[ale] OT: electronic voting info

[Geoffrey]

Transam wrote:
> The Johns Hopkins report (with Johns Hopkins University being in
> Maryland), and the outrage it rightly generated caused Maryland's
> Governor to order an independent audit of the Diebold voting system:
> 
> http://Security.ITtoolbox.com/news/dispnews.asp?i=101718&t=99
> 
> The audit found 328 security weaknesses, 26 of them critical.

I love this section:

"After analyzing Diebold's software source code that had mistakenly been 
left on an open Internet site, Rubin wrote a scathing report, saying 
that anyone with a minimum of computer knowledge could manufacture 
"homebrew" Smartcards and outsmart the system. He excoriated Diebold's 
software designers, who had built passwords such as 1111 into the 
machines, and said he would have flunked them in basic computer security 
classes."

So the code is out and they hardcoded some real secure passwords.

I wonder if Cathy Cox has seen this..

-- 
Until later, Geoffrey	esoteric at 3times25.net

Building secure systems inspite of Microsoft