Re: Experiences with Sequoia AVC Edge with VeriVote Printer as Precinct Inspector in Santa Clara County

From: Douglas W. Jones <jones_at_cs_dot_uiowa_dot_edu>
Date: Tue Jun 27 2006 - 09:23:32 CDT

On Jun 27, 2006, at 5:49 AM, Richard C. Johnson wrote:

> Key-based voting machine access is an invitation to manipulate
> results by simply gaining unauthorized access.  A precinct-
> scan system with central control over authentication and
> authorization might help.

Keys and locks are best considered one layer in a defense in depth
model. You want them, and indeed, controlled access to the keys
and lack of widespread knowledge of lock-picking techniques is a
barrier against unauthorized access to the machines. But I know
how to pick locks, and so do many others.

So, in addition to locks, you want other barriers. Store the machines
behind glass with good lighting and in clear view of a crowded
public place, and I'll have trouble picking the locks without being
noticed.

Add various forms of cryptographic security, and I won't be able
to do much once I do pick the lock.

                Doug Jones
                jones@cs.uiowa.edu

_______________________________________________
OVC-discuss mailing list
OVC-discuss@listman.sonic.net
http://lists.sonic.net/mailman/listinfo/ovc-discuss
==================================================================
= The content of this message, with the exception of any external
= quotations under fair use, are released to the Public Domain
==================================================================
Received on Fri Jun 30 23:17:12 2006

This archive was generated by hypermail 2.1.8 : Fri Jun 30 2006 - 23:17:12 CDT