BC POLITICS
Saved by @Alex1Powell

August 2019:

Exclusive: Critical U.S. Election Systems Have Been Left Exposed Online Despite Official Denials

https://t.co/upYeltANXG

 The top voting machine company in the country insists that its election systems are never connected to the internet. But researchers found 35 of the systems have been connected to the internet for months and possibly years, including in some swing states.
But a group of election security experts have found what they believe to be nearly three dozen backend election systems in 10 states connected to the internet over the last year, including some in critical swing states.
These include systems in nine Wisconsin counties, in four Michigan counties, and in seven Florida counties—all states that are perennial battlegrounds in presidential elections.
Some of the systems have been online for a year and possibly longer. Some of them disappeared from the internet after the researchers notified an information-sharing group for election officials last year.
But at least 19 of the systems, were still connected to the internet this week, the researchers told Motherboard.
The researchers and Motherboard have been able to verify that at least some of the systems in Wisconsin, Rhode Island, and Florida are in fact election systems.
The rest are still unconfirmed, but the fact that some of them appeared to quickly drop offline after the researchers reported them suggests their findings are on the mark.
“In some cases, [the vendor was] in charge [of installing the systems] and there was no oversight. Election officials were publicly saying that their systems were never connected to the internet because they didn't know differently."
The systems the researchers found are made by Election Systems & Software (@essvote), the top voting machine company in the country.
They are used to receive encrypted vote totals transmitted via modem from ES&S voting machines on election night, in order to get rapid results that media use to call races, even though the results aren’t final.
Generally, votes are stored on memory cards inside the voting machines at polling places. After an election, poll workers remove these and drive them to county election offices.
But some counties want to get their results faster, so they use wireless modems, either embedded in the voting machines or externally connected to them, to transmit the votes electronically.
The system that receives these votes, called an SFTP server, is connected to the internet behind a Cisco firewall.
For security reasons, the SFTP server and firewall are only supposed to be connected to the internet for a couple of minutes before an election to test the transmission, and then for long enough after an election to transmit the votes.
But the researchers found some of the systems connected to the internet for MONTHS at a time, and YEAR-ROUND for others, making them vulnerable to hackers.
Hacking the firewall and SFTP server would allow an attacker to potentially intercept the results as they’re transmitted and send fake results to the FTP server, depending on how securely the ES&S system authenticates the data.
Although the election results that are transmitted via modem are unofficial—official votes are taken directly from the voting machine memory cards when they arrive at county offices—
— a significant discrepancy between the unofficial tallies and the official ones would create mistrust in the election results and confusion about which ones were accurate.
But connected to the firewalls are even more critical backend systems—the election-reporting module that tabulates the unofficial votes as well as the official ones, and the election-management system that is used in some counties to program voting machines before elections.
Gaining access through the firewall to these systems could potentially allow hackers to alter official election results or subvert the election-management system...
... to distribute malware to voting machines through the USB flash drives that pass between this system and the voting machines.”
Online, the researchers can only see the firewalls configured in front of these systems and cannot see anything behind them—a federal law makes it illegal for them to probe beyond the firewall.
But ES&S documents posted online in various counties show that these critical backend systems are connected to the firewall, and ES&S also confirmed that this is the correct architecture in counties that want to transmit results electronically.
ES&S has long insisted that election-management systems are air-gapped—that is, not connected to the internet or connected to any other system that is connected to the internet—and the company insists that the diagram it provided isn’t showing them connected to the internet.
“There’s nothing connected to the firewall that is exposed to the internet,” Gary Weber, vice president of software development and engineering for @essvote, told Motherboard. “Our [election-management system] is not pingable or addressable from the public internet.”
This makes them invisible to bad actors or unauthorized users, he said.

But Skoglund said this “misrepresents the facts.” Anyone who finds the firewall online also finds the election-management system connected to it.
“It is not air-gapped. The EMS is connected to the internet but is behind a firewall,” Skoglund said. “The firewall configuration [that determines what can go in and out of the firewall]… is the only thing that segments the EMS from the internet.”
And misconfigured firewalls are one of the most common ways hackers penetrate supposedly protected systems. The recent massive hack of sensitive Capital One customer data is a prime example of a breach enabled by a poorly configured firewall.
“If they did everything correctly [with the ES&S systems] as they say they do, there is no danger,” Robert Graham, CEO of Errata Security, told Motherboard.

“These are all secure technologies that if [configured] correctly work just fine.
It’s just that we have no faith that they are done correctly. And the fact that [election officials are] saying they aren’t on the internet and yet they are on the internet shows us that we have every reason to distrust them.”
Even proper configurations won’t secure a firewall if the firewall software itself has security vulnerabilities that allow intruders to bypass all the authentication checks, whitelisting rules, and other security parameters set in the firewall’s configuration file.
“If this system hasn’t been patched and has a critical vulnerability… you may be able to subvert any kind of security scheme that you’ve put in place,” Skoglund told Motherboard.
Senator Ron Wyden (D-Oregon) said the findings are “yet another damning indictment of the profiteering election vendors, who care more about the bottom line than protecting our democracy.”
It’s also an indictment, he said, “of the notion that important cybersecurity decisions should be left entirely to county election offices, many of whom do not employ a single cybersecurity specialist.”
“Not only should ballot tallying systems not be connected to the internet, they shouldn’t be anywhere near the internet,” he added.
What’s not generally known by the public about @essvote systems is that the company’s entire configuration for transmitting election results—from the modem to the SFTP server—is NOT CERTIFIED BY THE ELECTION ASSISTANCE COMMISSION (EAC).
The EAC oversees the testing and certification of voting equipment at the federal level. ES&S voting machines are tested and certified, but the transmission configuration isn’t. The labs test them for functionality to make sure they transmit votes, and that’s it.
In marketing literature, ES&S highlights the certified parts of its election system in blue and labels them "EAC Certified Configuration." The uncertified part is highlighted in white and labeled "Extended Configuration."
.@essvote told Motherboard that instead of federal certification, his company has focused on working with officials in states that allow modem transmission to test and certify the configuration under their own state certification programs.
This is said to include a security assessment of the configuration. Asked which states do these security assessments, he cited Wisconsin, Florida, and Minnesota.
But someone familiar with Wisconsin’s certification testing, who spoke on condition of anonymity, told Motherboard it doesn’t include a security assessment of the modem transmissions and configuration.”

More from Jewhadi™

Jewhadi\u2122
Jewhadi™
@JewhadiTM
.@JoeBiden’s ‘Dark Winter’ Is A Warning About His Economy, Not The China Virus

Should President Trump’s election challenges fail, it’s a certainty that bleak days are ahead. We’re staring into the barrel of 4 years of sclerotic economic

Six days after the election, Biden, employing the Democratic Party strategy of sowing fear whenever possible, warned that the country is facing a long night.

CNBC:

“‘We remain in the midst of one of the worst economic and job crises in modern history,” said the man who as vice president oversaw one of the weakest economic recoveries in U.S. history.

Apparently it never occurred to Biden and his handlers that government intervention, not the virus, caused 2020’s downturn.

Nor have they even begun to understand that Democrats’ economic policies, filled with steep, punitive taxes, and impossible-to-jump regulatory hurdles, are a slow-motion march of the economic lockdowns that almost instantly paralyzed the economy this year.
POLITICS
Jewhadi\u2122
Jewhadi™
@JewhadiTM
Star-studded Time's Up charities spent big on salaries, little on helping victims @Alyssa_Milano @MiraSorvino @GloriaSteinem https://t.co/m5kM0W1UjE via @nypost

The organization, which is comprised of the Times Up Foundation and @TIMESUPNOW, raised $3,670,219 in 2018, its founding year, but spent $1,407,032 on salaries and only $312,001 on the @TimesUpLegal Defense Fund for people who have experienced sexual harassment.

Time’s Up Now, the lobbying arm of the organization, also spent $157,155 on conferences “designed to build community and spark critical conversations about gender equity,” tax filings show.

