Welcome to DU! The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards. Join the community: Create a free account Support DU (and get rid of ads!): Become a Star Member Latest Breaking News General Discussion The DU Lounge All Forums Issue Forums Culture Forums Alliance Forums Region Forums Support Forums Help & Search

Blue State Bandit

(2,122 posts)
Sat Dec 19, 2015, 10:21 AM Dec 2015

The "Honey Pot" Theory.

Josh Uretsky is no political newbie. I met Josh in 2007 when he was a Campaign Co-Chair for Barack Obama's campaign where he ran the voter data operations. Josh graduated from UC-Berkeley in 1998 with a degree in bio-engineering, focusing on computer science and genetics. He worked as a C++ programmer at Mystic Wave Productions and InfoUse. He instructed staffers and volunteers on the use of the NGP-VAN system.

So why would he access this data, and how was it possible? These are very good questions, but I think these should be answered as well.

- With over 8 years of experience using this data system, he knew full well that his actions would be documented by the system. So why would he do it?

- Josh and Team Sanders reported the same flaw to the DNC/Vendor back in October. What was done about this issue in the time since this initial reporting?

- At what point did the DNC/Vendor inform the Clinton Campaign of the flaw discovered in October?

- How many times, and for how long, was the Clinton Campaign's data made available to other campaigns?

- Did this flaw work both ways? Did the Clinton Campaign have (not yet saying accessed) the same access to the Sanders Campaign data?

- Did the DNC/Vendor know about the flaw this time? If so, did they warn the campaigns that were using the system of the flaw?

The last question is the big one since reports indicate that the Vendor alerted the DNC within an hour of the first query. This means somebody was aware and watching for improper access which begs the further question...

- Was the Vender/DNC leaving this flaw open and monitor access instead of fixing it when it was first reported by Josh and the Sanders Campaign? Or more concisely...

- Was the Vendor/DNC operating a "Honey Pot" in the hopes that Josh would check back to see if the Vendor ever fixed the flaw with the intention to use this as impetus to handicap the Sanders Campaign?

It does not take 3 months to fix such a flaw, a point proven by how swiftly this story broke, and how quickly the DNC/Vendor was able to fix it and cut the Sanders Campaign from access it's own data.

I smell a Honey Pot.

47 replies = new reply since forum marked as read
Highlight: NoneDon't highlight anything 5 newestHighlight 5 most recent replies
The "Honey Pot" Theory. (Original Post) Blue State Bandit Dec 2015 OP
Nice try! leftofcool Dec 2015 #1
They did NOT report the same flaw in October. boston bean Dec 2015 #2
So they are lying about the previous report? nt DURHAM D Dec 2015 #7
They are attempting to confuse the issue by conflating two different databases. boston bean Dec 2015 #10
So the premise for this OP DURHAM D Dec 2015 #13
Someone had pointed out this same thing yesterday (different databases) ... NurseJackie Dec 2015 #17
pretty much. But one that suits the narrative they wish to push. nt boston bean Dec 2015 #26
QUICK, blame anybody and everything but the real thieves!!!!! MohRokTah Dec 2015 #3
About this - DURHAM D Dec 2015 #4
So, I guess the Campaign Manager is just a BS staffer too? Blue State Bandit Dec 2015 #15
Big Fat Lie DURHAM D Dec 2015 #16
So I will now ask, where is YOUR proof? Blue State Bandit Dec 2015 #25
You are the one who started this OP DURHAM D Dec 2015 #34
You asked for for a source other than Josh (a BS staffer), I gave you one. Blue State Bandit Dec 2015 #36
This staffer was the direct of the DATA team. I think he know which databases are which. boston bean Dec 2015 #37
You did not do your homework before you DURHAM D Dec 2015 #39
Prove your statement. Blue State Bandit Dec 2015 #46
On MSNBC, Josh said it was a >different database< from another vendor emulatorloo Dec 2015 #41
He actually said both while stumbling over his words. Blue State Bandit Dec 2015 #42
And you believe what your TV tells you? tazkcmo Dec 2015 #28
Going with the Honey Pot excuse is pretty much sufrommich Dec 2015 #5
Josh fucked up, I agree. Blue State Bandit Dec 2015 #18
You have proof they reported the flaw? No. JaneyVee Dec 2015 #6
There was a "code" change on Wednesday. This opened the system for 40 mins. Renew Deal Dec 2015 #8
Occam's Razor... BlueCheese Dec 2015 #9
No. Sanders staffers fucked up. NuclearDem Dec 2015 #11
Nobody from the Clinton campaign seems mmonk Dec 2015 #12
Not true. DURHAM D Dec 2015 #14
Why do you think their outrage bogus? mmonk Dec 2015 #19
They are the PERPS but DURHAM D Dec 2015 #22
I think it had to do with the DNC going mmonk Dec 2015 #24
Why do you think the DNC went to the press first? DURHAM D Dec 2015 #27
The presser didn't happen till after the DNC cut access. Blue State Bandit Dec 2015 #33
Wow. This in no way addresses DURHAM D Dec 2015 #35
But this does answer who made this into a shit show that could not stay out of the news. Blue State Bandit Dec 2015 #40
I agree with you about Bernie's staff. tammywammy Dec 2015 #20
I don't think they will like what they find... Blue State Bandit Dec 2015 #21
This is based on the totally bogus Bernie Team defense DURHAM D Dec 2015 #23
Typical willful ignorance. tazkcmo Dec 2015 #31
Yep. If all of the rocks are looked under I am confident that DNC dirty tricks will be exposed. GoneFishin Dec 2015 #30
Under rocks tazkcmo Dec 2015 #32
I'm outraged that the Sanders campaign accessed it, downloaded, saved files boston bean Dec 2015 #38
No downloading occurred. If DSW is your source, she's been contradicted by NGPVAN. Blue State Bandit Dec 2015 #43
You might want to update your facts. boston bean Dec 2015 #44
To files on the VoteBuilder site, not their hard drives. Blue State Bandit Dec 2015 #45
And so do I. This has Debbie's hands all over it: winning at whatever cunning costs, Betty Karlson Dec 2015 #29
LOL. A Clinton staffer wrote the program and has full unfettered access to the database! mhatrw Dec 2015 #47

