Re: [Full-Disclosure] Presidential Candidates' Websites Vulnerable

2004-07-02 Thread Daniel Veditz
Jordan Klein wrote: > When you vote, you immediately get two receipts. One to take home that > gives you the name(s) of who you voted for, and the other is read by a > counting machine that actually tallies the votes. You never want to send someone home with proof of their choice, it leads to vo

Re: [Full-Disclosure] Presidential Candidates' Websites Vulnerable

2004-07-02 Thread Nasir Ghaznavi
for the record India in their recent elections employeed electronic voting with not even one complaint. Maybe the superpower should see what they did and how did they achieve such transparency. Nasir Ghaznavi ___ Full-Disclosure - We believe in it. Char

Re: [Full-Disclosure] Presidential Candidates' Websites Vulnerable

2004-07-02 Thread Marek Isalski
>>> "Kurt Seifried" <[EMAIL PROTECTED]> 02/07/2004 02:47:55 >>> > It is of interest to note we just had our federal election here in Canada a > few days ago. I went to the polls, they checked my name, gave me a paper > ballot, I took it to the booth, made my "X" (within the circle using the > penci

Re: [Full-Disclosure] Presidential Candidates' Websites Vulnerable

2004-07-01 Thread Ron DuFresne
On Thu, 1 Jul 2004, Jordan Klein wrote: > > Anybody have any better ideas? We certainly can't trust the politicians or > Diebold. Considering the results of the last > > election the whole process seems questionable, like in Chicago > > "vote early, vote often." > > IMO, the only way to have the

Re: [Full-Disclosure] Presidential Candidates' Websites Vulnerable

2004-07-01 Thread Kurt Seifried
It is of interest to note we just had our federal election here in Canada a few days ago. I went to the polls, they checked my name, gave me a paper ballot, I took it to the booth, made my "X" (within the circle using the pencil provided), folded the ballot as indicated and handed it to them. They

Re: [Full-Disclosure] Presidential Candidates' Websites Vulnerable

2004-07-01 Thread Barry Fitzgerald
Frank Knobbe wrote: On Thu, 2004-07-01 at 10:48, Jordan Klein wrote: Oh yes, and there should be a checksum of the unique number assigned to each vote to ensure that someone couldn't just reverse engineer the barcode and make up a bunch of bogus votes. I'm not sure exactly how that part would w

Re: [Full-Disclosure] Presidential Candidates' Websites Vulnerable

2004-07-01 Thread Barry Fitzgerald
Harlan Carvey wrote: Problems with electronic voting; FYI I'm familiar with some of the issues regarding electronic voting...what I'm not seeing is the connection between that and this draft issue you raised. From what I recall, the reason that the draft bill was put forth in congress was

RE: [Full-Disclosure] Presidential Candidates' Websites Vulnerable

2004-07-01 Thread Clairmont, Jan M
L PROTECTED] Cc: Clairmont, Jan M Subject: RE: [Full-Disclosure] Presidential Candidates' Websites Vulnerable Jan, Thanks for the response... > http://www.rense.com/general52/fgult.htm I read the site, and it linked to a CNN story: http://www.cnn.com/2002/ALLPOLITICS/12/29/mandatory.milit

RE: [Full-Disclosure] Presidential Candidates' Websites Vulnerable

2004-07-01 Thread Grant Thibdea
L PROTECTED] Cc: Clairmont, Jan M Subject: RE: [Full-Disclosure] Presidential Candidates' Websites Vulnerable Jan, > If any issue is more important than electronic > voting I don't > know what it is. Congress has approved starting in > the Spring > of 2005, the draft, all

RE: [Full-Disclosure] Presidential Candidates' Websites Vulnerable

2004-07-01 Thread Harlan Carvey
Jan, Thanks for the response... > http://www.rense.com/general52/fgult.htm I read the site, and it linked to a CNN story: http://www.cnn.com/2002/ALLPOLITICS/12/29/mandatory.military/ Notice that the date on the CNN piece is 30 Dec '02. > A link to the article about the passed but yet > unsig

RE: [Full-Disclosure] Presidential Candidates' Websites Vulnerable

2004-07-01 Thread Clairmont, Jan M
] Presidential Candidates' Websites Vulnerable Jan, > If any issue is more important than electronic > voting I don't > know what it is. Congress has approved starting in > the Spring > of 2005, the draft, all the way up to 49 years of > age for special skills. I'm not cle

Re: [Full-Disclosure] Presidential Candidates' Websites Vulnerable

2004-07-01 Thread Frank Knobbe
On Thu, 2004-07-01 at 10:48, Jordan Klein wrote: > Oh yes, and there should be a checksum of the unique number assigned to each > vote to ensure that someone couldn't just reverse engineer the barcode and > make up a bunch of bogus votes. I'm not sure exactly how that part would > work, but I'm su

Re: [Full-Disclosure] Presidential Candidates' Websites Vulnerable

2004-07-01 Thread Jordan Klein
> Anybody have any better ideas? We certainly can't trust the politicians or Diebold. Considering the results of the last > election the whole process seems questionable, like in Chicago > "vote early, vote often." IMO, the only way to have the best of both worlds (electronic voting that helps th

RE: [Full-Disclosure] Presidential Candidates' Websites Vulnerable

2004-07-01 Thread Harlan Carvey
Jan, > If any issue is more important than electronic > voting I don't > know what it is. Congress has approved starting in > the Spring > of 2005, the draft, all the way up to 49 years of > age for special skills. I'm not clear as to what one issue has to do with the other. Those in Congress

RE: [Full-Disclosure] Presidential Candidates' Websites Vulnerable

2004-07-01 Thread Clairmont, Jan M
July 01, 2004 5:13 AM To: [EMAIL PROTECTED] Subject: [Full-Disclosure] Presidential Candidates' Websites Vulnerable For those who didn't catch it on The Inquirer already, it sounds like not even the would-be presidents of the US can afford decent security: http://www.theinquirer.net/?articl

[Full-Disclosure] Presidential Candidates' Websites Vulnerable

2004-07-01 Thread Marek Isalski
For those who didn't catch it on The Inquirer already, it sounds like not even the would-be presidents of the US can afford decent security: http://www.theinquirer.net/?article=16939 "site shows signs of being vulnerable to SQL injection errors" and "packed with cross-site scripting errors"...