It looks like you're using an Ad Blocker.
Please white-list or disable AboveTopSecret.com in your ad-blocking tool.
Thank you.
Some features of ATS will be disabled while you continue to use an ad-blocker.
Based on redacted statements and log information, the FBI assesses redacted was accessed without authorization on january 5, 2013. It remains unknown how redacted credentials were compromised and if any information was exfiltrated from her inbox.
originally posted by: Dfairlite
Well, the FBI just released some more information from the email probe and it would seem that comey lied, yet again, when he said they were unable to verify if anyone gained unauthorized access to her secret server.
Here's what is in the new report (pg 140/229):
Based on redacted statements and log information, the FBI assesses redacted was accessed without authorization on january 5, 2013. It remains unknown how redacted credentials were compromised and if any information was exfiltrated from her inbox.
This is a pretty direct contradiction to his statement iirc.
originally posted by: introvert
originally posted by: Dfairlite
Well, the FBI just released some more information from the email probe and it would seem that comey lied, yet again, when he said they were unable to verify if anyone gained unauthorized access to her secret server.
Here's what is in the new report (pg 140/229):
Based on redacted statements and log information, the FBI assesses redacted was accessed without authorization on january 5, 2013. It remains unknown how redacted credentials were compromised and if any information was exfiltrated from her inbox.
This is a pretty direct contradiction to his statement iirc.
It appears they are talking about an email account that was compromised. It says the account was hosted on the server, but does the server itself have to be compromised to access the account?
originally posted by: Gothmog
originally posted by: introvert
originally posted by: Dfairlite
Well, the FBI just released some more information from the email probe and it would seem that comey lied, yet again, when he said they were unable to verify if anyone gained unauthorized access to her secret server.
Here's what is in the new report (pg 140/229):
Based on redacted statements and log information, the FBI assesses redacted was accessed without authorization on january 5, 2013. It remains unknown how redacted credentials were compromised and if any information was exfiltrated from her inbox.
This is a pretty direct contradiction to his statement iirc.
It appears they are talking about an email account that was compromised. It says the account was hosted on the server, but does the server itself have to be compromised to access the account?
Yes
Next question
originally posted by: introvert
originally posted by: Gothmog
originally posted by: introvert
originally posted by: Dfairlite
Well, the FBI just released some more information from the email probe and it would seem that comey lied, yet again, when he said they were unable to verify if anyone gained unauthorized access to her secret server.
Here's what is in the new report (pg 140/229):
Based on redacted statements and log information, the FBI assesses redacted was accessed without authorization on january 5, 2013. It remains unknown how redacted credentials were compromised and if any information was exfiltrated from her inbox.
This is a pretty direct contradiction to his statement iirc.
It appears they are talking about an email account that was compromised. It says the account was hosted on the server, but does the server itself have to be compromised to access the account?
Yes
Next question
So if I access work-related emails at home with proper credentials, I am still compromising, or hacking, which was the term used, the server?
It does not look as though the server was hacked in this particular case. The email account was accessed, without access to the entire servers content.
originally posted by: Phage
a reply to: MetalThunder
Comey's statement is quite specific, "Secretary Clinton’s personal e-mail domain." Because of the redaction, we can't determine if the compromised account was part of that domain. So there is some ambiguity.
No , you are logging in to the email server. Completely legit.
You are either playing naive or do not understand how an email (and email relay) servers work.
Unfortunately there are alot of self proclaimened enlightened geniuses around here playing really dumb the last few days.
originally posted by: Gothmog
originally posted by: introvert
originally posted by: Gothmog
originally posted by: introvert
originally posted by: Dfairlite
Well, the FBI just released some more information from the email probe and it would seem that comey lied, yet again, when he said they were unable to verify if anyone gained unauthorized access to her secret server.
Here's what is in the new report (pg 140/229):
Based on redacted statements and log information, the FBI assesses redacted was accessed without authorization on january 5, 2013. It remains unknown how redacted credentials were compromised and if any information was exfiltrated from her inbox.
This is a pretty direct contradiction to his statement iirc.
It appears they are talking about an email account that was compromised. It says the account was hosted on the server, but does the server itself have to be compromised to access the account?
Yes
Next question
So if I access work-related emails at home with proper credentials, I am still compromising, or hacking, which was the term used, the server?
It does not look as though the server was hacked in this particular case. The email account was accessed, without access to the entire servers content.
No , you are logging in to the email server.
Completely legit.
You are either playing naive or do not understand how an email (and email relay) servers work.
And I dont have time and space to explain
originally posted by: Phage
a reply to: Gothmog
I know what a domain is. I know that Clinton's server carried several domains. I don't know if the email account which was accessed was Clinton's personal email domain. I do know that Comey specified Clinton's personal email domain.
Hackers mostly use one of two main ways to get access to your site—exploiting code vulnerabilities and stealing credentials of valid users. Taking advantage of code vulnerabilities takes specialized skills. So, while this still happens, it is not as popular as credential stealing.
Hackers would much rather use an easier and more reliable way to unlock a door into your site—taking over your users’ accounts. It is the most popular way to gain unauthorized access these days. According to the Verizon Data Breach Investigations Report (VDBIR) using stolen credentials has been the number one attack vector for web applications for the past two years.
originally posted by: introvert
a reply to: Gothmog
No , you are logging in to the email server. Completely legit.
So it wasn't hacking? They just accessed the email account, unauthorized of course?
You are either playing naive or do not understand how an email (and email relay) servers work.
I am not privy to all of the in and outs of email systems, but I understand the words being used.
It appears that Comey was correct and that in this case the server was not hacked. The email account itself was accessed without authorization.