[36744] in bugtraq
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
daemon@ATHENA.MIT.EDU (Kurt Seifried)
Wed Sep 29 15:54:49 2004
Message-ID: <001801c4a372$52cf67e0$1600110a@pooptop>
Reply-To: "Kurt Seifried" <bt@seifried.org>
From: "Kurt Seifried" <bt@seifried.org>
To: "Jeremy Epstein" <jeremy.epstein@webmethods.com>,
<bugtraq@securityfocus.com>
Date: Sat, 25 Sep 2004 20:41:28 -0600
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="iso-8859-1";
reply-type=original
Content-Transfer-Encoding: 7bit
Why can't this all be done the same way Nevada handles modern slot machines?
For example if you are playing a slot in Nevada and feel it's not behaving
there is a 24 hour toll free number you can call and the Nevada Gaming
Commission and they will send someone out to tear the machine apart and
verify (among other things) that the software image in the machine
corresponds to an approved one that is on file with the Nevada Gaming
Commission. Slot machines undergo a torture test that involves 20,000 volt
tasers to the outer case, lights (to try and confuse the pay out mechanism)
and so on. The source code is reviewed and approved, kept on file with
approved binary images, etc.
Seriously folks, if it can be done right for a nickel slot machine you think
it could be done right for an electronic voting machine.
Kurt Seifried, kurt@seifried.org
A15B BEE5 B391 B9AD B0EF
AEB0 AD63 0B4E AD56 E574
http://seifried.org/security/
