Welcome to DU! The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards. Join the community: Create a free account Support DU (and get rid of ads!): Become a Star Member Latest Breaking News Editorials & Other Articles General Discussion The DU Lounge All Forums Issue Forums Culture Forums Alliance Forums Region Forums Support Forums Help & Search

LiberalArkie

(16,495 posts)
Tue Nov 19, 2024, 05:06 PM Tuesday

If Starlink was providing the internet for some states, what does that mean if the data is encrypted.

Implications of the attack

A man-in-the-middle attack may permit the attacker to completely subvert encryption and gain access to the encrypted contents, including passwords. A successful attacker is able to inject commands into terminal session, to modify data in transit, or to steal data.

The attack also allows injecting malware into any binaries and software updates downloaded through the system. Several attack groups and malware packages have used this technique in the past.

For web traffic, the attack allows utilizing browser vulnerabilities for breaking into the computers running the browsers or completely subverting any browser-based application and stealing passwords and other confidential data from them.


https://www.ssh.com/academy/attack/man-in-the-middle#:~:text=A%20man-in-the-middle%20attack%20may%20permit%20the%20attacker%20to,modify%20data%20in%20transit%2C%20or%20to%20steal%20data.

12 replies = new reply since forum marked as read
Highlight: NoneDon't highlight anything 5 newestHighlight 5 most recent replies

tritsofme

(18,504 posts)
5. It's exactly the same flavor of nonsense. I really thought Trumpers had the market cornered on such idiocy.
Tue Nov 19, 2024, 05:14 PM
Tuesday

The last few weeks have taught me that is wrong.

jimfields33

(18,837 posts)
2. I'm not sure. But do we want people without
Tue Nov 19, 2024, 05:09 PM
Tuesday

Internet? Why hasn’t the federal government found a way to do this?

LiberalArkie

(16,495 posts)
6. The rules are that the voting machines can not have modems or transmitting devices.
Tue Nov 19, 2024, 05:28 PM
Tuesday

They do not. They present your printed car to a tabulating machine.. Now how does that data get to the state capital so that the total for the state be presented?

In the old days it was sent by state troopers. Some times the data was not the same as it was when it left the polling spot.

Later on they used leased secure lines from the phone company to transmit the data to the state.

However some have said that some of the states decided to transmit the data back to the capitals via StarLink.

If so then that could have been intercepted by StarLink, modified and continued its travels to the state capital.

An normal audit of the data sent from the tabulators to the state SOS offices would reveal that.

SickOfTheOnePct

(7,339 posts)
8. Even if the data were sent via inteenet
Tue Nov 19, 2024, 05:34 PM
Tuesday

and was manipulated en route, that would be discovered when the hard drives and paper receipts from the tabulators was checked against the transmitted numbers.

LiberalArkie

(16,495 posts)
12. Correct... A few years ago a few counties here in Arkansas did an audit by running the same
Wed Nov 20, 2024, 07:46 AM
22 hrs ago

paper ballot cards through the same machine and come up with the same total and called the audit good.. However when the cards were hand counted the results were not the same.
But when the same cards were run through a different tabulator, a third result was had. Which in this case was correct.

Abnredleg

(933 posts)
4. Voting data wasn't sent over Starlink
Tue Nov 19, 2024, 05:12 PM
Tuesday

Multiple election officials confirmed this. Instead, it was used to connect the chap books to the voter registration systems for same day registration and dealing with provisional ballots.

It is against the law in almost all states, including the swing states, to connect voting equipment to the Internet, which means the equipment has no modems and is airgapped. This also means there is no state system to upload data to. Therefore there is no opportunity to execute a man in the middle attack.

LiberalArkie

(16,495 posts)
7. Oh, I did not know that the state Secretary of State office had nothing at all to do with the state elections.
Tue Nov 19, 2024, 05:31 PM
Tuesday

Do they just phone it from a county 250 miles from the state capital or maybe just send a deputy to hand carry a USB device?

XorXor

(682 posts)
10. Is there any evidence to suggest this happened?
Tue Nov 19, 2024, 05:38 PM
Tuesday

I mean actual technical evidence or reports to suggest that systems run by the the people running the elections ignored warnings that attacks like this usually give off, or they didn't secure their systems to prevent certificates signed by a bad CA from being trusted, or any other security mechanisms that should be in place to protect data that goes over an untrusted network? Why should I believe that the people whose job it is to secured the election systems failed at their jobs? Also, has it been confirmed that starlink was used for the voting machines to communicate to anything?

That being said, if it was my goal to cause FUD about the election results I would throw out words like homomorphic encryption or ciphertext modification attack, or chosen ciphertext attack, etc.... If you don't know what those are, look them up, and let those creative juices flow. It doesn't have to make technical sense to those who actually know how it works, but if done right it totally get a lot of people to have doubt, even the techies who aren't crypto or math nerds will be unsure.

Latest Discussions»General Discussion»If Starlink was providing...