3 ms·

Tightening it by counting manually, hehe. Was a big deal earlier this week that the keys and stuff for some municipalities were posted online on their web page

Tightening it by counting manually, hehe. Was a big deal earlier this week that the keys and stuff for some municipalities were posted online on their web pages. Edit: it was certificates you had to install in the browser to verify that you were in the position to enter the total amount of votes in your municipality. The url for download were unique and random, but got indexed by search engines because they spy on urls you visit. https://www.nrk.no/norge/sensitive-valg-filer-for-tre-kommuner-var-tilgjengelig-for-hele-verden-1.13664601 https://www.nrk.no/norge/sensitive-valg-filer-for-tre-kommun... Edit, hmm, downvoted?

JetSpiegel 9y ago
I don't speak Norwegian, but this claims Edge sends all visited URL to Bing? Microsoft taking a page from Google, how quaint.
- chha 9y ago
  There were similar reports earlier this year as well. Autopass, a Norwegian company responsible for most road tolls reported that a bunch of reports became publicly accessible as a result of people using Edge internally, and Evry reported the same regarding a bunch of invoices and other financial information from a client of theirs. (https://www.digi.no/artikler/16-mai-ble-det-full-kriseberedskap-i-evry-etter-datalekkasje-rotarsaken-kan-pavirke-alle-norske-selskaper/383149 https://www.digi.no/artikler/16-mai-ble-det-full-krisebereds...)
- rlkf 9y ago
  > this claims Edge sends all visited URL to Bing? Yes. So if you instead of attachments of large files in email send an URL such as https://acme.pri/?id=cafe-babe-deadbeeff00d https://acme.pri/?id=cafe-babe-deadbeeff00d, which is not secured by any other method than obscurity, then Edge will submit it to Bing, which indexes it and then the content is available if you can come up with some keywords that match. It is fairly well known in Norway, due to having been in the national news earlier this spring, but I have no reason to think it doesn't apply universally.
e12e 9y ago
> Tightening it by counting manually, hehe. Yes, rather than "recounting" votes on the same/similar machine - you now need a large conspiracy for large scale election fraud, rather than a single software exploit...

JetSpiegel 9y ago

I don't speak Norwegian, but this claims Edge sends all visited URL to Bing? Microsoft taking a page from Google, how quaint.

chha 9y ago
There were similar reports earlier this year as well. Autopass, a Norwegian company responsible for most road tolls reported that a bunch of reports became publicly accessible as a result of people using Edge internally, and Evry reported the same regarding a bunch of invoices and other financial information from a client of theirs. (https://www.digi.no/artikler/16-mai-ble-det-full-kriseberedskap-i-evry-etter-datalekkasje-rotarsaken-kan-pavirke-alle-norske-selskaper/383149 https://www.digi.no/artikler/16-mai-ble-det-full-krisebereds...)
rlkf 9y ago
> this claims Edge sends all visited URL to Bing? Yes. So if you instead of attachments of large files in email send an URL such as https://acme.pri/?id=cafe-babe-deadbeeff00d https://acme.pri/?id=cafe-babe-deadbeeff00d, which is not secured by any other method than obscurity, then Edge will submit it to Bing, which indexes it and then the content is available if you can come up with some keywords that match. It is fairly well known in Norway, due to having been in the national news earlier this spring, but I have no reason to think it doesn't apply universally.

e12e 9y ago

> Tightening it by counting manually, hehe. Yes, rather than "recounting" votes on the same/similar machine - you now need a large conspiracy for large scale election fraud, rather than a single software exploit...