Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror

Submission Summary: 0 pending, 18 declined, 2 accepted (20 total, 10.00% accepted)

×
The Internet

Submission + - DC Internet Voting attacked TWO ways

mtrachtenberg writes: University of Michigan Professor J Alex Halderman and his team actually had two completely separate successful attacks on Washington, DC's internet voting experiment. The second path in was revealed by Halderman during testimony before the District of Columbia's Board of Elections and Ethics on Friday.

Apparently, a router's master password had been left at the default setting, enabling Halderman to access the system by a completely different method than SQL injection. He presented photographs of a video stream from the voting offices.

In addition, he found a file that had apparently been left on the test system contained the PINs of the 900+ voters who would have used the system in November.

Others on the panel joined Halderman in pointing out that it was not just this specific implementation of internet voting that was insecure, but the entire concept of using today's internet for voting at all. When a DC official asked why internet voting could not be made secure when top government secrets were secure on the internet, Halderman responded that a big part of keeping government secrets secret was NOT allowing them to be stored on internet-connected computers.

When a DC official asked the panel whether public key infrastructure couldn't allow secure internet voting, a panel member pointed out that the inventor of public key cryptography, MIT professor Ronald Rivest, was a signatory to the letter that had been sent to DC, urging officials there not to proceed with internet voting.

Clips from the testimony are available on youtube at these links.

http://www.youtube.com/watch?v=LaR7n5PI_aE
http://www.youtube.com/watch?v=SDHtSU4qKzw

Submission + - Ask Slashdot: Cheapest usable masters degree?

mtrachtenberg writes: As times have changed, the personnel dorks who used to ignore anyone without a bachelors now ignore anyone without a masters.

So let's ask this hypothetical: let's say you already have all the knowledge that a master's degree would get you, thanks to years and years of, you know, doing stuff. Let's say you are already doing work that would get you a fine master's dissertation, but you don't feel like paying an expensive university for the privilege of doing your research under their prestigious name. What's the cheapest approach to getting a master's degree that will satisfy the checklist at a majority of personnel offices?
Microsoft

Submission + - Microsoft admits stealing code from startup (guardian.co.uk)

mtrachtenberg writes: Microsoft has suspended a new internet messaging service in China, after it emerged that the site was partially based on code stolen from a rival startup.

The site, Juku, launched in November is similar in concept to other online messaging systems like Twitter. But earlier this week the team behind Plurk, a young internet company based in Canada and popular with users across Asia, accused Microsoft of directly copying as much as 80% of the code to run the program.

Earth

Submission + - "swarm of tremors" on san andreas fault (sfgate.com)

mtrachtenberg writes: "SF Chronicle Science Editor David Perlman:

"Swarms of small tremors deep beneath the ground after two recent quakes in Monterey County may be adding stress to a seismically locked segment of the San Andreas fault and could presage a major earthquake, two Berkeley scientists suggest."

I've spent the last few evenings watching "When the Levees Failed," about the heckuvajobbrownie response to Katrina. So reading this story is more than a little frightening. Here's a case where scientists can say something's going on, but can hardly tell Central California to evacuate for a few months or years.

I suppose the bright side is that this story, having nothing to do with Michael Jackson or Sarah Palin, still managed to make it into the mainstream media. Thank you, Robert Nadeau and Aurélie Guilhem, for the warning; thank you, David Perlman, for telling those of us who don't have subscriptions to Science"

Cellphones

Submission + - fiber line cut knocks out land AND cell phones (sfgate.com)

mtrachtenberg writes: "Phone service sabotaged for thousands
Henry K. Lee,Ryan Kim, Chronicle Staff Writers
Thursday, April 9, 2009
PRINT E-MAIL SHARE COMMENTS (77) FONT | SIZE:

(04-09) 11:20 PDT SAN JOSE — Vandals cut four AT&T fiber-optic cables in San Jose early this morning, knocking out landline and cellular phone service and the Internet to thousands of residential customers and businesses in Santa Clara, Santa Cruz and San Benito counties, authorities said."

Biotech

Submission + - Darwin wasn't a nerd (guardian.co.uk) 1

mtrachtenberg writes: "http://www.guardian.co.uk/science/2009/mar/22/charles-darwin-cambridgeuniversity

Caroline Davies writes in The Guardian:
"Two hundred years after Charles Darwin's birth, historians have gained new insight into his days as a student at Cambridge after unearthing bills that record intimate details of how he spent his money.

"The revolutionary scientist was, it would appear, ahead of his time in his willingness to pay extra to supplement his daily intake of vegetables. And, as one would expect of a 19th-century gentleman, he was happy to pay others to carry out menial tasks for him, such as stoking his fire and polishing his shoes.

"But there is little to suggest that he bought many books, or that he did much else to further his studies. The evolutionist famously spent little of his time studying or in lectures, preferring to shoot, ride and collect beetles. ""

United States

Submission + - Diebold e-voting audit logs still defective (wired.com)

mtrachtenberg writes: "At a public hearing conducted today by California's Secretary of State, a Diebold representative admitted that even current versions of their GEMS software don't record the deletion of decks of ballots in their audit logs. The Diebold elections subsidiary is now known as Premier Election Solutions, presumably because Diebold's name is so infamous in elections circles. Wired's Kim Zetter has a report.

Diebold/Premier's GEMS system came under scrutiny after the Humboldt County Election Transparency Project, using free Python-based ballot counting software named Ballot Browser , found that 197 ballots had disappeared between election night and the generation of results for certification.

Personally, I think the best moment of the hearing came when Humboldt County's registrar of voters, Carolyn Crnich, who has supported election transparency from the start, responded to Diebold's attempt to cast blame on her office. Crnich responded: "if you are saying that your system needs to be checked every damn time you turn it on, then I agree with you.""

Government

Submission + - Diebold election audit logs defective (mitchtrachtenberg.com)

mtrachtenberg writes: "Premier Election Solutions' (formerly Diebold) GEMS 1.18.19 election software audit logs don't record the deletion of ballots, don't always record correct dates, and can be deleted by the operator, either accidentally or intentionally. The California Secretary of State's office has just released a report about the situation in Humboldt County, California's November 2008 election, covered earlier in Slashdot.

http://www.sos.ca.gov/elections/elections_vs_premier.htm

Here's the conclusion of the thirteen page report:

GEMS version 1.18.19 contains a serious software error that caused the omission of 197 ballots from the official results (which was subsequently corrected) in the November 4, 2008, General Election in Humboldt County. The potential for this error to corrupt election results is confined to jurisdictions that tally ballots using the GEMS Central Count Server. Key audit trail logs in GEMS version 1.18.19 do not record important operator interventions such as deletion of decks of ballots, assign inaccurate date and time stamps to events that are recorded, and can be deleted by the operator. The number of votes erroneously deleted from the election results reported by GEMS in this case greatly exceeds the maximum allowable error rate established by HAVA. In addition, each of the foregoing defects appears to violate the 1990 Voting System Standards to an extent that would have warranted failure of the GEMS version 1.18.19 system had they been detected and reported by the Independent Testing Authority that tested the system.

"

Slashdot Top Deals

Love may laugh at locksmiths, but he has a profound respect for money bags. -- Sidney Paternoster, "The Folly of the Wise"

Working...