cybersecurity

Tech, Linked

FBI: Common scanning tools used to target state election systems (Steve Ragan/CSO)

 

In late June, early-July, the Arizona Secretary of State's office closed down the state's voter registration system after someone compromised valid credentials and used them to access the system.
Shortly after that incident, on July 12, someone exploited the Illinois Voter Registration System (IVRS). According to Ken Menzel, the general counsel for the Illinois board of elections, the attackers were able to exploit "a chink in the armor in one small data field in the online registration system."

 

Voter registration system attacks illustrate something important about voting security: attackers can still do national-scale damage by attacking less fortified local targets, without having to physically go hyper-local.

Individual legislators change the balance of power, both nationwide and statewide. Seemingly small decisions can have major impacts on regional economies and the moves of multinational corporations.

See the recent decision by Waitsburg, Washington's city council to block the construction of a Nestlé bottled water plant in their town. It's not clear what Nestlé will do as a result, but that one small decision

Now, imagine all of the different ways it's possible to mess with that election. What happens if an attacker finds a way to drop half of all voters from the rolls, or manages to delay or block delivery of vote-by-mail ballots?

We’re now in a world where it’s important for national governments to fund local governments' information security efforts, before something catastrophic happens.  Welcome to the future. 

Tech, Linked

A Spy in the Machine: How a brutal government used cutting-edge spyware to hijack one activist's life (The Verge)

An investigation would later reveal that Moosa’s online life was hijacked for eight months. All signs pointed to Bahrain as the culprit, and FinFisher, a mysterious spyware for-hire tool, as the weapon of choice.

This investigation into the use of FinFisher by the Bahrain government (and others around the world) is an important read. It's a good example of what happens when you give oppressive governments the ability to buy powerful spyware tools.

While the company that makes FinFisher has denied selling it to Bahrain, this is a toolkit that makes it easy for wealthy actors to spy on people without having to home-brew the technical know how to do it. If that doesn't spook you a bit, well, I don't know what will.