So I surf on over to The UpTake this afternoon to see if the winter storm we got last night will make it hard for Franken’s witnesses to make it to the courtroom today — the Franken team won’t rest now until tomorrow because of the danged storm — and this greets me at the front page:
COLEMAN DONOR DATABASE LEAKED…AGAIN!
Wikileaks.org releases database after Coleman refuses to notify donors – Coleman reps claim database did not leak earlier, despite evidence to contrary
The short story: The Coleman campaign claimed about six weeks ago that his website was allegedly crashed by thousands of people looking to see if their absentee ballots were on Norm’s list of rejected absentee ballots. Local blogger MNPublius showed evidence indicating that Norm’s people may have ‘crashed’ their own site by hiding it for a period of time so they could blame the disappearance on being overwhelmed by visitors. IT security consultant Adria Richards decided to investigate the situation — and found a security nightmare:
I had to see what all the fuss was about. Was there really an attempt to bring down the website due to political unrest with these ballots in my state? Were the allegations of a poorly coded website true?
What I got instead was a plain text listing of directories…
The Database of Norm Coleman
That’s right: She stumbled upon Norm Coleman’s donor database. Complete with credit-card information, home addresses, and phone numbers.
Even worse: Ms. Richards found that she could freely access a page that allowed for the creation of database administrators.
Now, this was back in late January. She made this public in late January. The Minnesota Independent wrote this up in late January. She warned the Coleman people to fix their flippin’ website and secure it in late January.
They didn’t fix their flippin’ website, and now they’re blaming ‘hackers’ and telling their donors to cancel their credit cards because the donor information they failed to secure, even after being warned over a month ago to do so, is now being posted at Wikileaks. (In case you’re wondering, the Donatelli Group, which does the websites for several dozen Republican candidates — as well as Joe Lieberman — and has ties to the Swift Boat movement, was in charge of keeping track of the Coleman donations according to The UpTake’s Noah Kunin on the liveblog this afternoon.)
[UPDATE : Norm could be in serious legal hot water over this. Neglecting to fix a known vulnerability on a site charged with securing credit-card data is a big, big no-no.]



27 Comments








Support this site!
Subscribe to the newsletter
Advertise on Firedoglake
Send
us your tips
Make us your homepage
About FDL Action
Sounds like this financial expertise qualifies them to take over AIG.
Classic 11th hour ploy by Coleman, just like his standard practice of filing meaningless lawsuits right at the end of each of his campaigns to garner sympathy.
This time, however, I think the call for canceling credit cards has more to do with the GOP brand of professional victimhood. Now he’s got another way to demonize Franken, no doubt claiming it’s evil Franken hacker supporters harassing Coleman and his poor supporters.
So, did it turn out that Coleman had gotten millions of donations? How many donors are on the list?
Jesus Christ on a pogo stick–Franken should be seated for this reason alone.
You got it.
I predicted this in Jan, and when I saw this story spring up in the last day, I knew they were launching the PR ploy. It’s really quite pathetic how uncreative and predictable these clowns are. BigMedia plays along and lets them keep getting away with the same crap over and over. Wonder if Donatelli Group worked in the Traitor Joe site “hack” during the Lamont campaign?
You will never find a bigger whiner and complainer, and someone who plays the victim more than a modern-day Repub. And of course, that leads to one of their other overused tricks of projection, where they constantly whine about Liberals being all these things. They’re so boring on so many levels…
I blame Ned Lamont supporters.
Around 5,400 or so, IIRC.
I won’t go check it out because I don’t want to be accused of hacking, but people who have say that the donor records include street addresses, phone numbers, and the last four digits of their credit card numbers — AND the three-digit numbers on the backs of the cards!
Well, that’s one way to finance his upcoming Legal Expenses …
I am SO glad I resisted the temptation to make a donation to Norm…:-)
As a Franken supporter you’re already a suspect, doncha know…
That early photo of Coleman is eerily reminiscent of representations of Jesus I’ve seen hanging in church Sunday schools. That’s a scary thought. Maybe we are in more trouble with the non-seperation of chruch and state than we thought?
well… the RNC chairmanship should be open soon. Perhaps Norm would be interested in applying for that job. I hear the party wants to increase its presence on the internets….
(You know: Norm left in the dust with not even one friend- his calls never returned, not invited to the costume balls, shopping at Nordquist’s solo, unable to get front row or first class tickets- there are little pockets of heaven on earth after all.)
Thanks for the great post, PW!
If Norm heads the RNC I would like to see him continue Steele’s hip-hop strategy. Coleman is long overdue for a Joaquin Phoenix makeover.
God! Get these people out of Congress! This is almost as idiotic as Sen. Pat Roberts (R-Kansas) and Rep. Pete Hoekstra (R-Michigan) posting Nuclear weapons schematics and nerve gas recipes on the web for all to see…conveniently in Arabic. All in some sort of effort to “allow” the public (the Arabic-speaking portion of it in any case) to translate those evil Saddam materials to locate unknown weapons programs. One problem…Iran had already turned over these pre-1990 documents to the US/UN after Gulf War I and destroyed the facilities. There was no need or value in posting those docs. But it did allow potential terrorists access to them!
