5 ms·
Hyperbole aside, it does appear that Sequoia is violating the laws regarding security in such a system. This is executable code which could impact the results o
by Zak 17y ago
Hyperbole aside, it does appear that Sequoia is violating the laws regarding security in such a system. This is executable code which could impact the results of an election which is machine-generated, interpreted, dynamically loaded not integrity-checked. All these characteristics go against federal recommendations for the design of computerized voting machines and constitute cause for concern.
- nl 17y agoActually, that "law" is a "Voluntary Voting System Guide". I can't download that guide at the moment, but the part quoted says: "Self-modifying, dynamically loaded, or interpreted code is prohibited, except under the security provisions outlined in section 6.4.e [sic - see note below]. This prohibition is to ensure that the software tested and approved during the qualification process remains unchanged and retains its integrity. External modification of code during execution shall be prohibited. Where the development environment (programming language and development tools) includes the following features, the software shall provide controls to prevent accidental or deliberate attempts to replace executable code" and 6.4.e: "After initiation of election day testing, no source code or compilers or assemblers shall be resident or accessible." I think that most readings of that would interpret it to mean that SQL statements to create tables would be permitted, but that the interfaces to the databases should be secured. The whole thing is a beat-up.