Posts

What Recent Hacking Attack Reveals About Election Security

A hacking attack last Friday that disrupted major U.S. websites is an example of a new era of cybersecurity vulnerability in today’s interconnected world.

The Oct. 21 cyberattack also furthered anxiety about the integrity of next month’s election, which has already been fraught with controversy over voting rights, and foreign interference.

While the attack alarmed—but did not surprise—cybersecurity observers who have been sounding alarms about the potential for the internet’s infrastructure to be harmed, these experts say the election system is largely secure from the threat of hacking.

“I have heard a few people worry that this is a practice run for Election Day or around Election Day to gum up networks and mess it up, but as far as election equipment being vulnerable, I don’t see that being too big of a deal,” said Joseph Lorenzo Hall of the Center for Democracy & Technology. “Luckily, we do not attach that stuff to the public internet.”

Hall, in an interview with The Daily Signal, said the U.S. election system is unique in a few ways.

The system is decentralized, meaning state, county, and local governments all manage their own voting—so everything isn’t connected.

Many precincts use traditional voting machines, but they are not connected to the internet or with each other.

“An attack against election systems would have to individually target many different systems, which limits the ability to mount large-scale damage,” said Susan Hennessey, a cybersecurity expert at the Brookings Institution, in response to emailed questions from The Daily Signal.

Though hackers will struggle to manipulate actual voting results, Hall warns that bad actors could disrupt Election Day—and throw off voters—by hacking into websites listing the locations and hours of polling places, and changing the listed information.

Many registration databases—serving as a way for voters to register or check their status—are also connected to the internet.

The government has reported that hackers have targeted the voting registration systems of more than 20 states in recent months, including in Arizona and Illinois, but those systems have nothing to do with vote casting or counting.

“If anything, I would worry about disruption or chaos rather than something that actually is affecting votes or attacking the election infrastructure,” Hall said.

Still, during an election season in which the Obama administration has accused Russia of hacking U.S. political organizations, the government is taking extra precautions to secure the voting process.

The Department of Homeland Security has assigned more than 100 specialists around the country to help state and local election officials maintain their voting systems.

According to Bloomberg Politics, 42 states and 29 county or local election agencies have sought cybersecurity assistance from the federal government.

Despite the confidence from the government and cybersecurity experts that Election Day will go on unscathed, observers acknowledge the broader danger of cyberattacks—specifically targeting the internet—is increasingly urgent.

The Oct. 21 attack involved the hacking of a company, Dyn, whose servers monitor and reroute internet traffic.

Companies like Dyn host the core parts of the internet’s infrastructure, so websites that connect to it like Twitter, Netflix, Airbnb, and Reddit were affected by the attack, and saw their websites slowed or inaccessible for periods of time in certain areas.

Because more and more devices, such as security cameras, are connected to the internet, experts say the chance of this type of centralized hacking—known as a distributed denial of service attack—is especially great.

“We’ve known about the possibility of DDoS attacks for a long time, so the episode this weekend was more a question of scale than a new threat,” Hennessey said. “The attack was targeted against a single entity on which many different websites rely, so the centralization amplified the consequences of the threat.”

Hall and Hennessey say it’s important to reassure citizens of the integrity of the U.S. election system.

“My biggest concern is any activity which could cause citizens to doubt the outcome of an election,” Hennessey said. “We know it is highly unlikely that any kind of hacking or attack could alter vote counts or the outcome of an election. But the mere fact of confirmed nation state intrusions have caused a level of anxiety regarding trust in the outcome. That is deeply troubling in a democracy.”

But they say the new threat of internet attacks is real, and will carry impact beyond Election Day.

“This is a brave new world and it’s kind of scary,” Hall said. (For more from the author of “What Recent Hacking Attack Reveals About Election Security” please click HERE)

Follow Joe Miller on Twitter HERE and Facebook HERE.

CBS Star Reporter: Feds Hacked My Computers, Too

Photo Credit: WNDCBS News reporter Sharyl Attkisson has been a thorn in the Obama administration’s side for some time now.

The Emmy-award winning journalist has refused to let the president’s scandals be swept under the rug, interviewing “Fast & Furious” whistleblowers and chasing down Benghazi leads long after even her own network didn’t want to hear it anymore.

Now she says, however, her personal and work computers have been compromised, an intrusion that may be linked back to the White House.

“I can confirm that an intrusion of my computers has been under some investigation on my end for some months, but I’m not prepared to make an allegation against a specific entity today, as I’ve been patient and methodical about this matter,” Attkisson told Politico. “I need to check with my attorney and CBS to get their recommendations on info we make public.”

Read more from this story HERE.

Former Reuter's Editor Charged With Hacking Tribune's Computer System

Photo Credit: Reuters Former Reuters.com Deputy Social Media Editor Matthew Keys pleaded not guilty on Tuesday to federal charges that he aided members of the Anonymous hacking collective.

Keys, 26, on Monday said he was fired by Thomson Reuters (TRI.TO), the parent company of Reuters News.

Keys was indicted in March by a federal grand jury in Sacramento on three criminal counts, alleging he entered an Internet chatroom used by members of the hacking collective Anonymous and helped hackers gain access to the computer system of Tribune Co. in December 2010. A story on the Tribune’s Los Angeles Times website was altered by one of those hackers, the indictment said.

The alleged events occurred before he joined Reuters in 2012, the indictment indicated.

