[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Debian Project Leader Election 2003 Results

>> On 31 Mar 2003 12:02:14 -0500,
>> Aaron M Ucko <ucko@debian.org> said: 

 > Like Sam, I see no particular need for salt beyond the
 > username. However, I did notice a potential anonymity attack: the
 > presence of consistent partial voter lists and dummy tally sheets
 > leaked some information about which voters could have which hashes.


        Have you actually tried this? the dummy tally sheet is
 present, as is the final tally sheet. Notice that the md5sums show no

	The dummy tally sheet, is just that, a dummy. 

 There's some entertainment value in watching people juggle
 nitroglycerin. Larry Wall in <199712041747.JAA18908@wall.org>
Manoj Srivastava   <srivasta@debian.org>  <http://www.debian.org/%7Esrivasta/>
1024R/C7261095 print CB D9 F4 12 68 07 E4 05  CC 2D 27 12 1D F5 E8 6E
1024D/BF24424C print 4966 F272 D093 B493 410B  924B 21BA DABB BF24 424C

Reply to: