Welcome to DU! The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards. Join the community: Create a free account Support DU (and get rid of ads!): Become a Star Member Latest Breaking News General Discussion The DU Lounge All Forums Issue Forums Culture Forums Alliance Forums Region Forums Support Forums Help & Search
28 replies = new reply since forum marked as read
Highlight: NoneDon't highlight anything 5 newestHighlight 5 most recent replies
Screenshot of VAN actions taken by Bernie staff in data breach (Original Post) JaneyVee Dec 2015 OP
Created folder "Ranged Targets" and saved list "Persuasion 80-100" into it? RandySF Dec 2015 #1
Curious way to breach a data security system Depaysement Dec 2015 #2
Usernames were for their own domain JaneyVee Dec 2015 #10
How do you know that? Nt Depaysement Dec 2015 #11
They were able to access from their own domain. JaneyVee Dec 2015 #13
It says "created" not accessed Depaysement Dec 2015 #15
That doesn't look sinister to me at all Jarqui Dec 2015 #3
REC PowerToThePeople Dec 2015 #4
Tried to log back in and search: denied access. JaneyVee Dec 2015 #7
^^ This. n/t winter is coming Dec 2015 #9
+1 Depaysement Dec 2015 #12
He's differentiating by making separate lists. joshcryer Dec 2015 #19
And maybe they're not supposed to be able to do that Jarqui Dec 2015 #25
Thank you. Hiraeth Dec 2015 #23
Uh, I think that actually -- Hell Hath No Fury Dec 2015 #5
That's them logging into their own domain JaneyVee Dec 2015 #8
An IT guy that -- Hell Hath No Fury Dec 2015 #16
An IT guy who is obviously incompetent. JaneyVee Dec 2015 #21
you mean like the hillary donater that runs the company. That kind of incompetent roguevalley Dec 2015 #26
Yep,that kind of incompetent Go Vols Dec 2015 #28
Ah. OilemFirchen Dec 2015 #22
Hahaha! An IT person who would be aware that their actions would be logged. Luminous Animal Dec 2015 #18
Yeah, I think it's assigning the username to the group "_bernie." joshcryer Dec 2015 #20
Cheaters... Nt. seabeyond Dec 2015 #6
"Not Hilary" joshcryer Dec 2015 #14
Evidence workinclasszero Dec 2015 #17
Is this real? Is there a link? MeNMyVolt Dec 2015 #24
Not sure why, but I can not see it. PowerToThePeople Dec 2015 #27

Depaysement

(1,835 posts)
2. Curious way to breach a data security system
Fri Dec 18, 2015, 09:52 PM
Dec 2015

Leave easily traceable evidence of your actions, creating user names tagged "Bernie." Not exactly surreptitious activity. What's up with that?

Something is rotten and it ain't in Denmark.

 

JaneyVee

(19,877 posts)
10. Usernames were for their own domain
Fri Dec 18, 2015, 10:13 PM
Dec 2015

And this is company data, they may not even have known actions were being logged.

Depaysement

(1,835 posts)
15. It says "created" not accessed
Fri Dec 18, 2015, 10:20 PM
Dec 2015

And you have no evidence to support your claim that they accessed from their own domain and those were their domain user names.

Jarqui

(10,122 posts)
3. That doesn't look sinister to me at all
Fri Dec 18, 2015, 09:57 PM
Dec 2015

1. He's looking at "Not Hillary" list
2. He's looking at priority 0-1 and then priority 9-10 in TX - he's missing a bunch in between - you'd get it all if you were trying to steal the data or you'd be interested in only the higher or lower priorities
3. Again, he goes into NH and just gets Persuasion 80-100 range - why not the other ranges if you were stealing data?
4. He logs into HI and creates two new "_Bernie" logins not "_Hillary" or "_OMalley" - hardly trying to keep eyes away from the Sanders campaign
5. He goes back into NH and gets a couple of ranges of Turnouts and one range Support - again, incomplete sets and middle of the road - not convincing that this is the best data for them to get
6. Logs into OH and gets full VF access .. and does nothing with it
7. Much of the time, he's generating lists - which are usually just item identifiers - not the whole data.

This is not a guy downloading gobs of data or getting a contiguous chunk of user data. I don't know the application but he looks like he's doing as he said - bouncing around seeing what was open/available to him by sampling ranges of various fields and generating lists - not full data dumps or reports.



joshcryer

(62,269 posts)
19. He's differentiating by making separate lists.
Fri Dec 18, 2015, 10:24 PM
Dec 2015

And it's not clear that the "_bernie" designation is manually created, it could be the system assigning their username "csanchez" to group "_bernie."

Jarqui

(10,122 posts)
25. And maybe they're not supposed to be able to do that
Fri Dec 18, 2015, 10:42 PM
Dec 2015

- add logins - maybe that's supposed to be handled by the vendor to some extent.

Separate lists for 20% of the data? Leaving a big hole in 80% of the data? That has really limited usage -particularly in that much of it was middle of the road - not top or bottom ranges.

And much of that data doesn't even seem to distinguish who it belongs to - it probably includes Hillary but they have no separation between the campaigns.

If these things like "Primary Priority""Turnout""Support" are fields the Clinton campaign created and entered, you'd probably need to understand the rules of how they derived the range for them to have much meaning. where is that?

They have the above logs or logs like them for the above and other users. They have a darn good idea what the Sanders campaign did. This talk about an audit and wanting a declaratino from Sanders when they already have this smells like a colossal pile of BS.

I hope the judge kicks the crap out of DWS and the DNC. This is a big hunk of nonsense that should never have been made public. Clearly, it was done for the sole purpose of trying to hurt the Sanders campaign - not because anything sinister like stealing or a significant data loss had occurred.

This is a 2008 deja vu and yes, it's on her because even though a candidate should not, Hillary obviously effectively controls the DNC or they're very much biased and on her side in this contest. The DNC should not be so biased or in the camp of one of the candidates. It's a disgrace.

 

Hell Hath No Fury

(16,327 posts)
5. Uh, I think that actually --
Fri Dec 18, 2015, 10:06 PM
Dec 2015

looks like it supports the Sander's IT guy's story.

Who the heck creates a "user" with BERNIE'S OWN NAME in it if they're trying to do skulduggery??? Seriously, that just doesn't make sense.

Hate to break it to you but my mind has been put at ease with that screenshot.

 

JaneyVee

(19,877 posts)
8. That's them logging into their own domain
Fri Dec 18, 2015, 10:11 PM
Dec 2015

They were able to breach from their side. And they may have not been aware their actions were logged. This is from company.

roguevalley

(40,656 posts)
26. you mean like the hillary donater that runs the company. That kind of incompetent
Sat Dec 19, 2015, 05:40 AM
Dec 2015

who 'leaves' a firewall down after being told about it two months ago? Him?

Luminous Animal

(27,310 posts)
18. Hahaha! An IT person who would be aware that their actions would be logged.
Fri Dec 18, 2015, 10:22 PM
Dec 2015

Hell, I'm an end user and I know that.

joshcryer

(62,269 posts)
14. "Not Hilary"
Fri Dec 18, 2015, 10:19 PM
Dec 2015

Tells you the intelligence of these dipshits.

Fire them all.

Stop fucking making excuses.

 

PowerToThePeople

(9,610 posts)
27. Not sure why, but I can not see it.
Sat Dec 19, 2015, 05:43 AM
Dec 2015

My dns server blackholes many known malicious web domains, it is very likely this photo is hosted somewhere that people may not wish to expose their computer systems to.

edit - I was able to get to the image (possibly a browser flaw). Looks like an excel spreadsheet that someone created. I can make something just like that in a matter of minutes with whatever information, true or false, I wish to put into it.

Latest Discussions»Retired Forums»2016 Postmortem»Screenshot of VAN actions...