{"id":39,"date":"2010-10-05T22:43:26","date_gmt":"2010-10-06T05:43:26","guid":{"rendered":"http:\/\/www.dandelion.org\/dcb\/?p=39"},"modified":"2010-10-05T22:43:26","modified_gmt":"2010-10-06T05:43:26","slug":"hacking-a-washington-d-c-internet-voting-site","status":"publish","type":"post","link":"https:\/\/dandelion.org\/dcb\/?p=39","title":{"rendered":"Hacking a Washington D.C. internet voting site"},"content":{"rendered":"<p>Here&#8217;s the first thing that I was about to email to you guys and thought&#8230; Wait I can blog this!<\/p>\n<p>It&#8217;s techy. How a pilot project for online overseas voters got owned.<\/p>\n<p>The (white hat) hackers knew that the pdf file that users uploaded were encrypted via a command line tool. They were able to compromise the system by changing the extension of their ballot submission from .pdf , to specific system commands. When the system tried to run the encryption program at the command line, it instead ran the commands the hackers embedded in the file name (via the extension).<\/p>\n<p><a href=\"http:\/\/www.freedom-to-tinker.com\/blog\/jhalderm\/hacking-dc-internet-voting-pilot\">http:\/\/www.freedom-to-tinker.com\/blog\/jhalderm\/hacking-dc-internet-voting-pilot<\/a><\/p>\n<p>(From BoingBoing.net<br \/>\n<a href=\"http:\/\/www.boingboing.net\/2010\/10\/05\/alex-haldermans-tota.html\">http:\/\/www.boingboing.net\/2010\/10\/05\/alex-haldermans-tota.html<\/a> )<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Here&#8217;s the first thing that I was about to email to you guys and thought&#8230; Wait I can blog this! It&#8217;s techy. How a pilot project for online overseas voters got owned. The (white hat) hackers knew that the pdf &hellip; <a href=\"https:\/\/dandelion.org\/dcb\/?p=39\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6,16],"tags":[],"class_list":["post-39","post","type-post","status-publish","format-standard","hentry","category-chatter","category-geeky"],"_links":{"self":[{"href":"https:\/\/dandelion.org\/dcb\/index.php?rest_route=\/wp\/v2\/posts\/39","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dandelion.org\/dcb\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dandelion.org\/dcb\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dandelion.org\/dcb\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/dandelion.org\/dcb\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=39"}],"version-history":[{"count":2,"href":"https:\/\/dandelion.org\/dcb\/index.php?rest_route=\/wp\/v2\/posts\/39\/revisions"}],"predecessor-version":[{"id":42,"href":"https:\/\/dandelion.org\/dcb\/index.php?rest_route=\/wp\/v2\/posts\/39\/revisions\/42"}],"wp:attachment":[{"href":"https:\/\/dandelion.org\/dcb\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=39"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dandelion.org\/dcb\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=39"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dandelion.org\/dcb\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=39"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}