Bugtraq mailing list archives
Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes
From: "Enrique A. Chaparro" <echaparro () uolsinectis com ar>
Date: Tue, 28 Sep 2004 01:33:05 +0000
On Fri, 24 Sep 2004 10:01:59 -0400 Claudius Li <aprentic () sectae net> wrote: CL> CL> So my question is, given that this seems to be a solved problem why is CL> there so much debate on finding the solution? Surely I am missing CL> something obvious. CL> Might seem to be, but it is _not_ a solved problem. Despite some computationally secure protocols exist (some of them more recent and slightly less cumbersome than those explained in Bruce's book), the _practical_ implementation of such protocols is still extremely complex, if even possible for large scale elections. First objection is: (a) if you're going to vote `remotely' (e.g., thru Internet) you have no assurance at all that the `voting station' (i.e., voter's computer) has not been tampered with. A well crafted worm, even if it exploits well known vulnerabilities (users do not apply security patches very often), may completely change the electio's result. (b) if you are going to vote `locally' (i.e., using an `official' voting station under election officials physical control), you still have the same `blackbox' problems with the software _and_ all the burden associated with cryptographic keys generation and distribution. Second objection is: Even if you were able to overcome the first objection (wich, in case "b" above, will solve the issue for simpler methods), a secure system requires _huge_ amounts of computing power (if you're thinking of large scale elections, i.e. elections involving millions of voters) Regards, Enrique -- ``Izena duen guzia omen da.''
Attachment:
_bin
Description:
Current thread:
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes, (continued)
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Homer (Sep 22)
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Rainer Duffner (Sep 22)
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Mike Ely (Sep 22)
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Claudius Li (Sep 25)
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Seth Breidbart (Sep 27)
- RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes David Schwartz (Sep 28)
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Adam Shostack (Sep 29)
- RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes David Schwartz (Sep 29)
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Seth Breidbart (Sep 29)
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Claudius Li (Sep 25)
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Enrique A. Chaparro (Sep 28)
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Dana Hudes (Sep 29)
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Patrick J. Kobly (Sep 28)
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Gene Cronk (Sep 22)
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes steve menard (Sep 22)
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Barry Fitzgerald (Sep 23)
- Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes Jose Rey (Sep 25)