2016 Postmortem

jeff47

(26,549 posts)

37. Sorry, no. The same issue came up months ago and the Sanders campaign complained.

Reply to pnwmom (Reply #35)

Fri Dec 18, 2015, 02:18 PM

Dec 2015

To now say "It was only minutes!!" is damage control by a vendor that has refused to fix their software.

But as you know, glitches and bugs are not uncommon, unfortunately.

When the same security holes remain in place for months after they are reported, it either shows massive incompetence or ill intent.

That doesn't mean the Sanders guy can just go in and "create a record" of whatever he wants.

The vendor has failed to fix the holes. They told the Sanders campaign they would. Since it's obvious those holes are not getting fixed, either through incompetence or ill intent, then a vulnerability assessment is called for.

As I keep saying, this assessment should have involved the other campaigns to avoid the political issue the assessment creates, but that assessment still must be done.

Edit history

Please sign in to view edit histories.

Recommendations

0 members have recommended this reply (displayed in chronological order):

37 replies

= new reply since forum marked as read

Highlight:

The software vendor's audit revealed, with regard to the DNC data breach, [View all] pnwmom Dec 2015 OP

I would like to see him prove that they couldn't! VanillaRhapsody Dec 2015 #1

One can't prove a negative. Scuba Dec 2015 #3

The DNC is merely asking for "assurances" that the campaign hasn't retained the files. pnwmom Dec 2015 #7

Source please. The word I've read in multiple threads here is "prove." Including the post ... Scuba Dec 2015 #9

Here: pnwmom Dec 2015 #11

prt sc MohRokTah Dec 2015 #2

Or more, if one can access data that is not secure then 10,000 can. LiberalArkie Dec 2015 #4

The software company has not yet completed the requested audit and your quote is incomplete JonLeibowitz Dec 2015 #5

How do the words "we are confident" from the software vendor, whom I noted was the speaker, pnwmom Dec 2015 #6

It makes a difference. It is blundering confidence from an organization with zero credibility JonLeibowitz Dec 2015 #8

But the quoted sentence contains the words, "he said," referring to the vendor. pnwmom Dec 2015 #10

It is not obvious. JonLeibowitz Dec 2015 #12

about the vender questionseverything Dec 2015 #13

So they have the same last name. And they have different parents, pnwmom Dec 2015 #14

keep reading questionseverything Dec 2015 #15

What does that have to do with Wasserman? pnwmom Dec 2015 #16

the point is since the IT guy worked for hc's campaign in 08 questionseverything Dec 2015 #17

This is no longer dependent on anything the vendor says. Uretsky himself has admitted it pnwmom Dec 2015 #19

An incompetent vendor worker hired by DWS left the firewall down during maintenance. ViseGrip Dec 2015 #26

I haven't seen anyone blame Bernie personally or say he is toast. pnwmom Dec 2015 #32

Omg. It just can't possible that bernie's top data guy was a corrupt little shit. misterhighwasted Dec 2015 #33

When doors keep appearing in your house, and the vendor won't fix it jeff47 Dec 2015 #18

Nobody working in IT would ever think that was a legit thing to do. pnwmom Dec 2015 #20

Yes, they would. And we do it all the time. jeff47 Dec 2015 #21

You wouldn't break into a competitor's system to fix its flaws. pnwmom Dec 2015 #23

Not at all what I said. But you lying about what I said is not exactly uncommon. (nt) jeff47 Dec 2015 #24

Oh, excuse me. You said: pnwmom Dec 2015 #25

Who inserted the word competitor? That would be you. jeff47 Dec 2015 #27

That is what happened here. The Sanders guy broke into the COMPETITOR"s data, pnwmom Dec 2015 #29

The vendor lied about fixing it, and left the holes open. jeff47 Dec 2015 #31

No, the hole was only open for short time -- minutes, not months. What the Sanders pnwmom Dec 2015 #35

Sorry, no. The same issue came up months ago and the Sanders campaign complained. jeff47 Dec 2015 #37

Playing their role. arcane1 Dec 2015 #36

The word "audit" is used in many different ways... NurseJackie Dec 2015 #22

When it comes to security, external audits are the norm. (nt) jeff47 Dec 2015 #28

And they very well may do that. NurseJackie Dec 2015 #34

Jezus this is some crooked scandal worthy shit! misterhighwasted Dec 2015 #30