Konnech's Shocking "Back-Door" Access Into U.S. Election Data: Network Diagram

Quote:Los Angeles County prosecutors allege "Chinese contractors" had "superadministration" access to “astounding” amounts of data in what is "probably the largest data breach in United States history.”

Quote:The complaint claims that Luis Nabergoi, a Konnech project manager overseeing the Los Angeles contract, wrote in a Chinese-owned messaging app that "any employee for Chinese contractors working on PollChief software had 'superadministration' privileges for all PollChief clients."

Sam Faddis, retired CIA operations officer and renowned national security author, wrote in his Substack:

“An individual with super administration access to a system can do effectively anything inside that system. He or she can delete data, steal data, alter data, change programming, etc.

Perhaps most importantly, that individual can cover his or her tracks, because they can potentially also access and alter all security protocols and programs.

So, Konnech, which has numerous questionable ties to Chinese entities was allowed to punch a hole into our election systems, and then Konnech was allowed to grant that same level of access to unknown “contractors” in China.”

https://kanekoa.substack.com/p/konnechs-...oor-access[/quote]

Yeah, someone screwed up that design for sure. What isn't clear is if the data was actually compromised or just accessible from the Chinese contractors? Unfortunately this is not abnormal. As someone who works in Information Security I see this all the time... especially in legacy systems that have been around a while. It is only recently (last 5 years) that most organizations started really taking security seriously.

(10-18-2022 12:12 PM)mlb Wrote:  Yeah, someone screwed up that design for sure. What isn't clear is if the data was actually compromised or just accessible from the Chinese contractors? Unfortunately this is not abnormal. As someone who works in Information Security I see this all the time... especially in legacy systems that have been around a while. It is only recently (last 5 years) that most organizations started really taking security seriously.

Basically, if the article is accurate----there is no way for us to ever know if the election data was accessed, altered, or copied as any actions could be completely covered up. So much for the "most secure" election ever.