this post was submitted on 05 Aug 2024

84 points (98.8% liked)

politics

18828 readers

4665 users here now

Welcome to the discussion of US Politics!

Rules:

Post only links to articles, Title must fairly describe link contents. If your title differs from the site’s, it should only be to add context or be more descriptive. Do not post entire articles in the body or in the comments.
Articles must be relevant to politics. Links must be to quality and original content. Articles should be worth reading. Clickbait, stub articles, and rehosted or stolen content are not allowed. Check your source for Reliability and Bias here.
Be civil, No violations of TOS. It’s OK to say the subject of an article is behaving like a (pejorative, pejorative). It’s NOT OK to say another USER is (pejorative). Strong language is fine, just not directed at other members. Engage in good-faith and with respect! This includes accusing another user of being a bot or paid actor. Trolling is uncivil and is grounds for removal and/or a community ban.
No memes, trolling, or low-effort comments. Reposts, misinformation, off-topic, trolling, or offensive.
Vote based on comment quality, not agreement. This community aims to foster discussion; please reward people for putting effort into articulating their viewpoint, even if you disagree with it.
No hate speech, slurs, celebrating death, advocating violence, or abusive language. This will result in a ban. Usernames containing racist, or inappropriate slurs will be banned without warning

We ask that the users report any comment or post that violate the rules, to use critical thinking when reading, posting or commenting. Users that post off-topic spam, advocate violence, have multiple comments or posts removed, weaponize reports or violate the code of conduct will be banned.

All posts and comments will be reviewed on a case-by-case basis. This means that some content that violates the rules may be allowed, while other content that does not violate the rules may be removed. The moderators retain the right to remove any content and ban users.

That's all the rules!

Civic Links

• Register To Vote

• Citizenship Resource Center

• Congressional Awards Program

• Federal Government Agencies

• Library of Congress Legislative Resources

• The White House

• U.S. House of Representatives

• U.S. Senate

Partnered Communities:

• News

• World News

• Business News

• Political Discussion

• Ask Politics

• Military News

• Global Politics

• Moderate Politics

• Progressive Politics

• UK Politics

• Canadian Politics

• Australian Politics

• New Zealand Politics

founded 1 year ago

MODERATORS

[email protected]

“A Terrible Vulnerability”: Cybersecurity Researcher Discovers Yet Another Flaw in Georgia’s Voter Cancellation Portal (www.propublica.org)

submitted 1 month ago by [email protected] to c/[email protected]

9 comments fedilink hide all child comments

top 9 comments

sorted by: hot top controversial new old

[–] [email protected] 38 points 1 month ago (4 children)

First, they entered their name, date of birth and county of residence to get past the website’s initial screening page. When the portal asked them for a driver’s license number, Parker right-clicked to inspect the browser’s HTML code — a basic option available to anyone — and deleted a few lines of code requiring them to submit their driver’s license number. Parker then hit submit. A window popped up stating that “Your cancellation request has been successfully submitted” and that county election workers would process the request within a week.

Holy crap. That is mindbogglingly bad programming. I strongly suspect that within a week they are going to get a request from Robert'); DROP TABLE Voters; --

[–] [email protected] 13 points 1 month ago

Bobby Tables is such a little rascal.

[–] [email protected] 9 points 1 month ago

Why would I need to sanitize my inputs, data can’t carry germs that’s ridiculous

[–] [email protected] 5 points 1 month ago* (last edited 1 month ago)

Keep in mind, though, so far, we only know it to be a user experience issue.

“Incomplete paper and online applications will not be accepted,” Evans said in the statement. (Parker’s cancellation request would have lacked a driver’s license number.) The Secretary of State’s Office did not respond to individual questions about what testing the portal underwent before launch, the system’s security procedures, what happened to Parker’s cancellation request....

It doesn't matter what the browser says if the end user tampered with the running page to make it say something. It matters if the application might have been processed. They're claiming it wouldn't have been processed since it was incomplete (lacking ID number). We'd need to know how this was handled on the back end to know how risky it really was. It could still have been bad, but this isn't, in itself, proof of an actual problem.

edit: Just to be clear, I'm not saying it shouldn't be investigated. It really should be, as the article claims, an all-hands-on-deck moment. I'm just saying that the article makes the case that it should be investigated to ascertain what would have happened to the incomplete application submission to assess the exposure, not that it definitely was a vulnerability at all.

[–] [email protected] 2 points 1 month ago

It's Georgia. They didn't need no Feeld Valludatuns down durrrr.

[–] [email protected] 7 points 1 month ago (1 children)

In light of this, a simple court order should make any changes to voter rolls invalid. Sue and get it done, as well as posting on every one of these sites about the issue so people are aware to check.

[–] [email protected] 8 points 1 month ago* (last edited 1 month ago)

Suing over this is exactly what the GOP wants, because they've thoroughly ratfucked the judicial system (not just the Supreme Court, but lower Federal courts and state courts in GOP-controlled states like Georgia, too). And even if the lawsuits don't go their way, if they can cause enough delay and confusion over which votes are valid, they can try to punt the election to the House (which they still control) again.

[–] [email protected] 1 points 1 month ago

Cancel culture has gone too far (no /s)