Slashdot Mirror


Diebold Insider Comments on Voting System Flaw

Call Me Black Cloud writes "A Diebold insider is blowing the whistle on the company's continued lack of concern about security holes in its voting software. The insider wrote to Brad Friedman, a somewhat shrill political blogger, claiming the company is instructing technicians to keep quiet about the security flaws. This is despite the vulnerability being listed on the US-CERT website for the last year. A Diebold company rep admits the software can be remotely accessed via modem, but states, "it's up to a jurisdiction whether they wish to use it or not...I don't know of any jurisdiction that does that." The insider disputes that, claiming several counties in Maryland made use of the feature in 2004." This in addition to the fact that Blackboxvoting already hacked the system using a chimp last year.

32 of 466 comments (clear)

  1. Scary by mysqlrocks · · Score: 5, Insightful

    The CEO of North Canton, Ohio-based Diebold, Inc., Walden O'Dell has been oft-quoted for his 2003 Republican fund-raiser promise to help "Ohio deliver its electoral votes to the president next year." O'Dell himself was a high-level contributor to the Bush/Cheney '04 campaign as well as many other Republican causes.

    Is this not a conflict of interest?
    1. Re:Scary by garcia · · Score: 4, Insightful

      Is this not a conflict of interest?

      No, but it's fucking shady as hell -- that's for sure. What's even worse is that they know about flaws and not only do THEY not care but both the government (duh) and the PUBLIC don't care either.

      We have hashed out what needs to be done to make this a secure system and one is to allow all the code and hardware to be opened to the public that will be using it.

      Of course that will never happen and I will continue to use paper ballots like every other sane American should.

    2. Re:Scary by MindStalker · · Score: 4, Insightful

      Well truthfully the states don't even have to run an election they can just let their legislature pick the president. Of course almost every state has state consititions forbidding this and requiring an election. Just saying that presidential voting isn't exactly as federally controlled as you would hope. The federal government does have voting requirements, most of these are enforced simply through purse strings though.

    3. Re:Scary by Jherek+Carnelian · · Score: 4, Insightful

      Vote tampering is almost an institution in the US. From the very dawn of America

      Never said it wasn't - just that electronic tampering has the potential to be even easier to pull off than the physical kind. On the other hand - well designed and implemented electronic voting systems can greatly assist in preventing the physical tampering you are talking about.

      It is basically a situation where if you implement electronic balloting poorly, then you greately increase the risks compared to paper balloting. But implement it robustly and you greatly decrease the risks instead.

      So far, we've had way too much of the poor implementations.

    4. Re:Scary by Anonymous Coward · · Score: 5, Insightful

      One could postulate that tampering with computer ballots leave much more of a trail than traditional tampering.

      One could postulate that the sun will rise in the East. If you postulated that "that tampering with computer ballots could leave much more of a trail than traditional tampering.", you would have an argument (a weak one but something). The facts are:

      1) At least one existing system (the Diebold system in the FA) is not only not tamper evident, it appears to have features specifically designed to conceal tampering (a timestamp mod utility, separate DBs and functionality for voting and auditing and no tx sequencing spring to mind).

      2) Physical tampering does not scale. In order to affect the presidential outcome, one would need to have a number of people in each of 10000+ locations involved. A single skilled individual can achieve the same effect with electronic voting.

      3) Virtually all methods of tampering with physical ballots still work on electronic systems! In light of the fact that in the last election an apparently malfunctioning balloting machine was removed to a private warehouse and returned to service while the polls were open, I'd like to see you justify your implication that somehow e- machines are harder to tamper with than plain ballot boxes.

      To give a real world example, there is very strong statistical evidence that Ohio's results were tampered with and in a way that could not be done with physical ballots.

  2. I have a question. by Sheetrock · · Score: 5, Insightful
    Why are the handful of people who identify problems and try to get them solved "shrill"?