boston bean

(36,222 posts)
2. They did NOT report the same flaw in October.
Sat Dec 19, 2015, 10:23 AM
Dec 2015

They were using a different database, not the VAN database.

So, all this we've been having the same issues with THIS database is a flat out untruth.

boston bean

(36,222 posts)
10. They are attempting to confuse the issue by conflating two different databases.
Sat Dec 19, 2015, 10:27 AM
Dec 2015

works nice if you can say you found this flaw in THIS very same database months ago, ergo the DNC is incompetent... But it's not true, they did not find this flaw in the VAN database in Oct.

NurseJackie

(42,862 posts)
17. Someone had pointed out this same thing yesterday (different databases) ...
Sat Dec 19, 2015, 10:46 AM
Dec 2015

... and was promptly accused of being a liar.

Bernie's fans aren't helping their "case". (Just observing, not "concerned".)

DURHAM D

(32,610 posts)
4. About this -
Sat Dec 19, 2015, 10:24 AM
Dec 2015

- Josh and Team Sanders reported the same flaw to the DNC/Vendor back in October.

I heard on my tv last night that this is not true. Other than a BS staff member making the claim do you have a source for this?

Thanks

Blue State Bandit

(2,122 posts)
15. So, I guess the Campaign Manager is just a BS staffer too?
Sat Dec 19, 2015, 10:42 AM
Dec 2015

"First, this is not the first time that the vendor hired by the DNC to run the voter file program, NGP VAN, has allowed serious failures to occur. On more than one occasion, they have dropped the firewall between the data of competing Democratic campaigns. That is dangerous incompetence. It was our campaign months ago that alerted the DNC to the fact that campaign data was being made available to other campaigns. At that time our campaign did not run to the media, relying instead on assurances from the vendor that the problem would be resolved. Unfortunately, the other day, the vendor once again dropped the firewall between the campaigns for some data."

Jeff Weaver, Bernie Sanders 2016 Campaign Manager


DURHAM D

(32,610 posts)
34. You are the one who started this OP
Sat Dec 19, 2015, 11:17 AM
Dec 2015

with a bogus premise, built on it, and are still trying to defend it.

Done

Blue State Bandit

(2,122 posts)
36. You asked for for a source other than Josh (a BS staffer), I gave you one.
Sat Dec 19, 2015, 11:27 AM
Dec 2015

And all you had to say was "Big Fat Lie". This is not some lowly staffer. This is the head of Bernie's national campaign. Screaming "Liar" at your computer screen does not make you right.

boston bean

(36,222 posts)
37. This staffer was the direct of the DATA team. I think he know which databases are which.
Sat Dec 19, 2015, 11:29 AM
Dec 2015

The campaign manager is a liar.

