Can anyone sanely argue the server was not hacked at this point?

[Bob41213]

Let's see the list of grievances....

No SSL the first 3 months (means the Chinese probably read her email and password when she visited there).

Open RDP and VPN ports (means the server was poorly setup and could get hacked using a basic google search).

Used Microsoft Server (with bad open ports *facepalm*).

Setup by a Political Science major.

Their response to a hacking attempt was to turn off the server for a few minutes and turn it back on, then not send anything "sensitive" for a while.

The "sysadmin" has an immunity deal.

AND NO, THE FEDS DID NOT SAY IT WAS NOT HACKED. In fact the State Department spokesperson today specifically retracted that claim.

[Press Virginia]

1. It might have been but, right now, we don't know for sure.

likely find out when the FBI finishes its investigation

[highprincipleswork]

11. Kinda like who has most pledged delegates when all votes are counted.

[BootinUp]

2. I wouldn't believe that level of detailed info from spurious media

reports. Trust me, the media gets that kind of shit wrong all the time. I assume the FBI is or has spending/spent a lot of time on the issue you raise though. They will undoubtedly check for evidence of actual leaked info getting out. As well as looking at the server.

Until I see the official report I am not buying any of the media reports on the server.

[scscholar]

3. It was a Mircosoft server so of course it was easy to hack, but...

there's no proof of that. That has already been confirmed that there's no proof.

[Barack_America]

4. I'm prepared to eat my shoe if it wasn't hacked.

Don't forget the bit about Guccifer suddenly getting a plea deal in exchange for cooperation. And he obviously mentioned seeing evidence of other hacks during his purported adventures within her server.

[JoePhilly]

5. Prove it was.

That's the standard in this country.

[Bob41213]

13. To be honest, I expect you'll get the proof you crave in a short time from the FBI

[JoePhilly]

20. Been waiting for the predicted indictment for over a year now ...

... thanks to the daily stream of "OMG Hillary is about to be indicted!!!!!!" OPs that get posted here.

[onecaliberal]

6. Of course it was hacked and the Romanian guy pled guilty in federal court to hacking just today

I'm sorry but I don't need a brick wall to fall on me. It's been completely obvious for months. After today's court proceedings not sure HOW people will continue to deny.

[Recursion]

7. Ironically, we know the state server she was supposed to use was hacked. Though, about the SSL

We don't know the server wasn't using SSL for those 3 months. We know a certificate was issued 3 months after it started, but they could have been using self-signed before that (which is what I would do if I were setting up something like that, though I wouldn't use Windows in the first place), as well as listening on a non-standard port (which is also something I would do). Though for that matter I don't think we got any banners from the port scans, just the ACKs, so we have no idea what was or wasn't listening on a given port.

[dreamnightwind]

9. I'll go with the Nookie Monster

Although Carlos Danger could use it as an excuse for the loose weiners.

[procon]

10. What is this thread about?

If the feds say it was not hacked, even retracted such a claim, then everything you've written is just a fiction story, idle speculation, another vanity post, click bait. So , besides suckering in page views, what is the actual topic here?

[Bob41213]

12. The Feds DON'T say it wasn't hacked.

HRC people say that the feds claim it wasn't hacked which is untrue. In fact just today the State Department spokesperson refused to claim that.

Silvershadow tells you the link to the video and where to watch. You can watch the video but I'll try and transcribe it here.

22:30

Reporter: There were hack attempts on her server. How did that not bring the reassessment that this maybe isn't... Ummm.. It apparently just got plugged back in. How did that not bring the reassessment that maybe this the best strategy?

Mark Toner: Well I don't know again. I don't know if the IG specifically addresses the security of her system.

Other Reporter: Well he says that she never told anybody about it.

Mark Toner: I do know there were hack attempts but none of them were successful.

Reporter: How do you know that none of them were successful?

Mark Toner: But I would just have to refer you to the...

Reporter: (interrupts) How do you know that because the report does not say that none of them were successful?

Long awkward pause.

Mark Toner: I apologize actually. I mispoke. But I just would refer you to Secretary Clinton's team for questions about the security of her system.

[YouDig]

14. You mean other than the lack of any evidence at all, and the no traces of hacking?

[Bob41213]

16. I'd say the OIG report had some evidence...

Doesn't say anyone got in, but you'd have to be a moron to believe that this would stop the hackers (lets turn off the computer for a few minutes till they go away then turn it back on). Once you're spotted as a weak target, do you think these guys move on?



On January 9, 2011, the non-Departmental advisor to President Clinton who provided
technical support to the Clinton email system notified the Secretary’s Deputy Chief of
Staff for Operations that he had to shut down the server because he believed “someone
was trying to hack us and while they did not get in i didnt [sic] want to let them have the
chance to.” Later that day, the advisor again wrote to the Deputy Chief of Staff for
Operations, “We were attacked again so I shut [the server] down for a few min.” On
January 10, the Deputy Chief of Staff for Operations emailed the Chief of Staff and the
Deputy Chief of Staff for Planning and instructed them not to email the Secretary
“anything sensitive” and stated that she could “explain more in person.”159

[YouDig]

17. You'd be wrong. Did you miss the part where it said "they did not get in"?

[Bob41213]

18. Hmm...Ummmm....

I saw how the "sysadmin" said they didn't get in. But I also saw that his solution to hacking was not to plug the vulnerability, it was to turn off the computer for a "few minutes." Yes, that's as stupid as it sounds. The problem doesn't go away.

I refer you to the press conference where they explicitely refuse to say it wasn't hacked. It's a rather painful, awkward exchange but you can find it at about 2:45 of this video which I attempted to transcribe below.

Reporter: There were hack attempts on her server. How did that not bring the reassessment that this maybe isn't... Ummm.. It apparently just got plugged back in. How did that not bring the reassessment that maybe this the best strategy?

Mark Toner: Well I don't know again. I don't know if the OIG specifically addresses the security of her system.

Other Reporter: Well he says that she never told anybody about it.

Mark Toner: I do know there were hack attempts but none of them were successful.

Reporter: How do you know that none of them were successful?

Mark Toner: But I would just have to refer you to the...

Reporter: (interrupts) How do you know that because the report does not say that none of them were successful?

Long awkward pause.

Mark Toner: I apologize actually. I mispoke. But I just would refer you to Secretary Clinton's team for questions about the security of her system.

[YouDig]

21. You think that video is evidence that there was a successful hack? lol.

[Bob41213]

22. I think the report doesn't say it was unsuccessful

Brian Pagliano might have said it was unsuccessful in his email but the report says no such thing.

[YouDig]

23. Well, it did say "they did not get in" so there's that.

Other than that, we are where we've always been: there's no evidence that the server was hacked.

[Bob41213]

24. Brian Pagliano said that in his email which was quoted in the report.

Brian Pagliano is incompetent (in matters of cybersecurity) if you haven't figured it out.

[YouDig]

26. Well, if you don't believe him, we can just leave it at "there's no evidence".

[Bob41213]

27. I don't believe someone whose solution was to turn off the computer

for a few minutes and hope the hackers went away.

[YouDig]

29. OK, so we're back to zero evidence of any successful hack.

[DisgustipatedinCA]

37. I think it's long past time for you to present your security bona fides.

Please do so.

[MineralMan]

15. Who is arguing that?

There's no evidence that it was hacked. There's no evidence that it was hacked, either. Lacking evidence, I don't argue anything at all.

Show some hard evidence either way, and I'll listen. Until then, I'll just wait on forming an opinion.

[VulgarPoet]

19. Niiiiice.

No SSL the first 3 months (means the Chinese probably read her email and password when she visited there).

Open RDP and VPN ports (means the server was poorly setup and could get hacked using a basic google search).

Used Microsoft Server (with bad open ports *facepalm*).

No SSL, with open RDP and VPN ports? Fuck Microsoft Server, I could have just waltzed right in with a minimum of effort. Hell, a fifteen year old skiddie in freshman year of high school who thinks he's the next Bill Gates could have peeled that thing and bit into the core. And we're supposed to believe the Chinese didn't? Okay.

Your arguments fall on deaf ears, though, Bob. I tried pointing this out only for the vast majority of Clintonistas to prove that out of all of 'em, maybe a small handful who didn't comment were tech experts, when I've been working in this field for nearly five years now.

[TheBlackAdder]

25. A good hack goes unnoticed, and cleanup is performed. It's only the newbs who get caught!

[lakeguy]

35. exactly! at this level, a successful penetration would be covered up

and be extremely difficult to detect. no evidence of hacking is not evidence that no one got in, not by a long shot. especially considering that their best defense was to pull the plug. did they have someone there, 24 hours a day, just ready to pull the plug if they managed to notice someone trying to get in? if i open up something like the ftp port on my own server (non-windows), i will start getting simple password attacks within minutes. and the only shit i have on my server is non-governmental, itunes songs!

[TheBlackAdder]

38. Especially years later, on a stand-alone non-enterprise networked server. No paper trail exists.

[tonyt53]

28. Can any sane person say definitively that it was? That is the bigger question.

Well, was it hacked or not?

[Tarc]

30. When you actually have citable proof, be sure to let us know

[The_Casual_Observer]

31. Yes, Vince Foster hacked it, go ask him.

[jberryhill]

32. Inviting argument of a negative proposition is expected to result in what?

Can you argue there are no monkeys in my shorts?

On what evidence?

[valerief]

33. Holy shit. They couldn't be any more negligent with their data. nt

[DisgustipatedinCA]

34. You may as well put out a welcome mat with tcp/3389 written on it.

I didn't know RDP was open. That's really, really stupid.

[jack_krass]

36. Who cares, ITS HER TURN