Slashdot Mirror
Chimp Can Hack Diebold Electronic Voting System
rbuysse writes "A million monkeys can write Shakespeare, but it only takes one to mess up an election. Scoop here." Blackboxvoting is behind this demonstration; there's also a lengthy thread on the Bugtraq mailing list.
"I can not bring myself to believe that if knowledge presents danger, the solution is ignorance" - Isaac Asimov
Is that chimp one of the Diebold engineers?
This is interesting, but why would George W. want to do such a thing?
Disconnect and self-destruct, one bullet at a time.
A new denial of service attack is spreading through the wild. It involves hurling feces...
Hey now, is that any way to talk about our beloved president? Besides, we won't know until election day whether that's true.
Electric Monkey Pants
Incase of the enevitable slashdotting, here's the movie of the chimp hacking the vote.
A million monkeys can write Shakespeare, but it only takes one to mess up an election.
I'm a proud Bush voter, You insensitive clod!
Sigs are for the weak.
Final_Results.Mdb
Look for this attatchment on the Electoral College's Outlook Express inbox.
If you think
http://www.blackboxvoting.org.nyud.net:8090/baxter /baxterVPR.mov
Although it's pretty weak... just a bunch of cuts of a monkey and a computer.
That's why the liberal media, like Fox, is reporting on it.
Try the US Civil Rights Commission. (Their report on the Florida electoral fraud is available here: http://www.usccr.gov/pubs/vote2000/report/main.htm )
#define DRM chmod 000
PS...that's not just an ordinary Chimp.
Here is an action photo of the actual hack.
If you think
"Dacek said Wednesday that she fears that critics of the new voting system may try to physically sabotage the machines."
Wow. That's so..... scaremongering.....
Gentoo Sucks
"I am committed to helping Ohio deliver its electoral votes to the President next year."
- Wally O'Dell, CEO Diebold
Tell the truth and you won't have so much to remember.
rather than going 'all electronic' there are not more efforts to have a hybrid paper-computer model, off the top of my head:
- the voter comes to the poll, is identified and is given a paper token with a barcode that contains the polling ID station ID and a sequential number (note that the ID is not humanly readable, important for privacy)
- the voter goes in the box, which has a touch screen and an 'easy' UI, voter inserts the paper token in the box which scans it
- voter votes on the touch screen (make it really easy, BIG buttons, BIG text, whatever)
- machine prints out a ballot with the voter's vote in humanly readable form (say, prints out a 'real' ballot with blackened out rectangles on the relevant candidate(s)) and a 2D barcode at the bottom with the vote in machine readable form including the ID on the 'paper token'
- voter looks at the ballot to make sure it's ok, folds it, comes out, puts the ballot in one box and the paper token in the other. If the ballot is not ok there is a shredder right there inside the poll station and the voter votes again.
========= election over ===========
the paper token are shipped to the central office, scanned (should be very fast via the 2d barcodes) and votes tabulated accordingly; for an additional level of security you can always count the votes via the 'human readable' part of the ballot before shipping them.
If a recount or anything is necessary there are several safeguards with this system:
- you can't have ballot box stuffing, because 1 'token' = 1 vote and if those ID are generated 'well' you could even double check that all IDs make sense, sort of like a 'there are only so many valid serial numbers' there. Multiple votes with the same 'ID' will be discarded.
- you can't have doubts on the voter intent, they'll vote on the screen *AND* look at the paper copy before putting it in the ballot box later on
- if there is really no trust in the computers no problem, you can just look at the 'human readable' portion of the ballot as many times as you want: no nonsense about hanging chads or anything.
this (or something like it) would cover all the bases in terms of fast results (via scanning ballots, ship them all to a central location and do it), paper trail and so on. I really can't understand who in their right mind would consider putting the fate of the election in the hands of MS Access, for crying out loud!
-- the cake is a lie
Comment removed based on user account deletion
"saves vote totals in Microsoft Access"
Hey, at least its accurate advertising
Read This
COLUMBUS - The head of a company vying to sell voting machines in Ohio told Republicans in a recent fund-raising letter that he is "committed to helping Ohio deliver its electoral votes to the president next year."
