@Gerald,

How do you suppose someone can abuse the information?
What other levels of security do you propose should be used and how?

Without suggesting solutions, you are simply part of the problem:-)


On Sat, Jan 12, 2013 at 10:55 PM, gerald mbuthia <geraldmbuthia@gmail.com> wrote:
Hi Skunks,

Just checked on whether am registered http://vote.iebc.or.ke/, of which I am, after that I decided to explore on whether one can mine data by keying of other ID Numbers . You will achieve this very easily, trying adding/subtracting your ID number with any number, The results will amaze you.  What am trying to highlight is one level of authentication wasn't a smart move with such sensitive national data.We are in the electioneering period.This has to be corrected. We must also commend them on mapping polling stations, for many it will be a useful added on feature.



Regards
Gerald.

_______________________________________________
skunkworks mailing list
skunkworks@lists.my.co.ke
------------
List info, subscribe/unsubscribe
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
------------

Skunkworks Rules
http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
------------
Other services @ http://my.co.ke



--
Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254733744121/+254722743223
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
I can't hear you -- I'm using the scrambler.