Security_Geek's Techdirt Profile

Security_Geek

About Security_Geek

Security_Geek's Comments comment rss

  • Sep 02, 2016 @ 10:37am

    Re: I am not a stock broker, but...

    MedSec sold short meaning they sold stock they don't own by borrowing it from others. They promise to repurchase it later so need the stock price to fall. The amount of the fall is their profit.

    MedSec is a sitting Pennsylvania legislator and a former U.S. Congressman. I am not surprised by the lack of ethical behavior. In the CEO's blog, she didn't even mention attempting to work with St. Jude Medical. She predicted their behavior. She also didn't go to the FDA who regulates medical device security.

  • Sep 02, 2016 @ 11:02am

    State Computers

    I worked in cybersecurity at a state. The various agencies usually don't share information (they can't figure out cost sharing) and even within a single agency, they tend to keep things in separate systems.

    Voter Registration Systems are often outsourced, and the vendors must submit to annual onsite third party audits. The normal issues are finding the money to fix the audit findings, and dealing with public perception.

    Voting Systems are different than Voter Registration Systems. The information flow between them is strictly controlled. Having access to a VRS doesn't necessarily mean you have access to add, modify, or delete data within it. There are integrity checks and backups.

    Of all the information, the source of the attacks is the one I most trust. The FBI cannot reveal all its sources, but its cyber intelligence units are very good at identifying who is behind the hacks. For the states, they don't need to know who is hacking. They need information on how and how to defend against those methods. That is what the FBI is offering the states.

  • Sep 02, 2016 @ 10:45am

    SOS Kemp

    Kemp is not an appointee. He was elected statewide.