Slashdot Mirror
Diebold Insider Comments on Voting System Flaw
Call Me Black Cloud writes "A Diebold insider is blowing the whistle on the company's continued lack of concern about security holes in its voting software. The insider wrote to Brad Friedman, a somewhat shrill political blogger, claiming the company is instructing technicians to keep quiet about the security flaws. This is despite the vulnerability being listed on the US-CERT website for the last year. A Diebold company rep admits the software can be remotely accessed via modem, but states, "it's up to a jurisdiction whether they wish to use it or not...I don't know of any jurisdiction that does that." The insider disputes that, claiming several counties in Maryland made use of the feature in 2004." This in addition to the fact that Blackboxvoting already hacked the system using a chimp last year.
Comment removed based on user account deletion
The CEO of North Canton, Ohio-based Diebold, Inc., Walden O'Dell has been oft-quoted for his 2003 Republican fund-raiser promise to help "Ohio deliver its electoral votes to the president next year." O'Dell himself was a high-level contributor to the Bush/Cheney '04 campaign as well as many other Republican causes.
Is this not a conflict of interest?Bradley Holt
To the plank with the Diebold Scaliwags! Arr!
If brevity is the soul of wit, then how does one explain Twitter?
I'm not taking issue with the submitter because I hear the term applied to liberals alot -- but I wonder when the alternative of stubborn complacency and "going along to get along" became ideals in our democracy.
Because you don't get things fixed thinking like that.
Try not. Do or do not, there is no try.
-- Dr. Spock, stardate 2822-3.
I don't know what's worse: the frighteningly bizarre concept of a voting machine with no voter-verified paper trail, or the small group of people who defend this literally indefensible practice. It fills me with a sense of dread every time I hear another round of this story hitting the news, and it hasn't involved anyone going to jail yet.
Unfortunately, as geeks know better than journalists, there is no sane, moral, or legal reason for paperless touchscreen voting machines to even exist. Almost everyone who is knowledgable in this discipline gets it pretty quickly - because it's extremely obvious, and also because paper is integral to secure systems everywhere, from secure logging on printers in machine rooms to ATMs and even slot machines... You just don't store things like votes on non-user-verified, let alone rewriteable, media.
In fact, if I recall, the state of Nevada was a little while ago in the awkward position of having vastly superior standards enforced for gambling devices than they had for voting machines... although I think now they are one of many states that has put this craziness under some scrutiny...
Yet there really are a few people out there (I've met some on slashdot for instance) who argue to defend this practice anyway. These days, ignorance and stupidity is no longer funny. It's becoming terrifying.
If we lived in a sane country, the people who made these machines would be prosecuted, since their level of negligence certainly rises to the level of criminal even if they have no intent of their own to rig elections, and all of the politicians and bureaucrats who ordered, "evaluated," "tested," and approved these systems should follow not long after. We would know all this, prima-facie, even if Diebold hadn't had a pants-down security incident and exposed their internal emails to the world, showing us their gaffes in first-person detail. We would know even if direct results of their incompetence weren't widely documented
The simple, bedrock need for secure voting systems, and the absolutely impeccable engineering doctrines involving voter-verified paper, are almost universally accepted among credible experts. All explained many times before, better than I could anyway. It's inconceivable there is any debate at this point. Why would we have a voting machine that was deliberately made insecure?
The most credible argument I've ever heard (relatively speaking) is, "Who would cheat anyway? You're just being paranoid."
But you all know the answer to the question of who would cheat at election time: probably, the first person who thought they could get away with it.
Tired of Political Trolls? Opt Out!
"In my opinion Diebold's election system is one of the greatest threats our democracy has ever known, and the only way this will be exposed is with a Congressional investigation with subpoenas of not just Diebold officials but Diebold technicians."
Yes, I'd agree with that. But good luck with a congressional investigation, they probably won't even be able to get a real room to have meeting about it. Just like Downing Street. Karl Rove is a genius.
What butthole did the democrats have there heads up when let this scam be part of the 2004 election? They had 4 years! How you can have a company with the contract to build paperless voting machines being run by a loyalist to the incumbant party and not have the opposition do anything about it - IS RIDICULOUS!
I hope there is an upset in 2006, or it is going to be another 2 years of a radical Whitehouse running around unchecked, digging the US into deeper holes at every turn.
But really, were is the outrage? I mean this is your democracy?!
There's no proof offered, yet. I only skimmed the page, because it's in a crazy-blogger color scheme, but everything I saw seemed to be stuff seen on /. within the last year. Give us something new, something groundbreaking and (newly) newsworthy.
Can't. No paper trail.
The NSA: The only part of the US government that actually listens.
So much for the conspiracy theory.
why THE FUCK Diebold can make secure ATM machines but are such blithering idiots when it comes to securing their Voting Machines?
Putting on my tin foil hat, I don't think they are idiots at all. I think it was done on purpose. The bigger question is, why aren't WE doing more about this? The integrity of our democracy is at stake. How can shit like this be allowed to happen? How can we 'help' Iraq setup their new democracy when we are so utterly fucked up?
Yes, I'm mad. Mad at this happening, mad at this not getting more attention, mad at people who think I'm crazy for bringing it up. This is unacceptable.
Comment removed based on user account deletion
What recount? Predominately Democratic districts like those in inner city Cleveland and Columbus had too few polling places with people often forced to stand in line for six hours or more. An enormous number of people just couldn't vote at all because they didn't have the option of waiting that long. The sub/ex-urban areas had no lines at all - and are much more Republican. A recount won't do much good because the missing votes are those that never got to be cast to begin with. The media kept painting the long lines as a good sign of great participation and turnout - what it was was a breakdown of the voting system and a desaster that excluded anyone would couldn't afford to lose their job for taking six hours off to go vote or who couldn't afford to find a babysitter on such short notice to watch children too young to wait in line with their parent(s).
I know, I'm asking for a lot. I was told by a coworker that it's a stupid request. After all, if I have an electronic voting system, isn't that suppose to eliminate the need for paper?
Bullshit. I'm sorry, but no - voting is not about how to do it the cheapest and most convienient for the government employees. The John Hummel Voting Ranking System goes:
1. Accuracy
2. Speed/Efficiency
3. Cost
So with that, my dream for the Ultimate Voting System goes like this.
1. Person shows up at the voting center with their ID. They are authenticated (whether this be by picture, or some sort of card reader, not important). If they can not be authenticated, then they get a physical slip of paper to vote with with the mark "Verify ID" and a number. If the ID is later verified, then the vote is counted. If not, then it can be placed in the "not counted" bin. (Not destroyed until 60 months after the election - this is to prevent too many "Whoops - we couldn't authenticate anybody"!) Granted, this ties into the problem with the "secret ballot" idea, but if you can't authenticate the user before voting, this is the next best thing. I'm sure someone could suggest a better method.
2. Assuming that authencated == true, then they are pointed to the voting machine. Voting machine is simple enough - a touch screen for "pick your candidate" with a picture, name, etc. If you're voting on a bill, then you can push a "detail" button to have a copy of it show up for your reading pleasure. Let it be handicap enabled with enlargeable text, comfortable seats (no forcing people to stand) and adjustable screens so folks sitting in wheelchairs can still access the screen.
3. Upon finishing, you are presented with a table of all of your votes and results, and a message reading "Is this correct?" If you select "No", you can change anything, otherwise "yes" means it's all good.
4. When you select "yes", three things happens. The vote is recorded to a local write once ROM device with a unique ID. This ID and voting information is transferred via an encrypted link back to some central location, so election results can be monitored in real time. The third thing that happens is a piece of paper is printed out with this unique ID and the voting information plainly printed out in the same table format you just read, perhaps with a bar code encoding the same vote results for quick tabulation later. You then drop this piece of paper into the voting box. The unique identifier is not related to the voter - just to the vote, so you can't tie in who voted for what, only that "some authenticated person" voted for something, and the unique ID is what they voted for.
5. Votes are now instantly counted. Upon finishing, all of the ROM media is removed and forwarded to a separate voting office - say, a separate division of the government - for validating. If the central office and separate office validate results, then the election is good. Just for kicks, a random sampling of the paper ballots are removed and compared (using the unique identifier) to the votes. If there's a descrepancy, you can pick it out quickly.
6. ROM and paper is stored for 5 years, then thrown out (by then, it's too late anyway), and available for public access by media groups/indepdant analysis.
7. Said above system should be written with GNU software, with MD5 and SHA1 hashes of compiled code made using standard GCC - version agreed upon by government officials at a specific date. Code is locked well before election date, and a copy of source and compiled code used is stored on the same write once ROM system (CD's should be fine) so anyone can compared and complain if they need to.
