Article View: alt.folklore.computers
Article #625434The ABCs of Hacking a Voting Machine
From: Anne Lynn Wheeler
Date: Sun, 29 Jul 2018 17:04
Date: Sun, 29 Jul 2018 17:04
89 lines
5762 bytes
5762 bytes
The ABCs of Hacking a Voting Machine https://www.darkreading.com/iot/the-abcs-of-hacking-a-voting-machine/d/d-id/1332386 A hacker who successfully infiltrated a voting machine at last year's DEF CON will demonstrate at Black Hat USA how he did it, as well as what he later found stored on other decommissioned WinVote machines. ... snip ... The Myth of the Hacker-Proof Voting Machine https://www.nytimes.com/2018/02/21/magazine/the-myth-of-the-hacker-proof-voting-machine.html Remote-access software is a type of program that system administrators use to access and control computers remotely over the internet or over an organization's internal network. Election systems are supposed to be air-gapped -- disconnected from the internet and from other machines that might be connected to the internet. The presence of the software suggested this wasn't the case with the Venango machine, which made the system vulnerable to hackers. Anyone who gained remote access to the system could use the software to take control of the machine. Logs showed the software was installed two years earlier and used multiple times, most notably for 80 minutes on November 1, 2010, the night before a federal election. ... snip ... Hackers break into voting machines within 2 hours at Defcon https://www.cbsnews.com/news/hackers-break-into-voting-machines-defcon-las-vegas/ "It's really just a matter of plugging your USB drive in for five seconds and the thing's completely compromised at that point," Synack co-founder Jay Kaplan told CNET. "To the point where you can get remote access. It's very simple." ... snip ... 2005, Hardware Hacking a Voting Machine in 4 Minutes https://slashdot.org/story/06/09/05/160251/hardware-hacking-a-voting-machine-in-4-minutes from 2006, Major Vulnerability Found in Diebold Election Machines https://www.schneier.com/blog/archives/2006/05/election_machin_1.html Report Claims Very Serious Diebold Voting Machine Flaws https://freedom-to-tinker.com/2006/05/11/report-claims-very-serious-diebold-voting-machine-flaws/ common for companies to sue blocking hacking public presentations/publication of their systems Federal Judge in DefCon Case Equates Speech with Hacking https://www.wired.com/2008/08/eff-to-appeal-r/ old posts mentioning denial-of-service, remote access dial-up HVAC system vulnerability, one case took out datacenter that typically originates 1/3rd NYSE transactions (aka turned of datacenter cooling) ... now lots of control system remote access have moved to intrenet http://www.garlic.com/~lynn/2013h.html#20 How about the old mainframe error messages that actually give you a clue about what's broken http://www.garlic.com/~lynn/2015e.html#50 old amiga HVAC http://www.garlic.com/~lynn/2016f.html#88 Why the cloud is bad news for Cisco, Dell, and HP http://www.garlic.com/~lynn/2017d.html#15 The Pentagon still uses computer software from 1958 to manage its contracts war dialing, finding systems with modems to attack https://en.wikipedia.org/wiki/War_dialing other old posts mentioning war dialing http://www.garlic.com/~lynn/2002b.html#38 "war-dialing" etymology? http://www.garlic.com/~lynn/2002b.html#41 "war-dialing" etymology? http://www.garlic.com/~lynn/2005c.html#48 [Lit.] Buffer overruns http://www.garlic.com/~lynn/2008m.html#73 Blinkylights http://www.garlic.com/~lynn/2010n.html#76 Mainframe hacking? http://www.garlic.com/~lynn/2012g.html#50 Cartons of Punch Cards http://www.garlic.com/~lynn/2012g.html#52 Wardialing statistics( was: "Cartons of Punch Cards" ) http://www.garlic.com/~lynn/2012g.html#62 Caches, was Wardialing statistics( http://www.garlic.com/~lynn/2015c.html#100 On a lighter note, even the Holograms are demonstrating http://www.garlic.com/~lynn/2016f.html#88 Why the cloud is bad news for Cisco, Dell, and HP current varient: Wardriving https://en.wikipedia.org/wiki/Wardriving other refs: Phone hacking https://en.wikipedia.org/wiki/Phone_hacking Remote access tool https://nl.wikipedia.org/wiki/Remote_access_tool Cracking of wireless networks https://en.wikipedia.org/wiki/Cracking_of_wireless_networks -- virtualization experience starting Jan1968, online at home since Mar1970
Technical Details
Message-ID:
<87o9eqvuq1.fsf@localhost>Path:
mbox-mo1.pugleaf.net!k71-v6ni4470itk.0!nntp.google.com!border1.nntp.dca1.giganews.com!nntp.giganews.com!goblin3!goblin2!goblin.stu.neva.ru!newsfeed.xs4all.nl!newsfeed7.news.xs4all.nl!2a00:1d38:fa:feed::184.MISMATCH!feeder4.usenet.farm!feed.usenet.farm!eternal-september.org!feeder.eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mailShow Full Headers
Complete Article Headers
X-Received: by 2002:a6b:6114:: with SMTP id v20-v6mr5220635iob.126.1532883900141; Sun, 29 Jul 2018 10:05:00 -0700 (PDT) X-BeenThere: alt.folklore.computers@googlegroups.com Received: by 2002:a5e:c245:: with SMTP id w5-v6ls1037489iop.12.gmail; Sun, 29 Jul 2018 10:04:59 -0700 (PDT) X-Received: by 2002:a6b:b513:: with SMTP id e19-v6mr5548697iof.35.1532883899299; Sun, 29 Jul 2018 10:04:59 -0700 (PDT) Path: mbox-mo1.pugleaf.net!k71-v6ni4470itk.0!nntp.google.com!border1.nntp.dca1.giganews.com!nntp.giganews.com!goblin3!goblin2!goblin.stu.neva.ru!newsfeed.xs4all.nl!newsfeed7.news.xs4all.nl!2a00:1d38:fa:feed::184.MISMATCH!feeder4.usenet.farm!feed.usenet.farm!eternal-september.org!feeder.eternal-september.org!reader02.eternal-september.org!.POSTED!not-for-mail From: Anne & Lynn Wheeler <ly...@garlic.com> Newsgroups: alt.folklore.computers Subject: The ABCs of Hacking a Voting Machine Date: Sun, 29 Jul 2018 10:04:54 -0700 Organization: Wheeler&Wheeler Lines: 89 Message-ID: <87o9eqvuq1.fsf@localhost> Mime-Version: 1.0 Injection-Info: reader02.eternal-september.org; posting-host="3b9be24be66a70aa9b985eb098c86e67"; logging-data="23396"; mail-complaints-to="ab...@eternal-september.org"; posting-account="U2FsdGVkX1/Fx0MkN++Jj4qxUzwJimeTrR/88sHm9Xc=" User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux) Cancel-Lock: sha1:WgAmIAkzoxI3xYwIvC21xb5pLYM= sha1:fu44vsL/TZC5gXRMdkooKHwOVf0= Bytes: 5299 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit