] Despite a summary in the report that states the Diebold
] system used in several state elections is "at high risk
] of compromise," the election officials and
] representatives of the company that wrote the report said
] they now have confidence in the Diebold system, and the
] state will proceed with its $55.6 million contract to
] purchase the machines.

You'd think that in a state with so many patriotic information security professionals there would be protests in the steets over this. Maryland is worse then Georgia.

Ballots are distributed via FTP, tallies are transmitted unencrypted over pots lines, and the tabulation machine is connected to the Internet. They have absolutely no security policies at all, and their practices are as bad as they come. These are BASIC BASIC security 101 things. If you can fix them in two months, great, guess what, we still have to deal with the intermediate and advanced issues.

So, who wants to be the next governor of Maryland?

Abstract: Diffie-Hellman key agreement protocol [21] implementations have been plagued by serious security flaws. The attacks can be very subtle and, more often than not, have not been taken into account by protocol designers. In this summary we discuss both theoretical attacks against the Die-Hellman key agreement protocol and attacks based on implementation details . It is hoped that computer security practitioners will obtain enough information to build and design secure and ecient versions of this classic key agreement protocol.

(This paper came in handy during a recent project...)

paper: Security Issues in the Diffie-Hellman Key Agreement Protocol

well the parts they didnt censor are pretty damn scary...so Im really worried about the parts they removed...

why again does this need to be censored, if they're going to spend tax payers money on something that is broken, why are we spending tax payers money to cover it up...

--Abaddon

Highly redacted SAIC report on Diebold security

] Sharman Networks, the company behind the Kazaa
] file-sharing software, filed a federal lawsuit on Monday
] accusing the entertainment companies of using
] unauthorized versions of its software in their efforts to
] snoop out users.

The guy that runs Kazaa is nuts.

Kazaa sues record labels for copyright infringement. No, thats not a typo.

] The irony of all of this is that Mr. von Lohmann only
] last year attacked the recording industry for not suing
] individual file sharers, telling Billboard magazine (and
] many other publications) that if we were really
] serious "about stopping piracy" we should be bringing
] "lawsuits against the actual people sharing the files."

I'm impressed for two reasons. 1. Lohmann did go too far, and 2. Sherman called him out right in the heart of the community. Impressive.

U: The response: http://politechbot.com/pipermail/politech/2003-September/000014.html

[Politech] RIAA President reams EFF on lawsuit amnesty [ip]

] There's something you can do *right now* that will stop
] pending abuses of air travelers' private data. And your
] chance to do it will expire this coming Tuesday (Sept 30).

[Politech] JetBlue privacy woes: my column and John Gilmore's request [priv]

] Blackbox Voting.org is Bev Harris' site exposing the
] security vulnerabilities of the Diebold voting machines.
]
]
] As of 8:46 p.m. PST, the site has been pulled, with the
] following message:

only a matter of time, eh...

god this is some bullshit.

Daily Kos: Diebold feels the heat. Sends out attack lawyers

] Despite the Internet community's near unanimous outcry
] against the Site Finder service, it quickly learned just
] how powerless it has become. ICANN, the supposed steward
] of the domain name system, took until Friday evening
] to issue a weak statement calling on VeriSign to
] voluntarily suspend the Site Finder service while it
] reviewed the matter....
] Regardless of the eventual outcome, Internet users will
] look back on the day that Internet governance mattered
] and remember that they didn't.

[Politech] Michael Geist's column on VeriSign's domain name redirection

] According to ACLU legal papers, local police, acting at
] the direction of the Secret Service, violated the rights
] of protesters in two ways: people expressing views
] critical of the government were moved further away from
] public officials while those with pro-government views
] were allowed to remain closer; or everyone expressing a
] view was herded into what is commonly known as a
] protest zone, leaving those who merely
] observe, but express no view, to remain closer.  

American Civil Liberties Union : Secret Service Ordered Local Police to Restrict Anti-Bush Protesters at Rallies, ACLU Charges in Unprecedented Nationwide Lawsuit

] Patriot Act II would give the government broad powers to
] seize documents and force testimony without a court
] order, expand use of the death penalty and make it harder
] to be released on bail. None of these tools are necessary
] to fight terrorism, and each threatens to infringe on the
] civil liberties of Americans.
]
] The most troubling part of the new plan is the call for
] expanding government access to private data, allowing
] federal agents to issue subpoenas for private medical,
] financial and other records, without a court order. The
] lack of judicial oversight removes an important check on
] government misconduct. Record holders would be required
] to comply, or face prison, and would be barred from
] telling anyone about the subpoena.

Patriot Act, Part II - Fucking Insane