    I'm not taking issue with the submitter because I hear the term applied to liberals alot -- but I wonder when the alternative of stubborn complacency and "going along to get along" became ideals in our democracy.

    Because you don't get things fixed thinking like that.

    --

    Try not. Do or do not, there is no try.
    -- Dr. Spock, stardate 2822-3.




    1. Re:I have a question. by Red+Flayer · · Score: 4, Insightful

      "Why are the handful of people who identify problems and try to get them solved "shrill"? "

      Because of the method and tone of the discussion. Shrill, in this usage, means "betraying some strong emotion or attitude in an exaggerated manner." Obviously, shrill is generally a subjective descriptor.

      Many pundits and bloggers use a shrill manner to draw attention to themselves and their arguments -- Limbaugh, Coulter, Franken, etc.

      The reason being shrill is looked down upon by a lot of serious politicos is that the message can be overwhelmed by the tone -- if the argument needs to be shrill to get attention, how valid can the argument be?

      "Because you don't get things fixed thinking like that." [re: 'going along to get along']

      Although shrillness can draw attention to an issue, it won't get anything solved either. The ideal is that we can all pay attention to issues and work on resolution, without resorting to exaggeration.

      --
      "Trolls they were, but filled with the evil will of their master: a fell race..." -- J.R.R. Tolkien on Olog-hai
    2. Re:I have a question. by Blue+Neon+Head · · Score: 4, Insightful

      The reason being shrill is looked down upon by a lot of serious politicos is that the message can be overwhelmed by the tone -- if the argument needs to be shrill to get attention, how valid can the argument be?

      You say this as if arguments or ideas gain attention in our society on the merits of their content alone. This is plainly absurd, as anyone with any familiarity with politics, media, or marketing knows far too well. Sometimes screaming is the only way to be heard.

    3. Re:I have a question. by Call+Me+Black+Cloud · · Score: 4, Insightful


      Hi. I'm the submitter. The reason I wrote "shrill" is because when I read through his site the image came to mind of my wife berating me. If that's not shrill, I don't know what is (and I can safely write this non-anonymously because she's probably never even heard of slashdot.)

      I wasn't referencing his point of view or that he isn't "going along to get along." I applaud his efforts at bringing this issue to light and I'm very happy the article was accepted for the front page. I'd hate for this to fall off the radar, especially since I live in MD. It's just that I found the tone of his writing a bit grating...

  3. Depressing by Concern · · Score: 5, Insightful

    I don't know what's worse: the frighteningly bizarre concept of a voting machine with no voter-verified paper trail, or the small group of people who defend this literally indefensible practice. It fills me with a sense of dread every time I hear another round of this story hitting the news, and it hasn't involved anyone going to jail yet.

    Unfortunately, as geeks know better than journalists, there is no sane, moral, or legal reason for paperless touchscreen voting machines to even exist. Almost everyone who is knowledgable in this discipline gets it pretty quickly - because it's extremely obvious, and also because paper is integral to secure systems everywhere, from secure logging on printers in machine rooms to ATMs and even slot machines... You just don't store things like votes on non-user-verified, let alone rewriteable, media.

    In fact, if I recall, the state of Nevada was a little while ago in the awkward position of having vastly superior standards enforced for gambling devices than they had for voting machines... although I think now they are one of many states that has put this craziness under some scrutiny...

    Yet there really are a few people out there (I've met some on slashdot for instance) who argue to defend this practice anyway. These days, ignorance and stupidity is no longer funny. It's becoming terrifying.

    If we lived in a sane country, the people who made these machines would be prosecuted, since their level of negligence certainly rises to the level of criminal even if they have no intent of their own to rig elections, and all of the politicians and bureaucrats who ordered, "evaluated," "tested," and approved these systems should follow not long after. We would know all this, prima-facie, even if Diebold hadn't had a pants-down security incident and exposed their internal emails to the world, showing us their gaffes in first-person detail. We would know even if direct results of their incompetence weren't widely documented

    The simple, bedrock need for secure voting systems, and the absolutely impeccable engineering doctrines involving voter-verified paper, are almost universally accepted among credible experts. All explained many times before, better than I could anyway. It's inconceivable there is any debate at this point. Why would we have a voting machine that was deliberately made insecure?

    The most credible argument I've ever heard (relatively speaking) is, "Who would cheat anyway? You're just being paranoid."

    But you all know the answer to the question of who would cheat at election time: probably, the first person who thought they could get away with it.

    --
    Tired of Political Trolls? Opt Out!
    1. Re:Depressing by garcia · · Score: 5, Insightful

      The most credible argument I've ever heard (relatively speaking) is, "Who would cheat anyway? You're just being paranoid."

      It's very sad that this is such a commonly repeated phrase. I really want to know why people think it's *so* horrifying to be labelled "paranoid" -- especially when it comes to the state of our nation.

      I realize that paranoia is looked down upon, especially in a time where everyone is more interested in the voting results of Survivor, American Idol, or (ironically) Big Brother, but it saddens me deeply when I am looked down upon for being behind our country's values.

      PARANOIA IS WHAT WE NEED! Especially when people just have NO DESIRE to understand the goings on behind political power.

      "Seacrest out!"

    2. Re:Depressing by L.+VeGas · · Score: 4, Insightful

      In fact, if I recall, the state of Nevada was a little while ago in the awkward position of having vastly superior standards enforced for gambling devices than they had for voting machines

      The quality control on gaming machines is crazy high. You know why? If there was any faintest whisper that the gaming corporations were not playing a fair game with the suckers, I mean gamblers, people would play less.

      But voting? Nevada cares far more about the bottom line than it does about the politician of the week.

    3. Re:Depressing by garcia · · Score: 4, Insightful

      You'll never be able to go back see your vote and insure it was counted correctly if at all.

      You take your paper ballot, after you touched the screen, and put it in a box. Unless ALL vote counters from ALL parties are compromised (a definite possibility) then you have a backup way to manually count the votes.

      When you JUST have a machine that's storing the votes (which are easily modifiable and untraceable) there's no way to manually count the votes that the VOTER verified were the same.

      That's how.

    4. Re:Depressing by ShadeARG · · Score: 5, Insightful

      Questioning the integrity of your democratic process is the most patriotic thing you can do. If you don't (or can't) question it, then your system is fatally broken and bad things will happen.

      Perhaps one of the scariest moments imagineable is when paranoia and common sense intersect. That's when you know something obviously isn't right, and there's nothing you can do to reverse the situation since any notion of your dissent will automatically label you paranoid.

      The sad thing is that all of this should be redundant, but only a small few realize.

  4. Where is the outrage? by _am99_ · · Score: 5, Insightful

    "In my opinion Diebold's election system is one of the greatest threats our democracy has ever known, and the only way this will be exposed is with a Congressional investigation with subpoenas of not just Diebold officials but Diebold technicians."

    Yes, I'd agree with that. But good luck with a congressional investigation, they probably won't even be able to get a real room to have meeting about it. Just like Downing Street. Karl Rove is a genius.

    What butthole did the democrats have there heads up when let this scam be part of the 2004 election? They had 4 years! How you can have a company with the contract to build paperless voting machines being run by a loyalist to the incumbant party and not have the opposition do anything about it - IS RIDICULOUS!

    I hope there is an upset in 2006, or it is going to be another 2 years of a radical Whitehouse running around unchecked, digging the US into deeper holes at every turn.

    But really, were is the outrage? I mean this is your democracy?!

    1. Re:Where is the outrage? by Pxtl · · Score: 4, Insightful

      You don't understand. Left wing organisations aren't allowed to be outraged - when they get loud, they become shrill whiners, and laughed at. You get things like the crybaby-seal for the Democrats, or the "Michael Moore Is Fat" meme. Only equal-time-giving responsible centrists are allowed to discuss issues on the left.

