Herbert Thompson Quotations

We want to make sure the methodologies we come up with have representation from all cross-sections.

Software is not static -- it is constantly changing. You can't just measure the executable; you need to measure the vendor.

Nowadays, with the electronic voting systems, you don't know what even looks suspicious if you're an elections official. You need people who understand software and software security to understand what the risks are.

They don't trade in any sovereign currency, so they avoid the scrutiny of the Secret Service.

Ion is one of the few to ask the questions. Like, what is this thing actually doing to my vote? How is it processing my vote?

The first time a CIO goes to a site such as Hacker Defender, it's a big wake-up call. But if you're not aware that these groups exist, it's hard to defend against them.