Live data from Hacker News

Inside the Largest US Voter Data Leak

upguard.com

41–50 of 351 posts

Re: Inside the Largest US Voter Data Leak

#41
post #15

You can check if you have been breached in other similar breaches and leaks at https://HEROIC.com

Hey, I see that you claim to have 4 billion records. Could you talk a bit about your verification process for said records?

My private collection has a bit over 5B records atm (and presumably largely the same data) but I would never advertise a service with that number as I know for a fact that various databases contain millions of generated entries.

The results for queries like "00000000000000000000023@inbox.ru" seem to indicate that you have large amounts of bullshit data included in that figure.

Re: Inside the Largest US Voter Data Leak

#42

So you think it is okay to model ethnicity and religion of 200 milion citizens? This is how my country got all their jews killed in WWII [0]. The mere thought of compiling such information here would lead to some hefty jail time these days. I really cannot believe you can even defend such a thing. [0] https://en.wikipedia.org/wiki/Civil_registration#Netherlands

Its not a thought crime yet

Re: Inside the Largest US Voter Data Leak

#43

Earlier quoted context omitted.

For a US example look at NAACP v. Alabama (1958). If you are on the side of revealing this information, you are on the same side as some pretty unpleasant folks.

You're also on the side of every political campaign in America. Collecting and/or modeling this information is standard practice in the industry.

Likely still covered by the aforementioned 'on the side of some pretty unpleasant folks.' ;)

Re: Inside the Largest US Voter Data Leak

#44

Earlier quoted context omitted.

For a US example look at NAACP v. Alabama (1958). If you are on the side of revealing this information, you are on the same side as some pretty unpleasant folks.

You're also on the side of every political campaign in America. Collecting and/or modeling this information is standard practice in the industry.

Yes, for internal use is fine and dandy, but revealing it to the world is scummy, a violation of privacy, and can lead to retribution.

Re: Inside the Largest US Voter Data Leak

#45

So you think it is okay to model ethnicity and religion of 200 milion citizens? This is how my country got all their jews killed in WWII [0]. The mere thought of compiling such information here would lead to some hefty jail time these days. I really cannot believe you can even defend such a thing. [0] https://en.wikipedia.org/wiki/Civil_registration#Netherlands

I had another friend suggest it was probably fine, asked how they would feel if it had "ATF Form 4473 status" on it. Then they could grasp the importance. The person is a huge 2nd amendment proponent, and afraid the government is going to take away all their guns, so it really pointed it out to them in a way they understand.

Re: Inside the Largest US Voter Data Leak

#46
post #43

Earlier quoted context omitted.

You're also on the side of every political campaign in America. Collecting and/or modeling this information is standard practice in the industry.

Likely still covered by the aforementioned 'on the side of some pretty unpleasant folks.' ;)

Well, the KKK and Jim Crow supporters were a bit farther up the ladder of 'unpleasant'. 'Unpleasant' being used in the same meaning and tone as a southern lady saying "aren't you special".

Re: Inside the Largest US Voter Data Leak

#47
As long as the CEO of an company (RNC) that gives data to an outsourcer (Deep Root Analytics) is not going to jail to give data to an unqualified company, nothing will change.

If the CEO goes to jail, things will change very rapidly (CEO will manage his CMO much tighter who will first want to see an security audit not older than 6 months).

At least CEOs I have reported to as CTO were very sensitive for implemention issues in areas that could land them in jail.

Same for every other hacking (e.g. Sony) or IT failure (e.g. British Airlines crashed DC).

Re: Inside the Largest US Voter Data Leak

#48
post #4
post #2

In other news, already known information. Every USA states has clear laws on releasing whose registered with which party, past affiliation and address. Clickbait.

Here is the direct link to Upguard's write up (most of the Gizmodo details are here): https://www.upguard.com/breaches/the-rnc-files It is mostly publicly available data, but not always easily accessible (states have varying requirements and methods of acquisition), firms go through quite a bit to get aggregate files in all 50 states. For them to be put up with no protection is jarring. But not surprising with other…

Yes me too, for research >COUGHhttp://docs.api.gop.com/2.1

down now LOL! (Зеркало скоро доступно)

