No data was "stolen"

[angrychair]

Per the vendor, NGP VAN, no data was stolen. Just a bunch of users that don't understand how how queries work.

Per the vendor:
"First, a one page-style report containing summary data on a list was saved out of VoteBuilder by one Sanders user. This is what some people have referred to as the “export” from VoteBuilder. As noted below, users were unable to export lists of people."

"On Wednesday morning, there was a release of VAN code. Unfortunately, it contained a bug. For a brief window, the voter data that is always searchable across campaigns in VoteBuilder included client scores it should not have, on a specific part of the VAN system. So for voters that a user already had access to, that user was able to search by and view (but not export or save or act on) some attributes that came from another campaign."

http://blog.ngpvan.com/news/data-security-and-privacy

[joshcryer]

1. Leave it to a corporation to cover their ass.

The money quote:

Our team removed access to the affected data, and determined that only one campaign took actions that could possibly have led to it retaining data to which it should not have had access.

http://blog.ngpvan.com/news/data-security-and-privacy

A series of documents outlining an audit trail maintained by the database company, obtained and reviewed by NBC News, shows that the four individuals spent a total of about 40 minutes conducting searches of the Clinton data. Those searches included terms that point to Sanders’ team gaining access to proprietary lists from more than 10 early voting states of Clinton’s likely supporters as well as lists for Sanders backers. That data was saved to personal folders.

It also appears that Drapkin “suppressed” two folders after the database company became aware of the breach.

http://www.msnbc.com/msnbc/documents-show-sanders-staffers-breached-clinton-voter-data

We need to fire Drapkin as well.

[notadmblnd]

31. Who is Drapkin?

[joshcryer]

44. One of the directors.

[notadmblnd]

45. Of what? The company that failed in their security?

[joshcryer]

46. Deputy national data director Russell Drapkin

Data director of the campaign. I don't know why he's not fired.

[notadmblnd]

49. So he's DNC

ok, thanks.

[joshcryer]

50. Um, no, he works for Sanders campaign.

[notadmblnd]

52. geeesh, sometimes I can be so thick.

have you seen this?
http://www.democraticunderground.com/128084631

[notadmblnd]

56. Damn, I need to put the lighter down and step away from the bong.

I forgot to give you the darn link.

http://www.democraticunderground.com/128084631

[VanillaRhapsody]

2. Yes it was....

Utter hogwash....it was saved....audit trails..

[angrychair]

6. Focus

The vendor, the engineers that control the application and reported their findings, from a link from their own website stated:
"So for voters that a user already had access to, that user was able to search by and view (but not export or save or act on) some attributes that came from another campaign."
Again, the link: http://blog.ngpvan.com/news/data-security-and-privacy

Its easier to seek an agenda than the truth.

[VanillaRhapsody]

10. Not one wiff of evidence this was reported in the past....

You just accept that shit as fact......and where did that come from.....the criminal himself!

Team Sanders is defending this....even trying to blame it on others.....its total bullshit....and yet they keep trying to "catapult" that propaganda.. .

[joshcryer]

48. Though their software, they're covering their ass.

[phleshdef]

9. You are just throwing around buzz words

You have no clue how those things work or what they really mean

[VanillaRhapsody]

11. Actually I do....I am in the information business...

I know exactly what server logs are....

[Bonobo]

12. "The information business"

That made me laugh out loud.

[phleshdef]

19. He or she really meant the misinformation business

Because that the only thing they have contributed to threads on this all day long. They've been called out for their blatant ignorance on the topic of how software like this works and they either danced around it around off with their tail tucked between their legs.

[PowerToThePeople]

24. Propaganda is an "information business"

The business of supplying misinformation.

[phleshdef]

14. I design software like this for a living

And I got a feeling you just tried to bullshit me. You've been getting your ass handed to you and thread after thread today in regards to this issue. You made it abundantly clear that you have no clue what you're talking about

[VanillaRhapsody]

16. Hahahagahsgsgzd

My ass handed to ME!!!-'



Right 10+ yrs and a degree.....and I know nothing!!!!'

[phleshdef]

17. You sound more like 10 years old with a degree in bullshit

I have 15 years of experience and a Bachelor of Science in Computer Information Systems. I've got your number on this. Face it, I know what I'm talking about and you don't and it's apparent to anyone with half a brain.

[VanillaRhapsody]

18. Did I question YOUR cred?

By the way B.S. in Information Tech. And an A.S. in Programming to be exact....in case you want to continue questioning mine!

[phleshdef]

20. I don't care if you did or not because I'm definitely questioning yours

And that's all that matters to me. My credibility is so superior to yours that if you did question mine I would ignore it because it isn't worth my consideration

[VanillaRhapsody]

22. Apparently you do

You made the claim against my knowledge....

Your "credibility..."

Now who sounds like a 10 year old?

Grow up...

[phleshdef]

25. Nope I'm going to keep pushing you on this

You have completely failed to backup any of your accusations. You can put me on ignore or you're going to have to deal with it

[VanillaRhapsody]

26. Pushing me on what?

What accusations? Who have I accused?


A server log is a log file (or several files) automatically created and maintained by a server consisting of a list of activities it performed. A typical example is a web server log which maintains a history of page requests.

[phleshdef]

27. Your blatant misinformation, invalid assumptions and blatant ignorance

regarding this issue in general

[VanillaRhapsody]

28. What would THAT be?

In detail please....

[phleshdef]

33. Its been pointed out to you in countless threads...

... with plenty of detail that you have willfully ignored. I'm not going to dance for you I'm not your monkey

[VanillaRhapsody]

35. Then do it....

Whats stopping you?

Just as I anticipated.

[phleshdef]

37. This very OP for starters

[VanillaRhapsody]

38. This was my OP?

News to me...

[phleshdef]

67. Sigh. The OP means the post that started the thread.

[notadmblnd]

36. Well you must not be employed

Because an IT company would definitely frown upon one of it's employees spending their entire day posting on a discussion board and improperly using the company's assets.

[VanillaRhapsody]

39. Hahahagahahaha

Youd be surprised.

[notadmblnd]

40. No, you would. I've seen people fired for it and their log files is what clinched termination.

[VanillaRhapsody]

41. Uh huh...

[pangaia]

51. I also have 10+ years and a degree.

In fact I have three degrees.

[angrychair]

21. "Information business"

Really? Do tell. I've been in IT for over 20 years, what do you do?

[VanillaRhapsody]

23. So....

Who cares...then you know what server logs are...

I wasnt the one to question anyones creds. Now was I?

Read the thread....

[angrychair]

34. Yes, i know know what server logs are

I also know that logs of database queries and accesses would not be in a a Windows server application log or security log. Doesn't work that way.
"Server log" can be used generically by mistake. What log file are you talking about?

[grasswire]

57. crickets

crickets

LOL

[Scootaloo]

54. What, like in the quantum sense?

[vorgan24]

3. The parts you willingly left out imply otherwise.

Per the vender, NGP VAN, data could have been retained.

Per the vendor:
"We are confident at this point that no campaigns have access to or have retained any voter file data of any other clients; with one possible exception, one of the presidential campaigns."

"Our team removed access to the affected data, and determined that only one campaign took actions that could possibly have led to it retaining data to which it should not have had access."

Lets keep things honest. They are saying that best case senario, no one got any data that they shouldn't have. But the fact that a data breach occurs shows that this isn't a best case senario, and that realistically their is a chance that someone got ahold of data that they were not legally entitled to.

[Hepburn]

8. Operative words "could have."

Nice try, but no cigar.

[vorgan24]

47. Same to this topic?

I don't see why you are so defensive about the subject - The statement from them says that their is a possibility that someone made off with data.

Could have is quite a bit different then 'none' as this topic is suggesting. Perhaps you could point this out to the topic maker as well, in the interest of honesty?

[angrychair]

13. No, you don't understand IT people

"Data" referred to in this release is generic. In the database world everything is "Data".
"Data" as in "information" or data as in "reference materials" or "data" as in "actual material". Unless you understand IT and follow their statement carefully, what they mean may seem unclear.

[virtualobserver]

4. Robby Mook says "this was a very egregious breach and our data was stolen"

[notadmblnd]

42. I'd wager his experience is logging on, opening his browser and being able to read e-mail.

Oh, he might be able to use the google too.

[virtualobserver]

58. I doubt that he drew that conclusion from his experience......

he is just playing political games;

[notadmblnd]

59. precisely.

[frylock]

73. Google "mook"

[riversedge]

5. This is the type of Data that the Sanders staffer tried to get. Or wanted....

rsedge (12,987 posts)
10. This is the type of data that the Sanders camp assessed....




....

.....What was accessed

Two senior Democrats familiar with the program and the investigation told CNN that the Sanders campaign accessed turnout projections for Iowa caucuses and the New Hampshire primary, a key piece of strategy the Clinton campaign has been working on with modeling and analytics.

The Sanders team, which consisted of four people, ran multiple searches in Iowa, New Hampshire, Nevada, South Carolina and about 10 March states, including Florida and Colorado. In Iowa and New Hampshire, the Clinton campaign has ranked voters on a scale of 1-100 for turnout, enthusiasm and support, the senior Democrats said. The Sanders campaign ran two searches: "Show me all the Clinton people rated higher than 60" and "Show me all the people rated less than 30." This would be a key way of knowing who Sanders should target in the final weeks before voting: Ignore those above 60, while focus on those below 30, because they are looking for a Clinton alternative and might be open to Sanders.

The investigation into what information was lifted should only take a few days as there are audit logs and trails of the activity, which took place beginning around 10:40 a.m. and lasting for about 40 minutes, the senior Democrats said.

They added that the Clinton campaign views this as a big deal but will not say so publicly because it will fan the flames of liberal groups trying to fight with the DNC.

In a statement released Friday afternoon, the Clinton campaign called for the Sanders campaign and the DNC to "work expeditiously to ensure that our data is not in the Sanders campaign's account and that the Sanders campaign only have access to their own data."................


http://www.cnn.com/2015/12/18/politics/bernie-sanders-campaign-dnc-suspension/index.html

[angrychair]

15. CNN are idiots

I'll take the word of the actual admins of the database before listening to media hacks that have zero IT experience.

[notadmblnd]

43. Howard Dean former DNC chief said it should only take a few hours not days.

nt

[in_cog_ni_to]

7. Please stop letting FACTS get in the way of the HRH supporters' twisted, knotted spinning! sheesh.

It's hard work thinking of ways to take down the so-called "Democratic" Party!

PEACE
LOVE
BERNIE

[notadmblnd]

29. Shhhh don't tell any of the IT experts in the Hillary camp here

You'll ruin their celebration and shatter their world.

[fredamae]

30. If this true then the HRC

campaign spokespeople getting a bit frisky and quick.
And I am also going to guess that this information will Not be on CorpoMedia.



http://talkingpointsmemo.com/livewire/hillary-campaign-responds-dnc-data-breach

[libdem4life]

32. Oh my, an IT duel...let me pull up a screen and a keyboard. OK, now proceed.

Just kidding, y'all. We've got to Kumbaya here pretty soon...please...Iowa awaits our offerings ... and lawsuits and duels aren't on the proverbial menu.

[Kalidurga]

53. What about in 2008?

Oh sorry never mind that was camp Hillary.

[notadmblnd]

60. I heard Howard Dean say that it wasn't the first time and I thought he said

it happened in 2008 and a big deal wasn't made out of it. So, are you saying HRC did this to Obama? Her campaign- who Debra Wasserman-Schultz was co chair of- inappropriately accessed Obama's files in 2008?

[Kalidurga]

62. Yes this happened when she was campaigning against Obama

Her making a stink is gonna backfire on her big time.

[notadmblnd]

63. Oh my goodness!

do you know of any links I can use if I assert this? Because I'm certain it'll be pounced on by HRC supporters and be torn to shreds if I post something without documentation.

[Kalidurga]

64. Sure I was feeling lazy before

Starting at item number 23 things get interesting.

http://www.politico.com/f/?id=00000151-b72f-d1ae-add5-f76f14db0001

[notadmblnd]

65. Thank you.

[pnwmom]

72. I read it and I don't see any indication that someone from HRC's campaign

actively searched Obama's data and downloaded same.

Please let me know the item numbers I missed.

[pnwmom]

69. Link, please. n/t

[pnwmom]

68. Please provide a link. I've looked and can't figure out what you're talking about. n/t

[Kalidurga]

71. line 23 I think or just read the whole thing it's pretty interesting

http://www.politico.com/f/?id=00000151-b72f-d1ae-add5-f76f14db0001

[pnwmom]

74. I have. And it says something about data being accidentally "transmitted" but I don't see

that someone from her campaign was searching through Obama's or saving Obama's data. Did I miss that?

[Kalidurga]

75. Probably

24) Before the Bug could be resolved, several staff members of the Campaign
accessed and viewed Confidential Information (the “Disclosed Information”) that had been
disclosed to the DNC by the 2016 campaign of Democratic presidential candidate Hillary
Clinton (the “Competing Campaign”).

[pnwmom]

77. And downloaded and saved? Where's that part? A momentary view could be an accident,

but the deliberate searching, the production of lists, and downloading and saving wasn't an accident -- and they're not claiming that it was.

[Kalidurga]

78. Don't hurt yourself be sure to properly stretch before reaching like that.

[arcane1]

55. Hey, you keep your facts out of this!

[Meetello]

61. The vendor didn't say no data was stolen

Those are your words. Your interpretation and wishes.

[angrychair]

66. Did you read my OP???

Per the vendor:
"First, a one page-style report containing summary data on a list was saved out of VoteBuilder by one Sanders user. This is what some people have referred to as the “export” from VoteBuilder. As noted below, users were unable to export lists of people."

"On Wednesday morning, there was a release of VAN code. Unfortunately, it contained a bug. For a brief window, the voter data that is always searchable across campaigns in VoteBuilder included client scores it should not have, on a specific part of the VAN system. So for voters that a user already had access to, that user was able to search by and view (but not export or save or act on) some attributes that came from another campaign."

These are not my words but a press release from the application owner and database admins of NGP VAN. What part of that is confusing?

[leftofcool]

70. Yea, except the logs show different

What about all the stuff they downloaded into folders called "targets."? You must have missed the new information.

[RandySF]

76. But not for lack of trying.