Security: Bush Vs. Kerry Website

Full Version: Security: Bush Vs. Kerry Website

GovernmentSecurity.org > General GSO > In The News

beardednose

Aug 18 2004, 01:32 PM

This story has been changed from an earlier version, adding that Kerry's site also tracks users with Web bugs and cookies.

George W. Bush and John Kerry may be tied in the polls, but Bush appears to be well ahead of Kerry in the number of security holes on his official campaign website.

On Sunday, security analyst Richard Smith did a quick check of the Bush and Kerry campaign sites and found several security problems on each, all of which are common on many other websites.

But after Smith posted a report of his findings to several security lists, others opted to do a deeper analysis and found some significant problems on Bush's website. One researcher used a commercial program called GFI LANguard to scan Bush's site. He said he found over 30 security faults. The researcher asked not to be identified because of concern that his scans could be construed as illegal under the Patriot Act. He submitted a digital copy of the results of the scan to Wired News.

According to the scan, the security problems on the Bush site include potential vulnerabilities that could conceivably allow a malicious attacker to gain remote control over the server, crash it, tamper with information on Web pages and compromise stored information.

"Several of the faults are critical; they can be easily exploited with serious repercussions," said the researcher. "And the fact I could run this scan remotely points to the complete lack and utter uselessness of their network security."

The researcher said Kerry's site stopped the GFI LANguard scan before he could get any data.

Read the rest....

http://www.wired.com/news/infostructure/0,1377,64036,00.html

-----------
BN says:
Keep in mind that this reflects more on the webmaster more than the candidate. Sure, the candidates have people who hire folks to cover the details, but at this level (and many other levels much lower), you have to depend on those below you. But you should still be able to depend on your main folks, who watch the next level down, who watch the next level down and so on.

Terminal

Aug 18 2004, 04:25 PM

haha quite funny

. hope this wont affect voters
lol

beardednose

Aug 27 2004, 03:00 AM

Probably not on this board, vicky, as I see this generated tons of comments..

This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.


Help - Search - Member List - Calendar Full Version: Security: Bush Vs. Kerry Website GovernmentSecurity.org > General GSO > In The News beardednose Aug 18 2004, 01:32 PM This story has been changed from an earlier version, adding that Kerry's site also tracks users with Web bugs and cookies. George W. Bush and John Kerry may be tied in the polls, but Bush appears to be well ahead of Kerry in the number of security holes on his official campaign website. On Sunday, security analyst Richard Smith did a quick check of the Bush and Kerry campaign sites and found several security problems on each, all of which are common on many other websites. But after Smith posted a report of his findings to several security lists, others opted to do a deeper analysis and found some significant problems on Bush's website. One researcher used a commercial program called GFI LANguard to scan Bush's site. He said he found over 30 security faults. The researcher asked not to be identified because of concern that his scans could be construed as illegal under the Patriot Act. He submitted a digital copy of the results of the scan to Wired News. According to the scan, the security problems on the Bush site include potential vulnerabilities that could conceivably allow a malicious attacker to gain remote control over the server, crash it, tamper with information on Web pages and compromise stored information. "Several of the faults are critical; they can be easily exploited with serious repercussions," said the researcher. "And the fact I could run this scan remotely points to the complete lack and utter uselessness of their network security." The researcher said Kerry's site stopped the GFI LANguard scan before he could get any data. Read the rest.... http://www.wired.com/news/infostructure/0,1377,64036,00.html ----------- BN says: Keep in mind that this reflects more on the webmaster more than the candidate. Sure, the candidates have people who hire folks to cover the details, but at this level (and many other levels much lower), you have to depend on those below you. But you should still be able to depend on your main folks, who watch the next level down, who watch the next level down and so on. Terminal Aug 18 2004, 04:25 PM haha quite funny . hope this wont affect voters lol beardednose Aug 27 2004, 03:00 AM Probably not on this board, vicky, as I see this generated tons of comments.. This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.