Re: Inside the Largest US Voter Data Leak

#49

Wow, not good: "State", "Juriscode", "Jurisname", "CountyFIPS", "MCD", "CNTY", "Town", "Ward", "Precinct", "Ballotbox", "PrecinctName", "NamePrefix", "FirstName", "MiddleName", "LastName", "NameSuffix", "Sex", "BirthYear", "BirthMonth", "BirthDay", "OfficialParty", "StateCalcParty", "RNCCalcParty", "StateVoterID", "JurisdictionVoterID", "LastActiveDate", "RegistrationDate", "VoterStatus", "SelfReportedDemographic", "…

That does not even nearly fit on one line, so I broke it up. Yeah, it looks pretty bad. Here's hoping it's only sparsely filled out. State Juriscode Jurisname CountyFIPS MCD CNTY Town Ward Precinct Ballotbox PrecinctName NamePrefix FirstName MiddleName LastName NameSuffix Sex BirthYear BirthMonth BirthDay OfficialParty StateCalcParty RNCCalcParty StateVoterID JurisdictionVoterID LastActiveDate RegistrationDate VoterS…

Plus the supposedly "startlingly accurate" preference and views modeling that is linked to all personal details and publically accessible. While someone could always deny it being correct it again raises questions about responsibility in data collection.

> RNC_RegID, State, 2012ObamaVoter_DRA_12_16, 2012RomneyVoter_DRA_12_16, 2016ClintonVoter_DRA_12_16, 2016TrumpVoter_DRA_12_16, AmericaFirstForeignPolicy_agree_DRA_12_16 AmericaFirstForeignPolicy_disagree_DRA_12_16 AutoCompaniesShipJobsOverseas_agree_DRA_12_16 AutoCompaniesShipJobsOverseas_disagree_DRA_12_16 CorpReputs_AmericanMakers_DRA_12_16, CorpReputs_DailyLives_DRA_12_16, CorpReputs_Egalitarians_DRA_12_16, CorpReputs_EnviroConscious_DRA_12_16, CorpReputs_OpportunitySeekers_DRA_12_16, CorpReputs_STEMSupporters_DRA_12_16, CorpReputs_SupplyChainers_DRA_12_16, CorpReputs_Unifers_DRA_12_16, DemLeadersStandUpToTrump_DRA_12_16, DemLeadersWorkWithTrump_DRA_12_16, DParty_DRA_12_16, FinancialServicesHarmful_agree_DRA_12_16 FinancialServicesHarmful_disagree_DRA_12_16 FinServicesCompany_Dreamers_DRA_12_16 FinServicesCompany_RiskMitigators_DRA_12_16 FossilFuelsImportantForUSEnergySecurity_DRA_12_16 FossilFuelsNeedToMoveAwayFrom_DRA_12_16, InvestInfrastructure_agree_DRA_12_16, InvestInfrastructure_disagree_DRA_12_16, LowerTaxes_agree_DRA_12_16, LowerTaxes_disagree_DRA_12_16, NonReluctantDJTVoter_DRA_12_16, NonReluctantHRCVoter_DRA_12_16, PharmaCompsDoGreatDamage_agree_DRA_12_16, PharmaCompsDoGreatDamage_disagree_DRA_12_16, ReformGovtRegulations_agree_DRA_12_16, ReformGovtRegulations_disagree_DRA_12_16, ReluctantDJT_Above.5_DRA_12_16, ReluctantHRCVoter_DRA_12_16, RepealObamacare_agree_DRA_12_16, RepealObamacare_disagree_DRA_12_16 RParty_DRA_12_16, StopIllegalImmigration_agree_DRA_12_16, StopIllegalImmigration_disagree_DRA_12_16, TrumpStandUpToDems_DRA_12_16, TrumpWorkWithDems_DRA_12_16, USAFinancialSituation_Optimistic_DRA_12_16, USAFinancialSituation_Pessimistic_DRA_12

Re: Inside the Largest US Voter Data Leak

#50
post #10
post #5

Earlier quoted context omitted.

From the article: > Along with home addresses, birthdates, and phone numbers, the records include advanced sentiment analyses used by political groups to predict where individual voters fall on hot-button issues such as gun ownership, stem cell research, and the right to abortion, as well as suspected religious affiliation and ethnicity. In some Western countries, the mere existence of such a database would be illega…

>In the US, it is leaked online. It's not a "leak" when the data is entirely public already...

It is a "leak" when additional data that was previously private, such as modeling and analytic information, gets published against the will of its owners.

However, it isn't a "leak" in the traditional colloquial sense that someone stole the data and released it to the public. It's just a security leak.

Post reply on HN