• RestrictedAccount@lemmy.world
    link
    fedilink
    arrow-up
    26
    ·
    8 hours ago

    Moreover, the agency had been directed not to alert the voting machine company if it uncovered flaws, contrary to its standard practices. The request made the CISA employees fear they were being asked to take part in political interference.

    “My thought was they could keep it in their back pocket to invalidate any [election] results they don’t like,” one of the former officials said. “This goes against everything CISA represents.”

  • jeansburger@piefed.world
    link
    fedilink
    English
    arrow-up
    14
    ·
    8 hours ago

    Here’s the thing literally any other administration this would be a sane and normal thing to do (but maybe not secretly). You’d want the government to be able to help the states that use them to understand the risks to prevent the actual fuckery this admin is trying to do…

    • Carl@anarchist.nexus
      link
      fedilink
      English
      arrow-up
      6
      ·
      4 hours ago

      The “try to hack us to see if we’re vulnerable” part is 100% standard practice for security audits. It’s called penetration testing, and there is an entire industry set up around the idea of legally breaking into secure facilities, just to see if their security is working. It is healthy, because it can be a valuable tool for finding major security flaws.

      The massive glaring issue is the fact that they asked the penetration testers to hide their results, and not alert the agencies involved. The entire point of a penetration test is to see if attackers can get in so that you can fix the issues they used to breach your facility. If the penetration testers aren’t sharing their results, it’s just fucking breaking and entering to tamper with voting machines. Asking the penetration testers to hide their results is like asking a surgeon to pull out a perfectly healthy organ.

      At least the security company noticed this, and had the ethics to actually come forward about it.

    • bjc@scribe.disroot.org
      link
      fedilink
      arrow-up
      2
      ·
      5 hours ago

      no, i want the complete specifications for critical public infrastructure to be public so there are no secrets at all

    • JustPlainDave@lemmy.zip
      link
      fedilink
      arrow-up
      2
      ·
      6 hours ago

      Right, I was just about to say the same. Were it literally any other administration, except maybe for Nixon but they didn’t have voting machines, this would just be normal security stuff. Unfortunately for this administration of nuts who will 100% try to cheat and probably have at least twice before, it’s very alarming.