Started By
Message

re: Microsoft SQL Database Management Program found on Dominion... Non-Authorized software

Posted on 5/10/21 at 4:32 pm to
Posted by shoelessjoe
Member since Jul 2006
9909 posts
Posted on 5/10/21 at 4:32 pm to
quote:

To be on voting machines. Yes! Thus it's certification. That means the machines lost it's certification. Thus the vote can not be certified.

This is not hard.

You are trying to reason with never trumpers The thought of Biden actually winning the election without fraud never crossed their minds.
Posted by LSU316
Rice and Easy Baby!!!
Member since Nov 2007
29288 posts
Posted on 5/10/21 at 4:36 pm to
Wonderful....get that guy under oath, in a court room, in front of the judge, and do that same thing.

Then get a Dominion person under oath on the stand in the court room to describe how/why that is possible.
Posted by Jjdoc
Cali
Member since Mar 2016
53468 posts
Posted on 5/10/21 at 4:38 pm to
quote:

Wonderful....get that guy under oath, in a court room, in front of the judge, and do that same thing.


Already given to the court. That's why we are having the conversation.

quote:

Then get a Dominion person under oath on the stand in the court room to describe how/why that is possible.


I agree. But let's be honest they are being protected and running from court.

Posted by LSU316
Rice and Easy Baby!!!
Member since Nov 2007
29288 posts
Posted on 5/10/21 at 4:39 pm to
The problem is it doesn't matter....I understand that they have showed in court that the Dominion machines in multiple states were networked which is specifically not allowed on these voting machines. If they have shown that and the people that make the decisions don't care then I don't think there are any tech cards you can play that will prove your case.
Posted by jonnyanony
Member since Nov 2020
9941 posts
Posted on 5/10/21 at 4:49 pm to
quote:

You are playing semantics.



Not at all. You said it "provides access." That is not true.
Posted by BeepNode
Lafayette
Member since Feb 2014
10005 posts
Posted on 5/10/21 at 4:50 pm to
Dude, you can connect to a SQL Server and modify the data with the built in command prompt.(powershell sqlps for example). In both cases you would need access and rights.

They aren’t going to use SSMS to automate a hack. It will be done with scripts and code execution.
This post was edited on 5/10/21 at 4:55 pm
Posted by moneyg
Member since Jun 2006
56483 posts
Posted on 5/10/21 at 5:00 pm to
quote:

Dude, you can connect to a SQL Server and modify the data with the built in command prompt.(powershell sqlps for example). In both cases you would need access and rights.

They aren’t going to use SSMS to automate a hack. It will be done with scripts and code execution.



I don't necessarily agree. It may actually be easier to install SSMS than some other executable or service. And, low tech and manual may have been preferred. But, it's irrelevant. None of that matters.

Proof of the possibility is what is important. It doesn't matter if there was a different program that did the work. The result is the same.
Posted by jonnyanony
Member since Nov 2020
9941 posts
Posted on 5/10/21 at 5:00 pm to
The fact that we're talking about this means fundamentally that MSSQL is running on the dominion machines. That makes this tool irrelevant as a security concern because anything on the machine (or remotely) could conceivably connect to it with privileges.
Posted by jonnyanony
Member since Nov 2020
9941 posts
Posted on 5/10/21 at 5:02 pm to
quote:

Proof of the possibility is what is important.


What's important is breach of protocol, that's it. Whether it's SSMS or a random asp script or compiled binary, we already know that data in a database can be modified. You can't use just that as a proof of possiblity, because the vulnerability is the database itself + protocol.
Posted by jonnyanony
Member since Nov 2020
9941 posts
Posted on 5/10/21 at 5:04 pm to
And if I were presented with this I'd have a lot of questions about transaction logs, database users and ACLs and automated snapshots with integrity checks
Posted by Jjdoc
Cali
Member since Mar 2016
53468 posts
Posted on 5/10/21 at 5:26 pm to
quote:

It may actually be easier to install SSMS than some other executable or service. And, low tech and manual may have been preferred. But, it's irrelevant. None of that matters.



According to the Attorney's people, they are going to show how running scripts rather than commands will do all the work.

Watch the video
Posted by dgnx6
Baton Rouge
Member since Feb 2006
68612 posts
Posted on 5/10/21 at 5:43 pm to
The Texas one literally states the issues aren't up to standards and that the Dominion democracy shouldn't be certified.


Posted by obdobd918
Member since Jun 2020
3228 posts
Posted on 5/10/21 at 5:47 pm to
quote:

No.. No it doesn't. It's an illegal software on voting machine.


It is a violation of the law. Waiting for arrests.
Will probably run out of popcorn.

Posted by GetMeOutOfHere
Member since Aug 2018
687 posts
Posted on 5/10/21 at 5:48 pm to
quote:

And if I were presented with this I'd have a lot of questions about transaction logs, database users and ACLs and automated snapshots with integrity checks


Lot of BS in this thread, but these are good questions.

SSMS doesn't mean a thing. I can get into the database with the command line if I have permissions.

Transaction Logs and any change tracking would tell a lot.
Posted by moneyg
Member since Jun 2006
56483 posts
Posted on 5/10/21 at 5:50 pm to
quote:

According to the Attorney's people, they are going to show how running scripts rather than commands will do all the work.



A script is just a list of commands. you can think of it as a program.

For example. Let's say I knew I was going to inject 10000 fraudulent ballots, and I wanted to increase Biden by 9k and Trump 1K, that would be an example of a very simple script.

I could also apply a more complicated mathmatical algorithm that shaved percentages of votes from Trump and gave them to Biden so that the expected total of physical ballots were appropriate.

With access to the database, the possibility of fraud is endless.

If they are taking an imaged version of these machines, and showing that the door is wide open to sql scripts being run, it shows that the system had zero legitimate security.
This post was edited on 5/10/21 at 5:51 pm
Posted by dgnx6
Baton Rouge
Member since Feb 2006
68612 posts
Posted on 5/10/21 at 5:51 pm to
quote:

There is a 100% chance he has no clue what he is talking about


That's rich.
Posted by xxTIMMYxx
Member since Aug 2019
17562 posts
Posted on 5/10/21 at 6:03 pm to
quote:

SQL is a language. SQL Management Studio is a software, and this is what has been referenced


Transact SQL is the language in MSSQL SERVER. It’s PL/SQL IN Oracle.
Posted by xxTIMMYxx
Member since Aug 2019
17562 posts
Posted on 5/10/21 at 6:05 pm to
They could have done a dry run of data and created a package in Visual Studio SSIS/BIDS that automated any changes
Posted by xxTIMMYxx
Member since Aug 2019
17562 posts
Posted on 5/10/21 at 6:07 pm to
They aren’t going to use SSMS to automate a hack. It will be done with scripts and code execution.

You can with SSIS. I do it all the time
Posted by xxTIMMYxx
Member since Aug 2019
17562 posts
Posted on 5/10/21 at 6:12 pm to
You can also certainly write a tsql script, with plenty of procedures and functions to do anything you want if you are good at what you are doing in SSMS. Test it. Then execute it. The importing of data would probably need SSIS if you were automating though.

Even so, importing 10k rows of data is simple and you could run a simple update command to do something like switch votes
This post was edited on 5/10/21 at 6:14 pm
first pageprev pagePage 10 of 12Next pagelast page

Back to top
logoFollow TigerDroppings for LSU Football News
Follow us on Twitter, Facebook and Instagram to get the latest updates on LSU Football and Recruiting.

FacebookTwitterInstagram