Timor Leste - They don't really care about us...

Introduce. My name is A. Without a last name.

I was born in Indonesia. As a CEH, my profession of computer network security consultant.

This new year I follow the news and to vote in the Presidential elections Indonesia.

Today July 23 2014 I read the various posts. Many ask: Is the presidential election took place in 2014 with honest and fair?

I may have the answer. Possible. My writing may answer the question. May also even open many new questions.

However earlier apologies. I am not a writer. We are sorry if my language is not good. I'm trying to make a short and effective.

This paper is aimed to those of you who are curious.

Also to elect a presidential candidate, Jokowi pack. In order for IT systems later in 2019 elections could be better than now. So that no more that cried foul.

Also for a presidential candidate is not elected, Mr. Prabowo. Because you must be curious. Also for president now, sir SBY. Who knows, the father was also curious.

Also to the designers and IT systems admin election 2014: Raden Santoso, Nana Indra, Utian Ayuba, Andy Nugroho, Yoga Dahirsa, Muhammad Hafidz et al.

Of course, also to the members of the Commission: Husni Kamil Malik, Kurnia Rizkiyansyah Ferry, Ida Budhiati, Sugit Pamungkas et al.

Consider it my contribution. For shared learning materials. That Indonesia is safer. Indonesia great. Indonesia rose.

7 April 2014

On 7 April 2014, I noticed a fascinating phenomenon.

Hackers and crackers also have the right to vote. Had political rights. Also have the right to campaign to support the number one or number two.

So great was the spirit of the hackers and crackers in the 2014 Presidential Election. Most of the second support. Although there is also the number one support.

This is my conclusion after seeing so many candidate ads on Google and YouTube. Ads are fine. Advertising also fine.

Though there can be no presidential ads on both sites. Google prohibits political advertising in Indonesia. In any form. But ...

They must realize the power of Google in limited ad filtering and blocking. This vulnerability is exploited.

There are also so excited, a lot of people hacked the site, converted into pages for promotion or disfigure that not supported.

They are trying to influence perception. Perceptions affect the results.

Their efforts make me ask. In addition to disseminating information to influence perception, what else can they do?

Get hackers and crackers sympathizers hacked into IT systems KPU candidates? And directly affect the outcome? I tried it.

Security Gap # 1: Email the Commission Members

To understand how the Commission IT systems from the information I need. I started looking for email addresses of members of the Commission.



I found this document all email addresses are active KPU commissioner used in this document. Six of seven using a free email.

I'm so ask. Organize elections not work playfulness. Why use a free email that is easily hacked? What might be intentional?

Ferry seems Kurnia is the youngest of the seven members of the Commission. Usually the youngest was the most involved IT affairs.

I send a phishing email to the Ferry. Less than two hours, I was able to access and read all the emails I have ever received and sent.

What I found made ​​me confused. I am sure the members of the Commission, and the Commission IT system designers not just anybody.

But they like to make everything so easy for a man like me has no intention to get into the IT system KPU.

Security Gap # 2: send Username and Password in Email

The first thing I did when opening the mail box one member of the Commission is looking for the word "password". I was surprised.

I can direct to SILOG password. Logistics System.



I also can password used Dropbox to store copies of data for the entire Indonesian voters.



Password to the system can also count Commission estate. Ya. It turns out that the Commission has a system that somehow the real count is not shown on the website so that the public should count themselves as kawalpemilu.org website.



Can also manage passwords for the Commission's website. Can also password for SIDALIH, voter data system. Can also passwords for many other systems.

It also makes me confused. Granted various passwords sent by the admin via email. Is a hacker wants to make it easier to enter the system?

Note: Many passwords are still used in this screenshot ... It makes me so ... Sorry if it's hidden so curious.

Security Gap # 3: There's Google Docs Username and Password

My surprise. Email this really beyond logic and way of thinking. I found an email sent by the IT system admin to all members of the KPU KPU. GOOGLE DOCS contents with a list of all passwords Commission IT systems.

