If they have such hacking attempts, console access should be gated by a jumpbox that SSH/ipsec secured by SPA portknocking. For external services, have transparent proxies with deep SPI/IPS and IP acls out in front.
Utah voting system fending off 1B hacking attempts per day
11–20 of 220 posts
Re: Utah voting system fending off 1B hacking attempts per day
#12What are they including in the metrics? Are they including SSH port scanning and attempts on port 22?
My guess is they're including requests for / A billion "hacks" per day seems a bit far fetched. At that point, it's either a visible act of war (if external to the US) or the FBI would be much more involved (if internal). Both of those would be much larger news.
Russia/NKO/China have been at digital war with USA for years
Re: Utah voting system fending off 1B hacking attempts per day
#13Earlier quoted context omitted.
My guess is they're including requests for / A billion "hacks" per day seems a bit far fetched. At that point, it's either a visible act of war (if external to the US) or the FBI would be much more involved (if internal). Both of those would be much larger news.
Russia/NKO/China have been at digital war with USA for years
Sure, but that doesn’t change the fact that this is likely just people going through a dictionary trying to guess the password, rather than a cyberattack by a nation-state.
Re: Utah voting system fending off 1B hacking attempts per day
#14Of course 1,4 billion chinese hackers plus + 150 million russian hackers can pull of less than one hack attempt per day!!!!!!!
sigh.
Re: Utah voting system fending off 1B hacking attempts per day
#15What are they including in the metrics? Are they including SSH port scanning and attempts on port 22?
And attempted accesses to /wp-admin.php ? (you get those regardless of the technology on the backend, a lot of malicious vuln. scanners around test for that)
I think Drupal would be better for government websites.
Re: Utah voting system fending off 1B hacking attempts per day
#16If there is no online voting, why is the system even connected to the Internet? What exactly are the attacks against? The voter registration site? The election results site?
Re: Utah voting system fending off 1B hacking attempts per day
#17How can the cost of securing these systems be less than the cost of using a fully paper system?
Re: Utah voting system fending off 1B hacking attempts per day
#18How can the cost of securing these systems be less than the cost of using a fully paper system?
You can use the same argument for banks.
Re: Utah voting system fending off 1B hacking attempts per day
#19That number is insanely high. Are they talking about all voting machines being connected to the internet? Or is it some back office set of systems?
For the life I me I don’t know why voting machines and voting systems need to be connected to the internet. It’s just a flat out unnecessary risk.
That’s not to say that they shouldn’t be built so secure you could connect them to the internet. But nothing is perfect and unnecessary risks should be avoided with such an important system.
Which is probably why we should be using paper ballots and scanners with results called in from the regional counting centers. And manual count available then as much as needed or desired post election night for verification. This rush to electronic voting boggles my mind.
Re: Utah voting system fending off 1B hacking attempts per day
#2011500 per second.
modems are getting faster and faster...