Now we learn Normy, a Republican appointee to the Senate Sub-
MoronCommittee on Science and Technology, and a member of the Committee on Homeland Security…doesn’t even know enough about firewalls and passwords to protect his own contributors.But all is well, since Normy joined the Jewish Congressional Group (AIP*C lobbyists) about that time…so his contributor list was expressly up for sale as it were. So why not spread the wealth! Besides, most of those peoples accounts are likely bankrupt anyways. Or will be soon ;-)
Norm could revert to his Woodstock dope-miasma days and try to appeal to the anarcho-libertarians amongst the Baby Boomers! Hey, the Deads back tourin’!
It’s been awhile since Norm was last spotted at Burning Man.
Speaking as someone who gave a lot of money to the Franken campaign, this sounds a LOT to me like when Joe Lieberman’s webserver was “hacked” during his run against Ned Lamont. Only AFTER the campaign was it revealed (when nobody was paying attention anymore) that nobody had hacked the server, the Lieberman campaign had crashed it themselves.
Speaking as an information security professional, what Adria Richards did was rather risky. She could lose professional certification for deliberately penetrating the (admittedly nonexistent) security of a website without authorization. On the other hand, if she doesn’t have security certifications, then the risk is rather lower. I did something similar on local TV once, back before I had my security certification. Ah, good times, good times…
yeah, except here everybody just assumes that Norm’s a crook… most of all, his supporters and the rethug party.
I hate to say this, but I’m hoping a bunch of personal data got tagged off the site. That would really piss off what supporters he had. And yes, this one act is so negligent and so stupid that Franken should be immediately seated. That’s it. Game over.
Par for the course for Republicans.
The Coleman campaign probably had that site run up by some schmuck who was the best they could expect to find at $10/hour. So it turned out to have more holes than a spaghetti strainer.
http://government.zdnet.com/?p…..ag=nl.e620
Thanks for the update, PW
Here’s the money quote from that ZDnet piece you linked to.
Note the way this phrase parses out: “they did not find evidence that our database was downloaded by any unauthorized party”.
Most firewalls (including Checkpoint and Cisco Pix) are not going to log information from the Layer 7 part of the packet, the Application layer. In fact, the last time I monitored Checkpoint logs as part of my assigned tasks, you could not even configure them to log specific TCP flags. Not Checkpoint’s fault.
A firewall is a Layer 3/4 access control device, not a proxy server. And a firewall on a heavily traversed bastion system may log gigabytes of data per day just capturing basic things like time, protocol, packet size, source IP, destination IP, source port, destination port, and so on.
The server’s operating system logs are only going to capture items thought important when it’s set up. Capturing all times of access to an arbitrary non-system data file, such as a donor database, is not likely to be one of them.
In neither case is it likely to be easy, or even possible, to find evidence that a given sensitive file was subject to unauthorized access.
I’m a big believer in log analysis. But there are some sorts of unauthorized activity this won’t pin down for you.
A broader but highly relevant question might be, “was it possible that the server in question was compromised during time period thus-and-such?”
That is likely to require a far deeper inspection than simple log analysis can give you.
I see nothing in the ZDnet piece to indicate than the Coleman campaign had even asked that question, let alone had an answer to it.
I’m just aghast. A one-year subscription to Thawte’s top-of-the-line secured business package is only $700. A two-year one is $1200. They could have done that and saved themselves a ton of agony.
Coleman’s donors ARE mad. And they’re blaming George Soros. Not kidding. http://minnesotaindependent.co…..ter-breach
Albatross,
I don’t have a security certification or any other vendor. Audits and security probes are not my primary focus but good point on if I was breaking protocol as it relates to my certification like, “All doctors must wash their hands before surgery”. That would be gross.
I suggested that the Coleman Office should have called a well known local ISP and hosting provider like VISI and asked for one of the senior engineers to help them.
Sometimes, guys are too proud to ask for driving directions; this sort of thinking seeps into IT and Website consultants. “Don’t let them know, you don’t know and don’t ask for help, ever”
I have my A+, MCDST and MCSA certifications.
I help business owners generate more revenue in less time. This means having computer that work, warranties on hardware, backups and all that good stuff. What I really am enjoying is helping my clients grow.
In the last year blogging, cloud computing and social networking have been everywhere. In fact, I see Fire Dog Lake runs a modified version of WordPress and that’s awesome!
I focus on creating honest and authentic working relationships with my clients and sometimes I have to tell them, “Hey, not having a password on your laptop is not secure. Sending passwords by email is not secure.”
My clients don’t consider me a hacker…I asked!
Thanks,
Adria Richards
Organic Technology Consultant
———————————————-
Visit the website http://adennetworks.com
Visit the blog: http://butyoureagirl.com