Voting Booth - Public Beta Test #2

[Berandor]

Looks nice in Classic mode, not so nice in Stealth mode. Giving it a fixed background might be advisable.

 

[jester47]

Usability does not seem to be able to be broken.
I'll see if I can stuff with TamperIE, and releaseing my ip.
Stuffing might be a problem. But you would need A LOT of free time.

 

[jester47]

Michael,

Can you send me the source? I will do my security thing to it and let you know where you might need to fix some things.

Aaron.

 

[jester47]

Releasing and repairing my IP allowed me to vote twice. So there is less legwork for ballot stuffing.

Further investigation shows that this only works with dynamic situatons where the network has multiple outgoing IPs. So should not be a problem.

 

[Michael Morris]

Michael,

Can you send me the source? I will do my security thing to it and let you know where you might need to fix some things.

Aaron.

Sure, though there's little in the code itself that is security related. The system relies on vbulletin for security, and vbulletin has been pretty highly scrutinized.

 

[jester47]

Sure, though there's little in the code itself that is security related. The system relies on vbulletin for security, and vbulletin has been pretty highly scrutinized.

Cool I will see if there is anything I can really do. I figure it would be easier to just look at the code rather than ask you a bunch of questions about input handling etc.

 

[Liolel]

Well it seems to work fine. At first it seemed wrong that it didn't give me any error messages even though I did things like give the same product multiple ranks, or fill in the third and 4th ranks without filling in the first two. However thats not broken if its just set up to discard entries that don't follow the directions.

 

[Michael Morris]

Well it seems to work fine. At first it seemed wrong that it didn't give me any error messages even though I did things like give the same product multiple ranks, or fill in the third and 4th ranks without filling in the first two. However thats not broken if its just set up to discard entries that don't follow the directions.

It doesn't discard them - it corrects them. It combines multiples into a single vote, and it drops any vote with a value of "0", which is what happens when you leave a field blank.

 

[Zenodotus of Ephesus]

Me vote, no break.

 

[TerraDave]

With crayons, a Rand McNally Road Atlas and a Blender, what more do you need!