Re: Symantec Security Report on Hart Intercivic

[Paul E Condon <pecondon@xxxxxxxxxxxxxxxx>]

On Fri, May 27, 2005 at 05:03:23PM -0600, Lou Puls wrote:
> Thanks for the url, I downloaded and printed it ok.  Just scanned thru it quickly so far, but it seems to me there is a contradiction:  I thought I heard Hart people say there is no dialup or Peer to Peer networking built into the untruncated system, but Symantec seems to be proud that it is indded there to allow open and traceable (no hidden cables) transmission.  When BoCo gets snookered into buying the full system,will there be such networking, and will it be openly and traceably monitored by "trustworthies" other than election officials and corporatists, say another review commission?
> 
> -----Original Message-----
> From: Joe Pezzillo <jpezzillo@xxxxxxxxx>
> Sent: May 27, 2005 9:33 AM
> To: CVV Net <cvv-discuss@xxxxxxxxxxxxxxxxx>
> Subject: Symantec Security Report on Hart Intercivic
> 
<snip>

In my earlier post I made a somewhat nasty comment about BCounty 
election people vis-a-vis administering networked computers. 
On reading this comment, I realize that they are in a really 
difficult position. They do not have access to a straightforward
honest technical description of the system that they are charged
with administering. They do not have a history or culture of 
looking at the big picture. They are dealing with con-men, but
it is not yet established that they are dealing with con-men.
I pity them. I hope that I, and all on this list, can help them.

Let me try to amplify on the extent of the problem: 

Consider a window. What you see when you look through a window is what
is outside, just as if you went outside and looked without benefit of
the window.

Now consider a Window. What you see is whatever a programmer decided
to display on a computer screen inside of a rectangular border. There
is no outside to go to to see the real stuff and check on the quality
of the glass in the glazing. 

This problem is at the core of the human use of computer
technology. The consultant community has no language with which to be
honest about it. They, fundementally, cannot be honest, because no one
has yet invented the language of honesty.

-- 
Paul E Condon           
pecondon@xxxxxxxxxxxxxxxx