USB Drives to Move Election Malware

From “Can Georgia’s electronic voting machines be trusted?“:

Though voting machines aren’t directly connected to the internet, witnesses testified last week that USB drives are used to transfer election data from internet-connected computers to election servers.

So, computers that are connected to the Internet are used to move data to the election servers. Malware can be used to reach those computers. The theory here is the election servers by not being on the Internet are more secure because they are “air-gapped.” However, Stuxnet eight years ago taught us: Not as much as once thought.

Stuxnet was never intended to spread beyond the Iranian nuclear facility at Natanz. The facility was air-gapped and not connected to the internet. That meant that it had to be infected via USB sticks transported inside by intelligence agents or unwilling dupes, but also meant the infection should have been easy to contain.

USB drives are the prime vector to contaminate air-gapped computers. It sounds like the election officials are aware because they added this claim to the article:

Election officials say security precautions protect voting machines from tampering. For example, a USB drive is reformatted every time before it’s plugged into an election server.

I find it unlikely they download data onto a USB drive, delete that data by formatting the USB drive, and only then insert the blank USB drive into an election server. It would be easier just to not use a USB drive at all. They probably mean they format the USB drive while it is in the potentially infected Internet-connected computer, which would not prevent malware from inserting itself onto the USB drive at the time the GEMs data is copied onto the USB drive.


18th Anniversary of Blogging

Here is my first blog post from 18 years ago, which makes it as old as a legal adult. Wow…

Two Footballs

I got started at a place called Diaryland. A friend, Lacey, had started using it. Back in those days, I was up for trying pretty much anything geeky friends were doing. Blogging was a natural place for me to go.

Diaryland became Pitas and the site there was the first Rants, Raves, and Rhetoric. As other platforms became available, I tried them all:

My activity is far less now than it was back in 2000, but as I understand, most people active back then primarily post on Facebook or Twitter.

Qualification for President

The office of President of the United States is an enormous one. This is a person who in order to run the government has to appoint over a thousand positions. The senior advisers number over a hundred.

Being able to locate and retain the services of high quality people is a huge challenge. Throw in the winner has less than 3 months from election to occupancy to get a good start. And the longer it takes, the more people question your ability to do the job.

Looking at the current administration, it strikes me that painfully obvious issues are starting to bear fruit.

  1. The President was picked by voters to shake up Washington elites. People like the Speaker of the House and Senate Leader are having to acclimate to change. This is why PotUS hates the legislation, but has to sign anyway to preserve the symbiosis.
  2. As an non-politician outsider, his inital advisers were limited to early supporters who tended to be fringe elements who burned their normal bridges. Or hacks no one else would hire. These are people without power or influence who suddenly have to figure out how to wield it. They were fringe because no one trusted them. They are why scary policy keeps getting retracted.
  3. Later advisers are elites whe saw the winds of change (sycophants). They are there because power is there. These are the people getting fired within a year because of corrupt instincts.
  4. Once everyone saw who would be President, longtime political operatives who disagree with most instincts of the president but love country and party signed on. These are the people trying to restore the status quo from the hacks and sycophants.
  5. The Deep State are career government employees of all parties. They provide the inertia that is the reason why presidential candidates usually to cause much actual change. The government needs them to function and there are millions compared to the thousand appointees.

The anonymous Opinion piece about the Republican Resistance is part of #4. There probably has always been elements of the above in administrations. Other administrations appointed almost all political operatives or people mentored to become one. Is it better? It worked smoother as these people were aligned with the bosses and easily replaced when not. It gets stuff done and allows the PotUS to focus on policy instead of little fires every day.

Talk about a Constitutional crisis is probably overblown. As is calling people keeping the status quo traitors. Their oath of office is to the country not the President. Many people are going to do their best for the country.

Next time, perhaps people will better consider whether a candidate has shown the experience of setting up a government. How they run their campaign is a useful way. Establishing functional headquarters in states who run a strong ground game talking to voters and being able to bring on advisers with strong connections shows what kind of government they will build.