I became really suspicious, administrators and members of the Commission did want to facilitate the hackers and crackers to break into the IT system of the Commission.

Moreover ...

Security Gap # 4: Easy Password Predictable Pattern

For example, this SSH password to KPU website I've ever used: 4dm1n80njol @ w1w1k. Username: kpuadmin.

Password root shell / MySQL: m3rd3k41945!

Many IT system password Commission using the same pattern. Is so easy to remember ... Or to be easily hacked. Sorry if I think that is a no-no, because I was trained to look at patterns.

Security Gap # 5: All Commission Members Can Edit List of Voters at will

This is the Voter Data System (SIDALIH) KPU. With this system the Commission set names entered Voters List (DPS) and the voters list (DPT).
Addition or subtraction of the names of voters can be done from this system. This is crucial because in Indonesian armed with enough voters can choose invitations without needing ID cards.
I am a layman. But a big question for me. If you want safe: Why all the members of the Commission DPT can edit at will? Why is access granted by the admin not only read only?
Edit right decision is, of course deliberate decision, not likely an accident, give very great authority for each member of the Commission to play with the number of voters. Reduce or add.
It could be if there is communication with the members of the Commission that a presidential candidate's campaign team, or if there is a hacker or cracker supporters of presidential candidate coming into the system like me ... It could add or subtract new voters ... voters in certain areas .
Those who can not choose, be given the right to vote. They are known to pick a particular candidate, could revoked their right to vote ... With easy. It's easy.
Moreover, for every entry ... No info or log publicly, who is last to edit let alone edit history.
Cracks were happy ... For those who have good intentions.
Security Gap # 6: All Commission Members Can Edit Sound Amount Paper Delivery at will
Logistics System (SILOG) KPU. With this system the Commission governing the distribution of ballots to all regions / TPS. Addition or subtraction delivery ballots can be made ​​from this system.
My question is about the same as SIDALIH SILOG.
I am a layman. But a big question for me. If you want safe: Why all the members of the Commission can edit logistics such election ballots at will? Why is access granted by the admin not only read only?
Sorry if this is like a repeat. This decision, of course, a deliberate decision, not likely an accident, give very great authority for each member of the Commission to play with the number of ballots.
It could be if there is communication with the members of the Commission that a presidential candidate's campaign team, or if there is a hacker or cracker supporters of presidential candidate coming into the system like me ... It could send more ballots to certain areas. It's easy.
Moreover, as in SIDALIH ... For every entry ... No info or log publicly, who is last to edit let alone edit history.
Appreciation: System Scan Form C1
In making this post, I feel I have to be fair. If there is a security hole, I have to say. If there is a best practice that is done, my appreciation.
C1 form a system scan made ​​by the Commission team I think is very good. Application interface design is simple, not a lot of stuffing. It certainly helps boost system utilization.
Presentation C1 on the web pilpres2014.kpu.go.id also good. Simple and easy to use by anyone.

C1 Management makes the perception that the election fair and square. Hardly likely to affect the results of the election if the scan C1've collected all of the servers Commission.

But I have a question. The question is quite large. Admin make a real count applications, specifically for the members of the Commission at the address http://103.21.228.33/internal - why this data is not opened to the public?

Why force the public to conduct mutual cooperation of hundreds of thousands of data entry form C1? Though it has no real count ...

