Read on Twitter
>All agencies operating SolarWinds products should provide a completion report to CISA by 12pm Eastern Standard Time on Monday December 14, 2020. DOMINION RUNS THIS PRODUCT!!
Guess who has to provide a complete report by NOON MON, DEC 14.
https://www.cisa.gov/news/2020/12/13/cisa-issues-emergency-directive-mitigate-compromise-solarwinds-orion-network
https://www.cisa.gov/news/2020/12/13/cisa-issues-emergency-directive-mitigate-compromise-solarwinds-orion-network
Basically feds got hacked via SolarWinds. All agencies using it have to submit a completion report which details whether they were compromise and the actions they took to mitigate risk - i.e. power down etc.
Here is their mobile log in oage confirming they utilize SolarWinds
https://dvsfileshare.dominionvoting.com/Web%20Client/Mobile/MLogin.htm
https://dvsfileshare.dominionvoting.com/Web%20Client/Mobile/MLogin.htm
They have to submit a report detailing:
>1. Whether they were compromised
>2. Mitigation they took
>1. Whether they were compromised
>2. Mitigation they took
Since Dominion uses SolarWinds infrastructure, that means any states which use their machines such as MI, PA, GA etc. are likely exposed to the exploit.
The agencies responsible for the machines, i.e. the electoral commissions should then be forced to submit a completion report to CISA and if they say they were compromised this election is DONE.
Remember, its been reported this exploit has been ongoing for MONTHS. They just happened to catch it now. https://uk.reuters.com/article/usa-cyber-treasury/update-5-suspected-russian-hackers-spied-on-us-treasury-emails-sources-idUKL1N2IT0MC
According to that login page they are using Serv-U from the Solarwinds suite (and possibly others but that cant be confirmed).
Serv-U is a file transfer server. FTP, among other protocols.
Serv-U is a file transfer server. FTP, among other protocols.
If it's standard FTP that means file transfers are done in raw (IIRC) and can be read if sniffed
Remember, many of those machines were connected to thw internet that night for totals reporting, etc. Ppl have signed affidavits that DOMINION logged in remotely.
Most likely their supply chain was compromised so if they have updated since March then they could be compromised through malware deployed by the update.
And as we know they were doing updates the night of the election. This is all evolving in ways no one would ever dare place into a movie or book. This really is mondblowing. It's disgusting.