Keys was silent during the hearing in federal district court in Sacramento as his lawyer Jay Leiderman entered the plea. A status conference was set for June 12.

Read more from this story HERE.

Hacker Distributes Confidential Memos Sent To Hillary Clinton On Benghazi Attack, Libya

Photo Credit: Getty Images

A hacker, known only as “Guccifer,” has reportedly distributed confidential memos that were sent to former Secretary of State Hillary Clinton and dealt with various developments in Libya, including the Benghazi terrorist attack. The hacker has apparently sent four of the recent memos to congressional aides, politicians and journalists across the globe, the Smoking Gun reports.

It was over the weekend that the hacker reportedly distributed the memos, which were sent to Clinton by one of her longtime confidants and former White House aide, Sidney Blumenthal. His AOL email account was hacked last week. One memo, sent to Clinton on Sept. 12, was labeled “Confidential.”

The Smoking Gun has more details:

The hacker’s e-mails went to hundreds of recipients, though the distribution lists were dotted with addresses for aides to Senate and House members who are no longer in office. But many of the addresses to which the Blumenthal memos were sent are good (though it is unclear whether [email protected] is a solid address for the Republican mastermind).

Most of the e-mail recipients were sent four separate memos that were e-mailed to Clinton by Blumenthal during the past five months. Each memo dealt with assorted developments in Libya, including the September 11, 2012 attack on the U.S. mission in Benghazi. One memo marked “Confidential” was sent to Clinton on September 12.

Read more from this story HERE.

DOJ Indicts Reuters Editor For Conspiring With Anonymous Hackers

Photo Credit: Daily Caller

A former Web producer and Reuters social media editor was indicted by the Department of Justice on Thursday for allegedly conspiring with the hacktivist collective Anonymous.

The Justice Department announced the charges Thursday, stating that 26-year old Matthew Keys provided hackers associated with the collective the login credentials for a computer server belonging to the Tribune Company, the corporate parent of Sacramento-based television station KTXL FOX 40. Keys had been a Web producer for the station, but was terminated in late October 2010.

The Tribune Company is the parent company of some of the nation’s most well-known newspapers, including Chicago Tribune, Los Angeles Times, Orlando Sentinel and the Baltimore Sun.

The Justice Department said in a press release that Keys was “was charged in the Eastern District of California with one count each of conspiracy to transmit information to damage a protected computer, transmitting information to damage a protected computer and attempted transmission of information to damage a protected computer.”

He could face up to “10 years in prison, three years of supervised release and a fine of $250,000 for each count.”

Read more from this story HERE.

China’s Hack Attack Revealed China’s Military Linked To Cyber Espionage

Photo Credit: APA secret Chinese military unit is the major player in cyber espionage against an array of computer networks around the world, according to an intelligence report by a cyber security firm.

“Our research and observations indicate that the Communist Party of China is tasking the Chinese People’s Liberation Army (PLA) to commit systematic cyber espionage and data theft against organizations around the world,” the report by the security firm Mandiant said.

Mandiant conducts cyber threat analyses for both government and industry clients. A threat intelligence report produced in 2010 by the company was unable to confirm Chinese military involvement in widespread cyber attacks that were suspected as originating in China. “Now, three years later, we have the evidence required to change our assessment,” the report said.

“The details we have analyzed during hundreds of investigations convince us that the groups conducting these activities are based primarily in China and that the Chinese government is aware of them.”

Rep. Mike Rogers (R., Mich.), chairman of the House Permanent Select Committee on Intelligence, said the Chinese government plays a direct role in cyber theft that is “rampant,” and a problem growing “exponentially.”

Read more from this story HERE.

‘Anonymous’ Hacks Federal Reserve Site

. Photo Credit: Chip Somodevilla/GettyUS central bank confirms intrusion after hacktivist group Anonymous was claimed to have stolen 4,000 bankers’ details

The US Federal Reserve bank has confirmed one of its internal websites was broken into by hackers after the hacktivist group Anonymous was claimed to have stolen details of more than 4,000 bank executives.

“The Federal Reserve system is aware that information was obtained by exploiting a temporary vulnerability in a website vendor product,” a spokeswoman for the US central bank said.

“Exposure was fixed shortly after discovery and is no longer an issue. This incident did not affect critical operations of the Federal Reserve system,” the spokeswoman said, adding that all individuals affected by the breach had been contacted.

The admission follows a claim that hackers linked to Anonymous struck the bank on Sunday. The technology news site ZDNet separately reported that Anonymous appeared to have published information said to containing the login information, credentials, internet protocol addresses and contact information of more than 4,000 US bankers.

Read more from this story HERE.

Alaskan DOT signs hacked to read “Impeach Obama”

Several electronic road construction signs around Anchorage were hacked late Wednesday night or early Thursday morning, according to the state Department of Transportation.

Signs that normally display closure and detour information, like the one on Minnesota Drive near 100th Avenue, were changed to read “Impeach Obama.” That particular sign wasn’t fixed until sometime between 6 a.m. and 8 a.m. Thursday.

It happened because DOT says it doesn’t lock the boxes on the signs that hold the message control pad.

Construction managers say sign-hacking has never happened before, so they never thought to lock the boxes.

DOT says that changed this morning, and now all of them will be locked.

Read more from this story HERE.

Photo credit: Tamara Douglas