      Meanwhile, right-wing organisations are oppressed by the liberal media monopoly and must struggle to get their messages out. After all, white folks are oppressed by affirmative action and political correctness, Christians are oppressed by the secular school system and the activist judges, and the right-wingers are oppressed by the liberal media. As such, it's only appropriate that they can be voluminous and angry.

      So of course, any outrage from the left wing is absolutlely preposterous. Don't suggest something so insultingly unamerican.

    2. Re:Where is the outrage? by kfg · · Score: 4, Insightful

      As someone who is obviously in sympathy with the left you are not taking into account that all they do is complain about the directions America is taking, which is treasonous America bashing.

      Whereas those on the right spend all their time complaining about the directions America is taking, which is proud patriotism.

      See the difference?

      KFG

  5. Are you sure it's an insider? by artifex2004 · · Score: 4, Insightful

    There's no proof offered, yet. I only skimmed the page, because it's in a crazy-blogger color scheme, but everything I saw seemed to be stuff seen on /. within the last year. Give us something new, something groundbreaking and (newly) newsworthy.

  6. Re:Chimp by It+doesn't+come+easy · · Score: 4, Insightful

    Can't. No paper trail.

    --
    The NSA: The only part of the US government that actually listens.
  7. Kerry Won Maryland by 9% by Black-Man · · Score: 4, Insightful

    So much for the conspiracy theory.

  8. Somebody please tell me by instantkarma1 · · Score: 5, Insightful

    why THE FUCK Diebold can make secure ATM machines but are such blithering idiots when it comes to securing their Voting Machines?

    Putting on my tin foil hat, I don't think they are idiots at all. I think it was done on purpose. The bigger question is, why aren't WE doing more about this? The integrity of our democracy is at stake. How can shit like this be allowed to happen? How can we 'help' Iraq setup their new democracy when we are so utterly fucked up?

    Yes, I'm mad. Mad at this happening, mad at this not getting more attention, mad at people who think I'm crazy for bringing it up. This is unacceptable.

    1. Re:Somebody please tell me by keesh · · Score: 5, Insightful

      What makes you think Diebold can make secure ATMs?

  9. Re:Chimp by hungrygrue · · Score: 5, Insightful

    What recount? Predominately Democratic districts like those in inner city Cleveland and Columbus had too few polling places with people often forced to stand in line for six hours or more. An enormous number of people just couldn't vote at all because they didn't have the option of waiting that long. The sub/ex-urban areas had no lines at all - and are much more Republican. A recount won't do much good because the missing votes are those that never got to be cast to begin with. The media kept painting the long lines as a good sign of great participation and turnout - what it was was a breakdown of the voting system and a desaster that excluded anyone would couldn't afford to lose their job for taking six hours off to go vote or who couldn't afford to find a babysitter on such short notice to watch children too young to wait in line with their parent(s).

  10. Re:Two words by agurkan · · Score: 4, Insightful

    :: Who thinks USA has anything to do with democracy?

    : *raises hand* I do. In a non-democratic state, you couldn't even make such accusations without having to fear imprisonment or death.

    That kind of retaliation would happen only if you pose a real threat or they have nothing to lose by imprisoning/killing you. For the US, the mass media ensures to show criticisms of the government and big corporations (which is becoming more and more the same thing), so you are not a real threat; on the other hand if government acts on you, they may wake some people up who have the illusion of democracy, so they do not. I gues when they really need to act they label you as a terrorist first. There are already many new restrictions on free speech. There are designated free speech zones during meetings etc. in the US! What the fuck does that mean?

    --
    ato
  11. Re:I want my fucking piece of paper by veg_all · · Score: 4, Insightful

    I think that Georgia is attempting to require an ID for voting and it is being fought tooth and nail by various public interest groups (or perhaps "public interest" groups).

