Thursday, September 14, 2006

Security Analysis of the Diebold AccuVote-TS Voting Machine

This latest comes from the Center for Information Technology Policy at Princeton University:

For example, an attacker who gets physical access to a machine or its removable memory card for as little as one minute could install malicious code; malicious code on a machine could steal votes undetectably, modifying all records, logs, and counters to be consistent with the fraudulent vote count it creates. An attacker could also create malicious code that spreads automatically and silently from machine to machine during normal election activities — a voting-machine virus.

Remember this quote?

"I am committed to helping Ohio deliver its electoral votes to the president."

That's Diebold CEO Walden O'Dell, from a fundraising letter sent to Republicans in the fall of 2003. E-voting machine maker Diebold is based in North Canton, Ohio.

Wednesday, September 13, 2006

Doublespeak and the War on Terrorism


The American people must recognize these odious tactics for what they are and remain vigilant about our Constitution and individual liberty. Too many people seem to think that the Constitution will automatically check the government from overstepping its authority and running amok. That simply is not true. The Constitution is incapable of enforcing itself. The ultimate limit on the power of government has always been the patience of the people. As Judge Learned Hand warned many years ago, “Liberty lies in the hearts of men and women; [if] it dies there, no constitution, no law, no court can save it.”

Monday, September 04, 2006

The Black Hat Wi-Fi exploit coverup


At press time, millions of end users may be using Wi-Fi so insecure that an attacker could install a rootkit on their system in less than a minute.

That was almost a month ago, and little has changed since. The lawyers apparently are winning, and anyone using anything but an Intel wi-fi card remains at risk.

Tuesday, August 15, 2006

Dell Recalls Batteries Because of Fire Threat


Dell is recalling 4.1 million notebook computer batteries because they could erupt in flames, the company said today.   This will be the largest safety recall in the history of the consumer electronics industry...   The recalled batteries were used in 2.7 million computers sold in the United States and 1.4 million sold overseas.   The total is about 18 percent of Dell's notebook production during the period in question (4/04 - 7/06).   Depending on how many of the batteries are still in use, the cost of the recall could exceed $300 million.

Lithium ion batteries are used in hybrid cars, but those batteries may or may not have the same manufacturing defect that lead to Dell's problems.   Let's see how many Prius automobiles ignite this year.

Monday, August 14, 2006

Windows Genuine disAdvantage


What would you call a computer program that surreptitiously installed itself onto your computer, collected personal information about you without your knowledge or effective consent, was difficult or impossible to remove, installed pop-up banners that constantly harassed you, and presented significant security vulnerabilities?

If you were Los Angeles resident Brian Johnson, the answer would be simple. You'd call it Windows.

Sunday, August 06, 2006

Life on Mars? Not Yet.

It was ten years ago when NASA exclaimed Meteorite Yields Evidence of Primitive Life on Early Mars .

From MATT CRENSON, AP National Writer:

Ten years later, the results have not been verified. Skeptics have found non-biological explanations for every piece of evidence that was presented on Aug. 6, 1996. And though they still vigorously defend their claim, the NASA scientists who advanced it now stand alone in their belief.

Thursday, August 03, 2006

Hackers Expose 'Critical' Wi-Fi Driver Flaw


Maynor said the MacBook was used in the demo as a retort to the latest Apple commercials. "We don't want to bash Mac. I'm a big fan of Mac. But those commercials are just [annoying]," he said.

I wonder what he really said in place of "annoying"...   I couldn't agree more.

"This is not a big problem today. But, it should be something to take seriously now before it becomes a big, big problem a year or two from now," said Maynor.

The entire 802.11 spec needs to be examined -- or discarded.