News for hackers. Stuff that matters.
Re:Using Private Email, Hillary Clinton Thwarted Record Requ... by uptown on Wednesday March 04, 2015 @08:18AM (#9143958)
Clinton ran an email server from a home under-guard by the Secret Service.
Re:Using Private Email, Hillary Clinton Thwarted Record Requ... by escapologybb on Wednesday March 04, 2015 @08:22AM (#9143982)
That sounds really interesting, have you got a source?
Re:Using Private Email, Hillary Clinton Thwarted Record Requ... by uptown on Wednesday March 04, 2015 @08:25AM (#9144001)
"The computer server that transmitted and received Hillary Rodham Clinton's emails — on a private account she used exclusively for official business when she was secretary of state — traced back to an Internet service registered to her family's home in Chappaqua, New York, according to Internet records reviewed by The Associated Press."

[...]

"Operating her own server would have afforded Clinton additional legal opportunities to block government or private subpoenas in criminal, administrative or civil cases because her lawyers could object in court before being forced to turn over any emails. And since the Secret Service was guarding Clinton's home, an email server there would have been well protected from theft or a physical hacking."

Source: http://bigstory.ap.org/article/b78ba433af3a45209668f745158d9...

Re:Using Private Email, Hillary Clinton Thwarted Record Requ... by loumf on Wednesday March 04, 2015 @08:34AM (#9144035)
They are probably talking about the DNS records. If you look up my domain, it will list my home address, but the server is not in my house. The second quote is pure conjecture once they didn't understand what a DNS record is.
Re:Using Private Email, Hillary Clinton Thwarted Record Requ... by chimeracoder on Wednesday March 04, 2015 @09:11AM (#9144257)
> They are probably talking about the DNS records. If you look up my domain, it will list my home address, but the server is not in my house.

You mean the WHOIS records?

If so, I'm not sure it's so easy to simply dismiss "traced back to an Internet service registered to her family's home in Chappaqua, New York" as referring to the WHOIS record. It sounds like they're looking at the IP address, in which case I guess it's technically possible that the actual mailserver isn't physically located at her home, but for the purposes of the article it'd be reasonable to say that she ran [part of] the service from her home.

I agree that it'd be preferable if they could explain what evidence they're actually basing this on, but it doesn't read to me like they're talking about the WHOIS.

Re:Using Private Email, Hillary Clinton Thwarted Record Requ... by delecti on Wednesday March 04, 2015 @09:19AM (#9144299)
I disagree. I think that statement makes far more sense if it means the WHOIS records than it does if they mean the physical server.

The key words are "registered to", which means nobody was able to trace the actual traffic to the home. Not that that would necessarily be easy, but in absence of that I think it's far more likely that she's not administering running mail servers from her home.

Re:Using Private Email, Hillary Clinton Thwarted Record Requ... by themgt on Wednesday March 04, 2015 @09:31AM (#9144393)
Domain Name: CLINTONEMAIL.COM

  Registrant Name: PERFECT PRIVACY, LLC
  Registrant Organization:
  Registrant Street: 12808 Gran Bay Parkway West
  Registrant City: Jacksonville
  Registrant State/Province: FL
  Registrant Postal Code: 32258
  Registrant Country: US
  Registrant Phone: +1.5707088780
  Registrant Phone Ext:
  Registrant Fax:
  Registrant Fax Ext:
  Registrant Email: [email protected]
MX

  10 clintonemail.com.inbound10.mxlogic.net.
  10 clintonemail.com.inbound10.mxlogicmx.net.
Re:Using Private Email, Hillary Clinton Thwarted Record Requ... by uxp on Wednesday March 04, 2015 @09:19AM (#9144306)
I'm sure they are. A dig on the current domain returns "clintonemail.com.inbound10.mxlogic.net." as one of the mail records, which has 4 A records, each which point to servers registered in Englewood, CO.

Note that MXLogic is a managed email service provided by McAfee.

Re:Using Private Email, Hillary Clinton Thwarted Record Requ... by cmcpgh on Wednesday March 04, 2015 @10:57AM (#9145038)
MXLogic is a spam filtering system - I've used it with clients before. It will filter and then re-send emails to whatever system you choose. The email isn't "hosted" at MXLogic unless you tell it to archive email for you. Its typical config is to block spam/viruses and send along.
Re:Using Private Email, Hillary Clinton Thwarted Record Requ... by loumf on Wednesday March 04, 2015 @12:55PM (#9146014)
AP now claims the MX was Google and then changed to MXLogic.

Given that and what you say, the most likely scenario IMO is that she was getting too much spam and asked whoever was taking care of her IT to do something. They decided to front-end her email with MXLogic and it's still going to Google (but of course, we don't know for sure).

If so, the whole premise of the article (Some people use Google, but Clinton built her own server) is false.

Meanwhile, the AP thinks that Clinton's MX choices have to do with her feelings about China.

http://bigstory.ap.org/article/b78ba433af3a45209668f745158d9...

In November 2012, without explanation, Clinton's private email account was reconfigured to use Google's servers as a backup in case her own personal email server failed, according to Internet records. That is significant because Clinton publicly supported Google's accusations in June 2011 that China's government had tried to break into the Google mail accounts of senior U.S. government officials. It was one of the first instances of a major American corporation openly accusing a foreign government of hacking.

Re:Using Private Email, Hillary Clinton Thwarted Record Requ... by danielweber on Wednesday March 04, 2015 @10:21AM (#9144709)
And since the Secret Service was guarding Clinton's home, an email server there would have been well protected from theft or a physical hacking

You know what other email server is protected by the Secret Service? whitehouse.gov

Having stuff go through two email servers makes security strictly worse: any security flaws on either server exposes mail.

Re:Using Private Email, Hillary Clinton Thwarted Record Requ... by loumf on Wednesday March 04, 2015 @08:32AM (#9144031)
I don't think we know where it was physically located. They are probably referring to DNS records in this article:

http://bigstory.ap.org/article/b78ba433af3a45209668f745158d9...

This is another case where I wish they would just get some IT expert to look at the evidence and explain it technically (not dumbed down, not for a layperson). Maybe only technical people would understand, but at least the media record would be accurate.