    Georgia is attemting to pass a law that requires voters to have an official state ID, namely a driver's license or, barring that, a surrogate state ID available for a fee. People are opposed to it because the effect (if not the intent, but really the intent too) is to disenfranchise the kinds of people who don't have driver's licenses and for whom buying a replacement ID is an onerous burden, namely the poor, which is to say to a great extent, the black residents of the state. In the 19th century this was called a Poll Tax and it served exactly the same purpose, namely to disenfranchise minorities. It was ruled unconstitutional then and hopefully will be again if Georgia insists upn promulgating this 21st century version.

    --
    grammar-lesson free since 1999. (rescinded - 2005)
  12. Because it's a very different kind of security by Sycraft-fu · · Score: 4, Insightful

    With an ATM machine, nobody has a reason to want to alter the results, except the person using it. The bank wants the ATM to be accurate. Ripping off consumers at the ATM would be supremely stupid since the amount is the proverbial fart in the windstorm, and they'd get caught and shut down.

    So ATMs actually have essentially.no protection against the bank being fraudlant They contact the bank (via an encrypted channel, using IBM crypto cards) and ask how much money you have. If you have enough, they dispense it. The bank could easily lie to them, they'd never know. But that's not in the bank's intrest to do so, and banks are watched by eachother, the feds, etc, etc.

    In essance, with an ATM, you can trust the operator.

    Voting machines are different. You CANNOT trust the operator. It may well be in their intrest to alter the voting records. Perhaps they have been bought off, perhaps they have very strong feelings towards a party, etc. Point is you have to assume that the person who operates the machine ants to tamper with it.

    Well that's a whole different problem. Now you have to design a system that is capable of not only keeping users (who only have access to a limited UI) from messing with it, but operators as well (who have access to the internals). That's a much tougher design spec.

    If you give me a computer and tell me someone will only have screen, keyboard and mouse access, and ask me to secure it, I'll whip something up in a couple days and pretty confidently say there's nothing they can do to break in. If you tell me they'll have physical hardware access, I'm sorry, I'm afraid that's out of my league.

  13. unfortunately people could care less by moxley · · Score: 5, Insightful

    What's really upsetting is that so many people think all of these things are just coincedences or accidents, or are do to laziness. All of the information about Diebold's lack of security and the ease to which their machines could be tampered with was available to the entire world before the election - as well as the insane conflicts of interest involving the ownership of the company and their promises to deliver certain states to Bush. This, along with all of the reports (by credible sources including city and state governmental workers) of misconduct in Ohio and still ...barely a peep. I mean, really, i'm not a democrat or a republican - but damn - I am sick of the US being run by criminals and corporations (of which many are run by or for the benefit of criminals) - and when I say criminals - these people are criminals - white collar or otherwise. People think Enron was the eception rather than the rule - well, sorry, that's not quite the case - it's more prevalent than that. I'm not saying all corporations are evil or anything like that...I'm just sick of people being in denial about how corrupt America business and politics and the incestuous relationship between them is. Apathy reigns. I know the answer, but I can't help asking: Don't people know their history? When business and government collude to this degree where business basically calls the shots with profit above all else it doesn't end well. There is a word for it actually. Diebold needs to be put in check - seriously. Evoting with no paper trail or verification system is absurb - it pratically guarantees misconduct on some level.

  14. Re:Two words by Scrameustache · · Score: 4, Insightful

    In a non-democratic state, you couldn't even make such accusations without having to fear imprisonment or death.

    For the love of all that is good and holy, will you PLEASE stop confusing concepts like that. "Democratic" is not the anti-thesis of "opressive", etc. It is for the purposes of proganda, but dammit, stop.

    Not to mention the complete illogical nature of your statement "In a non-democratic state you couldn't even make the accusation that the state is not democratic". Come on!

