, dump out paper, DRO counts in front of scrutineers. Phone in results to RO and candidate HQs. If you’re not doing it this way, you’re doing it WRONG.

  7. The “Russians”* can only hack sites connected to the Internet so getting into the NBA would be possible.
    Not the NSA though. They’re not on the Internet.**
    * Or whoever.
    ** Well, I suppose someone could try hacking their unclassified public relations site on the Internet if they had nothing better to do. That won’t yield any “super secret” stuff though.

  8. You are correct. Unless the US adopts that proven system the election results will be compromised. They should also dip fingers in ink like the 3rd world countries do at elections.

  9. So convenient. No more incompetence – just like the days when every mistake was the fault of “the computer”. For four or five blissful years, human beings made no mistakes. Now it’s all Vlad’s doing.

  10. I used to think the people who claimed that Obama would declare martial law or interfere in the election in some way were crazy. But now,
    HOMELAND SECURITY is going to oversee the election. It’s under the executive branch’s control. Just when you thought turning the IRS into a political weapon was a bridge too far…

  11. “I used to think the people who claimed that Obama would declare martial law or interfere in the election in some way were crazy.”
    They still are.
    And it’s interesting that such nuttiness is common to both ends of the political spectrum. The wingnuts on the right who claim Obama will declare martial law echo the leftie moonbats who used to accuse Bush of the very same thing.

  12. I find it funny as can be. When Rep would talk about election fraud in voting.
    The dem would “always” claim that it never happens. Now it’s on the other foot where the dem (Harry Reid) is now saying the Russian’s could cause Billary to lose.
    Libs, they just crack me up.
    Truth is something they avoid

Navigation