Slashdot Mirror
Maryland Electronic Voting Systems Found Vulnerable
snoitpo writes "My fine state (Maryland) has hired some people I can respect to hack into Diebold voting machines. The Washington Post (read it free for 2 weeks) has the details. From this story and the one on NPR, the state hired a company and set up a test voting precinct and had the group try whatever they could to break into the machines. Most of the attacks would probably be noticed by an even-half-awake poll staff, but some vulnerabilities were exposed. The net seems to be that you could really mess up individual machines, but the grail would be to get to the central collection servers and send a megavote to your favorite candidate. The last paragraph mentions problems that voting machines had in the last election in Virginia; it's interesting to note that those use wireless networking--my jaw has dropped onto my keyboard and I can't comment any further." Other readers sent in two stories in the Baltimore Sun (1, 2), and one in the NY Times.
Paper receipts open the system up to vote-selling. Not good, and not allowed!
The voter might be able to see the paper (under glass), but that's about it.
J
Thinking outside my Head
There is a bill before the Maryland State House that would require a voter verifiable paper trail on all electronic voting machines in the state of maryland. The bill also calls for a random sampling of the paper ballots to ensure that the electronic count has not been tampered with. House Bill 53 was just read into the ways and means committee two weeks ago but with the release of the reports I hope there it can gain more support and pass the house.
Zambozay! My brain must've been eatin' a sandwich!
The NYTimes article mentioned in passing the work started Bev Harris, as described in her book ,and said that "Diebold stated that the code used by the researchers, which had been taken from a company Internet site and circulated online...". What actually happened is that supposedly private code, which no one should have been able to get to, was left in a wide open FTP server. And these are the guys we're supposed to trust with our elections. At this point I can't figure out whether Diebold's lack of security is due to malice or incompetance.
I am officially gone from
because Americans in general are dumb. They think that if we put pretty pictures on the screen it will be less confusing than pulling Lever A for Moron #1 and Lever B for Moron #2 (pulling any other levers just adds to the winner's total by default).
We also have a problem w/political ignorance and laziness. People would rather watch Reality TV and speculate on which dumbass the whore is going to kick off next week rather than who is going to run our country...
The laziness comes in that we have "no time" to go out and vote but we have plenty of time to sit around and watch Survivor, My Big Fat Obnoxious Fiancee, and The Bachelorette.
We need to make it easy for these people to watch TV while voting for another idiot to run our country.
Hope that clears it up for you (BTW, I am only 75% joking).
Duh...
We'll never have a valid e-voting system until the software is treated as a critical-systems type of application. I mean, it's not like the software is doing something like figuring the interest on a loan. The developers need to treat this software as seriously as they would the software in emergency medical equipment.
And for bonus Karma, that quote is from The Simpsons:
"Me fail English??? That's unpossible!"
-Ralphie
Another favorite by Ralphie:
"And so the doctor said I wouldn't get as many nose bleeds if I just kept my finger outta there"
Sibling post is an idiot. It was Ralph Wiggum.
I don't need no instructions to know how to rock!!!!
William A. Arbaugh, an assistant professor of computer science at the University of Maryland and a member of the Red Team exercise, said, "I can say with confidence that nobody looked at the system with an eye to security who understands security."
Mr. Wertheimer said the application of security was inconsistent, with encryption applied in some places without the accompanying technology of authentication to ensure that the machines that are communicating with each other are the ones that are supposed to be communicating and that an interloper has not jumped in. "It's like washing your face and drying it with a dirty towel," he said.
OOPS, forgot to preview. A link to the report.
We witness not a fallen world, but falling every day - The Call.
http://www.capc.umd.edu/rpts/MD_EVoteEval.pdf
Que Deus te de em dobro o que me desejas
[May God give you double that which you wish for me]
...we will never have the perfect voting system. If these electronic voting systems prove to be worse than the infamous punch-card ballots (which is what people seem to be suggesting) then electronic voting may have defeated its purpose. Maybe we should stick to the kind of ballots we have where I live in Iowa: you mark the ballot with a marker, and it gets read by computer, much like standardized tests do. It's reasonably accurate and can be counted by hand if needed, and is not so prone to hacking. P.S. - sorry if I submitted an empty comment earlier - my mistake
Send mail to atc@npr.org and express your concerns.
I'm the urban spaceman babe, but here comes the twist... I don't exist
This is roughly how the system built by The Open Voting Consortium works. Their project, EVM2003, is available on SourceForge.
Enable 3D printed prosthetics!
Actually, voters in Oregon are required to sign the envelope before they put it in the mail. While it's not foolproof, it's obvious if every ballot has been signed by the same person.
Nathan