--- On Mon, 7/13/09, Miguel Paraz <[email protected]> wrote: > This is probably a Java web (servlet) application. Since it > is much > easier to cheat here, we need to make sure of the integrity > of this > web app. But even if the app is good at the source level, > how do we > know that it won't be substituted with another version at > election > time?
We can suggest to Comelec to compute SHA1 or MD5 checksums of the approved programs, and at election time, the checksums can be recomputed (manually) and if the original checksum and new checksum agree, then there is no substitution. > Also, what is the network involved? Is there a VPN or > Internet > connectivity between the canvassing machines nationwide? > Somebody > could log in or issue some backdoor API calls separately. I have been thinking about this for some time. Smartmatic can not get enough routable IP addresses to connect the PCOS machines at the precincts to their municipal CCS/BOC computers. So it has to be VPN involving PCOS machines and their municipal CCS/BOC computers. One VPN per municipality. Will such arrangement have to be with the blessings and help of Smart, Globe, and other cellular providers? _________________________________________________ Philippine Linux Users' Group (PLUG) Mailing List http://lists.linux.org.ph/mailman/listinfo/plug Searchable Archives: http://archives.free.net.ph
