So about those Dominion Voting Machines in Georgia in 2020

8,164 Views | 119 Replies | Last: 2 yr ago by fka ftc
aggiehawg
How long do you want to ignore this user?
There has been a very long running case, Curling v. Raffensperger in Georgia. It was filed when the state originally contracted with Dominion to ue their machines statewide. A lot of evidentiary hearings, discovery disputes, experts etc. In late October 2020, Judge wrote an opinion based in part by a truncated report written by Plainitff's expert, J. Alex Halderman. Among others he was afforded a very brief opportunity to have access to a Dominion BMD and EMS server. But the Judge ruled it was too close to the election to order a switch to all paper ballots.

The case continued after the election and Halderman was afforded more time to study and hack Dominion machines, culiminating in a lengthy (96 page) report that he filed with the court in July 2021, wherein it was promptly sealed.

This week more of that repor has been released. For the tech savvy folks, you can find it HERE

Major takeaways. First, easily hackable by any number of different methods. The QR codes are easily changed to flip votes and the voter has no idea nor way to ever know. And changing the QR codes ca also be done by various methods and taking almost no time. But wait, there are other issues he identified.

Quote:

I show that the ICX suers from critical vulnerabilities that can be exploited to subvert all of its security mechanisms, including: user authentication, data integrity protection, access control, privilege separation, audit logs, protective counters, hash validation, and external rmware validation.

I demonstrate that these vulnerabilities provide multiple routes by which attackers can install ma-licious software on Georgia's BMDs, either with temporary physical access or remotely from election management systems (EMSs). I explain how such malwarecan alter voters' votes while subverting all of the procedural protections practiced by the State, including acceptance testing, hash validation, logic and accuracy testing, external rmware validation, and risk-limiting audits (RLAs
YIKES!

This stuff is not my bailiwick but perhaps some of you tech people can scan this and post on your thoughts?
Slicer97
How long do you want to ignore this user?
I'm not a tech people, but this smells like evidence to support what most of us have known for almost 3 years.
AGHouston11
How long do you want to ignore this user?
They are easily hacked.
They can easily be programmed to change votes to what you want.

We are supposed to trust the people in charge they are not doing any of the above.
annie88
How long do you want to ignore this user?
Slicer97 said:

I'm not a tech people, but this smells like evidence to support what most of us have known for almost 3 years.


That's why the fox/dominion thing was so skeevy, we know they were involved with the cheating and yet no one wants to prove it. Don't even think it would be that hard.
JFABNRGR
How long do you want to ignore this user?
These are not bugs but features.
Hungry Ojos
How long do you want to ignore this user?
So it's clear they are hack-able, but what would it take to find out if they actually were( hacked)?
aggiehawg
How long do you want to ignore this user?
Have to wonder why Fox felt the need to settle with Dominion. They had to know this report was under seal in Georgia. Hire Halserman again and force Dominion to let him have extended access.

Their software was so buggy, they couldn't have cleared up all the flaws and he would immediately know it was not the version running during the 2020 election if they tried a bait and switch.
aggiehawg
How long do you want to ignore this user?
Hungry Ojos said:

So it's clear they are hack-able, but what would it take to find out if they actually were( hacked)?
SLOG files to start with. Who accessed and when. During the Maricopa County 2021 audit they found that a specific script was created to repeatedly query the server causing those logs to be overwritten well after the election. Also had the routers been made available, they could have detected some it of that way as well.
dreyOO
How long do you want to ignore this user?
If hacked, that would easily explain why conservative voters suddenly went the other way on specific races.
Detmersdislocatedshoulder
How long do you want to ignore this user?
so they cheated.

on a side note trump received more legitimate votes than any presidential candidate in american history. for those of you who blame trump voters more than bidens cheating.
Charpie
How long do you want to ignore this user?
The problem with the whole thing is that you CAN do something.

I mean, I can conduct a denial of service attack and bring down a website.

I can go get a fake ID and pretend to be someone else and vote.

Just because I can, doesn't mean I did. I think that's part of the issue here. You still have to prove they actually DID the cheating.
aggiehawg
How long do you want to ignore this user?
dreyOO said:

If hacked, that would easily explain who conservative voters suddenly went the other way on specific races.
Also explains the sudden spikes in Biden votes. Note that not just the QR code itself could be altered but the scanners could be altered to read the codes differently, too. So even if the BMD did not flip the votes, they could be flipped when they were being counted.

More importantly, according to Halderman, no amount of testing before could have detected it. Accuracy and Logic Testing wouldn't work.
rgag12
How long do you want to ignore this user?
Charpie said:

The problem with the whole thing is that you CAN do something.

I mean, I can conduct a denial of service attack and bring down a website.

I can go get a fake ID and pretend to be someone else and vote.

Just because I can, doesn't mean I did. I think that's part of the issue here. You still have to prove they actually DID the cheating.


But Dems won, so they must've cheated!

Sick of the Trumpish loser mentality of a certain faction of the Republican Party. Small-scale cheating does occur in favor of Dems, hacking in which thousands and thousands of votes are disappearing/being changed is not occurring.

Focus on getting more votes and stop crying about 2020, or else it will happen again. Perhaps though that's what these people deep down actually want….
aggiehawg
How long do you want to ignore this user?
Charpie said:

The problem with the whole thing is that you CAN do something.

I mean, I can conduct a denial of service attack and bring down a website.

I can go get a fake ID and pretend to be someone else and vote.

Just because I can, doesn't mean I did. I think that's part of the issue here. You still have to prove they actually DID the cheating.
Flip the script here. Why else write the software in such a way to even have that many options for it to be directed to do the opposite?
aggiehawg
How long do you want to ignore this user?
rgag12 said:

Charpie said:

The problem with the whole thing is that you CAN do something.

I mean, I can conduct a denial of service attack and bring down a website.

I can go get a fake ID and pretend to be someone else and vote.

Just because I can, doesn't mean I did. I think that's part of the issue here. You still have to prove they actually DID the cheating.


But Dems won, so they must've cheated!

Sick of the Trumpish loser mentality of a certain faction of the Republican Party. Small-scale cheating does occur in favor of Dems, hacking in which thousands and thousands of votes are disappearing/being changed is not occurring.

Focus on getting more votes and stop crying about 2020, or else it will happen again. Perhaps though that's what these people deep down actually want….
So for the 40 million voters using these machines just get hung out to dry? And you don't want it to be fixed so it doesn't happen again? Really?
fka ftc
How long do you want to ignore this user?
aggiehawg said:

Charpie said:

The problem with the whole thing is that you CAN do something.

I mean, I can conduct a denial of service attack and bring down a website.

I can go get a fake ID and pretend to be someone else and vote.

Just because I can, doesn't mean I did. I think that's part of the issue here. You still have to prove they actually DID the cheating.
Flip the script here. Why else write the software in such a way to even have that many options for it to be directed to do the opposite?
Some of the CIA guys we send to work elections in Venezuela can get confused and overwhelmed, so they provided multiple pathways. Just my opinion of course.
TheEternalPessimist
How long do you want to ignore this user?
aggiehawg said:

There has been a very long running case, Curling v. Raffensperger in Georgia. It was filed when the state originally contracted with Dominion to ue their machines statewide. A lot of evidentiary hearings, discovery disputes, experts etc. In late October 2020, Judge wrote an opinion based in part by a truncated report written by Plainitff's expert, J. Alex Halderman. Among others he was afforded a very brief opportunity to have access to a Dominion BMD and EMS server. But the Judge ruled it was too close to the election to order a switch to all paper ballots.

The case continued after the election and Halderman was afforded more time to study and hack Dominion machines, culiminating in a lengthy (96 page) report that he filed with the court in July 2021, wherein it was promptly sealed.

This week more of that repor has been released. For the tech savvy folks, you can find it HERE

Major takeaways. First, easily hackable by any number of different methods. The QR codes are easily changed to flip votes and the voter has no idea nor way to ever know. And changing the QR codes ca also be done by various methods and taking almost no time. But wait, there are other issues he identified.

Quote:

I show that the ICX suers from critical vulnerabilities that can be exploited to subvert all of its security mechanisms, including: user authentication, data integrity protection, access control, privilege separation, audit logs, protective counters, hash validation, and external rmware validation.

I demonstrate that these vulnerabilities provide multiple routes by which attackers can install ma-licious software on Georgia's BMDs, either with temporary physical access or remotely from election management systems (EMSs). I explain how such malwarecan alter voters' votes while subverting all of the procedural protections practiced by the State, including acceptance testing, hash validation, logic and accuracy testing, external rmware validation, and risk-limiting audits (RLAs
YIKES!

This stuff is not my bailiwick but perhaps some of you tech people can scan this and post on your thoughts?
Goaltenders arriving to call you a conspiracy theorist in 3...2....1..
TheEternalPessimist
How long do you want to ignore this user?
rgag12 said:

Charpie said:

The problem with the whole thing is that you CAN do something.

I mean, I can conduct a denial of service attack and bring down a website.

I can go get a fake ID and pretend to be someone else and vote.

Just because I can, doesn't mean I did. I think that's part of the issue here. You still have to prove they actually DID the cheating.


But Dems won, so they must've cheated!

Sick of the Trumpish loser mentality of a certain faction of the Republican Party. Small-scale cheating does occur in favor of Dems, hacking in which thousands and thousands of votes are disappearing/being changed is not occurring.

