{"id":4007,"date":"2015-10-15T02:44:36","date_gmt":"2015-10-14T18:44:36","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=4007"},"modified":"2015-10-15T02:52:24","modified_gmt":"2015-10-14T18:52:24","slug":"more-drama-about-hillary-clintons-e-mail-leak-vnc-rdp-open","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2015\/10\/more-drama-about-hillary-clintons-e-mail-leak-vnc-rdp-open\/","title":{"rendered":"More Drama About Hillary Clinton&#8217;s E-mail Leak &#8211; VNC &#038; RDP Open"},"content":{"rendered":"<p>So this Hillary Clinton&#8217;s e-mail leak case has been a pretty interesting phenomena to observe and has been going on since last month, we didn&#8217;t really cover it as well it mostly concerns US politics &#8211; not a huge area of interest for most.<\/p>\n<p>But it&#8217;s getting more and more interesting, there was a report that <a href=\"http:\/\/www.theregister.co.uk\/2015\/09\/04\/clinton_email_auction_twist_secure_hacker\/\">32,000 of Hillary Clinton&#8217;s Email for auction<\/a> to the highest bidder.<\/p>\n<p align=\"center\"><img decoding=\"async\" src=\"https:\/\/c1.staticflickr.com\/1\/715\/21982304480_4bc7be0617.jpg\" alt=\"More Drama About Hillary Clinton's E-mail Leak - VNC &#038; RDP Open\" \/><\/p>\n<p>But it was rather unsubstantiated. Now it&#8217;s getting more and more interesting, seeing as though Hillary used a private e-mail server &#8220;for convenience&#8221; and this server also had VNC and RDP open to the INTERNET. Yah..<\/p>\n<p>It also includes her using the same e-mail, yes a state department server technically, for personal e-mails.<\/p>\n<blockquote><p>Not only did Democratic Party presidential hopeful Hillary Clinton run her own email server while at the State Department: someone, presumably her friendly local sysadmin, decided it needed remote desktop protocol (RDP) and desktop sharing code virtual network computing (VNC) exposed to the Internet.<\/p>\n<p>The folks at Associated Press were alerted to the situation by a Serbian geek the newswire hasn&#8217;t named, but who ran bulk port-scans that happened to include Hillary&#8217;s email server.<\/p>\n<p>The scans came from the anonymous researcher who in 2013 published the white-botnet-driven \u201cInternet census\u201d, AP says.<\/p>\n<p>Scans of a server that identified itself as clintonemail.com in August and December 2012 showed open ports for RDP and VNC. In March 2012, Microsoft warned that RDP was likely to be attacked, and in October of the same year Verizon warned that RDP&#8217;s default Port 3389 was among the most-scanned on the Internet.<\/p><\/blockquote>\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-3033787195489589\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- Darknet Responsive Post Ad Links [previously link ad unit] -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-3033787195489589\"\r\n     data-ad-slot=\"5456620019\"\r\n     data-ad-format=\"auto\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<p>So yah, apart from running her own e-mail server rather than using government resources or using a more secure, managed e-mail solution like Google Apps, whoever set it up also thought having VNC and RDP open to the Internet was a smart idea.<\/p>\n<p>Or well, more likely they didn&#8217;t think about it at all. It was just such a hassle to get into wherever the server was stored, they installed remote access software and enabled it over the public IP.<\/p>\n<p>VPN? What? <\/p>\n<blockquote><p>The researcher told AP the server also presented VNC to the Internet at large.<\/p>\n<p>The State Department at the time required a waiver for any of its own techs to use remote access tools for systems administration, all the way down to unclassified servers, the AP notes.<\/p>\n<p>There&#8217;s also a suggestion that a Web server \u2013 probably bundled with whichever operating system distribution clintonemail.com ran \u2013 was running, although not in use.<\/p>\n<p>The Internet Census port-scan showed two other devices that had open ports, but those aren&#8217;t identified by the newswire. Presumably one of them was a broadband modem \u2013 still leaving one mystery device to be identified.<\/p><\/blockquote>\n<p>Another interesting story to note is that all the e-mails were backed up to the cloud using a service called Datto Inc:<\/p>\n<p><a href=\"http:\/\/www.mcclatchydc.com\/news\/nation-world\/national\/article37968711.html\">Unbeknownst to Clinton, IT firm had emails stored on cloud; now in FBI\u2019s hands<\/a><\/p>\n<p>And I wonder if their waivers were signed? I somehow doubt protocol was followed in this case, as using a state funded e-mail server for personal e-mails is probably very much against due process.<\/p>\n<p>Now this was a while back, the actual occurrence being in 2012 &#8211; but I guess it&#8217;s rising back up again now with Hillary vying for the presidency.<\/p>\n<p>Source: <a href=\"http:\/\/www.theregister.co.uk\/2015\/10\/14\/hillarys_sysadmin_next_to_the_pillory\/\">The Register<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>So this Hillary Clinton&#8217;s e-mail leak case has been a pretty interesting phenomena to observe and has been going on since last month, we didn&#8217;t really cover it as well it mostly concerns US politics &#8211; not a huge area of interest for most. But it&#8217;s getting more and more interesting, there was a report [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"Hillary Clinton's E-mail Leak - it's rocking the news again even though it happened back in 2012 and the e-mail server had VNC\/RDP open as well.","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[23,17],"tags":[2359,1023],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/4007"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=4007"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/4007\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=4007"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=4007"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=4007"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}