bugtraq - Re: Diebold Global Election Management System (GEMS) Backdoor Account Allows Authenticated Users to Modify Votes

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <1095843597.27407.28.camel@linux-mobile.example.net>
Date: Wed, 22 Sep 2004 10:59:57 +0200
From: Rainer Duffner <rainer@...ra-secure.de>
To: bugtraq@...urityfocus.com
Subject: Re: Diebold Global Election Management System (GEMS) Backdoor
	Account    Allows Authenticated Users to Modify Votes


Am Di, den 21.09.2004 schrieb pressinfo@...bold.com um 17:05:
> In-Reply-To: <20040831203815.13871.qmail@....securityfocus.com>
> 
> Diebold strongly refutes the existence of any "back doors" or "hidden codes"
> in its GEMS software.  These inaccurate allegations appear to stem from those not
> familiar with the product, misunderstanding the purpose of legitimate structures
>  in the database.  These structures are well documented and have been reviewed 
> (including at a source code level) by independent testing authorities as required 
> by federal election regulations.

Last thing I remember is that these "reviews" resulted in a  rather
devastating verdict for the product. Would you like to provide a link to
an updated, independant review ? Having the source-code opened would
help, too.
Also, IIRC, your company is now being sued at least by one US-state over
"false claims".



cheers,
Rainer
-- 
===================================================
~     Rainer Duffner - rainer@...ra-secure.de     ~
~           Freising - Munich - Germany           ~
~    Unix - Linux - BSD - OpenSource - Security   ~
~  http://www.ultra-secure.de/~rainer/pubkey.pgp  ~
===================================================