Monday, September 18, 2006

Diebold voting machines opened with hotel minibar key


The key that controls access to a standard Diebold voting machine is a common key that can be ordered from the Internet, also used to open hotel minibars.
The access panel door on a Diebold AccuVote-TS voting machine — the door that protects the memory card that stores the votes, and is the main barrier to the injection of a virus — can be opened with a standard key that is widely available on the Internet...

Using such a standard key doesn’t provide much security, but it does allow Diebold to assert that their design uses a lock and key. Experts will recognize the same problem in Diebold’s use of encryption — they can say they use encryption, but they use it in a way that neutralizes its security benefits.

The bad guys don’t care whether you use encryption; they care whether they can read and modify your data. They don’t care whether your door has a lock on it; they care whether they can get it open. The checkbox approach to security works in press releases, but it doesn’t work in the field.

Link



posted by Cory Doctorow at 06:18:25 AM permalink | Other blogs' comments

Email this entry to:


Your email address:


Message (optional):