Whatever happens, no "proprietary" voting code, no "oh, it's secret to protect you dumb little voters" code - open, clear, and simple to validate and completely open to access. Anything less is asking for abuse, and I don't trust either party in the US not to have less-then-honest individuals hoping the screw things in their favor.
Of course, this is just my opinion. I could be wrong.
52 Weeks, 52 Religions with John Hummel
Let's end the debate once and for all and lobby Consumer Reports to evaluate electronic voting machines. Following is a link to their feedback form.m erreports.cfg/php/enduser/ask.php?
http://custhelp.consumerreports.org/cgi-bin/consu
Abstinence is a government conspiracy. www.SafeSexZone.co
Yeah, Diebold would love a face transplant; it's a bit too late for them to save the current one.
You know the old computer saying:
"Garbage In / Garbage Out"
I'm not surprised that the Diebold model number of the voting machines last election were GIGO 5000s.
Saskboy's blog is good. 9 out of 10 dentists agree.
: *raises hand* I do. In a non-democratic state, you couldn't even make such accusations without having to fear imprisonment or death.
That kind of retaliation would happen only if you pose a real threat or they have nothing to lose by imprisoning/killing you. For the US, the mass media ensures to show criticisms of the government and big corporations (which is becoming more and more the same thing), so you are not a real threat; on the other hand if government acts on you, they may wake some people up who have the illusion of democracy, so they do not. I gues when they really need to act they label you as a terrorist first. There are already many new restrictions on free speech. There are designated free speech zones during meetings etc. in the US! What the fuck does that mean?
ato
Support -
http://openvoting.org/
Not only open voting, but open source for the firmware that takes your vote.
They have been doing good things in California.
With an ATM machine, nobody has a reason to want to alter the results, except the person using it. The bank wants the ATM to be accurate. Ripping off consumers at the ATM would be supremely stupid since the amount is the proverbial fart in the windstorm, and they'd get caught and shut down.
So ATMs actually have essentially.no protection against the bank being fraudlant They contact the bank (via an encrypted channel, using IBM crypto cards) and ask how much money you have. If you have enough, they dispense it. The bank could easily lie to them, they'd never know. But that's not in the bank's intrest to do so, and banks are watched by eachother, the feds, etc, etc.
In essance, with an ATM, you can trust the operator.
Voting machines are different. You CANNOT trust the operator. It may well be in their intrest to alter the voting records. Perhaps they have been bought off, perhaps they have very strong feelings towards a party, etc. Point is you have to assume that the person who operates the machine ants to tamper with it.
Well that's a whole different problem. Now you have to design a system that is capable of not only keeping users (who only have access to a limited UI) from messing with it, but operators as well (who have access to the internals). That's a much tougher design spec.
If you give me a computer and tell me someone will only have screen, keyboard and mouse access, and ask me to secure it, I'll whip something up in a couple days and pretty confidently say there's nothing they can do to break in. If you tell me they'll have physical hardware access, I'm sorry, I'm afraid that's out of my league.
What's really upsetting is that so many people think all of these things are just coincedences or accidents, or are do to laziness. All of the information about Diebold's lack of security and the ease to which their machines could be tampered with was available to the entire world before the election - as well as the insane conflicts of interest involving the ownership of the company and their promises to deliver certain states to Bush. This, along with all of the reports (by credible sources including city and state governmental workers) of misconduct in Ohio and still ...barely a peep.
I mean, really, i'm not a democrat or a republican - but damn - I am sick of the US being run by criminals and corporations (of which many are run by or for the benefit of criminals) - and when I say criminals - these people are criminals - white collar or otherwise. People think Enron was the eception rather than the rule - well, sorry, that's not quite the case - it's more prevalent than that. I'm not saying all corporations are evil or anything like that...I'm just sick of people being in denial about how corrupt America business and politics and the incestuous relationship between them is. Apathy reigns.
I know the answer, but I can't help asking: Don't people know their history?
When business and government collude to this degree where business basically calls the shots with profit above all else it doesn't end well. There is a word for it actually.
Diebold needs to be put in check - seriously. Evoting with no paper trail or verification system is absurb - it pratically guarantees misconduct on some level.
In a non-democratic state, you couldn't even make such accusations without having to fear imprisonment or death.