The Aug. 14 letter from Walden O'Dell, chief executive of Diebold Inc. - who has become active in the re-election effort of President Bush - prompted Democrats this week to question the propriety of allowing O'Dell's company to calculate votes in the 2004 presidential election.
It seems to me that someone who makes voting software shouldn't be promising to deliver votes, but maybe it's just me.
-Dan
Sure we trust the election officials, but do we trust every contractor or tech who might work on those systems? Especially as Diebold seems so lax in checking backgrounds that people with convictions for fraud, blackmail, and embezzlement have access to their code. I'd bet that their contractors are even less subject to appropriate background checks.
[Set Cain on fire and steal his lute.]
Their "evidence" of a chimp hacking diebold is a series of poorly cut images of a chimp and a computer????? Come the fuck on now... First, half of the minute video is useless filler text and a picture of smiling chimp, which immedietly jumps to a sequence that could have only been cut by an editor with suffering from ADD syndrome. Seriously, where's that foot icon, because there's no way you could possibly take this story seriously.
But for the inveitable slashdotting it'll receive, I'll summerize: Makers say Diebold works, opponents say it doesn't, que poorly edited movie of monkey sitting by computer hitting stuff, analogous to the new "Baby hitting mouse" AOL 9.0 commercial. The End.
Thank me, beecause I just saved you 5-10 minutes of your life. Use it to get a free ipod or something.
You need a FREE iPod Nano
However, most of the rejected stories you listed have nothing to do with technology; they merely describe political news or events. I think the bias Slashdot has toward "news for nerds" is appropriate; we can get our pure political news from other sources.
When I'm reading slashdot, I'm looking for info about tech trends and social impacts therefrom, nothing more.
Although very questionable, and highly inflamitory, the above quote would provide better evidence of a corporate conspiracy (much more likely) than a conspiracy by the Republican party.
"State elections officials also said Wednesday that they are confident they can protect the system from a decidedly lower-tech threat.
:P
Elections administrator Linda Lamone said" that monkeys will be prevented from accessing the machines during the elections.....
The good thing is that even though a monkey can hack the system this still puts the hack out of the reach of the average Republican ;)
Judging by the fact that most people with the time to volunteer for poll work are our 'seasoned citizens' who, let's be honest, aren't, as a group, too computer savvy, I'd be more worried about the scrupulous people with no computer skills whatsoever messing things up.
I know this makes me an ageist asshat, but how in the heck are all these people going to get up to speed on computers enough to ensure a little 'whoops' doesn't toss a whole county or something?
You know what?
"Quite honestly it's somewhat insulting to elections officials and volunteers," he said to the idea that elections officers would tamper with vote results.
I say "Quite honestly, it's somewhat insulting to the voters," to the idea that the voting public should naively disregard the human factor and that temptation/corruption/bribery "just don't happen."
Never underestimate the power of money, especially in large, unmarked bundles.
Government's idea of a balanced budget: take money from the right pocket to balance...oh who am I kidding?
But I guess Chimp hacks Access Database isn't really news.
I clicked on the monkey story, I wouldn't have clicked on any of the others except for the one that says "Turkey", then I would realize it isn't about the yummy bird and close it.
If I wanted to be up-to-date on the war on terrorism, Irak or whatever I would watch CNN, but I want to know about Monkeys so I read Slashdot.
My humble suggestion, stop submitting political stories and start looking for monkey stories. A turkey story would be nice too.
Obligatory monkey story:
I like Monkeys
The pet store was selling them for five cents a piece.
I thought this was odd since they were normally a couple thousand. I decided not to look a gift horse in the mouth so I bought 200 of them. I like monkeys.
I took my 200 monkeys home. I have a big car. I let one of them drive. His name was Sigmund. He was retarded. In fact, none of them were really bright. They kept punching themselves in the genitals. I laughed. They punched me in the genitals. I stopped laughing.
