Oregon's Voting System Is Being Absolutely Raped, With Country Wide Implications - Ted Wheeler's Vote Was Change to Trump

[carltondanks]

this seems kind of loose right now, i'm gonna wait and see if there's more proof before i say any dumb shit

 

[HumanHive]

There’s no way they can fix this in time.

 

[Sam Losco]

"Inspect element"?

It allows you to change web page code in the browser. The changes don't last through a refresh. However, it can be used to submit data on poorly designed pages. I've done so before on a page where it had a field disabled I needed to change. I enabled it via inspect, changed it, and clicked Submit and it took what I changed the field too.

It also allows for doctoring web page screenshots without needing to touch a photo editing program.

 

[Ms. Cegination]

"Inspect element"?

Hit right click and click on 'inspect element'. Overly simple explanation is it lets you change text on the page, which is why proper archival is important.
Edit: Ninja'd.

 

[JamFlowMan]

Can't say i'm surprised a last minute government website is full of issues. Remember the Obamacare launch where the website crashed on day 1 like it was some AAA online videogame?

 

[Feline Supremacist]

So just mucking around with this invalidates any ballots cast/mailed in? What a disaster. Imagine the pajeet who got paid to do this and didn't even set up a password for users.

 

[Jet Fuel Johnny]

Well, that explains why my wife and I's voting registration kept changing.

 

[HumanHive]

I’m a soft kitty, please pet me.

I’m not going to pet you, you sick fuck.

 

[crocodilian]

Fake news. I have a family member in Oregon. I totally didn't just log into that page using their info.
You can't submit a ballot through this page. The "Mark my ballot" is just a way to do a mock marking and then you can print out a summary. It's not the same thing as a real ballot. You can't change someone's vote.

You can't alter an existing vote. What you can do is cancel the prior vote (and then edit address data so another ballot won't be sent.)

 

[Sam Losco]

You can't alter an existing vote. What you can do is cancel the prior vote (and then edit address data so another ballot won't be sent.)

View attachment 1669743

But you'd have to do that on a large scale to have any effect and doing so would be difficult given that you have to verify. Right in that screenshot, and as I pointed out in previous posts, you need either, the persons DMV number, the last 4 of their social, or sending in one of those listed items. Some easier to obtain than others, but still.

Doing this on a few people, sure, but on a mass scale, you'd need a large team of people working on this. With less than a month to go, thousands of people suddenly doing this would likely attract some attention.

 

[Eris!]

But you'd have to do that on a large scale to have any effect and doing so would be difficult given that you have to verify. Right in that screenshot, and as I pointed out in previous posts, you need either, the persons DMV number, the last 4 of their social, or sending in one of those listed items. Some easier to obtain than others, but still.

Doing this on a few people, sure, but on a mass scale, you'd need a large team of people working on this. With less than a month to go, thousands of people suddenly doing this would likely attract some attention.

A large team of people like... the DNC?

 

[crocodilian]

But you'd have to do that on a large scale to have any effect and doing so would be difficult given that you have to verify. Right in that screenshot, and as I pointed out in previous posts, you need either, the persons DMV number, the last 4 of their social, or sending in one of those listed items. Some easier to obtain than others, but still.

Doing this on a few people, sure, but on a mass scale, you'd need a large team of people working on this. With less than a month to go, thousands of people suddenly doing this would likely attract some attention.

A poster on /pol/ claims he's brute forcing common names to the effect you describe.

 

[Sam Losco]

A poster on /pol/ claims he's brute forcing common names to the effect you describe.

View attachment 1669761

"A poster of /pol/ claims"
Are you even thinking about what you're saying?

So he's brute forcing common names AND DOB? Common names easy, but also finding matching DOB complicates that.

AND AGAIN, he would also have to be brute forcing their DMV number, last 4 of their social, or fabricating some other proof of identity.

You seriously believe some anon on pol, that is apparently in Russia or some similar language speaking country, is going to successfully do this and completely fuck up the Oregon system?

 

[HumanHive]

"A poster of /pol/ claims"
Are you even thinking about what you're saying?

So he's brute forcing common names AND DOB? Common names easy, but also finding matching DOB complicates that.

AND AGAIN, he would also have to be brute forcing their DMV number, last 4 of their social, or fabricating some other proof of identity.

You seriously believe some anon on pol, that is apparently in Russia or some similar language speaking country, is going to successfully do this and completely fuck up the Oregon system?

DOB matching is easy with facebook.

 

[Quijibo69]

Voting, play stupid games win stupid prizes.

 

[ADHD]

But you'd have to do that on a large scale to have any effect and doing so would be difficult given that you have to verify. Right in that screenshot, and as I pointed out in previous posts, you need either, the persons DMV number, the last 4 of their social, or sending in one of those listed items. Some easier to obtain than others, but still.

Doing this on a few people, sure, but on a mass scale, you'd need a large team of people working on this. With less than a month to go, thousands of people suddenly doing this would likely attract some attention.

Have their been enough hacks of companies that would provide the name, DOB, and the SSN or last 4 digits of it? Like the Experian hack from a couple of years ago, maybe?

 

[crocodilian]

"A poster of /pol/ claims"
Are you even thinking about what you're saying?

So he's brute forcing common names AND DOB? Common names easy, but also finding matching DOB complicates that.

AND AGAIN, he would also have to be brute forcing their DMV number, last 4 of their social, or fabricating some other proof of identity.

You seriously believe some anon on pol, that is apparently in Russia or some similar language speaking country, is going to successfully do this and completely fuck up the Oregon system?

The data necessary to accomplish this, as you describe, fell into somebody's hands as of February this year.

There's no guarantee that particular poster has access to this info, nor whatever script he's written actually works, but it's demonstrable that 4chan found a vulnerability in the Oregan ballot registration system and they've been toying with it. It's not impossible to brute force the information required to cancel ballots, either; a lot of this is simply in public records, such as the white pages. Have a look at the four threads on /pol/ showing how they figured it out: 1 2 3 4

Oh, and in case anyone is wondering: the 4chan janitors are hard at work scrubbing all future threads related to the topic.

 

[Larry David's Opera Cape]

Also a local, am very familiar with this system, and pol is full of shit this time. You need to have already committed major identity theft to get beyond that print preview page and change someone's registration or where the ballot is sent. You need their SS, DMV, or other info you should not have without breaking the law. Just pulling dox and addy off the intertoobs will not do it, you need actual legal documents in your paws. I had to put my signature in an electronic file when I registered and they warned me, sign with your middle name now or not, and remember how you signed, because they check very precisely against that file when they look at the back of the envelope each time you vote. So if you have John O. Blow in the record, and you sign it John Blow, they may very well call and investigate. You would not be able to get away with this large scale without quickly getting caught and thrown in the federal clink. I double checked and the "made him vote for Trump" screen is indeed just a print preview. You would need his SS or driver's license and to forge his signature to send that vote in, and then when he didn't get his ballot, he would call and complain and they would find out what you did.

 

[Eris!]

You seriously believe some anon on pol, that is apparently in Russia or some similar language speaking country, is going to successfully do this and completely fuck up the Oregon system?

Yeah.

 

[attractive_pneumonia]

The data necessary to accomplish this, as you describe, fell into somebody's hands as of February this year.

They don't need that dump, DOB and Full name are easily accessible via a service like whitepages: https://www.whitepages.com/name/Edward-Tevis-Wheeler/Portland-OR/2sc2xyc and pair that with https://www.mylife.com/edward-wheeler/e930795123756 and you have a good rundown of Ted Wheeler as an example of a known Oregon resident we can use (in his case you could just pull DOB and name from Wikipedia). There are likely OSINT tools on github already that scrape these webpages for their publically facing information and combine them together into one blob of json for you to manipulate. It wouldn't be too difficult for even a middling script kiddie to cobble together a bot using said tools and write up a second bot that parses said using selenium to crash through and change shitloads of stuff. Not to mention there is huge dumps of this information out on the darkweb from the various leaks, the credit rating agency leaks had something around 150 million or so people in it and that actually included data such as social security numbers. This is just another shitshow in a long line of security screwups for American citizens because they lack a unifying secure asset to pin identity information to. Social Security is a particularly shit method we've cobbled together and that works via obsfucation because it has no security built in.

Provided that you can invalidate or change the vote from this webpage. I'm not stupid enough to try my own hand at this, nor do I recommend anyone do so.