Pulse of Truth

495 readers

105 users here now

Cyber Security news and links to cyber security stories that could make you go hmmm. The content is exactly as it is consumed through RSS feeds and wont be edited (except for the occasional encoding errors).

This community is automagically fed by an instance of Dittybopper.

founded 1 year ago

MODERATORS

krogoth@infosec.pub

Colorado Agency ‘Improperly’ Posted Passwords for Its Election System Online (gizmodo.com)

submitted 2 weeks ago by lemmydev2@infosec.pub to c/pulse_of_truth@infosec.pub

5 comments fedilink hide all child comments

The Department of State said that the mistaken disclosure of the passwords do not pose an immediate threat to the upcoming election.

you are viewing a single comment's thread
view the rest of the comments

[–] ericjmorey@programming.dev 2 points 2 weeks ago (1 children)

For months, the agency “improperly” hosted a publicly available spreadsheet on its website that included a hidden tab with partial passwords for its voting machines.

In its statement, the Department of State said that there are two unique passwords for each of its voting machines, which are stored in separate places. Additionally, the passwords can only be used by a person who is physically operating the system and voting machines are stored in secure areas that require ID badges to access and are under 24/7 video surveillance.

Colorado voters use paper ballots, ensuring that a physical paper trail that can be used to verify results tabulated electronically.

[–] ericjmorey@programming.dev 2 points 2 weeks ago

I have no idea why improperly is in quotes. Maybe it's this reporter's and editor's version of saying that it's allegedly improper?