Re: Diebold TSx Questions

From: Douglas W. Jones <jones_at_cs_dot_uiowa_dot_edu>
Date: Tue Oct 03 2006 - 09:22:25 CDT

On Oct 1, 2006, at 5:36 PM, voting@lastland.net wrote:

> On Sun, 1 Oct 2006 01:13:56 -0600 (GMT-06:00), charlie strauss wrote
>>> From: Kathy Dopp <kathy.dopp@gmail.com>
>>> What are the fundamental hardware flaws (just briefly) that would
>>> prevent a Diebold TSx from being turned into a decent open voting
>>> system?
>> Well the show stopper would be the Windows CE platform and possibly
>> video card drivers I suspect.
>
> Not to mention the firmware (e.g., BIOS) that can be used to load
> malware.

But the BIOS and Windows CE can all be replaced.

Of more significance, the case has poor physical security -- the case
needs molded in lugs for security seals, so that there is no need to
rely on flimsy tamper-evident adhesives.

Such lugs cannot be easily applied as afterthoughts. Among others, you
need seal lugs over at least two of the screws that hold the case shut,
as well as seal lugs by each external port (including the smartcard port
as well as the PCMCIA port).

You could, of course, dummy up a case with add-on lugs, but add-on seal
lugs are notorious as weak points -- see the attack on the TS sealing
system that Black Box Voting did.

                Doug Jones
                jones@cs.uiowa.edu

_______________________________________________
OVC-discuss mailing list
OVC-discuss@listman.sonic.net
http://lists.sonic.net/mailman/listinfo/ovc-discuss
==================================================================
= The content of this message, with the exception of any external
= quotations under fair use, are released to the Public Domain
==================================================================
Received on Tue Oct 31 23:17:03 2006

This archive was generated by hypermail 2.1.8 : Tue Oct 31 2006 - 23:17:10 CST