Focus on getting more votes and stop crying about 2020, or else it will happen again. Perhaps though that's what these people deep down actually want….
We can focus on the next election, while still addressing the documented cheating and irregularities from the last two elections..... which we should.
aggiehawg
How long do you want to ignore this user?
Quote:

Goaltenders arriving to call you a conspiracy theorist in 3...2....1..
And not a single one of them will bother to even click on the link and read a summary of his principal findings, just a few pages.
jrdaustin
How long do you want to ignore this user?
If it's that porous, it could have been as easy as introducting an executable script along the lines of:

Votes for Candidate "A", register as a vote for "A".
Votes 1~4 for Candidate "B", register as a vote for "B".
Every 5th vote for "B", register as a vote for "A".
3 hours after polls close on Election Day. Self-Delete all traces of executable
BadMoonRisin
How long do you want to ignore this user?
rgag12 said:

Charpie said:

The problem with the whole thing is that you CAN do something.

I mean, I can conduct a denial of service attack and bring down a website.

I can go get a fake ID and pretend to be someone else and vote.

Just because I can, doesn't mean I did. I think that's part of the issue here. You still have to prove they actually DID the cheating.


But Dems won, so they must've cheated!

Sick of the Trumpish loser mentality of a certain faction of the Republican Party. Small-scale cheating does occur in favor of Dems, hacking in which thousands and thousands of votes are disappearing/being changed is not occurring.

Focus on getting more votes and stop crying about 2020, or else it will happen again. Perhaps though that's what these people deep down actually want….
The actual conspiracy theory is that 81M not-dead totally alive people voted for a career politician --who is a proven liar and plagarist, not to mention pedophile -- that only carried 1% of his own primary with an equally unpopular VPOTUS.

I guess if you forget that there was a "plumbing leak" and that 5 different swing states all stopped counting ballots at the same time, and that it took several weeks to "confirm" the counts, this is all to be believed.

but some of us actually have memories longer than a goldfish....
FishrCoAg
How long do you want to ignore this user?
So per this thread the machines are easily hacked, it's not difficult to see who did it and what they did, and yet Fox with their army of lawyers chose to pay Dominion a metric crap ton of money. Makes no sense whatsoever
Charpie
How long do you want to ignore this user?
aggiehawg said:

Charpie said:

The problem with the whole thing is that you CAN do something.

I mean, I can conduct a denial of service attack and bring down a website.

I can go get a fake ID and pretend to be someone else and vote.

Just because I can, doesn't mean I did. I think that's part of the issue here. You still have to prove they actually DID the cheating.
Flip the script here. Why else write the software in such a way to even have that many options for it to be directed to do the opposite?
You assume harmful intent.

Most software is riddled with bugs. Even this website that we are posting on(Sorry Brandon) could potentially be riddled with exploits if you go looking for them. This IS my wheelhouse. If you recall after the election when y'all were posting screenshots of database snapshots and json snippets and I kept saying that they meant nothing, it's because they really didn't mean anything. Most software is built to a requirements specification, and built towards that specification alone. Then it's tested against that specification. After it's been in the field for years, it might go through some penetration testing to test it for vulnerabilities, but that doesn't happen too often. That's why you hear about ransomware and malware attacks happening all the time. A company's number one goal in building software is to get it to market as quickly as possible to make money. If it works, it works. Did they do load testing? Did they do security testing? Probably not. They probably did the minimum amount of testing to get it out the door to turn a profit.

This report shows one thing. If you are looking for holes, you can find them anywhere. There are consulting companies out there that will call other companies up and offer to penetration test companies to expose security vulnerabilities at a handsome cost.
fka ftc
How long do you want to ignore this user?
No no no, there were at least 45 court cases where all the evidence was allowed to be presented, witnesses heard, and no issues of standing were noted. After a lengthy trial, the judge found all of the evidence not credible and not just dismissed but admonished Trump and his attorneys.

This was so well known by Trump and denied, which led him to lie to his followers and incite them to a violent riot and insurrection to murder Pence and overthrow the election.

/s/ concerned moderates
Franklin Comes Alive!
How long do you want to ignore this user?
This is strange....

All the Desantis chest beaters said only deranged trumper cultists didn't believe cornpop received 81 million legitimate ballots....

Very strange indeed
BluHorseShu
How long do you want to ignore this user?
Charpie said:

The problem with the whole thing is that you CAN do something.

I mean, I can conduct a denial of service attack and bring down a website.

I can go get a fake ID and pretend to be someone else and vote.