Just a question just after it. There may be self-assessment ...

conclusion
Back to the original question: Is the 2014 Presidential Election took place with honest and fair?
I do not know. Too many areas, too many polls, too many voters to be able to know the name of the game with SILOG or SIDALIH.
But two things are certain. First: Anyone who can have access to SILOG and SIDALIH and have no intention of winning candidate number one or number two, especially before the month of May 2014, and had the ability to coordinate with a successful team on the field (TPS TPS, where the villages that need to be exceeded ballots ... the names of what needs to be added or subtracted from the system) can greatly affect the outcome of the presidential election in 2014.
Second: Not at all difficult to access all IT systems KPU. In fact I suspect ... As is made so easy for hackers and crackers who want to enter. What is it?
Hopefully not see why. Hopefully the security gaps that I write here ... It is a mistake that was not intentional.
Because anyone who has access to the IT system the Commission ... may affect who is elected President.
The President has the power to 250 million population country. 2,000 trillion budget. 600,000 soldiers. The velocity of money is almost 10,000 trillion.
Because if it was intentional ...
It's easy ... It could be hundreds ... thousands ... probably millions of voters "new". Creations of those who have access to SIDALIH.
It could also be hundreds ... thousands ... probably millions of ballots were "more coincidence". Creations of those who have access to SILOG.
Sorry if this post so raises new questions.
Thus my writing. Hopefully this is helpful.
A.
Footnote: I'm a hacker. Not a cracker. I do this out of curiosity audit. Not because there are no good intentions.
However, Indonesian law does not distinguish. To avoid the possibility of criminal ... I wish to REMAIN anonymous.
Source: Audit-Commission
Original Title: IT System Security Audit Commission 2014 presidential election

Full Pernyataan Prabowo Resmi Menolak Hasil Penghitungan KPU Pemilu 2014

Suara Perempuan Indonesia

Oposisi 3


Apakah kemenangan Jokowi menjadikan citra dari media lacur disebut kami
sebagai pembelaan terhadap wong cilik? Pertanyaannyà, selama puluhan
tahun media itu di mana posisi wing cilik? Kere tambah kere.

Para
cukong media itu Selalu mencari perhatian keadilan dan kesejahteraan,
tetapi anehnya sangat takut untuk membongkar akar kejahatan
negara-negara imperium -kaum kapitalisme. Tidak ada yang berani
melakukan kebijakan menentang terbuka dominasi mereka.

Lalu, Bagaimana keberadaan Jokowi? semoga bukan menjadi icon atau artis dari media itu untuk menaikkan ratingnya.

USA for Africa - We Are The World ( Original Music Video 1985 ) HD / HQ

Prabowo
Subianto: Pihak yang kuat, harus sabar. Karena kita ingin negara kita
baik. Kita berjuang untuk rakyat. Kita di sini bukan orang-orang yang
ingkar janji, bukan ingkar sumpah, bukan orang-orang yang bohong. Kita
takut kepada Allah SWT. " TETAPI APABILA
JOKOWI DAN KPU BERBUAT CURANG , HANYA 1 KATA : KITA LAWAN !!! BREAKING
NEWS dari Theron Mamanua: jam 8 pagi tiga Tim Ahli IT mendampingi
penyidik mabes Polri terhadap 37 Hackers yg menggelembungkan suara di
Rekap C-1 Kecamatan dari separo Golput/kecamatan di Jateng, DIY,
SULUT,Jatim danPapua sejumlah: 4,882juta suara utk JKWi. Semoga bisa KPU
Gunakan sbgai dasar hukum yg sah utk "membatalkan' dan mengurangi
perolehan suara JKWi dgn 4,882jt suara. Sehingga otomatis PRABOWO-HATTA
MENANG .....barusan saja Berita Acara Penyidikan Kejahatan
Penggelembungan Suara JKW di 5 Provinsi diteken oleh KABARESKRIM. Malam
ini langsung dibawa ke Bawaslu& KPU.... Semoga ini pertanda
kemenangan Bravo Salam Indonesia BangkitHanya info ya. Koreksi sendiri
ya, jangan di balas. #PrabowoHatta , #satuINDONESIA , #INDONESIABANGKIT , #dukungboikotMETROtv­ , #syuradikaraende95fr­aternity , Website Resmi Kampanye #DukungPrabowoHatta untuk #SelamatkanIndonesia­ :

www.SelamatkanIndone­sia.com

Mohon informasi ini disebarluaskan.

