- The most basic thing I can do
with this time turner device is just submit a vote
as if I were using a legitimate remote.
As you can see,
the base station here still can't tell the difference.
Another thing I can do is view the votes of my classmates.
It might be hard to see this screen,
but no matter which option I choose
on this legitimate remote,
it is automatically displayed on the time turner.
Now, if I were more nefarious,
what I could do is try to change the votes of my classmates.
I'm going to restart the poll here,
and this time, no matter what my classmate chooses,
their vote will automatically be changed to B.
Let's try picking an answer.
And no matter what I choose,
it is automatically overwritten by the time turner device.
Now, a vulnerability that allows me to change
someone else's vote on a so-called polling system
is a major oversight.
But, if I were more nefarious still,
I could simply perform a denial of service attack.
Submitting hundreds of votes per second
will quickly overwhelm the host device,
eventually causing it to crash and making it impossible
for a legitimate student to submit their vote.
Let's restart this poll one last time
to show the most relevant type of attack,
which is simply copying the most popular vote
for any given question.
So, I'm going to restart the polling, and this time,
the time turner will just copy
whatever the most popular vote is.
So, let's say I vote for A as a legitimate device.
The time turner immediately copies that.
If the most popular vote changes to something else,
the time turner will eventually change its vote,
always making sure to stay within the majority.