In addition to posh conferences, Time’s Up Now spent $288,007 on advertising, and $940,328 on “legal” costs, with the majority of that figure ($719,522) going to Arnold & Porter Kaye Scholer, a multinational law firm with a powerful lobbying arm on Capitol Hill.

Time’s Up Now also spent $58,395 on travel and $112,435 on Rally, a public relations company, according to tax filings.
CHARITY
Advertisement
Jewhadi\u2122
Jewhadi™
@JewhadiTM
Declassified Strzok Texts: FBI Spied On Fox News, Recorded Phone Call Between Fox VP And Papadopoulos

New text messages released Thursday show FBI officials spied on a Fox News executive over the course of the Crossfire Hurricane investigation which targeted President Trump as a secret Russian agent who illegally stole the election from Hillary Clinton in 2016.

Because the Obama DOJ never received a warrant to spy on Papadpopoulos, it is likely that the FBI used a so-called National Security Letter to spy on Papadopoulos, and Fox News.

By using a NatSec Letter, a demand sent to telecommunications firms to provide communications information about a specific federal target, Obama’s DOJ and FBI were able to avoid legal requirements to receive a court-approved warrant to secretly spy on an American citizen.

The FBI surveilled and recorded a phone call between former Trump campaign foreign policy adviser @GeorgePapa19 and an unnamed vice president at Fox News, according to a text message sent to fired former FBI official @PeteStrzok just weeks before Trump was inaugurated in 2017.
NEWS
Jewhadi\u2122
Jewhadi™
@JewhadiTM
Court upholds conviction of Chinese businessman linked to Hunter Biden

A federal appeals court upheld the criminal convictions against Patrick Ho, a Chinese businessman and think tank leader linked to President-elect Joe Biden’s son, Hunter.

When Ho, one of Chinese energy tycoon Ye Jianming’s lieutenants, was charged by the Justice Department in 2017, the first call he reportedly made after his arrest was to Joe Biden’s brother, James, who has said he thought the call was meant for Hunter Biden.

Ho was indicted and convicted under the Foreign Corrupt Practices Act for his role in a global money laundering and bribery scheme aimed at government officials in Africa.

The Justice Department also accused Ho of helping with Iranian sanctions evasion and working to use the Chinese company’s connections to sell weaponry to Chad, Libya, and Qatar. Ho was sentenced to three years in prison in March 2019 and was deported to Hong Kong in June.
POLITICS
Jewhadi\u2122
Jewhadi™
@JewhadiTM
Biden is not smart.

Biden's Iran policy is deeply flawed https://t.co/Jlc1EC9mt6

Biden “falsely claims the Iran nuclear deal that the Obama/Biden administration negotiated has kept Americans safe. The Joint Comprehensive Plan of Action (JCPOA) was flawed in many ways.

For starters, it failed to do anything about Iran's terrorist activities, which is significant considering they are the largest state sponsor of terrorism in the world and a leading cyber threat.

By releasing nearly $100B to Iran and omitting their nefarious activities from the agreement, not did the Obama/Biden admin reward bad behavior, but they gave Iran more money to finance its destabilizing foreign policy which includes arms transfers to terrorists & missile tests.

Iran is led by a revolutionary regime, and if the objective was to keep Americans safe, then any agreement reached with Iran should have included all the various ways they put American lives in danger.
POLITICS

More from Politics

Alexandria Ocasio-Cortez
Alexandria Ocasio-Cort...
@Ocasio2018
All the challenges to Leader Pelosi are coming from her right, in an apparent effort to make the party even more conservative and bent toward corporate interests.

Hard pass. So long as Leader Pelosi remains the most progressive candidate for Speaker, she can count on my support.


I agree that our party should, and must, evolve our leadership.

But changed leadership should reflect an actual, evolved mission; namely, an increased commitment to the middle + working class electorate that put us here.

Otherwise it’s a just new figure with the same problems.

I hope that we can move swiftly to conclude this discussion about party positions, so that we can spend more time discussing party priorities: voting rights, healthcare, wages, climate change, housing, cannabis legalization, good jobs, etc.
POLITICS
David Rothkopf
David Rothkopf
@djrothkopf
Trump on climate: I don't believe it. Trump on Khashoggi: I don't believe it. Trump on Russia: I don't believe it. Idiocy? A canny game? Doesn't really matter as much as the underlying intellectual autocracy. In this administration only one opinion matters.

