Live data from Hacker News

An Electronic Voting Firm Exposes 1.8M Chicagoans

upguard.com

1–10 of 76 posts

Re: An Electronic Voting Firm Exposes 1.8M Chicagoans

#2
Source blog post (and free of CNN's obnoxious autoplay video): https://www.upguard.com/breaches/cloud-leak-chicago-voters

As soon as I read the headline, I immediately thought "AWS misconfiguration". A few recent massive government-data breaches (by contractors) have fallen into that category:

June 2017: http://gizmodo.com/gop-data-firm-accidentally-leaks-personal...

May 2017: http://gizmodo.com/top-defense-contractor-left-sensitive-pen...

Note that all of these breach reports (including this Chicago one) come from Upguard, which seems to have a method for scanning/crawling public S3 buckets.

Re: An Electronic Voting Firm Exposes 1.8M Chicagoans

#4
post #3

1.8M Voters. Somehow voted democrat 2.1M times....

Not a particularly useful comment but if you read the article it does say that there were admin credentials to the voting systems in the then publicly accessible data, so maybe.

It does, however also say that there is no indication the data had been accessed previously, not that I believe that statement.

Re: An Electronic Voting Firm Exposes 1.8M Chicagoans

#5
So, what, now somehow a group of people impacted by this potential identity theft vector will need to rally together under some keen prosecutor to personally sue? Why aren't the vendors auto-summoned to court by the government when these breaches occur?

Hooray for the free market .. ?

Re: An Electronic Voting Firm Exposes 1.8M Chicagoans

#6
Isn't this considered public data anyways? Illinois (and I believe every other US state) requires that certain voter data be publicly accessible. To access it in bulk, you'll have to pay a small fee, but anyone can get this.

A misconfigured AWS instance is always an issue. I'm not trying to downplay that. Only that this data being released to the public isn't anything new - the public already had access to it.

https://www.elections.il.gov/votinginformation/computerizedv...

Re: An Electronic Voting Firm Exposes 1.8M Chicagoans

#7

Isn't this considered public data anyways? Illinois (and I believe every other US state) requires that certain voter data be publicly accessible. To access it in bulk, you'll have to pay a small fee, but anyone can get this. A misconfigured AWS instance is always an issue. I'm not trying to downplay that. Only that this data being released to the public isn't anything new - the public already had access to it. https:…

No. The Chicago Tribune [0] reported on the type of data exposed:

> The files included names, addresses, dates of birth, the last four digits of many voters' Social Security numbers, driver's license and state ID numbers for the 1.8 million who are registered to vote in Chicago.

[0] http://www.chicagotribune.com/news/local/politics/ct-chicago...

Re: An Electronic Voting Firm Exposes 1.8M Chicagoans

#8
post #7

Isn't this considered public data anyways? Illinois (and I believe every other US state) requires that certain voter data be publicly accessible. To access it in bulk, you'll have to pay a small fee, but anyone can get this. A misconfigured AWS instance is always an issue. I'm not trying to downplay that. Only that this data being released to the public isn't anything new - the public already had access to it. https:…

No. The Chicago Tribune [0] reported on the type of data exposed: > The files included names, addresses, dates of birth, the last four digits of many voters' Social Security numbers, driver's license and state ID numbers for the 1.8 million who are registered to vote in Chicago. [0] http://www.chicagotribune.com/news/local/politics/ct-chicago...

So the question becomes - what types of data is available using legal channels?

Re: An Electronic Voting Firm Exposes 1.8M Chicagoans

#9
post #7

Earlier quoted context omitted.

No. The Chicago Tribune [0] reported on the type of data exposed: > The files included names, addresses, dates of birth, the last four digits of many voters' Social Security numbers, driver's license and state ID numbers for the 1.8 million who are registered to vote in Chicago. [0] http://www.chicagotribune.com/news/local/politics/ct-chicago...

So the question becomes - what types of data is available using legal channels?

According to Forbes [0]:

- Name

- Street address

- Party affiliation

- Elections in which you did (or did not) vote

- Phone number

- Email address

[0] https://www.forbes.com/sites/metabrown/2015/12/28/voter-data...

Re: An Electronic Voting Firm Exposes 1.8M Chicagoans

#10
post #3

1.8M Voters. Somehow voted democrat 2.1M times....

Where are you getting your 2.1 million figure? It was 913,000[0].

Combined with 699,000 votes for Clinton/Kaine from suburban Cook County[1]—whose voters seem to have been unaffected by this breach—you get the 1.6 million number reported by AP for the county[2].

[0] - https://chicagoelections.com/en/wdlevel3.asp?elec_code=4 - must manually select 'President & Vice President, U.S.'

[1] - http://results1116.cookcountyclerk.com/summary.aspx?eid=1108...

[2] - https://www.nytimes.com/elections/results/illinois?mcubz=0

Post reply on HN