bugtraq - RE: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed, 22 Sep 2004 09:32:43 -0700
From: "Jaeson Schultz" <jaeson@...son.net>
To: <pressinfo@...bold.com>, <bugtraq@...urityfocus.com>
Subject: RE: Diebold Global Election Management System (GEMS) Backdoor    Account    Allows Authenticated Users to Modify Votes

How about providing the source code so we can see for ourselves?  Shouln't
the machines used for elections in a democracy such as The United States of
America be open to such review?  Just because you refute the existence,
doesn't mean that the "back doors" or "hidden codes" aren't there.  Only the
source code can prove that.  Why should we just take your word for it?

~Jaeson Schultz

-----Original Message-----
From: pressinfo@...bold.com [mailto:pressinfo@...bold.com] 
Sent: Tuesday, September 21, 2004 8:05 AM
To: bugtraq@...urityfocus.com
Subject: Re: Diebold Global Election Management System (GEMS) Backdoor
Account Allows Authenticated Users to Modify Votes

In-Reply-To: <20040831203815.13871.qmail@....securityfocus.com>

Diebold strongly refutes the existence of any "back doors" or "hidden codes"
in its GEMS software.  These inaccurate allegations appear to stem from
those not familiar with the product, misunderstanding the purpose of
legitimate structures in the database.  These structures are well documented
and have been reviewed (including at a source code level) by independent
testing authorities as required by federal election regulations.

In addition to the facts stated above, a paper and an electronic record of
all cast ballots are retrieved from each individual voting machine following
an election. The results from each individual machine are then tabulated,
and thoroughly audited during the standard election canvass process. Once
the audit is complete, the official winners are announced.  Any alleged
changes to a vote count in the election management software would be
immediately discovered during this audit process, as this total would not
match the true official total tabulated from each machine.