It's an assault on facts and reason. It's an assault on good governance. It's an assault on the bureaucracies that are being discounted. It's an assault on science and history. But it is also an assault on one of the underpinnings of democracy.

We live in a system that is grounded on the idea of collaborative government. Leaders may have a final word but even then, there are typically checks and balances. Hopefully, in this case, such checks and balances may work. But they also are being tested.

The president's position that he is smarter than all the world's scientists, than the entire intelligence community, than experts who have studied any issue all their lives, is, of course, asinine. But his belief that government turns solely on his opinion, is monarchic.

Louis XIV reportedly said, "L'etat est moi." That he was the state. Trump asserting that he knows better than all, discounts all advice, that his brain is enough to chart the course for America alone, is essentially saying the same thing.
POLITICS
Advertisement
David Burney
David Burney
@jdburney1
What does "patriots in control" mean?
What would that "look like" in reality?


So a massive adult film star in all his glory is included in an official FBI government filing


Hunter Biden's book is categorized as "Chinese


TIME admits to "conspiracy" to "not rig, rather


A "pillow guy" has military-grade intercepts detailing the IP addresses and device MAC IDs of EVERY incursion into every county in the
POLITICS
Parker Molloy
Parker Molloy
@ParkerMolloy
I told you they’d bring this up


I was wondering why that tweet had so many stupid replies. And now I see


Seriously, this was “the night before.” If you’re at the march where they’re changing “Jews will not replace us” and “Blood and soil,” you’re not a “very fine person.” Full stop.


There are 3 important moments in that transcript.

1.) When someone asked Trump about a statement *he had already made* about there being blame on “both sides,” he said the “fine people” line.


2. Trump does clarify! “I’m not talking about the neo-Nazis and white nationalists — because they should be condemned totally “

Okay!

Then adds that there were “many people in that group other than neo-Nazis and white nationalists.”
POLITICS
Ezra Klein
Ezra Klein
@ezraklein
So I've been reporting a story about how you'd fix the impeachment process. It doesn't work for removal, as currently designed. Impeachment was built for a political system without parties. It fails in a system with polarized parties.

The one time it functioned as intended, confusingly, was the time it didn't happen: Richard Nixon wasn't impeached! But the impeachment process, which came at the low ebb of party polarization in American history, convinced his party to force him to resign.

Would Republicans force Nixon to resign today?

Oh, you're cute. Thank you. I needed that.

The problem of impeachment is pretty simple: Presidents are leaders of parties. Parties are tied to the political fortunes of presidents. You're asking a party to basically wreck its immediate political future for the good of the system.

This doesn't just have the effect of making impeachment ineffective as a remedy. It's worse than that. It makes impeachment dangerous to the president's party, and gives them a reason to defend him and either normalize or minimize his crimes. As we are seeing right now.
POLITICS

You May Also Like

Ryan Caldbeck
Ryan Caldbeck
@ryan_caldbeck
1/ I am seeing more and more founder secondary in venture rounds (Secondary = founders selling some of their shares before some other shareholders are able). Series B-D. I see both as an investor and through entrepreneur circles.

2/ I like secondary for entrepreneurs. Moderation is key but in a lot of situations I think it helps accelerate the co. Lots of very smart investors disagree. Here are my thoughts.

3/ Magnitude: My basic rule of thumb from what I see is market is 4+ yrs and up to 10% of founder’s equity stake with some $ cap that makes sense given stage etc. (typically <$10m)

4/ The entrepreneurial journey is brutally hard. Giving some financial relief helps remove one piece of pressure. I don’t think that secondary in the magnitude mentioned impacts the drive/persistence of great entrepreneurs.

5/ That secondary means they will be able to just sleep knowing they can pay their kids’ tuition. Secondary will make most founders better at their jobs, thus accelerating the co.
ALL
PC\U0001f30e\u262e
PC🌎☮
@pc_432
Moderna CEO Stephane Bancel was previously CEO of bioMerieux in France from 07-10.

Alain Merieux, who owns bioMerieux, was instrumental in the creation of the Wuhan Institute of Virology P4 Lab.

The same people who helped create the virus, also helped to create the vaccines...


Moderna partnered with French Pasteur Institute in 2015 to develop mRNA vaccine technology.

Pasteur Institute partnered with the Wuhan P4 Laboratory in 2017 along with the Merieux Foundation to study emerging viruses...
https://t.co/yFsHwrNYaK
https://t.co/9M5lydBKhM


Nobel prize winning scientist Luc Montagnier asserts that Sars-Cov-2 is man-made and originated from the Wuhan Institute of Virology.

Montagnier did extensive work with the Pasteur Institute in France which was partnered with the Wuhan P4.

Merieux Foundation & the Chinese government have worked together since 1965, and partnered to study emerging pathogens in Africa in 2015.

Their research included "PATHOGENS CARRIED BY BATS" that provoke respiratory diseases.

🚨🚨🚨
https://t.co/gVwpT0ssqI
ALL
Advertisement
Anshul Pandey
Anshul Pandey
@Anshulspiritual
SHAKTA DHARMA AND THEIR ACHARYAS

Śhākta or Shakti or Devi pooja is not a new upasana. It is being carried out right from the time of Vedic period. Puran's tell us that Rishi Vashishth would worship Tara devi. Parshuram ji worshipped Tripura devi,


Agastya learned the secrets of Shri Vidya from Vishnu ji in Hayagriva avtaar. Bhagwan Ram, Laxman and Krishna too learned the tantrik vidya. Even Rig Ved 7.103.5 Sayan Bhasya also mentions about Śhākta/शाक्त(शाक्तस्येव शक्तिमतः).

Then we find that in the Harrappan excavations many figurines depicting Shakti were found. So in that age too, which was supposedly an urban city shakti was being worshipped. So naturally this tradition would be prevalent in rural areas too.

It is wrong to say that shakti puja originated from Bengal although it was popular there. Matsyendranath received this vidya from Maheshwari herself in Kamrup. We know that Shakti pooja is practised all over India.

Not much is known about the Śhākta saints in other parts of India in the middle ages.

Adi Shankaracharya wrote Pramanech saar named book on tantra and Anand lahri book on Devi strotras. Then there were Acharya Shankar, Bhaskar Rai, Laxman, Deshikendra, Raghav Bhatt, Krishnand,
ALL
Guillaume Chaslot
Guillaume Chaslot
@gchaslot
The YouTube algorithm that I helped build in 2011 still recommends the flat earth theory by the *hundreds of millions*. This investigation by @RawStory shows some of the real-life consequences of this badly designed AI.


This spring at SxSW, @SusanWojcicki promised "Wikipedia snippets" on debated videos. But they didn't put them on flat earth videos, and instead @YouTube is promoting merchandising such as "NASA lies - Never Trust a Snake". 2/


A few example of flat earth videos that were promoted by YouTube #today:
https://t.co/TumQiX2tlj 3/

https://t.co/uAORIJ5BYX 4/

https://t.co/yOGZ0pLfHG 5/
TECH , FLAT EARTH
Kate Julian
Kate Julian
@katejulian
1/ Something strange is happening with people’s sex lives. 20-somethings are having sex later and less frequently than previous generations. I spent several months digging into this for @theatlantic. https://t.co/5ehzmWY9wi


2/ This phenomenon—I’m calling it a Sex Recession—really surprised me. It seemed improbable in the age of Tinder, digital porn, and attitudes that are generally permissive and sex-positive.

3/ What’s happening isn’t exclusively American: Similar trends are being observed in other countries, including Japan, Australia, the U.K., Finland, and the Netherlands.


4/ One cause is obvious: Adults under 35 are less likely to be living with a partner than in recent decades, and more likely to be living with their parents—which, it’s safe to say, isn’t great for one’s sex life.

5/ But I also found other explanations, each with profound implications. The first, unsurprisingly, has to do with internet enticements. Netflix and other online entertainment may be substituting for sex.
SOCIETY