    If people didn't go all wide-eyed and emotional everytime a politician says "freedom" t them, then you might be able to actually have a functionning democracy, and not a bunch of sheep voting for who they're told to vote.

    --

    You can't take the sky from me...

  15. Re:Two words by lgw · · Score: 5, Insightful

    There is no evidence because there is NO paper trail...

    And this is why Diebold must go. I don't for a minute thnk election fraud in 2004 was any more widespread than any other presidential election, but can anyone *prove* it? OK, admittedly, even with a paper trail you can't prove there was no fraud, as ballot boxes can be swapped out in transit and such, but in practice this can't be done on a large scale without it becoming obvious due to screwups by the fraudsters.

    With no paper trail, someone committing vote can have a huge impact with a very small chance of being caughtin the act, and no chance at all of finding the fraud afterwards. We absolutely need a system where intense scrutiny after the fact is likely to turn up evidence of the crime. This will be a much greater deterrant, but more importantly will give us a much higher confidence in the system.

    Computer *aided* voting is a great idea. Have a touch-screen with pictues to help roor readers, have adjustable finst to help the vision-impaired, have an interface that allows the blind to vote in private, print a ballot that is guarenteed to be properly marked. But the result needs to be a marked ballot, not a set of bits. A completely seperate process can automate counting the ballots -computer-printed optically-scanned ballots work extremely well, with no sacrifice of a paper trail.

    --
    Socialism: a lie told by totalitarians and believed by fools.
  16. Worse than scary by plover · · Score: 5, Insightful
    Thanks to the electoral college system, all it takes is one state to cheat. As long as it's the right state.

    Then, within that one state you just have to swing enough votes to tip the scales.

    That means flipping half the difference. Using a made-up example, if the state of Bushsylvania has 10 million likely voters and polls show they'll vote 49% D and 47% R, you have to reverse just over 1% of the votes to push it to the R column. That's only 100,000 fraudulent vote reversals, or 110,000 if you include a 10% safety factor. Hell, it wouldn't even take much money to outright BUY that many votes, much less rig the voting machines. (Note that "ballot box stuffing" is less efficient than "flipping" -- to win Bushsylvania, for example, would require 220,000 phony ballots to be added, which is a much bigger task.)

    And you might not even have to spend that much. If there are (say) four undecided states with the power to affect the outcome, go to the two with the narrowest margins, and twiddle theirs.

    Remember to limit your exposure as much as possible. Restrict tampering to as few districts as you can. Prefer those with the highest numbers of voters, but with historically low turnouts. (Poverty stricken areas are ideal for this kind of tampering.) You don't even have to make every tampered-with district put in "wins" for your candidate -- you just have to reverse a total of 110,000 votes.

    You want to keep it local as much as possible. Run it like a terrorist cell -- tiny groups of insiders who each know very little about the overall plan or about other people. Choose your fall-guys in advance, maybe plant some evidence 'in reserve'; in case someone turns coat you can blame a few overzealous campaign workers, and cut them loose before they start reporting further up the chain.

    --
    John
  17. Only problem is you named the wrong party by bigtallmofo · · Score: 4, Insightful

    Your example was an amazingly accurate rendition of how the Democratic party steals elections.

    The bottom line is that both parties will do anything they can to either get or stay in power. It's shameful on both sides. Anyone claiming that cheating is only occurring on one side or the other is a partisan hack.

    (similar to how anyone that claims their party is 100% moral while the other is 0% moral is a partisan hack)

    --
    I'm a big tall mofo.
  18. Re:It had to be said. by vsprintf · · Score: 4, Insightful

    Actually that is why it appeared that so many people voted for John Kerry, I mean cmon, I know that alot of people said they were going to vote for, but when push came shove, no one in their right mind voted for him.

    I'm a real Republican (not a neocon) who voted for Kerry. Being a choice of lesser evils, it wasn't an easy decision, but I believe events have shown that I was in my right mind. If we get Hillary in '08, it will be due to Bush in '04.