-
In a recent EL webinar “Draws, balls, and RNGs”, Thomas Bierbach, a consultant to Bulletproof, a GLI Company, and lottery security authority […]
In a recent EL webinar “Draws, balls, and RNGs”, Thomas Bierbach, a consultant to Bulletproof, a GLI Company, and lottery security authority […]
Draw time substitution after the results are generated
The time stamp for offline draws can be altered, meaning draw results can be known before they are published.
Hardware substitution for alternative hardware that produces predictable results
Such substitution may go unnoticed unless there is a way to identify the hardware used for each draw
Substitution of numbers drawn after the results are generated
An insider can substitute the winning numbers and this can go unnoticed if the RNG system does not provide verification methods and the results are not consistently verified.
Software substitution during initial delivery, during maintenance, or later
Certification, pre-post testing, verification of program checksums, system scans, verification tests, and post-mortem testing may not find the hidden code.
Phishing or attempting multiple RNG generations to obtain desired outcomes
Traditional RNGs allow for multiple generations and it may be impossible to know how many have occurred.
Hardware deterioration results in hardware not performing RNG functions safely or properly
Traditional RNGs may not have specific hardware verification tests in place.
Inadequate RNG design & implementation detection of software and hardware errors and malfunctions
Software designed to check for errors, detect hardware issues and malfunction
