It looks like you're using an Ad Blocker.
Please white-list or disable AboveTopSecret.com in your ad-blocking tool.
Thank you.
Some features of ATS will be disabled while you continue to use an ad-blocker.
originally posted by: SourGrapes
a reply to: TerryMcGuire
I believe it wasn't until the 2016 election, that it became glaringly clear how much fraud there was.
Up until that point, it was accusations or perhaps the fraud wasn't in a pattern easily recognizable?
I was part of the 2016 recount. We were shut down, after finding too many fraudulent Hillary votes.
originally posted by: Hypntick
a reply to: Gnawledge
6.1 Security controls highlights using NIST verified algorithms. They list AES256 for encryption and RSA and SHA256 for signatures and certificates. Only one of those 3 has not been publicly broken, which is AES256. There is a fairly high confidence that it has been broken at this time, just not publicly (e.g., State sponsored groups) disclosed.
6.2 shows data center controls, all of which are basic controls that all data centers should have. These controls do not make them fully secure, only that they are doing the bare minimum, however most breaches are from misconfigurations of a lot of these controls. I also see no provisions for data backup and retention, which if I were working in the third-party vendor department would cause me to ask questions and get that clarified and documented as a risk.
6.4 References SSL certificates, which have been capable of being broken for several years now. It also does not show how the voters PIN is encrypted at rest, only that it is, could be base64 for all I know.
6.5 User access, unless they have an IAM expert on staff that knows the ins and outs of the role based access controls, this is going to have been implemented incorrectly. I can count the number of times I've seen it done properly on one hand, and I've been doing this a while.
6.6 The audit logs seem extremely lite to me, no further information other than session ID, IP, and ballot ID are addressed. I would hope for a considerably larger number of fields here, once again if I was doing third-party vendor work for them I would question it and get it in writing that aspect needs to be more secure.
So I've read it, and I would reject the system outright based on security concerns alone. If you would like a more in-depth review on why this is a terrible process and system to use, I would want to start billing you my hourly rate, which was north of $750 an hour last time I looked (it's been a bit).
originally posted by: TerryMcGuire
a reply to: TKDRL
Yes, I think I am getting the point of your argument now. Since he had no power to do anything about the fraud as president, especially as much of the voting laws are issued by individual states, he has had to wait until now, when this national election took place, to let the cheaters cheat so that they can be caught in the act. Right? a huge sting operation.
So by this rationale , when he is inaugurated, the federal lawsuits will ensue and all those fraud enablers will be taken to court and found guilty. but as of now, it seems that all of his protestations are falling short in state courts and his ''crack'' legal team is being run by a stumbling mass of a lawyer.
Ok, I'll wait until inauguration day to see if his plan works.