Presidential Candidate Alleges Massive Fraud In Indonesia Vote

www.huffingtonpost.com

JAKARTA, Indonesia (AP) — Indonesian presidential candidate Prabowo Subianto alleged Friday there had "been quite...

Bambu Pring Petuk Ketemu Ruas Asli

MERDEKA.COM. Sekjen Gerindra Ahmad Muzani tak persoalkan
perbedaan hasil hitung cepat di pilpres kemarin. Dia hanya mengkritisi
kubu Jokowi-JK yang sudah deklarasi kemenangan saat TPS-TPS belum
selesai menghitung suara.

"Persoalannya kredibilitas (survei) itu
nanti akan ditentukan pastinya tanggal 22 Juli, jadi saya kira
masalahnya adalah pada saat quick count belum tuntas dinyatakan selesai
ada pihak yang mengklaim menang itu problemnya," ujar Muzani di Gedung
DPR, Jakarta, Kamis (10/7).

Menurut dia, tidak masuk akal Kubu
Jokowi-JK melakukan deklarasi pada Pukul 14.00 WIB. Dia melihat ini
strategi Jokowi-JK jika nanti saat real count KPU menyatakan
Prabowo-Hatta maka akan dituduh curang.

"Jam 2 di saat
perhitungan belum selesai di Indonesia bagian barat sudah dinyatakan
menang itu problem yang menurut hemat kami menimbulkan situasi dimana
ada skenario dia ingin mengklaim menang kemudian kalah seolah-olah ada
kecurangan," tegas Muzani.

Anggota Komisi I DPR ini menilai,
deklarasi yang terlalu dini hanya sebuah pembenaran semata. Dia melihat,
dari dahulu memang PDIP selalu bermain persepsi.

"Inikan ada
sebuah tindakan pembenaran apa yang telah dikemukakan sebelumnya bahwa
kita hanya kecurangan yang bisa mengalahkan. Dari dulu bermainnya
seperti itu bermain persepsi bermain seolah-olah bermain ya anu, ya
anu," lanjut dia.

Nutronix Revolution Compensation Plan Video

http://www.drinknujava.com/NX1601060

NuBody MT - Moringa Tea

What makes our Moringa oleifera tea so
healthy and delicious? The fact that it’s not a tea, but a tisane.
Unlike teas, Moringa contains no caffeine and can be enjoyed by all.

Health benefits of Moringa oleifera teas:

47 Antioxidants

36 Anti-inflammatories

25 Vitamins & Minerals

27% Plant-based protein

All 8 essential Amino Acids
Flavorful and nutritious, drink it plain or spice it up with lemon, cinnamon, or honey.

Moringa Tea: Flavorful and Nutritious

The nutritious leaves of the Moringa oleifera tree are an
excellent ingredient for making teas filled with potent antioxidants.
Moringa leaves can be steeped in hot water for several minutes in a
traditional tea-making process. The leaves release an abundance of
nutrients and antioxidants into the hot water, creating a refreshing and
flavorful tea, full of beneficial compounds that promote energy and
wellness.


Moringa tea is made by harvesting fresh leaves from the
Moringa tree and drying them at low temperatures to preserve the vital
nutrients that will be released into your tea water. Dried leaves are
then shredded and either retained in their loose form or bagged into tea
bags.

How Moringa Works

One of the most important benefits of drinking Moringa tea is the high level of antioxidants that it delivers. Antioxidants are compounds which prevent cellular damage; the common pathway for cancer, aging, and a variety of other disease.Free radicals are
groups of atoms which are formed when oxygen interacts with molecules,
and they can react with cellular components that can be harmful and lead
to life-threatening illnesses. Antioxidants act as a defense system
against free radicals.


Diets that are high in antioxidants are considered
essential to keeping the body free of polluting and carcinogenic
substances that can lead to illness and disease.


