[Electionteam] Dynamic vs static listing for .ini file

[Lulu Friesdat]

Hi Ray,


*I have a question about this Engineer Change Order (ECO) for ES&S voting
machines that was sent out on 9/10/24, just before the election.*

https://www.eac.gov/sites/default/files/2024-09/ECO Analysis ESS 1188.pdf

Per the submitted ECO, the configuration.ini file created during install of
> Electionware Additional Reporting module is a unique file for each customer
> install. Because this file is unique to each customer install, this file
> needs to be listed as a dynamic file in order for the hash verification
> results to match.
>

I read on a Substack that

>
> By changing the .ini file to dynamic, *hash testing would still be
> successful even if new network paths or hardware connections were present
> at the time of audit or testing.*
>
If that is the case, then this was an approved update that undermined the
security of the software. Do you agree with that assessment?

Thank you.

-- 

Kind Regards,

@LuluFriesdat



Co-Founder & Executive Director, SMART Elections
<https://smartelections.us/>

*TEDx Talk <https://www.youtube.com/watch?v=yQvn3zJus_c>* - I use games to
help us think about how to improve U.S. elections. Enjoy & share!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.citizensoversight.org/pipermail/electionteam/attachments/20250219/aa72b076/attachment.html>