For the love of all that is good and holy, will you PLEASE stop confusing concepts like that. "Democratic" is not the anti-thesis of "opressive", etc. It is for the purposes of proganda, but dammit, stop.
Not to mention the complete illogical nature of your statement "In a non-democratic state you couldn't even make the accusation that the state is not democratic". Come on!
If people didn't go all wide-eyed and emotional everytime a politician says "freedom" t them, then you might be able to actually have a functionning democracy, and not a bunch of sheep voting for who they're told to vote.
You can't take the sky from me...
There is no evidence because there is NO paper trail...
And this is why Diebold must go. I don't for a minute thnk election fraud in 2004 was any more widespread than any other presidential election, but can anyone *prove* it? OK, admittedly, even with a paper trail you can't prove there was no fraud, as ballot boxes can be swapped out in transit and such, but in practice this can't be done on a large scale without it becoming obvious due to screwups by the fraudsters.
With no paper trail, someone committing vote can have a huge impact with a very small chance of being caughtin the act, and no chance at all of finding the fraud afterwards. We absolutely need a system where intense scrutiny after the fact is likely to turn up evidence of the crime. This will be a much greater deterrant, but more importantly will give us a much higher confidence in the system.
Computer *aided* voting is a great idea. Have a touch-screen with pictues to help roor readers, have adjustable finst to help the vision-impaired, have an interface that allows the blind to vote in private, print a ballot that is guarenteed to be properly marked. But the result needs to be a marked ballot, not a set of bits. A completely seperate process can automate counting the ballots -computer-printed optically-scanned ballots work extremely well, with no sacrifice of a paper trail.
Socialism: a lie told by totalitarians and believed by fools.
Then, within that one state you just have to swing enough votes to tip the scales.
That means flipping half the difference. Using a made-up example, if the state of Bushsylvania has 10 million likely voters and polls show they'll vote 49% D and 47% R, you have to reverse just over 1% of the votes to push it to the R column. That's only 100,000 fraudulent vote reversals, or 110,000 if you include a 10% safety factor. Hell, it wouldn't even take much money to outright BUY that many votes, much less rig the voting machines. (Note that "ballot box stuffing" is less efficient than "flipping" -- to win Bushsylvania, for example, would require 220,000 phony ballots to be added, which is a much bigger task.)
And you might not even have to spend that much. If there are (say) four undecided states with the power to affect the outcome, go to the two with the narrowest margins, and twiddle theirs.
Remember to limit your exposure as much as possible. Restrict tampering to as few districts as you can. Prefer those with the highest numbers of voters, but with historically low turnouts. (Poverty stricken areas are ideal for this kind of tampering.) You don't even have to make every tampered-with district put in "wins" for your candidate -- you just have to reverse a total of 110,000 votes.
You want to keep it local as much as possible. Run it like a terrorist cell -- tiny groups of insiders who each know very little about the overall plan or about other people. Choose your fall-guys in advance, maybe plant some evidence 'in reserve'; in case someone turns coat you can blame a few overzealous campaign workers, and cut them loose before they start reporting further up the chain.
John
Maybe you forgot about Florida's Kathleen Harris. Harris hired a private company--Voter Identification Services--to purge Florida roles of all the "darkies" because of their tendancy to vote for Democrats. VIS purged some 57,000 voters from the roles claiming they were ex-felons [more credible sources available--search left to reader as an exercise] and, therefore, ineligible to vote. Nevermind that their accuracy rate was a dismal 5% because their system passed judgment on name alone. If gross incompetence by the head of Florida Bush/Chenney isn't fraud in your book, I wonder what you require as proof.
signature pending slashdot approval
Your example was an amazingly accurate rendition of how the Democratic party steals elections.
The bottom line is that both parties will do anything they can to either get or stay in power. It's shameful on both sides. Anyone claiming that cheating is only occurring on one side or the other is a partisan hack.
(similar to how anyone that claims their party is 100% moral while the other is 0% moral is a partisan hack)
I'm a big tall mofo.
Actually that is why it appeared that so many people voted for John Kerry, I mean cmon, I know that alot of people said they were going to vote for, but when push came shove, no one in their right mind voted for him.
I'm a real Republican (not a neocon) who voted for Kerry. Being a choice of lesser evils, it wasn't an easy decision, but I believe events have shown that I was in my right mind. If we get Hillary in '08, it will be due to Bush in '04.