3 ms·
I understand that they need a way to transfer data to and from the machine that builds the ballots but the method outlined above doesn't fill me with a lot of c
by cmiles74 8y ago
I understand that they need a way to transfer data to and from the machine that builds the ballots but the method outlined above doesn't fill me with a lot of confidence. Barnes freely admitted that their desktop computer handles their email and that they use a thumb drive to transfer data from that desktop computer to the "air gapped" ballot build server.
If his desktop becomes infected with a virus of some kind, isn't it straightforward for that virus to infect the thumb drive and then to infect this server that builds the ballots? My understanding is that most "air gapped" machines lack USB ports or have those ports plugged so as to discourage their use.
In terms of what they should be using to transfer data, that is outside of my wheelhouse. But the current system seems ripe for exploitation by a third party dedicated to gaining access to this machine that builds the ballots.
- darpa_escapee 8y agoYes, and since he's outed himself a point of failure, he's sure to be subject to spear phishing campaigns.
- wool_gather 8y ago> isn't it straightforward for that virus to infect the thumb drive Maybe not "straightforward", but, yes, absolutely, that would be a very likely vector. As I understand it, this is how the Stuxnet worm was designed (the one that sabotaged the Iranian centrifuges).