LWN.net Logo

How to subvert trusted builds

How to subvert trusted builds

Posted Oct 15, 2008 14:57 UTC (Wed) by dskoll (subscriber, #1630)
In reply to: How to subvert trusted builds by drag
Parent article: Video and photos show Linux booting on the Brazilian voting machines (BR-Linux.org)

Because if you can't trust GCC or ICC or Borland or whoever not to stick back doors into their commercial off-the-shelf compilers to change election outcomes then you are going to have so many other worries in live that a question of voting fraud isn't going to be high on your priority list.

I read somewhere that the latest US presidential election campaigns are going to cost around $1 billion. That is, to become the president of the United States the "honest" way, you have to raise $1 billion.

How much do you think it would cost to subvert a voting machine system? The stakes are so high and the attackers potentially so well-funded that it's simply unthinkable to trust democracy to complex software systems.

Every single software system the complexity of Windows or Linux has security holes. Every single one. There has never in the entire history of computing been systems that complex that are also secure.


(Log in to post comments)

Copyright © 2012, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds