GOP Data Firm Accidentally Leaks Personal Details of Nearly 200M American Voters

Just throwing it out there but maybe this was intentional to cover up tracks of collusion with Russia. "Oh we didn't share the voter roll data with them, they must've gotten it from this publicly available server."

Hmmm. How would one prove that, though? Timestamps can be doctored.
 
Two... hundred... million? Holy fuck.

Edit: Okay, this is kind of a key graph

So far, Deep Root doesn't believe its proprietary data was accessed by any malicious third parties during the 12 days that the data was exposed on the open web.
 
Two... hundred... million?

giphy.gif
 
Say you wanted to share all of your data with a third party, maybe even another country who wanted to use it for their own goals, this would be a pretty clean way to do it, right?
 
What a great story for everyone. The right can complain about leakers. Democrats can relive the 2016 election once again. The Trump-Russia conspiracy circles can attribute this as a retaliation hack for sanctions. Everyone wins but the people in these documents.
 
Remember this article every time you hear the claim that Russian hackers only successfully exfiltrated politically sensitive data from Democratic organizations last year.
 
What the hell is up with all of these stories of unsecured databases and IoT devices lately? It's fucking Cybersecurity 101 for fucks sake.
 
I can understand private companies doing tons of data gathering, cross referencing and general Big data processing.

But the fact the political parties are aware of this, finance and have access to it without breaking any law, is interesting. I mean, this is straight up individual profiling.

Even if you remove the whole Racial/Religion prediction, this still is like the worst nightmare of any Alex Jones aficionado: The government can tell if you are gun lover and where you live. So theoretically, they can go and take away your weapons and stuff.



I mean, what's the point of semi "defang" the NSA and other governmental entities, if regular companies can do the job with less regulations (are there any?) anyway. This is the age of wild conspiracies becoming a reality.
 
What the hell is up with all of these stories of unsecured databases and IoT devices lately? It's fucking Cybersecurity 101 for fucks sake.
People have been warning about the incoming threat from IoT. Very few have any sort of defensive measures, easily one of the weakest links in a network possibly.
 
People have been warning about the incoming threat from IoT. Very few have any sort of defensive measures, easily one of the weakest links in a network possibly.
The botnet should have been a pretty big wakeup call, but the most baffling thing to me was that Wi-Fi dildo with a camera in the end that was completely unsecured. Who is designing these systems and thinking "yeah that's okay, ship it"?.
 
Say you wanted to share all of your data with a third party, maybe even another country who wanted to use it for their own goals, this would be a pretty clean way to do it, right?

Hmm

Not the best way.

As far as I know, Amazon services track bytes downloaded. So if anyone were to subpoena the data from Amazon they should be able to tell. Amazon probably keeps IP logs too.
 
Just throwing it out there but maybe this was intentional to cover up tracks of collusion with Russia. "Oh we didn't share the voter roll data with them, they must've gotten it from this publicly available server."

This is not wholly dissimilar to the clandestine use of Twitter coded messages during the campaign. The odd coded accounts posting odd coded messages that turned out to be sharing of internal polls to coordinate with PACs.

stored on the cloud server without the protection of a password and could be accessed by anyone who found the URL

These URLs are very unique, and nearly impossible to find, but if the intended audience has them, it's a way to distribute info "publicly" much like the Twitter messages.
 
So is this kinda data-collection on voters legal in the US? the whole speculation on religion and so on?
In regards to collection, yeah, probably.
The data leak contains a wealth of personal information on roughly 61 percent of the US population. Along with home addresses, birthdates, and phone numbers...
This part is standard in every voter registration file I've ever seen. Phone numbers weren't usually required and tended to be pretty spotty at best. But yeah, all of this info is collected when you register to vote and the election agencies do make this available to campaigns. This helps keep campaign costs down because campaigns can target their efforts towards people they want.

...the records include advanced sentiment analyses used by political groups to predict where individual voters fall on hot-button issues such as gun ownership, stem cell research, and the right to abortion, as well as suspected religious affiliation and ethnicity.
I'm not sure what would be illegal about this, it's just basic market analytics of bouncing data off one another.

Take the voter registration file and bounce it against a list from a special interest group that you have. Boom, now you can target by district and membership in that special interest.

Or bounce it against another publicly available list. The Iowa GOP made gains in the early 90's by bouncing the voter file against vehicle registrations because the Democrats had made a change in minivan registration that hurt families.

Or bounce it against data you generate yourself. I've seen mass surveys that polled how a voter stood on 15-20 issues, which was then bounced against the voter file and used to target mail and other campaign efforts.

Or, be like Google/Amazon and use the available information you do have to make inferences/assumptions/speculation about a person.

I can understand private companies doing tons of data gathering, cross referencing and general Big data processing.

But the fact the political parties are aware of this, finance and have access to it without breaking any law, is interesting. I mean, this is straight up individual profiling.
So? There are profiling you, they want to know whether you're likely to vote for them. If you are, they're going to do everything they can to make sure you vote. If not... well, if they start acting on that, that's when you start investigations.
 
Hmm

Not the best way.

As far as I know, Amazon services track bytes downloaded. So if anyone were to subpoena the data from Amazon they should be able to tell. Amazon probably keeps IP logs too.

It creates plausible deniability and Amazon's tracking could be easily defeated with some sneakernet movement.

Either way, I think we can assume that hostile parties have access to this information now. They can and probably will weaponize it for the 2018 elections.
 
The botnet should have been a pretty big wakeup call, but the most baffling thing to me was that Wi-Fi dildo with a camera in the end that was completely unsecured. Who is designing these systems and thinking "yeah that's okay, ship it"?.
Firms that have no clue about the internet beyond hooking up WiFi to anything and everything.
 
How do you find out if you're on the leaked list of information? Kinda scary thinking shit about you is available to anyone now.
 
Top Bottom