DURHAM D

(32,610 posts)
39. You did not do your homework before you
Sat Dec 19, 2015, 11:32 AM
Dec 2015

wrote your OP. Weaver is a Big Fat Liar.

More importantly he lied to Bernie in that he did not tell him about the data theft when they got caught and Bernie, unfortunately, had to learn about it more than 24 hours later from DWS.

For that Weaver should be fired. Period. Bernie can not trust him.


Blue State Bandit

(2,122 posts)
46. Prove your statement.
Sat Dec 19, 2015, 12:59 PM
Dec 2015

I posed questions in my OP. Maybe you should hold off on demanding I 'provide proof" for my questions until you can provide proof for your declarative statements.

emulatorloo

(44,131 posts)
41. On MSNBC, Josh said it was a >different database< from another vendor
Sat Dec 19, 2015, 12:00 PM
Dec 2015

and the problem was resolved. It was not VAN. This was in his phone interview with Steve Kornaki, right after Jeff Weaver's press conference.

I saw it live, There is vid on the net somewhere you can probably find with a Google.

ON EDIT: Here's a link to vid:

http://talkingpointsmemo.com/livewire/josh-uretsky-clinton-data-breach

> He says this is the first time VAN made this mistake.

> He says prior time was not VAN, but another database.



Like you i recognize Josh is a professional, so I take him at his word.

Blue State Bandit

(2,122 posts)
42. He actually said both while stumbling over his words.
Sat Dec 19, 2015, 12:38 PM
Dec 2015

"...if somebody left the front door open for the 5th time, this was not the first time-this was the first time that VAN made a mistake like this"

VAN is the platform, NGP is the vendor. Josh does not clear NPG of the prior incident.

tazkcmo

(7,300 posts)
28. And you believe what your TV tells you?
Sat Dec 19, 2015, 11:05 AM
Dec 2015

I heard on my TV that hrc dodged sniper fire with her daughter at her side.

Blue State Bandit

(2,122 posts)
18. Josh fucked up, I agree.
Sat Dec 19, 2015, 10:48 AM
Dec 2015

But the fact remains, this has been an ongoing issue with the NGP-VAN system. This was not a one time fluke.

Renew Deal

(81,866 posts)
8. There was a "code" change on Wednesday. This opened the system for 40 mins.
Sat Dec 19, 2015, 10:26 AM
Dec 2015

http://blog.ngpvan.com/news/data-security-and-privacy

On Wednesday morning, there was a release of VAN code. Unfortunately, it contained a bug. For a brief window, the voter data that is always searchable across campaigns in VoteBuilder included client scores it should not have, on a specific part of the VAN system.

http://www.democraticunderground.com/?com=view_post&forum=1251&pid=911109

BlueCheese

(2,522 posts)
9. Occam's Razor...
Sat Dec 19, 2015, 10:27 AM
Dec 2015

... says that by far the mostly likely explanation is that he was after data that he shouldn't have access to.

You see someone in a ski mask leaving a house with a broken window, holding a bunch of expensive items-- maybe, maybe, it's the homeowner who needed it and lost his keys. But very doubtful.

 

NuclearDem

(16,184 posts)
11. No. Sanders staffers fucked up.
Sat Dec 19, 2015, 10:32 AM
Dec 2015

Best case, he tried to make a point to the vendor by deliberately tripping runtimes designed to alert them and the DNC about unauthorized access, and he got the expected response. The DNC may have gone overboard in light of the concerns about the vendor's record, but instead of working with them, Sanders completely botched the response.

Worst case, he was an opportunistic thief who thought "but the keys were in the ignition" sufficed for an excuse.

mmonk

(52,589 posts)
12. Nobody from the Clinton campaign seems
Sat Dec 19, 2015, 10:33 AM
Dec 2015

outraged their data was exposed by the DNC and it's contractor enough.

DURHAM D

(32,610 posts)
14. Not true.
Sat Dec 19, 2015, 10:41 AM
Dec 2015

They were outraged but decided yesterday to speak to the press on background only.

They were waiting for proof that the info was destroyed/returned.

Meanwhile some of BS staff decided to trumpet the airways with their bogus outrage. Bernie's staff withheld the info from him for more than 24 hours. They have not served him well and he deserves better. Now he knows he is surrounded by people he can not trust.

mmonk

(52,589 posts)
24. I think it had to do with the DNC going
Sat Dec 19, 2015, 10:59 AM
Dec 2015

to the press and announcing their shutting off the campaign's data in violation of their own protocol agreement. But that's just me.

