Monday, September 18, 2006

Diebold Voting Machines Opened With Hotel Minibar Key

Vote Smirnoff

Contributed by a Misc-Reports reader

The key that controls access to a standard Diebold voting machine is a common key that can be ordered from the Internet, also used to open hotel minibars.

The access panel door on a Diebold AccuVote-TS voting machine — the door that protects the memory card that stores the votes, and is the main barrier to the injection of a virus — can be opened with a standard key that is widely available on the Internet...

Using such a standard key doesn’t provide much security, but it does allow Diebold to assert that their design uses a lock and key. Experts will recognize the same problem in Diebold’s use of encryption — they can say they use encryption, but they use it in a way that neutralizes its security benefits.

The bad guys don’t care whether you use encryption; they care whether they can read and modify your data. They don’t care whether your door has a lock on it; they care whether they can get it open. The checkbox approach to security works in press releases, but it doesn’t work in the field.

Link http://www.freedom-to-tinker.com/?p=1064

No comments: