c/pulse_of_truth · by lemmydev2@infosec.pub · 1y

Colorado Agency ‘Improperly’ Posted Passwords for Its Election System Online

https://gizmodo.com/colorado-agency-improperly-posted-passwords-for-its-election-system-online-2000518572

The Department of State said that the mistaken disclosure of the passwords do not pose an immediate threat to the upcoming election.

13 points · 5 comments · view on lemmy.world

5 Comments

BrightHalo@lemmy.world · 6 pts · 1y (2 replies)

Is there a proper way to post your passwords online?

viking@infosec.pub · 3 pts · 1y (1 reply)

Lemmy obscures passwords automatically. See: **************!

fubarx@lemmy.ml · 2 pts · 1y

Only if your Lemmy server's configured to redact passwords. A lot of them don't. For example: ******************

ericjmorey@programming.dev · 2 pts · 1y (1 reply)

For months, the agency “improperly” hosted a publicly available spreadsheet on its website that included a hidden tab with partial passwords for its voting machines.

In its statement, the Department of State said that there are two unique passwords for each of its voting machines, which are stored in separate places. Additionally, the passwords can only be used by a person who is physically operating the system and voting machines are stored in secure areas that require ID badges to access and are under 24/7 video surveillance.

Colorado voters use paper ballots, ensuring that a physical paper trail that can be used to verify results tabulated electronically.

ericjmorey@programming.dev · 2 pts · 1y

I have no idea why improperly is in quotes. Maybe it's this reporter's and editor's version of saying that it's allegedly improper?