Utah voting system fending off 1B hacking attempts per day
1–10 of 220 posts
Re: Utah voting system fending off 1B hacking attempts per day
#2It is an interesting data point, and it makes me wonder if we can use this as a side channel attack to figure out who the hackers "like" and who they "don't like" running for office. Might give us more insight into the hacker's goals.
Re: Utah voting system fending off 1B hacking attempts per day
#3Title should say “fending off”.
Re: Utah voting system fending off 1B hacking attempts per day
#4What are they including in the metrics?
Are they including SSH port scanning and attempts on port 22?
Re: Utah voting system fending off 1B hacking attempts per day
#5What are they including in the metrics? Are they including SSH port scanning and attempts on port 22?
And attempted accesses to /wp-admin.php ?
(you get those regardless of the technology on the backend, a lot of malicious vuln. scanners around test for that)
Re: Utah voting system fending off 1B hacking attempts per day
#6What does "hacking attempt" even mean? I smell FUD.
Re: Utah voting system fending off 1B hacking attempts per day
#711500 per second.
Re: Utah voting system fending off 1B hacking attempts per day
#8What are they including in the metrics? Are they including SSH port scanning and attempts on port 22?
My guess is they're including requests for /
A billion "hacks" per day seems a bit far fetched. At that point, it's either a visible act of war (if external to the US) or the FBI would be much more involved (if internal). Both of those would be much larger news.
Re: Utah voting system fending off 1B hacking attempts per day
#9Title should say “fending off”.
Fixed now.
Re: Utah voting system fending off 1B hacking attempts per day
#10What does "hacking attempt" even mean? I smell FUD.
Sadly I smell FUD virtually every time a security engineer opens his mouth. Yes there are some great ones, but I’ve never worked with one directly.
Part of my skepticism is rooted in the prevalent ignorance of basic computing theory. If you can’t define the operational semantics of a system then you can’t rigorously convince yourself or anyone else that it is “secure.”