' Rubin said the Diebold software he examined was vulnerable to an
attack by someone wanting to tamper with an election.
"The skill level needed to hide malicious code is much easier
than the skills needed to find it," he said. "I don't believe there's a computer scientist or a team in the world that could
find it." '
The Johns Hopkins University computer scientist who identified security lapses in the voting system Maryland is adopting took his warnings
to Annapolis yesterday, telling legislators he has no confidence the flaws are being fixed. ...
[Avi]
Rubin said the Diebold software he examined was vulnerable to an attack by someone wanting to tamper with an election.
"The
skill level needed to hide malicious code is much easier than the skills needed to find it," he said. "I don't believe there's
a computer scientist or a team in the world that could find it." ...
Frank Schugar, SAIC's project
manager on the election system, conceded that Rubin - whom he described as "extraordinarily qualified and more qualified than
I am" - had some valid points.
"Is it easy to hide malicious code in a great big code package? Absolutely," he said
- putting the chance it would go undetected at 99.9 percent.
This site contains copyrighted material
the use of which has not always been specifically authorized by the copyright owner. We are making such material available
in our efforts to advance understanding of environmental, political, human rights, economic, democracy, scientific, and social
justice issues, etc. We believe this constitutes a 'fair use' of any such copyrighted material as provided for in section
107 of the US Copyright Law. In accordance with Title 17 U.S.C. Section 107, the material on this site is distributed without
profit to those who have expressed a prior interest in receiving the included information for research and educational purposes.
For more information go to: http://www.law.cornell.edu/uscode/17/107.shtml. If you wish to use copyrighted material from this site for purposes of your own that go beyond 'fair use', you must obtain
permission from the copyright owner.
