jm + lottery   3

Neutered RNG let man rig million dollar lotteries | Ars Technica
A forensic examination found that the generator had code that was installed after the machine had been audited by a security firm that directed the generator not to produce random numbers on three particular days of the year if two other conditions were met. Numbers on those days would be drawn by an algorithm that Tipton could predict [...] All six prizes linked to Tipton were drawn on either Nov. 23 or Dec. 29 between 2005 and 2011.
prng  randomness  security  hacks  exploits  lottery  us  audits  holes 
april 2016 by jm
Interesting Lottery Terminal Hack - Schneier on Security
Neat manual timing attack.
An investigator for the Connecticut Lottery determined that terminal operators could slow down their lottery machines by requesting a number of database reports or by entering several requests for lottery game tickets. While those reports were being processed, the operator could enter sales for 5 Card Cash tickets. Before the tickets would print, however, the operator could see on a screen if the tickets were instant winners. If tickets were not winners, the operator could cancel the sale before the tickets printed.
attacks  security  lottery  connecticut  kiosks 
march 2016 by jm
US Lottery insider accused of stealing millions by hacking lottery machines across the US
Prosecutors believe that Tipton, 52, used his access to the machines to surreptitiously install software programs that let him know the winning numbers in advance before disappearing without a trace. They say he worked with associates such as his brother Tommy Tipton — a Texas judge — and Texas businessman Robert Rhodes to play those numbers and collect prizes dating back to 2005.
us  lotteries  prng  randomness  exploits  hacking  insider-attacks  lottery 
january 2016 by jm

Copy this bookmark:



description:


tags: