There's also this EERILY SPECIFIC ERROR http://www.rickycarandang.com/?p=533
On Wed, May 5, 2010 at 12:11 AM, Jeoffrey Lim <[email protected]> wrote: > Would be hard to do that and highly unlikely- the cost, man-power, time and > complexity of operation. > In a single province they have to zero some of the candidates to compensate > the overwhelming number of others (like done in Maguindanao). > The iButton is the physical security component in the election - for > operating the PCOS, and also acts as the digital signature. > http://en.wikipedia.org/wiki/1-Wire > The attack has to be quick and massive. Even without the PCOS, the digital > signature can be embedded into the memory card. > Using this API: > http://owfs.org/index.php?page=what-is-1-wire > > Best way to do it is 'register' the physical security component (iButton) in > a copied/clone memory card, create election data and transmit somewhere > else. > Most of the actual voting centers that did not transmit will no longer be > counted anyway (they know which locations as they have performed the site > surveys - or prevent transmission using signal jammers). Even if the memory > cards are taken to the Board of Canvassers - it will be ignored by the > "Consolidation Canvassing System" as it shows a 'green' light saying it > received a "transmission" (but a fake one). > (0:55 - tells about the red light or green light when election data is > received) > http://www.gmanews.tv/video/54452/comelec-39satisified-with-results39-of-field-test-of-pcos-machines > > On another issue (problems reported by NP - but everybody is having a > problem): > http://www.gmanews.tv/eleksyon2010/videos/59369/comelec-to-reconfigure-compact-flash-cards-for-pcos-machines > - Smartmatic on the Filipino's side? (saving reputation) > * re-burning all memory cards to prevent the use of already hacked CF > cards with the digital signature embedded in it? > * prevent technicians to get a hold of the iButton because it is now in > custody and someone is watching > - Or this is where they're going to do it, tinker the thingy and do the > magic? LoL! > * abuse the non-techie government employees with the custody of PCOS and > do their thing. > * unless the technician cannot get a hold of the iButton to produce > another copy of CF card and embed the digital signature > * still the digital signature may already been stored and simply re-use > it. > Damn, if we could just get that source code or at least sample data! > Again 'multiple digital signatures' is needed to achieve credibility in this > automated elections. The iButton is $2 cheap! > On Tue, May 4, 2010 at 3:57 PM, Michael Janapin <[email protected]> > wrote: >> >> This is what Doc Mana was talking about. >> >> On Tue, May 4, 2010 at 2:48 PM, Holden Hao <[email protected]> wrote: >>> >>> On Tue, May 4, 2010 at 1:57 PM, Jeoffrey Lim <[email protected]> >>> wrote: >>> > http://www.noypiako.org/aes/hacks >>> >>> Kulang. >>> >>> Here is another thing that can happen. >>> >>> 1. Find a "friendly" province. >>> 2. Use fake ballots during election day. People will not know the >>> difference between the fake and the original. >>> 3. Pre program the PCOS firmware to accept fake ballots on election day. >>> 4. Pre program the PCOS firmware to show rigged results. >>> 5. When the results are in and people are not looking, stuff the >>> ballots with the real ones.* >>> 6. When an audit occurs, the machine (even with the digitally signed >>> firmware) will produce the same result. >>> >>> * The real ballots can be mechanically shaded by high speed plotters. >>> The signatures, thumb marks, etc. (if required) of voters can be faked >>> by humans or by the plotters since signatures, thumbmarks have been >>> encoded in digital form. They do not need to be perfect since in the >>> case of a recount they might not be checked thoroughly. >>> >>> >>> >>> Holden >>> _________________________________________________ >>> Philippine Linux Users' Group (PLUG) Mailing List >>> http://lists.linux.org.ph/mailman/listinfo/plug >>> Searchable Archives: http://archives.free.net.ph >> >> >> >> -- >> Michael R. Janapin >> PBTS Baguio City, Philippines >> http://mulingsilang.wordpress.com >> http://www.pbts.net.ph >> >> _________________________________________________ >> Philippine Linux Users' Group (PLUG) Mailing List >> http://lists.linux.org.ph/mailman/listinfo/plug >> Searchable Archives: http://archives.free.net.ph > > > _________________________________________________ > Philippine Linux Users' Group (PLUG) Mailing List > http://lists.linux.org.ph/mailman/listinfo/plug > Searchable Archives: http://archives.free.net.ph > -- This email is: [ ] actionable [ ] fyi [ ] social Response needed: [ ] yes [ ] up to you [ ] no Time-sensitive: [ ] immediate [ ] soon [ ] none _________________________________________________ Philippine Linux Users' Group (PLUG) Mailing List http://lists.linux.org.ph/mailman/listinfo/plug Searchable Archives: http://archives.free.net.ph
