News for hackers. Stuff that matters.
Re:U.S. Cities Strain to Fight Hackers by microcolonel on Friday June 07, 2019 @10:21AM (#20124758)
Don't put extremely sensitive information on the internet.
Re:U.S. Cities Strain to Fight Hackers by njyx on Friday June 07, 2019 @10:27AM (#20124837)
On the other hand, we want digital public services, to be able to pay taxes electronically, to be able to vote electronically etc.

I don't think the "don't put sensitive information on the Internet" idea really holds any water unless we expect our public services to be done with pen and paper for evermore, while everything else goes digital. (Yes, machines could be disconnected from the network and so on... but that's arguably just saying "an airgap is all you need")

Re:U.S. Cities Strain to Fight Hackers by microcolonel on Friday June 07, 2019 @11:31AM (#20125551)
Well, I would prefer it, but at least at the scale of towns and small cities, I simply don't trust them.

Furthermore, if they do so many things that they need a public-facing website to manage all of the sensitive information they keep on me, I probably don't want to live there.

It's all well and good wanting to access a municipal government's private records through the internet, but try to think of how likely they are to get that right, and adjust your desires accordingly.

Re:U.S. Cities Strain to Fight Hackers by mtgx on Friday June 07, 2019 @10:56AM (#20125180)
> to be able to vote electronically

That's one thing we definitely shouldn't want. This case is just the latest proving what a bad idea that is.

Re:U.S. Cities Strain to Fight Hackers by RosanaAnaDana on Friday June 07, 2019 @11:29AM (#20125528)
I want to be able to vote electronically.
Re:U.S. Cities Strain to Fight Hackers by craftyguy on Friday June 07, 2019 @02:58PM (#20127607)
Then you don't understand why it is a terrible idea.
Re:U.S. Cities Strain to Fight Hackers by selebrazin on Friday June 07, 2019 @03:19PM (#20127751)
Instead of such general and frankly unhelpful statements, would you mind explaining to the previous poster why electronic voting is such a bad idea? It may even generate further discussion instead of just downvotes.
Re:U.S. Cities Strain to Fight Hackers by darkpuma on Friday June 07, 2019 @12:10PM (#20126030)
> "we want [...] to be able to vote electronically etc."

Speak for yourself. I see no upsides.

Re:U.S. Cities Strain to Fight Hackers by gabriel-uribe on Friday June 07, 2019 @04:15PM (#20128191)
Wouldn't increasing voter turnout be an upside? Reducing the loss of productivity of those participating? Voting electronically is dangerous today, but I still see it as something to work towards. However, I imagine that would require incredible innovation towards multiple layers of robust identity verification protocols.
Re:U.S. Cities Strain to Fight Hackers by darkpuma on Friday June 07, 2019 @07:03PM (#20129415)
> "Wouldn't increasing voter turnout be an upside?"

There are better, less drastic, ways of making voting more accessible. Washington state's system of mailing everybody a ballot works pretty well. I usually don't even remember when elections are coming up until I get a ballot in the mail, without ever asking for it. In Washington, people who care to vote don't have any trouble finding the time. (Of course many people just don't give a shit, and electronic voting won't change that.)

Re:U.S. Cities Strain to Fight Hackers by testvox on Friday June 07, 2019 @10:38AM (#20124957)
But those things can be done without putting sensitive information on the internet. Crypto currency transactions can keep everything sensitive off the network. A one way airgap is indeed all you need (your device should be able to push data to the network but never receive any data from the network). The same scheme works for voting.
Re:U.S. Cities Strain to Fight Hackers by kryogen1c on Friday June 07, 2019 @10:57AM (#20125182)
> A one way airgap is indeed all you need

This is an oxymoron. If something can communicate, even only in 1 direction, its not airgapped.

Furthermore, theres no such thing as 1-way communication. Any DB that houses info can only provide it in response to a query.

Re:U.S. Cities Strain to Fight Hackers by packet_nerd on Friday June 07, 2019 @05:45PM (#20128915)
Re:U.S. Cities Strain to Fight Hackers by pixelrevision on Friday June 07, 2019 @10:51AM (#20125121)
This is more of a "don't let various government agencies neglect their infrastructure while hosting extremely sensitive information about you" sort of situation. Really the bigger concern is that a ton of infrastructure is at risk of getting held hostage.
Re:U.S. Cities Strain to Fight Hackers by microcolonel on Friday June 07, 2019 @11:03AM (#20125246)
Stop building the infrastructure, it is worse than nothing. They clearly don't have any interest in taking responsibility for securing these systems, which is why the friendly headline is "U.S. Cities Strain to Fight Hackers" and not "U.S. Cities divulge sensitive information to criminals through a pattern of routine incompetence.".
Re:U.S. Cities Strain to Fight Hackers by dandersh on Friday June 07, 2019 @10:47AM (#20125079)
Unfortunately this information was expected to be divulged and collected before the internet was widely used. Policies and infrastructures were not put in place (or ignored, as I've personally witnessed) to protect this information once it was digitized.

At the same time, there should be a real discussion over why so much information is being demanded, why SSN's are being overused as they are, etc.

Re:U.S. Cities Strain to Fight Hackers by Bakary on Friday June 07, 2019 @01:30PM (#20126839)
This is like abstinence for STD prevention. Simultaneously true and irrelevant to the problem at hand.