The Dutch Electoral Council (Kiesraad) had development/deployment infrastructure credentials inside the installer of their voting calculation software OSV2020.

Disclosure timeline: fun and fast! 😅

https://www.zerocopter.com/blog-en/the-importance-of-post-build-audits-do-you-know-what-you-ship
Post image

Comments

Posting Rules

  • Be respectful to others
  • No spam or self-promotion
  • Stay on topic
  • Follow Bluesky's terms of service