Reply #26: Any statement that presumes [View All]

[TahitiNut]

or asserts that "System 'X' always ..." is utter hogwash from any kind of critical assurance standpoint. If there's one thing for certain, the behavior of any packaged (object-code-only) software is not only variable over time (updates, bug fixes, etc.), it's variable under different loads and in different contexts. The "Law of Unintended Consequences" is alive and well with software. Furthermore, the mere fact that the hardware (including discrete logic) and software (including firmware) is packaged and offered as a single 'device' increases the potential for abuse by an order of magnitude. The mere notion that a 'general purpose' O/S or subsystem would be appropriate for a mission critical function is ludicrous. If these Voting Stations actually contain a Microsoft O/S and Microsoft Access, I wouldn't even call them 'prototypes'; at most, I'd call them 'proof of concept' systems. Even under stringent controls, including thoroughly-tested open source and thoroughly-tested OTS components, I'd be wary that the systems were open to abuse merely because of the widespread access to them and the number of non-technically-skilled people with some oversight role.

"Production" is the last phase of testing.