I herded them into my room. They didn't adapt very well to their new environment. They would screech and hurl themselves off the couch at high speeds and slam into the wall. Although humorous at first, the spectacle lost its novelty halfway into it's third hour. Two hours later I found out why all the monkeys were so inexpensive; they all died. No apparent reason. They all just sort of dropped dead. Kinda like when you buy a goldfish and it dies five hours later. God damn cheap monkeys.
I didn't know what to do. There were 200 dead monkeys lying all over my room; on the bed, in the dresser, hanging from my bookcase. It looked like I had 200 throw rugs. I tried to flush one down the toilet. It didn't work. It got stuck. Then I had one dead, wet monkey and one hundred ninety-nine dead, dry monkeys.
I tried to pretend that they were just stuffed animals. That worked for a while, that is until they began to decompose. It started to smell real bad. I had to pee but there was a dead monkey in my toilet and I didn't want to call a plumber. I was embarrassed. I tried to slow down the decomposition by freezing them. Unfortuantely there was only enough room for two at a time, so I had to change them every 30 seconds. I also had to eat all the food in the freezer so it didn't go bad.
I tried to burn them, but little did I know that my bed was flammable. I had to extinguish the fire. Then I had one dead, wet monkey in my toilet, two dead, frozen monkeys in my freezer, and one hundred ninety-seven dead, charred monkeys in a pile on my bed.
The odor wasn't improving. I became agitated at my inability to dispose of the dead monkeys and I really had to use the bathroom. So I went and severely beat one of the monkeys. I felt better.
I tried throwing them away but the garbage man said the city was not allowed to dispose of charred primates. I told him I had a wet one. He couldn't take it either. I didn't bother asking about the frozen ones.
I finally arrived at a solution. I gave them out as Christmas gifts. My friends didn't quite know what to say. They pretended to like them, but I could tell they were lying. Ingrates. So I punched them in the genitals.
I like monkeys.
(DISCLAIMER: I am not the author of this story.)
--- I w00t, therefore I'm l33t.
Because Access functions are already built in to the Windows operating system, the totals could be altered even if a computer did not have Access installed on it...
But Maryland election officials agreed with Bear that no hacking can happen unless the hacker is physically at the computer.
How long until somebody writes a virus/worm/trojan that does nothing on most Windows boxes (other than propagate) and on systems where GEMS is detected then around 8:00pm on election day just go wreak havoc with the election results? No physical access to the GEMS systems is needed. If those machines are hooked up to the internet at any time prior to the election (like to get Windoze updates) they could potentially become infected with just such a worm.
Yeah, I know it's a stretch. Just playing devils advocate...
beowulf cluster of chimps could do.
Isn't it basically unconscionable that the actual process of elections be a for-profit venture? While the military may buy hardware from outside vendors, it does so because certain problems require such specific, high-level technical knowledge and manufacturing know-how which they don't posess in-house. A voting system is, at it's core, a system of adding numbers together that any first-year comp sci student could create. Why is something so basic to the legitimacy of our government being given to for-profit ventures with closed systems?
At the government's disposal are hundreds of public universities with some of the brightest minds in the country, many of whom would gladly work on implementing the great american open-source voting system. Even if these graduate students and professors were paid market rates for their work, it would still be much cheaper than what Diebold systems are costing the US. There is also no competitive advantate go keeping the system closed-source... so what if Austrailia decides they want to run their elections on our software? We've proud of other countries copying our constitution and systems of government, why not our systems of elections too? Especially if they improve it, and give those improvements back to us? What, are we suddenly going to be exporting less consumables to them because they have more legitimate elected officials?
The ______ Agenda
A million monkeys can write Shakespeare...
Perhaps you'd like to visit The Monkey Shakespeare Simulator, which randomly attempts to duplicate Shakespeare's work (don't worry about legal aspects, you can generally assume it's out of copyright).
The current record is 20 letters from "Coriolanus" after 462,060,000,000 billion billion monkey-years. Sent in by Jens Ulrik Jacobsen from Denmark on 31 Aug 2004.
"1. Citizen. Before w ZgJ 8GPxwFnwvG&iX4tKfo("2ny!3Pp..."
matched
"1. Citizen. Before w e proceed any further, heare me speake All. Speake, speake 1.Cit. You are all resolu'd rather to dy then to famish? All. Resolu'd, resolu'd..."
Dacek said Wednesday that she fears that critics of the new voting system may try to physically sabotage the machines. She pointed to a recent incident in which a poll judge had to be ordered to return a voting machine that was used for demonstrations at an suburban folk festival.
Does anyone else find it rather strange they are worried about the "critics" and not the ones who seem to be in a big hurry to get these insecure systems in place? In my mind, the critics are the ones trying to stop a possible hi-jacking of democracy.
This reads like a AM radio talk show host comparing protestors at a convention to terrorists.
This reminds me, at the recent ASIMO demonstration that I went to this Thursday at my college, they played a movie. In this movie, they were trying to prove the importance of how the robot looks determines how the public will accept it. And at some point they threw in a picture of a touch screen voting machine and mentioned "Florida" and "elections." I was too caught up in my selective hearing to know why these were mentioned in a video about trusting machines, but my friends and I had a good laugh. After all I have read, I could never trust this failure of a company. They need to fold, tuck their tails and find something else.
The idea that elections can be entrusted to the Diebold corporation is wholly absured when you consider that democracy is an activity of the people, for the people and by the people. Of course the results will be and ***SHOULD*** be questioned; that's the whole point of a democracy. That's why an open source voting system is and should be the only way to do computerized voting; it's open to scrutiny by anyone and everyone, and such it is, eventually and ultimately, beyond scrutiny when the final vote is out.
The open source community should produce as soon as possible an effective, secure, and open source voting system that's ready for reliable usage. It's one thing to criticize Diebold, it's another thing to question an elected official why an open source solution that's proven and secure and anyone can know the ins and outs of is not implemented and another obscure, closed, and highly questionable one is entrusted.
I think we've found the culprit
Click here or a puppy gets stomped!
I mean, really. They practically have a button that says "Press to Hack Election."
I would rather be killed by a terrorist than enslaved by my government.
Diebold says...
Even if the system could be hacked, he said, it could only be done by a person with "unfettered access to the system." Bear noted that elections are not just the machines, but also the people who work the elections.
"Quite honestly it's somewhat insulting to elections officials and volunteers," he said to the idea that elections officers would tamper with vote results.
At every election I have voted in, the officials and volunteers are retirees who have VCRs flashing 12:00! They would never know it if some young whipper-snapper was farting aroung with the newfangled high-tech whizbang voting machines, nor will they be able to help anyone if the machines screw up.
The Uncoveror: It's the real news.
For all the Americans out there, we live in a democracy where "all decisions are made by representatives who act by [our] consent". However, it is incredibly difficult for an elected representative to follow his/her constituent's wishes if they are not informed of which bills they should vote for by their constituents.
A simple letter (here or here or here or here) is one of the easiest ways to inform your elected representative of your stance in regard to certain bills. If you feel strongly enough about fixing the current state of electronic voting in this country, I highly reccomend writing to your elected representatives to inform them of your concerns and certain bills which they should support.
Remember, for a democracy to work as intended there needs to be participation by all of its citizens though voting as well as keeping their elected representatives informed of the citizens wishes.
Also remember that when contacting your representatives a signed, mailed letter makes a much bigger impact than an e-mail.
"I have a porkchop, you have a porkchop. I have a veal, you have a veal".
"1. Citizen. Before w ZgJ 8GPxwFnwvG&iX4tKfo("2ny!3Pp..."
I bet the rest of that is just Danish l33t speak or something...
In the free world the media isn't government run; the government is media run.
If you truly had an infinity of monkeys and of typewriters, then it should only take O(1) time for them to produce a work of Shakespeare. Or, for that matter, all of the works of Shakespeare, including the ones he didn't write.
The report was fairly critical, but balanced.
-molo
Using your sig line to advertise for friends is lame.
When asked about the chimp hacking their voting machine a Diebold spokesman shrieked loudly, barred his teeth and threw feces at the offending reporters.
That's our life, the big wheel of shit. - The Fat Man, Blue Tango Salvage
What Diebold clearly don't understand (or care about) is that while trust in the election officials has always been very important, never before could one single person change all the votes in seconds leaving no evidence! Its like being able to stick your coat hanger through a stack of 50 million punch-cards and have the chads disappear into thin air. But that's not even half of it - they just assume that it can only be done with physical access to that machine - how can they be sure the data is secure on its way to the machine? What if its already been compromised? With a system as complex as the average computer you have allot of exits to cover. At least with paper it would take an army of people to fake 50 million ballots, with computers it could potentially take a few lines of code and an opportunity. Its not even in Diebolds interests to secure things like verifiable election logs, because, if something does screw up Diebold certainly wont want you to know. This is why we call privatisation "The short-sighted or externally lobbied greed of a government in which an enterprise requiring only better management is aquired by worse management who take all profits and place them in a tax haven or a yacht."
This comment does not represent the views or opinions of the user.
I'm not very concerned because
:-)
(a) By "terrorists", I assume you're talking about al Qaeda. How does al Qaeda gain from the presidential election? Neither Bush nor Kerry is likely to stop hunting them down.
(b) There are lots of groups with more stake in who becomes president and who are better equipped to screw with the election -- either political party, for instance. An activist programmer. A state official involved in the machines. I'm worried about *them* mucking with the election, not with terrorism.
(c) It'd hardly be terrorism to hack a system (producing political influence by inflicting terror on a populace), so from a simple, stupid, logical standpoint, unless someone had already engaged in terrorism, they wouldn't be a terrorist.
Why is this a FOX News issue when all they state the obvious?
Because they're being deliberately misleading. Terrorists "hacking the election" is just not a big concern, but they keep trying to keep terrrorism in people's heads. Terrorism has never been a real top national problem, not on 9/11 and certainly not now. Smoking, car crashes, alcohol -- all of these kill more people and cause vastly more economic damage, and do so on a recurring basis. The only reason people care so much about 9/11 is because of the steady and constant media coverage.
I, for one, would like to hear not at all about Bush and Kerry's war records, little about their stupid "war on terror" initiatives, and more about issues that actually affect American citizens.
May we never see th
Say what you will about the relative scale of the elections in the two countries, one thing is certain - the elections work here. The results are in very quickly, the security protocols surrounding voting and counting are simple enough to be comprehensible and auditable by just about anyone, and the whole thing is done with exemplary transparency.
What is the robbing of a bank, compared to the founding of a bank? -- Bertolt Brecht
That's the plain and simple of it. No one has ever been able to demonstrate that they'll save money during an election, nor that they're anywhere close to being secure. Diebold's machines are black-box proprietary and it's essentially impossible to determine if someone (say, a bought-and-paid-for Diebold exec) has tampered with the results.
I used to work with county and city elections. No machines were used, just a supervisory staff of elections officials and a horde of volunteers. All voting locations would count each box of ballots twice, each time by a different person, and if the tallies weren't exact they'd go through the whole process again for that ballot box. This would continue until two separate individuals got the same count for the box.
Afterwards, all of the paper ballots would be boxed and stored in a secure location in case it became necessary to do a recount. And again, all recounts were done by box, twice, and any discrepancies meant starting over from scratch for that box.
This wasn't a terribly expensive way of doing things. The primary cost was in printing and mailing the ballots (for mail-ins). The elections sites themselves were run by volunteers, and the supervisory staff was already paid for. Fraud was rather difficult to pull off on the part of the volunteers and the entire process was 'open source'. Individual citizen groups could demand to have a representative sit in on the recounts, as could any political party that was running a candidate.
Why, exactly, are we dumping a system like this for Diebold machines? It makes no sense at all unless someone is specifically looking for a way to fuck up the elections in their favor, or in favor of whomever happens to be paying them off.
And don't tell me that this system can't be scaled; that's bullshit. The system I'm speaking of here was used on the city, county, and state level. If it can be done by one state, it can be scaled for any state, and it's the STATES who run the elections, not the federal government.
Max
My god carries a hammer. Your god died nailed to a tree. Any questions?