Originally posted by xoggoth
View Post
The Virginia State Board of Elections decertified the AVS WinVote machine, after releasing a brief but damning report on the vulnerabilities. Among the items they identified are:
* The machines use an unpatched version of Windows from 2004.
* The machines use the WEP protocol for WiFi encryption, which has been
broken for over a decade.
* The machines use a hardwired WEP encryption key ("abcde").
* Even if configured to disable the wireless communication, the machines
allow numerous services, including file services.
* The adminstrator password is "admin", which can't be changed through the
user interface provided to the election administrator.
* The database is an obsolete version of Microsoft Access, with a hardwired
password of "shoup" (the family that owned the company).
* The entire database can be replaced without any verification (i.e.,
there's no MD5 checksums).
* The machines use an unpatched version of Windows from 2004.
* The machines use the WEP protocol for WiFi encryption, which has been
broken for over a decade.
* The machines use a hardwired WEP encryption key ("abcde").
* Even if configured to disable the wireless communication, the machines
allow numerous services, including file services.
* The adminstrator password is "admin", which can't be changed through the
user interface provided to the election administrator.
* The database is an obsolete version of Microsoft Access, with a hardwired
password of "shoup" (the family that owned the company).
* The entire database can be replaced without any verification (i.e.,
there's no MD5 checksums).


seems to combine poor judgement & sense of entitlement with an AssGuru sized chip on her shoulder.
Leave a comment: