IBM, ATMs – WTF? Big Blue to probe cash machines, IoT, vehicles, etc in new security labs IBM has promised to open four research centers that will hunt for security vulnerabilities in technology – including a team dedicated to probing cash machines for flaws. It has been eight years since the late, great hacker Barnaby Jack took to the stage at the Black Hat USA conference in Las Vegas, and showed attendees how in …
The more I've been up close & personal with political operations, the more convinced I've become that the entire purpose of voting machines is to create opportunity for fraud.
Paper, fill-in-the-oval ballots, all the way. Use the same scantron you use for scoring tests.
Since they need to be online anyhow in order to function, why not put all the intelligence into a trusted server in a secure location? Just make all sub-devices talk directly via end-to-end encrypted channels with it. Have the sub-devices as simple as possible (i.e. by not using the complex protocol negotiations of TLS, or complex operating systems), connect them via a VPN-Router to the server, and there you go.
Obviously those small subsystems need to have good physical security. However with ATMs you already have an established culture of that, as well as the logistics to transport physical objects to it. That way you could do firmware updates by swapping and refurbishing the hardware modules.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
