Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Vuln-Dev
[Top] [All Lists]

RE: Diebold Global Election Management System (GEMS) Backdoor Acc ount A

Subject: RE: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes
Date: Mon, 27 Sep 2004 14:41:28 -0400
That's a very interesting viewpoint, but one that's directly at odds with
the trend in America today (and probably other countries too).  In the US,
corporations build nearly all the military equipment, do a lot of the
military work, transport the mail (most US mail goes on jets run by private
companies), run some of the jails, provide social services, deliver nearly
all the healthcare (e.g., for Medicare and Medicaid), etc.  In short, the US
government can't run today without substantial work by private industry.

Thus, Greg Woods' statement that we need to be "very clear in stating that
free enterprise (and capitalism) has no place whatsoever at any time in the
creation, formation, and instatement of a government for the people" is a
lovely thought, and totally out of touch with reality.  Not saying he's
wrong in his desire; just that it's a much bigger issue than voting
machines.

Arguing that the government shouldn't be relying on private corporations to
provide voting machines misses the point.  The government ISN'T going to
build its own voting machines; it's going to rely on the private sector,
using laws and regulations to keep risk at an acceptable level.

Besides, given what most of us know about government efficiency, would you
WANT the government to be designing and building voting machines?  Be
careful of what you wish for, as you may get it!

--Jeremy

P.S. Worth noting that Mr. Woods lives in Canada, as judging by his domain
and phone number.  The relationship of government and private industry may
be different in Canada from the US; I have no idea and wouldn't hazard a
guess.

-----Original Message-----
From: Greg A. Woods [mailto:woods@weird.com] 
Sent: Monday, September 27, 2004 2:26 PM
To: Jeremy Epstein
Cc: BUGTRAQ: Full Disclosure Security Mailing List
Subject: RE: Diebold Global Election Management System (GEMS) 
Backdoor Account Allows Authenticated Users to Modify Votes


[ On Thursday, September 23, 2004 at 06:21:03 (-0400), Jeremy 
Epstein wrote: ]
Subject: RE: Diebold Global Election Management System 
(GEMS) Backdoor     Account    Allows Authenticated Users to 
Modify Votes

And I'd strongly discourage folks from calling for open 
source, as it 
plays directly into the hands of folks like Diebold, who claim that 
the people (like me) who want Voter Verified Paper Audit Trails 
(VVPATs) are really trying to kill free enterprise.  [Yes, 
I know all 
the examples of businesses based on open source, but that's 
not what 
this is about.]

Well, that's pretty stupid.

The answer is not to try to show that open source can be used 
in captialistic ventures, but rather to be very clear in 
stating that free enterprise (and capitalism) has no place 
whatsoever at any time in the creation, formation, and 
instatement of a government for the people.

Indeed those involved in creating a government for the people 
need to be very wary of even the support of corporate 
entities since such support can invoke almost infinitely more 
power than any one governed individual can ever hold over his 
or her government or a government representative.

Just as the Church(es) has(have) no place in the halls of 
government, neither do corporations.  Corporations, despite 
being legally individuals, don't even need one vote as no 
matter what governments might do to regulate them they still 
have far more power than any human individual.

-- 
                                              Greg A. Woods

+1 416 218-0098                  VE3TCP            RoboHack 
<woods@robohack.ca>
Planix, Inc. <woods@planix.com>          Secrets of the Weird 
<woods@weird.com>


<Prev in Thread] Current Thread [Next in Thread>
  • RE: Diebold Global Election Management System (GEMS) Backdoor Acc ount Allows Authenticated Users to Modify Votes, Jeremy Epstein <=