E-Voting Firm Hacked

Grok Headline matches for E-Voting Firm Hacked

Electronic Voting Firm Hacked

Electronic Voting Firm Hacked 12/30/2003 02:48 PM
CBS News Dec 30 2003 1:07PM ET

Site of electronic voting firm hacked

Site of electronic voting firm hacked 12/30/2003 01:38 AM

Electronic voting security firm hacked

Electronic voting security firm hacked 12/30/2003 01:36 AM
Boston Globe Dec 29 2003 11:34PM ET

Electronic voting firm has site hacked

Electronic voting firm has site hacked 12/29/2003 09:16 PM
Boston Globe Dec 29 2003 8:33PM ET

Electronic Voting Security Firm Hacked

Electronic Voting Security Firm Hacked 12/30/2003 12:02 AM
San Jose Mercury News Dec 29 2003 11:04PM ET

Electronic Voting Firm Has Site Hacked

Electronic Voting Firm Has Site Hacked 12/29/2003 05:35 PM
AP via Daily Press Dec 29 2003 5:32PM ET

E-Voting company gets hacked

E-Voting company gets hacked 12/30/2003 01:18 PM
Now another firm specializing in e-voting technology, Bellevue WA-based VoteHere, has been hacked.

Who Hacked the Voting System? The
Teacher

Who Hacked the Voting System? The
Teacher 05/02/2004 10:32 PM
New York Times May 3 2004 2:56AM GMT

Voting firm hit by hacker

Voting firm hit by hacker 01/11/2004 01:36 AM

E-voting firm reports computer break-in

E-voting firm reports computer break-in 12/29/2003 01:42 PM
MSNBC Dec 29 2003 12:48PM ET

Electronic Voting Firm Site Hack

Electronic Voting Firm Site Hack 12/30/2003 06:09 AM
An intruder manages to hack into the computers of a company developing security technology for electronic voting systems. The break-in could be related to the debate over the safety of online balloting.

Electronic voting firm acknowledges
hacker break-in

Electronic voting firm acknowledges
hacker break-in 12/30/2003 02:49 PM

Hacker breaks into electronic voting
firm site

Hacker breaks into electronic voting
firm site 12/31/2003 06:15 PM
The company says the break-in may be related to controversy over the security of online voting.

Electronic Voting Firm Drops Legal Case

Electronic Voting Firm Drops Legal Case 12/02/2003 03:02 AM
AP via Daily Press Dec 2 2003 2:42AM ET

E-Voting Firm VoteHere Discloses October
Break-In

E-Voting Firm VoteHere Discloses October
Break-In 12/29/2003 10:26 PM
linuxwrangler writes "In the ongoing saga of electronic voting 'security,' eVoting company VoteHere is the latest to reveal that they were the victim of a ...

e-Voting Firm Withdraws DMCA Threats,
Faces Inquiry

e-Voting Firm Withdraws DMCA Threats,
Faces Inquiry 12/03/2003 12:41 AM
Techfocus Dec 3 2003 0:10AM ET

Voting Machine Companies Make Political
Contributions to Both Democrats and
Republicans - New Report Traces Campaign
Contributions of Companies that Produce
E-Voting Machines

Voting Machine Companies Make Political
Contributions to Both Democrats and
Republicans - New Report Traces Campaign
Contributions of Companies that Produce
E-Voting Machines 08/13/2004 03:15 AM
New research on the political campaign contributions made to Democrats and Republicans by voting maching companies. [PRWEB Aug 13, 2004]

You've Been Hacked!

You've Been Hacked! 06/24/2005 09:40 PM
Seven signs that a bad guy has commandeered your financial life.

PSP hacked into something more useful

PSP hacked into something more useful 04/06/2005 06:17 PM
Apparently hackers have turned Sony's latest portable game player, the PSP handheld, into a device for online chat, Web browsing, and a venue for movies and music. Leave it to hackers who managed to add an online chat function by hijacking a Web browser built into a racing game called "Wipeout Pure." Once the hackers are able to change the PSP's network settings, they can point the browser to a Web portal. There's also a way for hackers to transfer TV programs recorded on the TiVo service to the PSP player, a program for reading e-books, and a viewer for...

Will the election be hacked?

Will the election be hacked? 02/10/2004 02:44 AM
A Salon special report reveals how new voting machines could result in a rigged presidential race -- and we'd never know.

""We have a policy that we are not being
hacked.""

""We have a policy that we are not being
hacked."" 07/03/2004 02:10 AM

Hacked for Spam

Hacked for Spam 12/08/2003 11:18 PM

From the New York Times:

Computer security researchers have been watching the evolution of remote-access rogue programs as they have become more common and have put more machines under the control of hackers. Programs like Sinit infect target machines and surreptitiously open back doors that allow outsiders to control the PC's. The rings of infected computers have been used to send spam, to present online advertisements for pornographic Web sites or to trick people into giving up information like credit card numbers.

In fact, at least a third of all spam circulating on the Internet is now sent from or relayed by personal home computers that have been taken over, said Jesse Dougherty, director of development at Sophos, an antivirus and antispam company.

Emphasis mine. Of course, whether or not you want to believe a director from a company that directly profits from people's fear of security attacks is up to you. That said, I've seen plenty of supporting evidence in the past few months that indicates that spamming is now the number one reason that a cracker would want to take over a PC, not least this Wired article.

Continuing on the same theme, The Rise of the Spammers is a fascinating article by David Barroso Berrueta describing how one of his servers was turned in to a spam relay after being compromised through a vulnerability in a PHP script. The technical details are intriguing; the attacker downloaded and uncompressed a daemon which then communicated with another host using an extended version of the SMTP protocol, receiving spam email bodies along with lists of addresses to send the spam on to.

Let's talk about the PHP vulnerability in question: yet again, it was the classic problem where an attacker can instruct PHP to download and execute code from their own server by feeding in a query string parameter that is passed un-checked to an include() function call. While there are a number of steps that can be taken to deny this kind of attack, it unveils a fundamental problem with PHP itself - that it will execute code retrieved from a URL in the first place! This feature should be removed from PHP - it has almost no purpose in the real world aside from allowing servers to be cracked in to. The feature exists because PHP has the extremely useful ability to open remote files over HTTP. Unfortunately, this feature extends to the include() and require() functions which will execute any PHP code in the file passed to the functions. The most obvious solution to my mind would be for these functions to refuse to execute PHP in files that were opened via HTTP. I have no doubt that this would involve an ugly hack on behalf of PHP's maintainers, but I believe the number of security problems it would solve would be well worth the trade-off.

Incidentally, I know you can disable opening files over HTTP and I know you shouldnt allow the direct creation of variables from the query string in the first place. The problems here are two-fold: firstly, opening files over HTTP is actually a very useful feature, one that would be all the more useful if it didn't carry the risk of executing arbitrary code. Secondly, the problem is mainly down to third party software which often requires insecure PHP settings (such as register_globals) in order to work.

Is It Illegal To Get Hacked?

Is It Illegal To Get Hacked? 04/21/2004 03:53 PM
Tower Records and the FTC have apparently reached a settlement after the FTC accused them of allowing hackers to access customer records. This brings up a very interesting question that isn't often discussed. Since hack attacks to get at customer data happen all the time how does anyone determine whether or not the company itself is negligent in not protecting the data? At what point is it negligence rather than just being vulnerable? If the standard is set too low, then companies have less incentive to protect their data (though, pissed off customers may provide that incentive). However, blaming the victim for being hacked seems to present a lot of slippery slope style questions.

Cisco Hacked?

Cisco Hacked? 05/17/2004 10:38 AM
Spooky news for the biggest makers of the Internet's infrastructure.

How your phone could be hacked

How your phone could be hacked 04/25/2004 08:41 PM
ZDNet Apr 26 2004 0:36AM GMT

I Hacked at O'Reilly

I Hacked at O'Reilly 03/19/2003 10:24 PM
The O'Reilly Hacks site now has a hacks page for each contributor; mine's here.

Help: I Got Hacked. Now What Do I Do?
Part II

Help: I Got Hacked. Now What Do I Do?
Part II 08/01/2004 12:27 AM

Direct and Related Links for 'Help: I Got Hacked. Now What Do I Do? Part II'

If you missed part 1 of this series, I strongly suggest that you read it here. “On This Page: There Is More to Information Security Than Viruses Salvaging Data in the Absence of Backups Recovering After an Attack – What Tools Will Help? Conclusion”…

"Blogrolling.com has been hacked"

"Blogrolling.com has been hacked" 11/18/2003 10:22 AM

NEW ELECTRONIC VOTING SYSTEM IN FLORIDA:
FLAWED... electronic records from first
widespread use of touch-screen voting in
Miami-Dade County have been lost ,,,
records disappeared after two computer
system crashes last year, leaving no
audit trail for t

NEW ELECTRONIC VOTING SYSTEM IN FLORIDA:
FLAWED... electronic records from first
widespread use of touch-screen voting in
Miami-Dade County have been lost ,,,
records disappeared after two computer
system crashes last year, leaving no
audit trail for t 07/28/2004 07:38 AM

nytimes.com/2004/07/28/politics/campaign/28vote.final.html?ei=5006& en=b992e2c2cfb441c3&ex=1091592000&partner=ALTAVISTA1&pagewanted=print& position=
track this site | 4 links

Old National Bank Hacked

Old National Bank Hacked 03/25/2005 11:42 PM

.name registry site hacked

.name registry site hacked 12/02/2003 01:55 AM
Apache exploit causes embrassment

hacked with greater regularity

hacked with greater regularity 12/03/2003 08:41 AM
click here for new window .. other companies .. web-based email .. » Hotmail .. hotmailhotmail .. ‡งช …Š„ .. it already is .. hotmail [>] .. stupid mail .. Revenge! .. Spammail .. e-mails .. Hotmail .. MSN M: .. john r .. obliw .. Innl

hotmail.com
track this site | 6 links

Techie alert: Even you can be hacked

Techie alert: Even you can be hacked 06/11/2004 09:51 AM

SCO Group Web Site Hacked Again

SCO Group Web Site Hacked Again 12/10/2003 07:46 PM
San Jose Mercury News Dec 10 2003 6:53PM ET

SCO Group Web site hacked again

SCO Group Web site hacked again 12/10/2003 09:10 PM
Boston Globe Dec 10 2003 7:25PM ET

Friendster: We Have a Policy that We Are
*Not* Being Hacked

Friendster: We Have a Policy that We Are
*Not* Being Hacked 07/07/2004 10:56 PM
Buried near the bottom of an article in last month's Wired is this little gem; Friendster rep Lisa Kopp insists, "We have a policy that we are not being hacked." I don't know if it's sad, scary or funny, but I can see someone in some corporate highrise somewhere actually saying this with a straight face.

SCO hacked in apparent IP protest

SCO hacked in apparent IP protest 12/19/2004 03:37 PM

More Than 100,000 DSW Customers' Data
Hacked

More Than 100,000 DSW Customers' Data
Hacked 03/14/2005 05:56 PM

Has your wireless connection been hacked

Has your wireless connection been hacked 12/26/2003 03:04 AM
I am very strict about personal PC security and have levels of protection on my systems that most people would...
Grok Description matches for E-Voting Firm Hacked
GrokA matches for E-Voting Firm Hacked

E-Voting Firm Hacked

The following phrases have been identified by the grok system as matching this entry: