Re: [plug] PCOS Machine Source code is now open for review

[wyu]

Look for the TEC 2013-01 resolution in the Comelec website. It contains the trusted build certificate with the hash codes for source and binary.  Reviewers will generate appropriate source hashes before the review and compare it with the hashes in the trusted build certificate. This ensures the sources are the same as the ones certified by SLI. Validation on the PCOS is done by a validation procedure to compare the hash code of the binary. Compare trusted build hash and extracted hash. This ensures that the binaries installed are the correct ones in the machine and the same as the ones generated by SLI during trusted build.  For candidate volunteers, the requirements for review are documented in resolution 9651 OR you can join us at the PPCRV. Sent on the move. From: Jubert Ledesma Sent: Tuesday, May 7, 2013 3:49 PM To: Philippine Linux Users' Group (PLUG) Technical Discussion List Reply To: Philippine Linux Users' Group (PLUG) Technical Discussion List Subject: Re: [plug] PCOS Machine Source code is now open for review I am also thinking about that. Maybe that was the reason why they did not show it before and now would like it to be reviewed. It could have been tampered with already and the Dugas codes would have been already removed. No way for us to know really. A couple of things were also pointed out on one of the news reports this morning. 1) As Mr. Serrano had said, if that is the same source code they are using and is running currently in the PCOS machines. and, 2) The review of the source code would take a long time and it is already the elections. Not enough time to really do it. And with that, there is another issue wherein if the source code was found to contain malicious codes then it would be chaos. Still, wouldn't it be better if some of us would group up or team up and check it out? Then we could point these things out right? Can we do a compile and compare? On Tuesday, 07 May, 2013 03:37 PM, Rogelio Serrano wrote: On May 7, 2013 3:26 PM, "Jubert Ledesma" <kurayonchinc...@gmail.com> wrote: > > Well, all I know is what they say on the news. I heard that the source code is on its way here. They will have the source code kept in Bangko Sentral and that is the only place where you will do the review.. I don't know how people are going to request for them to review the code. Maybe you need to send a request to the COMELEC. > How are they going to prove its the actual sources to the binary loaded in the machines? > > > On Tuesday, 07 May, 2013 03:20 PM, Harish Pillay wrote: >>> >>> The PCOS Machine Source code is now open for review.  I think we need a >>> couple of people from our group to go and take part in this. >> >> Is this available only in person or is it available to be view online, remotely? >> >> Harish >> _________________________________________________ >> Philippine Linux Users' Group (PLUG) Mailing List >> http://lists.linux.org.ph/mailman/listinfo/plug >> Searchable Archives: http://archives.free.net.ph > > > _________________________________________________ > Philippine Linux Users' Group (PLUG) Mailing List > http://lists.linux.org.ph/mailman/listinfo/plug > Searchable Archives: http://archives.free.net.ph _________________________________________________ Philippine Linux Users' Group (PLUG) Mailing List http://lists.linux.org.ph/mailman/listinfo/plug Searchable Archives: http://archives.free.net.ph

_________________________________________________
Philippine Linux Users' Group (PLUG) Mailing List
http://lists.linux.org.ph/mailman/listinfo/plug
Searchable Archives: http://archives.free.net.ph
_________________________________________________
Philippine Linux Users' Group (PLUG) Mailing List
http://lists.linux.org.ph/mailman/listinfo/plug
Searchable Archives: http://archives.free.net.ph