Just because I can, doesn't mean I did. I think that's part of the issue here. You still have to prove they actually DID the cheating.
Dammit...Its implied in the fact that its possible. Just like Trump receiving the most votes of any president ever means all that voted for him all really like...no wait, scratch that...LOVE him and didn't just vote for him bc he happened to be the only name next to R in the president section. GOAT
fka ftc
How long do you want to ignore this user?
Charpie said:

aggiehawg said:

Charpie said:

The problem with the whole thing is that you CAN do something.

I mean, I can conduct a denial of service attack and bring down a website.

I can go get a fake ID and pretend to be someone else and vote.

Just because I can, doesn't mean I did. I think that's part of the issue here. You still have to prove they actually DID the cheating.
Flip the script here. Why else write the software in such a way to even have that many options for it to be directed to do the opposite?
You assume harmful intent.

Most software is riddled with bugs. Even this website that we are posting on(Sorry Brandon) could potentially be riddled with exploits if you go looking for them. This IS my wheelhouse. If you recall after the election when y'all were posting screenshots of database snapshots and json snippets and I kept saying that they meant nothing, it's because they really didn't mean anything. Most software is built to a requirements specification, and built towards that specification alone. Then it's tested against that specification. After it's been in the field for years, it might go through some penetration testing to test it for vulnerabilities, but that doesn't happen too often. That's why you hear about ransomware and malware attacks happening all the time. A company's number one goal in building software is to get it to market as quickly as possible to make money. If it works, it works. Did they do load testing? Did they do security testing? Probably not. They probably did the minimum amount of testing to get it out the door to turn a profit.

This report shows one thing. If you are looking for holes, you can find them anywhere. There are consulting companies out there that will call other companies up and offer to penetration test companies to expose security vulnerabilities at a handsome cost.
You may have missed that we are talking voting machines here not the latest version of MS Paint.
aggiehawg
How long do you want to ignore this user?
Quote:

This report shows one thing. If you are looking for holes, you can find them anywhere. There are consulting companies out there that will call other companies up and offer to penetration test companies to expose security vulnerabilities at a handsome cost.
And most of those companies try to fix the problems.

But not Dominion. Why is that? Did you even read any of the report?

Finally, if there is nothing to hide here, why are these election officials and Dominion officials trying so hard to prevent any inspection?

How about the simplest change? Ditch the QR code and have the actual ovals counted? Oh wait, the ballot definition file can be changed to print a 19 inch ballot image on a 20 inch page so the markers are off and the ballots cannot be read. (Arizona) Or, faulty numbering on the lines and not starting with zero causing all of the races being counted off one race. (Tennessee.)

But the fact of the matter is it is against the law in Georgia to use electronic voting machines that use QR codes to record the voters' choices.
No Spin Ag
How long do you want to ignore this user?
Seeing as how many Republicans won in those states where some day cheating was done; if true, it would help reinforce the thought that there is no problem with the Republicans being elected, so long as they're not Trump or Trump-wanbabes.

There are in fact two things, science and opinion; the former begets knowledge, the later ignorance. Hippocrates
aggiehawg
How long do you want to ignore this user?
Do I need to cross post the link to this report to the Nerdery board to get some meaningful feedback here?
BTKAG97
How long do you want to ignore this user?
aggiehawg said:

Have to wonder why Fox felt the need to settle with Dominion.
Would not be surprising to find out Fox got paid to settle.
pagerman @ work
How long do you want to ignore this user?
Paper
Ballots

Tight control over mail in voting.

There was never any valid justification to go to electronic voting in the first place.
197361936
How long do you want to ignore this user?
Hungry Ojos said:

So it's clear they are hack-able, but what would it take to find out if they actually were( hacked)?


A very very good syseng or admin.
Anyone who chooses to ride a bicycle in the street is a threat to themselves, and others. If a vehicle strikes you accidentally, YOU are at fault; and the laws of physics supercede all else when you're in the path of a 2 ton killing machine. Know your place, stay off the road.
Jeeper79
How long do you want to ignore this user?
Detmersdislocatedshoulder said:

so they cheated.

on a side note trump received more legitimate votes than any presidential candidate in american history. for those of you who blame trump voters more than bidens cheating.
This is not evidence of cheating. HTH
Get Off My Lawn
How long do you want to ignore this user?
aggiehawg said:

Have to wonder why Fox felt the need to settle with Dominion. They had to know this report was under seal in Georgia. Hire Halserman again and force Dominion to let him have extended access.

Their software was so buggy, they couldn't have cleared up all the flaws and he would immediately know it was not the version running during the 2020 election if they tried a bait and switch.
The organization that fired their right wing star as election season arrives? A lot of the things Fox has been up to lately make sense through the "controlled opposition" lens.
Last Page
Page 1 of 4
 
×
subscribe Verify your student status
See Subscription Benefits
Trial only available to users who have never subscribed or participated in a previous trial.