Comment

Comment by coolhand2120

Please correct me where I'm mistaken.

* This password list has been public for a long time, and is easy to access: hidden excel column on a public spreadsheet.

* BIOS access means the intruder can change boot devices, boot their own OS, infect the BIOS with a virus, change boot devices back, compromise the vote host OS.

* Keycard security isn't tight security. Any amature physical penetration tester would just use a primitive attack on the door to get around it. E.g.: Grab the handle from under the door with a wire. Youtube has a ton of examples.

* This could have been done months ago, and over a long period of time.

* The intruder could clean up logs and any other traces of their actions.

Where am I technically wrong here? I'm sure I'm missing something obvious. It sounds like what you would do with BIOS passwords if you wanted to do something nasty. I haven't seen these questions addressed anywhere.

I hear some people say "but we use paper ballots". Then why do you have a BIOS password? If it's all paper where does the computer fit in? All of this is honest curiosity, I'm not sure how the voting system works.

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton