Dominion Voting Systems CEO Says Company Has Never Used SolarWinds Orion Platform

The CEO of Dominion Voting Systems on Tuesday said the company has never used a platform that experts believe was breached by hackers as far back as last year.

“We don’t use the SolarWinds Orion package that was the subject of the DHS report from the 13th,” CEO John Poulos told legislators in Michigan via video link.

However, a screenshot of a Dominion webpage that The Epoch Times captured shows that Dominion does use SolarWinds technology. Dominion later altered the page to remove any reference to SolarWinds, but the SolarWinds website is still in the page’s source code.

SolarWinds’s technology was exploited by actors who inserted malicious software into updates for its Orion platform, according to officials with the Department of Homeland Security (DHS) and cybersecurity experts.

The DHS’s Cybersecurity and Infrastructure Security Agency (CISA) warned that the compromise of the network “poses unacceptable risks” and ordered federal agencies that use it to revoke internet access to the affected devices.

The attack “was likely the result of a highly sophisticated, targeted, and manual supply chain attack by an outside nation state, but we have not independently verified the identity of the attacker,” the company said in a statement.

Non-Orion products don’t appear to have been compromised, SolarWinds said.

Poulos said Dominion hasn’t ever used the Orion platform. No legislators asked him about what SolarWinds technology the company does use, and Dominion didn’t respond to requests for comment.

Dominion provides voting equipment and software to 28 states.

The Supreme Court’s Texas Ruling is Nothing Short of Disgrace

How many of those litigant states backing Texas used the rigged Dominion voting machines?

The answer to that demonstrates that the USSC aided and abetted state officials’ election tampering equipment/software of Dominion Voting Systems.

By rejecting the Texas lawsuit, the USSC effectively said, “we the Supreme Court permit you to manipulate and disenfranchise America voters outside the jurisdictional of your own state legislatures b/c numerous details in the Texas lawsuit exposed the tax-paid public servants as derelict......possibly criminal......in carrying out their duties.

Alarmingly, the USSC protected the tax-financed administrative state-——particularly those election officials who were beneficiaries of Zuckerbrg’s $400 million outlay.
AG’s in states who were party to Texas’ lawsuit, might now start investigating Dominion Voting Systems for their crimes, utilizing their own tax-financed L/E capabilities.

Again and Again, no Dominion election software system ever used Orion, see my prev posts.

Please Stop Spreading Stupid

This is Serv-U which is an FTP client sold by the same company. It has nothing to do with the Orion platform.

what you are doing is just like saying “the control software in my Hyundai car got hacked, this means that every cargo container with Hyundai stenciled on it is compromised”

Please stop

No, the attack vector was the update system, and only one malicious .dll file specifically for one product was identified.

No you are wrong. solarwinds -- serv-u_ftp_server SolarWinds Serv-U FTP server before 15.2.1 allows remote command execution. 2020-07-05 7.5 CVE-2020-15541

That's just one of many for the product.

Please do not spread misinfo

It's a garbage product mainly useful for companies that want to add vulnerabilities to their products.

No I am right.

That was a totally different issue. That bug did affect
Serv-u versions 15.0.. to 15.2.. but that issue was identified and patched in july.

But it was a vulnerability/bug, not a deliberate attack that including signed .dll files inserted into the update matrix for a specific product in a deliberate penetration attempt

You do see the difference?

Yes, I understand the difference.

Signed code attacks are easy and a dime-a-dozen. Code signing certs are everywhere and easy to obtain. China and Taiwan have hundreds of code signing certs they can use to create or compromise products, and they do it all the time. The media is pretending this is novel and they obviously fooled you.

Other software supply chain attacks are through unsigned open source, also quite common. The US military has a ton of open source in it, supposedly all vetted but its not.

Vulnerabilities are a hidden way to allow adversaries to gain access to a product. For example a voting machine company can use SW that they know is vulnerable, advertise that fact on their website, and expect that enemies can use that information to meddle in elections.

A good example of the latter is Adobe. Inserting Adobe components is not much more than a way to make sure that a product is hackable.

Why would any company do that, you might ask. The answer is simple: $$$.

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.