DURHAM D

(32,610 posts)
27. Why do you think the DNC went to the press first?
Sat Dec 19, 2015, 11:03 AM
Dec 2015

The DNC press release did not come out until after Weaver had started his presser.

Blue State Bandit

(2,122 posts)
40. But this does answer who made this into a shit show that could not stay out of the news.
Sat Dec 19, 2015, 11:41 AM
Dec 2015

DSW screwed this up bad. She's made it impossible to settle amicably, and accusations from the Clinton Campaign and the DNC "on background" -otherwise known as anonymously- of "theft", and "systemic" actions before knowing what happened is doing nothing but stoking the flames.

tammywammy

(26,582 posts)
20. I agree with you about Bernie's staff.
Sat Dec 19, 2015, 10:50 AM
Dec 2015

I can't imagine he'd support looking into other campaigns data.

tazkcmo

(7,300 posts)
31. Typical willful ignorance.
Sat Dec 19, 2015, 11:13 AM
Dec 2015

The Clinton's leave a trail of slime just like a slug and have for 25 years. The scandals and appearances impropriety are well documented and just as numerous and continue to grow and will continue to grow. They have a proven track record of unethical decisions and actions while Sanders has a proven track record of consistent integrity but it's Sanders who is the Evil Mastermind.

A full, independent investigation (The Clintons are used to these as they're always in one) will reveal collusion between the
dnc and hrc.



boston bean

(36,222 posts)
38. I'm outraged that the Sanders campaign accessed it, downloaded, saved files
Sat Dec 19, 2015, 11:31 AM
Dec 2015

and did this for close to an hour.

Why do I need to be angry at the DNC who was unaware of the flaw.

The contractor made a mistake. That doesn't mean what was done was OK.

Blue State Bandit

(2,122 posts)
43. No downloading occurred. If DSW is your source, she's been contradicted by NGPVAN.
Sat Dec 19, 2015, 12:45 PM
Dec 2015

"They not only viewed it, but they exported it and they downloaded it," Wasserman Schultz told CNN's Wolf Blitzer.


"So for voters that a user already had access to, that user was able to search by and view (but not export or save or act on) some attributes that came from another campaign." - NGPVAN Blog


You might want to understand "what was done" before accusing people.

boston bean

(36,222 posts)
44. You might want to update your facts.
Sat Dec 19, 2015, 12:46 PM
Dec 2015
According to data reviewed by TIME, the Sanders campaign appears to have obtained files with lists of voters that the Clinton campaign had cultivated in 10 early states including Iowa and New Hampshire.

Beyond simply reviewing the data, the logs show the Sanders staffers took deliberate steps to harvest and store the information. According to the logs, the Sanders staff created from scratch no fewer than 24 lists—consisting entirely of data pulled down from the Clinton campaign’s database—and saved them to their personal folders.




http://time.com/4155185/bernie-sanders-hillary-clinton-data/

Blue State Bandit

(2,122 posts)
45. To files on the VoteBuilder site, not their hard drives.
Sat Dec 19, 2015, 12:51 PM
Dec 2015

My facts came from the vendor. Check the link.

"So for voters that a user already had access to, that user was able to search by and view (but not export or save or act on) some attributes that came from another campaign."

 

Betty Karlson

(7,231 posts)
29. And so do I. This has Debbie's hands all over it: winning at whatever cunning costs,
Sat Dec 19, 2015, 11:06 AM
Dec 2015

pulling one dishonest stunt after the other. The coronation committee is turning very ugly in its desperation. Must have something to do with Ann Selzer's poll.

mhatrw

(10,786 posts)
47. LOL. A Clinton staffer wrote the program and has full unfettered access to the database!
Sat Dec 19, 2015, 10:10 PM
Dec 2015

The Clinton campaign does not need a security flaw to access the data gathered by the Sanders campaign. Both the DNC and the owners of NGP-VAN work for Clinton.

They introduced a security breach into the system and then sat back just waiting to incriminate Sanders if anybody in Sanders' staff tried to investigate the security breach by perusing data they should not have had access to.

It's Ratfucking 101 and it's so transparent that Clinton will probably end up invoking 9/11 to explain it.

Latest Discussions»Retired Forums»2016 Postmortem»The "Honey Pot" Theory.