News for hackers. Stuff that matters.
Re:4chan reveals online voter exploit that can be used to ca... by theplague42 on Sunday October 18, 2020 @02:39AM (#24815947)
It's trivial to demonstrate that that claim is false.

Someone in this thread linked the page to the "voting" screen. It's just a form to print a new ballot that you would then mail or bring in person.

Re:4chan reveals online voter exploit that can be used to ca... by thallium205 on Sunday October 18, 2020 @03:07AM (#24816055)
You're right. 1) This only changes a form you can print out, sign and mail in or drop off (they're not checking accuracy of signatures this year) 2) This does reveal lots of PII 3) 4CHAN is now using obituaries to search for dead people who have voted
Re:4chan reveals online voter exploit that can be used to ca... by evan_ on Sunday October 18, 2020 @03:18AM (#24816084)
you can't just drop it off, you have to return it in a certified ballot envelope that has all of your information on it and one-time codes to avoid forgeries.

who cares if they're looking at obits, great, that's fine, every political party has lawyers to do that and they're better at it anyway.

Re:4chan reveals online voter exploit that can be used to ca... by thallium205 on Sunday October 18, 2020 @03:36AM (#24816157)
>This site allows you to mark, review, and print your ballot materials for return to your county elections office.

Their FAQ makes no mention of placing it in a ballot envelope. In fact they offer the ability to print your own from the website. Where are you getting that information?

It appears one can type in a name and dob, print a ballot, fill it out, and drop it off. What am I missing that is also not in their FAQ?

Re:4chan reveals online voter exploit that can be used to ca... by evan_ on Sunday October 18, 2020 @03:39AM (#24816170)
https://sos.oregon.gov/voting/Pages/instructions-disabilitie...

   Step 4: Return your Ballot

   After printing your marked ballot summary:  
   Enclose your ballot in the secrecy envelope.  
   Then place that envelope in the return identification envelope.
   Sign the ballot declaration and the return identification envelope
Is your theory simply that nobody in the Oregon Secretary of State's office thought people might try to cheat?
Re:4chan reveals online voter exploit that can be used to ca... by thallium205 on Sunday October 18, 2020 @03:32AM (#24816138)
If that's the case why are they offering users the ability to print it out and return it if doing so requires a unique one time ballot envelope?
Re:4chan reveals online voter exploit that can be used to ca... by evan_ on Sunday October 18, 2020 @03:39AM (#24816168)
Visually impaired voters who can use a screen reader but may have trouble with the paper ballot. Voters with motor issues that make it difficult to fill in a bubble with a pen.

Here are the instructions for using the alternate ballot: https://sos.oregon.gov/voting/Pages/instructions-disabilitie...

Re:4chan reveals online voter exploit that can be used to ca... by michannne on Sunday October 18, 2020 @02:44AM (#24815963)
The tweet is wrong yes, but my main point was the fact that requesting a replacement ballot invalidates the previous sent ballot.
Re:4chan reveals online voter exploit that can be used to ca... by grimli333 on Sunday October 18, 2020 @02:55AM (#24816010)
It does not. Also, you can’t even update registration info without an Oregon DMV number. At that point you’re straight up committing identity theft. Even if you could it does not invalidate an already submitted ballot. This is not correct information you are spreading.
Re:4chan reveals online voter exploit that can be used to ca... by nseggs on Sunday October 18, 2020 @02:51AM (#24815995)
Does it?
Re:4chan reveals online voter exploit that can be used to ca... by michannne on Sunday October 18, 2020 @02:57AM (#24816020)
I'll clarify: using name and DOB allows you to see voter information. This is relatively benign as it is public information. However the site also has the option to request a replacement ballot. When requesting a replacement, the website mentions that if a previous mail-in ballot has not yet been successfully validated, it will be cancelled.

My aim is not to spread disinformation here. I have hidden the thread until a reputable source can confirm further as there may be other details I'm missing. This is not about changing votes, but the replacement of a ballot that can be initiated using very little information, and can cause a person's mail-in ballot to be invalidated.

Re:4chan reveals online voter exploit that can be used to ca... by evan_ on Sunday October 18, 2020 @03:01AM (#24816031)
> However the site also has the option to request a replacement ballot.

In Oregon, there is no such option.

Re:4chan reveals online voter exploit that can be used to ca... by swhittaker on Sunday October 18, 2020 @03:14AM (#24816072)
Here is the specific page that people are somewhat concerned about. I'm a WA voter, but it seems like they use a similar system to OR. When I go to https://voter.votewa.gov/ and enter my first/last name and DOB, I can go to "My Ballot -> Online Ballot" and it gives the following text:

>To print a ballot packet, only click "Continue" if you did not receive your ballot by mail or your ballot is lost or damaged. Continue only if you intend to vote this ballot.

>Print both 1) Replacement Ballot and 2) Ballot Return Packet.

>To view what's on your ballot, select the voters' guide in the navigation menu.

>Frequently asked questions

>This site allows you to mark, review, and print your ballot materials for return to your county elections office.

>Can I just view my online ballot and then vote the paper ballot coming to me in the mail? >No, the online ballot should only be used if you want to print, vote and return it. Click on Voters' Guide in the >left navigation to see what will be on your ballot and to learn more about the candidates and measures. >I lost my paper ballot, can I print and return this online ballot? >Yes, the online ballot is a great replacement ballot option. When printing make sure to print both the 1) replacement ballot and 2) the ballot packet. Follow the ballot packet instructions and make sure you return your ballot on time – the earlier the better! >Caution: If you continue, a ballot previously mailed to you will be cancelled.

It is specifically this phrase Caution: If you continue, a ballot previously mailed to you will be cancelled. that is concerning. It makes one think that if I press the [Continue] button on that page, then the ballot that has already been mailed to me will be automatically canceled. Can you confirm that that is not the case, and if so what is your evidence?

Re:4chan reveals online voter exploit that can be used to ca... by SV_BubbleTime on Sunday October 18, 2020 @04:44PM (#24820989)
Oregon aside. This seems really concerning. Can someone explain to me this isn’t really the case?

I don’t believe anyone anymore (only like 1/2 hyperbole).

Re:4chan reveals online voter exploit that can be used to ca... by evan_ on Sunday October 18, 2020 @03:27AM (#24816117)
well, I'm only able to speak for Oregon, so I will update my post.

I don't know what will happen if you click through. You could try it I guess, apparently 4chan has already cancelled everyone's vote anyway.