Software to capture votes in upcoming German national election is insecure

Re:Software to capture votes in upcoming German national ele... by laumars on Thursday September 07, 2017 @09:24AM (#15191567)

The level of detail your talking about to prevent the kind of mistakes they made is so specific that you might as well just develop the thing in house since you clearly already have the experience.

Maybe what we need is a rules that any critical government infrastructure should be independently pen tested before it's bought. This should hopefully put off the inexperienced from taking on such projects and offer a way out for governments should the contract go sour.

[ Parent | on HN ]

Re:Software to capture votes in upcoming German national ele... by carlmr on Thursday September 07, 2017 @10:34AM (#15192194)

I agree, this is often an issue. In my company a lot of people only make specs, and the "development" for a lot of components is outsourced. But these specs are basically developed already, so in the end, we're only making the expensive developers write a spec that's so detailed that it's more work to write the detailed spec, than if you programmed it directly from a non-detailed spec.

[ Parent | on HN ]