News for hackers. Stuff that matters.
Re:Macron condemns 'massive' hacking attack by noelrock on Friday May 05, 2017 @07:36PM (#14277624)
Get real.

Political campaigns, outside of the States, are very much bootstrapped. And IT folks very much not minded to volunteer their time.

Citation: I'm a member of a European Parliament on his third term in politics. Of my 200+ volunteers, not one is in infosec. Within my party, maybe 60 staff total are paid for a campaign.

Re:Macron condemns 'massive' hacking attack by walrus01 on Friday May 05, 2017 @07:37PM (#14277632)
I am really skeptical that considering the ongoing total operational budget on a yearly basis for all of the facilities and support structure in Strasbourg there are no infosec/netsec professionals. If that's really true, then to put it crudely, you're utterly fucked. Because Russia certainly does have money for blackhat infosec/netsec types.
Re:Macron condemns 'massive' hacking attack by objclxt on Friday May 05, 2017 @07:55PM (#14277732)
> considering the ongoing total operational budget on a yearly basis for all of the facilities and support structure in Strasbourg

You're conflating parliamentary budget and staff with a campaign budget and staff. These documents came from his campaign, not a parliamentary office (be it EU or French). For obvious reasons the two don't mix. Campaigns generally operate on extremely restricted budgets, and are naturally transient in nature.

Re:Macron condemns 'massive' hacking attack by walrus01 on Friday May 05, 2017 @07:58PM (#14277750)
okay, true, even so. In a nation the size of France I find it really doubtful that major political parties would go begging for the budget to hire infosec/netsec professionals, considering the amount of money spent on all the other expenses of a major campaign.
Re:Macron condemns 'massive' hacking attack by ajdlinux on Saturday May 06, 2017 @12:18AM (#14278645)
Note that En Marche is a party that was specifically set up for Macron's presidential campaign in April last year - it's not one of France's established parties.
Re:Macron condemns 'massive' hacking attack by literallycancer on Friday May 05, 2017 @08:25PM (#14277872)
FN is financed by Russia, since other banks wouldn't give them a loan. And Le Pen is a contender in the second round so presumably it is exactly the case that major parties can have budget issues.
Re:Macron condemns 'massive' hacking attack by dragonwriter on Saturday May 06, 2017 @09:52AM (#14280221)
> I am really skeptical that considering the ongoing total operational budget on a yearly basis for all of the facilities and support structure in Strasbourg there are no infosec/netsec professionals.

I think you just confused "a European Parliament" (that is, a national parliament in Europe) with "the European Parliament", which is a different thing altogether.

And then also confused an MP (or, in your interpretation, MEP) not having any infosec staff with the whole government (or EU) not having infosec staff.

But then, even with all that, your conclusion isn't all that wrong for the topic at hand; if a major power like Russia targets a particular politician in the West (perhaps aside from the official, rather than campaign, personality of the sitting head of state), there is likely to be a substantial resource asymmetry that favors the attacker.

Re:Macron condemns 'massive' hacking attack by matt4077 on Friday May 05, 2017 @08:01PM (#14277768)
I think OP works for a member of parliament, if I understand them correctly. Their offices are actually not that sensitive. All the secrets are held by the executive, and the EU doesn't even have the sort of military and intelligence institutions that are usually most secretive.
Re:Macron condemns 'massive' hacking attack by throwaway847345 on Friday May 05, 2017 @08:27PM (#14277884)
> I think OP works for a member of parliament, if I understand them correctly.

No, he is saying that he is a member of a parliament. The lower house of the Irish parliament to be exact [0].

[0] https://en.wikipedia.org/wiki/Noel_Rock

Re:Macron condemns 'massive' hacking attack by literallycancer on Friday May 05, 2017 @08:27PM (#14277885)
>EU doesn't even have the sort of military and intelligence institutions that are usually most secretive.

Might just be because the EU is a trade block, it doesn't have secretive military and intelligence institutions because it doesn't have any military and intelligence institutions at all.

Re:Macron condemns 'massive' hacking attack by alva on Friday May 05, 2017 @10:01PM (#14278270)
> it doesn't have any military and intelligence institutions at all.

Better let INTCEN, SIAC, SitCen, EUFOR and EUNAVFOR know that.

The EU is absolutely far, far more than a trade block.

