For the record, I led the team that discovered and published the first trove of exploitable vulnerabilities in an ES&S voting system, and am well aware of their danger. Many of them haven't been fixed, and that's horrifying. But there's been scant evidence of their exploitation.
It would be both personally satisfying and career enhancing to learn that these vulnerabilities were being exploited to rig elections. But the evidence of this just isn't there. And fortunately, election security is improving, albeit more slowly than it needs to.
For the record, here's a summary of what we found, 13 years ago. usenix.org/legacy/event/e…
Yes, these are serious problems. And it's maddening that many haven't been fixed. But the existence of a vulnerability does not mean that it has been exploited. Don't spread exaggerated BS.
Yes, these are serious problems. And it's maddening that many haven't been fixed. But the existence of a vulnerability does not mean that it has been exploited. Don't spread exaggerated BS.
Seriously, if your Thought Leader told to come after me for being soft on election security, they're not even trying. They're probably playing some kind of practical joke on you, like being sent out to fetch a left-handed screwdriver.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
