I wonder what the people who think we shouldn't talk about vulnerabilities in election hardware and software think we should do. Do they think everyone should just shut up about it and hope for the best?
So much of the attitude still present in some circles about voting security reminds me of computer security in the mid 90's, when vendors routinely attacked and threatened people who found and reported security bugs. It didn't work then, and it doesn't work now.
Computer security has grown up since then. It now celebrates discovery and discussion of vulnerabilities (and ways to eliminate them) as essential parts of the software life cycle. Our infrastructure is far more robust because of this.
Voting vendors can learn something here.
Voting vendors can learn something here.
It frankly amazes me that we even have to say this in 2022.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