Re:Macron condemns 'massive' hacking attack by walrus01 on Friday May 05, 2017 @10:23PM (#14278335)
and ISAF (now RS/Resolute Support)
Re:Macron condemns 'massive' hacking attack by remarkEon on Saturday May 06, 2017 @06:52PM (#14282707)
ISAF and RS are functions of NATO, not the EU.
Re:Macron condemns 'massive' hacking attack by walrus01 on Friday May 05, 2017 @10:22PM (#14278331)
Well shit, I better let the people in the DGSE and BND know that they shouldn't have access to their data sharing partnership with the NSA. Some guy on the Internet says that the EU doesn't have any IMINT, HUMINT or SIGINT, it must be true.
Re:Macron condemns 'massive' hacking attack by literallycancer on Saturday May 06, 2017 @07:06AM (#14279683)
France or Germany having their own intelligence services is entirely compatible with what I said though. Their allegiance is to their own country first, and data sharing partnerships change little.
Re:Macron condemns 'massive' hacking attack by tangue on Friday May 05, 2017 @09:50PM (#14278234)
I'll just add as a reference that for the french presidential election most campaigns are costing around 5 millions euros ( it's a side effect of a system which fixes this as a max limit for campaign costs refunds, but I guess they can't spend way more)
Re:Macron condemns 'massive' hacking attack by cm2187 on Friday May 05, 2017 @10:32PM (#14278362)
And in France (as in many other countries), most high ranking politicians do not have any kind of technical background. They typically studied political science or other soft disciplines. And are also often of a generation that barely uses computers but do not understand them.

In fact in France there is a general contempt from the political class and the medias for any candidate who is not a literary person.

Re:Macron condemns 'massive' hacking attack by x0ner on Friday May 05, 2017 @09:48PM (#14278223)
I'd be interested in volunteering some time or access to data sets to help protect these sorts of things. Feel free to DM me.
Re:Macron condemns 'massive' hacking attack by jaredklewis on Friday May 05, 2017 @08:17PM (#14277836)
Then political parties need to get real or resign themselves to being hacked.

At the level of Hillary and Macron, the money is there. If infosec people don't volunteer, they will need to be paid for, even if it means running less television ads or what not. Even in Europe campaigns have paid staff. It might mean cuts to something else, but is it worth skimping on security?

As an aside, I'm from the US and have never heard of a campaign looking for infosec volunteers. Are we sure no one would volunteer?

Re:Macron condemns 'massive' hacking attack by JBerlinsky on Friday May 05, 2017 @09:41PM (#14278200)
Shoot me an email (in profile) if you'd like some domain expertise :)
Re:Macron condemns 'massive' hacking attack by topranks on Saturday May 06, 2017 @09:43AM (#14280191)
Wow you are a TD? On hacker news?

Wonders never cease.

Re:Macron condemns 'massive' hacking attack by alva on Friday May 05, 2017 @07:36PM (#14277629)
> Political campaigns, outside of the States, are very much bootstrapped

Get real.

edit: Considering the response perhaps I should qualify. The major parties in most developed countries have permanent election teams with multi-million pound budgets. I cannot see why my response is in any way controversial.

Re:Macron condemns 'massive' hacking attack by ceejayoz on Friday May 05, 2017 @07:44PM (#14277672)
The US is mostly unique in having 18-24 months to fundraise, A/B test, staff up, etc.

edit: Regarding this...

> The major parties in all developed countries have permanent election teams with many multi-million pound budgets.

That's very likely. However, the bursty nature of elections means they're probably also onboarding thousands of volunteers and temporary staff in a very short period of time.

Re:Macron condemns 'massive' hacking attack by walrus01 on Friday May 05, 2017 @07:48PM (#14277683)
a Canadian political campaign (Federal) lasts at most 45 days, with probably an estimated 45-60 days of additional lead up time to prepare for it when it's obvious a vote is going to be called... The parties still seem to find plenty of money to spend on 4/5-star hotels, chartered airplanes, staff, etc.
Re:Macron condemns 'massive' hacking attack by oska on Friday May 05, 2017 @11:06PM (#14278456)
> And IT folks very much not minded to volunteer their time.

This is an ignorant statement. The many millions of hours of work freely given to producing, maintaining and supporting users of software licensed under Free Software [1] licenses shows it's not true.

I suspect it's just that ‘IT folks’ tend to be cynical about most political parties. So they would want to be paid for any work done for such outfits rather than doing it pro bono.

I'd suggest that politicians who expect they can get such work done for free are the ones who need to “get real”.

[1] https://en.wikipedia.org/wiki/Free_software

Re:Macron condemns 'massive' hacking attack by ajdlinux on Saturday May 06, 2017 @12:23AM (#14278657)
Free Software doesn't mean unpaid volunteer any more, given the number of projects that have developers working for large companies...
Re:Macron condemns 'massive' hacking attack by oska on Saturday May 06, 2017 @12:31AM (#14278679)
Obviously some developers get paid. But there is still a huge amount of unpaid volunteer work given to these projects.
Re:Macron condemns 'massive' hacking attack by ocschwar on Saturday May 06, 2017 @03:39PM (#14281872)
He meant they do not volunteer their time to political campaigns.