Moringa leaves are packed with antioxidants called
"flavonoids", which are naturally occurring antioxidant compounds made
in plants. These powerful flavonoids include quercetin and kaempferol.
In fact, Moringa is equal to even the strongest green teas in its
ability to deliver powerful antioxidants to the body.

Benefits to Drinking Moringa Tea

People who drink Moringa tea report a pleasant boost in
energy and mental clarity after consuming a single cup. Women find that
Moringa tea helps with cramps and bloating during their menstrual
cycles, and men report increased levels of stamina during their working
days. People in India and the Philippines drink Moringa tea regularly
for nutrition, clarity, and general wellness.

Preparing Moringa Tea

Making your own Moringa tea is an easy and enjoyable
task. Simply use 1 bag of dried Moringa leaf powder per serving of tea
you wish to brew. Add the Moringa tea bag leaves and submerge in hot
water for five to ten minutes. For best results, place a lid on top
while the Moringa leaves steep. Remove the tea bag from the water,
squeeze it out, and enjoy your fresh Moringa tea!

How to Grow Moringa Using Cuttings

Kalau
bukan kita, siapa lagi? Kalau bukan sekarang, kapan lagi? Mari
bergabung bersama Gerindra untuk #SelamatkanIndonesia. Twitter:
@Gerindra.

www.selamatkanindonesia.com

If We Ever Meet Again

SIAP DIMAHARKAN MUMI , JENGLOT , WESI KUNING , B.MERAH DELIMA , dll . DICARI PEMBELI BARANG ANTIK DAN MISTIK KHUSUS UNTUK PILPRES / PILGUB / PILBUP , PT.GUDANG GARAM GROUP , PT.JARUM GROUP , PT.SAMPOERNA GROUP , TOMMY SOEHARTO GROUP, TOMMY WINATA GROUP , dll . HUB :TUAN GURU PANCOR 081246135356 , AKIU 081529015921 ,  ABAH TERJANG PRAHARA  081371003800 ,  RONI PAREIRA 081339586551 , HAJI NUEL 082341626824 , ATANGGAE Pin BB 29731eb7 , MARKUS 081339520420 , SITUMORANG 081236580479 , AZEEZ +6282145726372 , TUAN GURU PANCOR 082147224107 ,MBAH BAGAS PATI 081936784637 , CHING MOSSAD 081236987111 , ANDI HARSITO 082146678003 , ATAHER 082145144926 , PECI MOSSAD 085238395100 , ZULE MOSSAD 081239106299 , ZAKA MOSSAD 081246464546 , ABAH MOSSAD ALOR 081246460114 , DATA MOSSAD 081239410399 , NYOMAN MOSSAD 085239740654 , IMRAN MOSSAD 081338763611 , YAMIN MOSSAD 082147510377 , NUEL MOSSAD 082147698433 , LEO ASHARI 081237960280 , JOZE TLS 0812462536697 , DATO MOSSAD 081242665622 , OMPET +6281337787607 , OMICKY 081353812402 , ALEX 081236888897 , SHEIK AZEEZ BIN BRUNEI DARUSALAM +6282145726372 , ASIU 03808005807 , YANTOM +6281246350555 , TRIDA 085239396901 , BENRA +6281339258864 , BETEM 0811382912 , ANDRE +6285253046986 / +6281246645952 , CAK NARTO +6282147609876 / +6285253231925 , ASBEL BOLA 081331051363 , HASANUDIN CIKEAS 082146511702 , JERY 08123601083 , BAYU 082146633666 , HANDO 085737538835 , NUEL 081339001754 / 085239181215 , YENI MANOE 085253728575 , SITRI 081246142938 , MEDI 085237468926 , NIRON 082146086144 , MARIANUS 081331484671 , BANG EDY 081338463444 / 081246224442 , PAMBO TENTENA 081246133289 , ABAH 085287645333 , ABAH HEN 082145095388 , UDIN 082147779723 , ABAH 082146512474 , RUSLAN 082146089243 , ALAN 082147055770 , BONI 085239180450 / 081353455353 , CHRISTO 081339462526 , FENDI 085333610079 , WELKIS SEME 085253497000 , YANUS 085230616091 , OMBON +6285253199179 , OMED 082122310852 , OMOKI 0380832346 , OMPACE 08124667940 , OMPOLCE 081339466806 , OMTOE 081339476820 , EDY DOY 081237562047 , CORNELIS 085253379218  , MUTHALIB 03808109530 / 081338608942 / 087866176482 , RIN 08523144000 , RAMLY 085739293931 / 085253318856 , RONAL 082145664724 , DANIEL LEMA 081236960974 , CORNELIS MANOE 081339001754 , WANTO PIDJO 085239070323 , DAFO 085253459704 , RIDWAN MOSSAD 082147224107 ,www.oesao.multiply.com ,

