foolder is correct.  that's why sometimes there's a need for reverse 
engineering (static analysis) which could led to vulnerability discovery.  this 
could lead us to some code which could be made in-place for any injection 
(backdoor, etc.) during normal execution.

cheers,
mike



----- Original Message ----
From: fooler mail <[email protected]>
To: Philippine Linux Users' Group (PLUG) Technical Discussion List 
<[email protected]>
Sent: Mon, October 12, 2009 4:47:19 PM
Subject: Re: [plug] COMELEC SUED (Was: The Death of Election 2010 Source Code 
Review)

On Mon, Oct 12, 2009 at 3:52 PM, Oscar Plameras <[email protected]> 
wrote:
>
> Remember, Election Automation Software is one of the easiest to develop.
> It is "Count and Tally", nothing complicated and convoluted.

true.. BUT... the purpose of source code review is to examine if there
is something beyond the count and tally thing which cannot be seen by
your simulation test.. as what danny said - TRIGGERS..

special keyboard hotkey, special packets, special ER and others to
trigger the manipulation of votes to do the dagdag-bawas scheme...

fooler.
_________________________________________________
Philippine Linux Users' Group (PLUG) Mailing List
http://lists.linux.org.ph/mailman/listinfo/plug
Searchable Archives: http://archives.free.net.ph



      

_________________________________________________
Philippine Linux Users' Group (PLUG) Mailing List
http://lists.linux.org.ph/mailman/listinfo/plug
Searchable Archives: http://archives.free.net.ph

Reply via email to