Would be hard to do that and highly unlikely- the cost, man-power, time and complexity of operation. In a single province they have to zero some of the candidates to compensate the overwhelming number of others (like done in Maguindanao).
The iButton is the physical security component in the election - for operating the PCOS, and also acts as the digital signature. http://en.wikipedia.org/wiki/1-Wire The attack has to be quick and massive. Even without the PCOS, the digital signature can be embedded into the memory card. Using this API: http://owfs.org/index.php?page=what-is-1-wire Best way to do it is 'register' the physical security component (iButton) in a copied/clone memory card, create election data and transmit somewhere else. Most of the actual voting centers that did not transmit will no longer be counted anyway (they know which locations as they have performed the site surveys - or prevent transmission using signal jammers). Even if the memory cards are taken to the Board of Canvassers - it will be ignored by the "Consolidation Canvassing System" as it shows a 'green' light saying it received a "transmission" (but a fake one). (0:55 - tells about the red light or green light when election data is received) http://www.gmanews.tv/video/54452/comelec-39satisified-with-results39-of-field-test-of-pcos-machines On another issue (problems reported by NP - but everybody is having a problem): http://www.gmanews.tv/eleksyon2010/videos/59369/comelec-to-reconfigure-compact-flash-cards-for-pcos-machines - Smartmatic on the Filipino's side? (saving reputation) * re-burning all memory cards to prevent the use of already hacked CF cards with the digital signature embedded in it? * prevent technicians to get a hold of the iButton because it is now in custody and someone is watching - Or this is where they're going to do it, tinker the thingy and do the magic? LoL! * abuse the non-techie government employees with the custody of PCOS and do their thing. * unless the technician cannot get a hold of the iButton to produce another copy of CF card and embed the digital signature * still the digital signature may already been stored and simply re-use it. Damn, if we could just get that source code or at least sample data! Again 'multiple digital signatures' is needed to achieve credibility in this automated elections. The iButton is $2 cheap! On Tue, May 4, 2010 at 3:57 PM, Michael Janapin <[email protected]>wrote: > This is what Doc Mana was talking about. > > > On Tue, May 4, 2010 at 2:48 PM, Holden Hao <[email protected]> wrote: > >> On Tue, May 4, 2010 at 1:57 PM, Jeoffrey Lim <[email protected]> >> wrote: >> > http://www.noypiako.org/aes/hacks >> >> Kulang. >> >> Here is another thing that can happen. >> >> 1. Find a "friendly" province. >> 2. Use fake ballots during election day. People will not know the >> difference between the fake and the original. >> 3. Pre program the PCOS firmware to accept fake ballots on election day. >> 4. Pre program the PCOS firmware to show rigged results. >> 5. When the results are in and people are not looking, stuff the >> ballots with the real ones.* >> 6. When an audit occurs, the machine (even with the digitally signed >> firmware) will produce the same result. >> >> * The real ballots can be mechanically shaded by high speed plotters. >> The signatures, thumb marks, etc. (if required) of voters can be faked >> by humans or by the plotters since signatures, thumbmarks have been >> encoded in digital form. They do not need to be perfect since in the >> case of a recount they might not be checked thoroughly. >> >> >> >> Holden >> _________________________________________________ >> Philippine Linux Users' Group (PLUG) Mailing List >> http://lists.linux.org.ph/mailman/listinfo/plug >> Searchable Archives: http://archives.free.net.ph >> > > > > -- > Michael R. Janapin > PBTS Baguio City, Philippines > http://mulingsilang.wordpress.com > http://www.pbts.net.ph > > _________________________________________________ > Philippine Linux Users' Group (PLUG) Mailing List > http://lists.linux.org.ph/mailman/listinfo/plug > Searchable Archives: http://archives.free.net.ph >
_________________________________________________ Philippine Linux Users' Group (PLUG) Mailing List http://lists.linux.org.ph/mailman/listinfo/plug Searchable Archives: http://archives.free.net.ph