 http://kayugaharu-endeflores.blogspot.com/
 http://endefloresvoteforpeaceandjustic.blogspot.com/
 http://endeflores-pringpetuk.blogspot.com/
 http://endeflores-gemstones.blogspot.com/
 http://bordersecurityforces.blogspot.com/
 http://alex-syuradikara95.blogspot.com/
 http://aliyahendeflores.blogspot.com/
 http://gigiendawengaee.blogspot.com/
 http://blampidjostealthmarketing.blogspot.com/
 http://culturebuzz-endeflores.blogspot.com/
 http://geisha007.blogspot.com/
 http://cypall-heartbreak.blogspot.com/
 http://8saltwisdom.blogspot.com/
 http://mossadsocialengineering.blogspot.com/
 http://kupangpropertyrealestate.blogspot.com/
 http://endesaremovie.blogspot.com/
 http://endesarechocolate.blogspot.com/
 http://slicgecko.blogspot.com/
 http://dbsnetworking.blogspot.com/
 http://santigioesao.blogspot.com/
 http://haiku-ndsare.blogspot.com/
 http://bemyfriendandsharepeace.blogspot.com/
 http://jewishgoldinvestment.blogspot.com/
 http://endefloresjapan.blogspot.com/
 http://weavingntt.blogspot.com/
 http://endesaremusic.blogspot.com/
 http://lukneno.blogspot.com/
 http://k-linkconcept.blogspot.com/
 http://k-linkbusiness.blogspot.com/
 http://ndsareartshop.blogspot.com/
 http://rememberme-alex.blogspot.com/
 http://senseimasutatsuoyama.blogspot.com/
 http://mitendate.blogspot.com/
 http://rememberme-alex.blogspot.com/
 http://endeflores-avoidscams.blogspot.com/
 http://endeflores-nanotech.blogspot.com/
 http://yawenwayeni.blogspot.com/
 http://endeflores-forest.blogspot.com/
 http://endeflores-summit.blogspot.com/
 http://endeflores-biochemicalscience.blogspot.com/
 http://endeflores-sciencetechnology.blogspot.com/
 http://endeflores-herbalphytotherapy.blogspot.com/ , http://mossad.gov.il/
 כד יְבָרֶכְךָ יְהוָה, וְיִשְׁמְרֶךָ. The LORD bless thee, and keep thee;
 כה יָאֵר יְהוָה פָּנָיו אֵלֶיךָ, וִיחֻנֶּךָּ. The LORD make His face to shine upon thee, and be gracious unto thee
 כו יִשָּׂא יְהוָה פָּנָיו אֵלֶיךָ, וְיָשֵׂם לְךָ שָׁלוֹם. The LORD lift up His countenance upon thee, and give thee peace.
 כז וְשָׂמוּ אֶת-שְׁמִי, עַל-בְּנֵי יִשְׂרָאֵל; וַאֲנִי, אֲבָרְכֵם. . ( tanpa perantara !!! )