Slashdot Mirror


Diebold Threatens Wary Voting Clerk

An anonymous reader writes "From the Salt Lake Tribune: a wary county clerk called in BlackBoxVoting.org to test the integrity of Diebold voting fraud machines, part of a recent $27 million statewide purchase (to make sure that only the "Right" candidates win). Diebold goon says machines are now jinxed and it may cost up to $40,000 to fly in a company witch-doctor to make sure there were no warranty violations. Since EVERY SINGLE VOTER who uses these machines is a potential hacker looking to alter election results, why is Diebold so concerned? "

30 of 632 comments (clear)

  1. Huh? by bradgoodman · · Score: 5, Insightful

    Is it me - or did that post make no sense...

    1. Re:Huh? by eln · · Score: 5, Funny

      I think need to editorialize in the form of a righteously indignant rant overtook the poster and short-circuited his brain.

      Next time, maybe he should try just pasting the first paragraph of the article like everyone else does.

    2. Re:Huh? by EvilEddie · · Score: 4, Insightful

      It made sense.....it was just incredibly biased.....even for slashdot.

    3. Re:Huh? by 91degrees · · Score: 4, Funny
      No. It's written in a peculiar dialect. Let me translate.
      Diebold has sold voting machines to Utah. Diebold is evil. They want to bully a poor innocent election clerk. Anything they do is eeeevil and their only aim in life is to subjugate democracy so that the evil Republicans win. They want to take away our democracy!!!11!!! The CIA is SPYING on us. And the president is a LIZARD!! A LIZZZARD I tell YoU. HE's frOm anOTHeR diMesSsniOPn and Thjhey're TAking away My Brain.
      Hope that clears it up for you.
  2. obvious problem here by John+Harrison · · Score: 4, Insightful

    If someone looking at the machines causes them to be compromised then how on earth can you put them in voting booths when hundreds of people will have physical access to them in a private setting? If you depend on completely restricting access to the machines then you've already lost, haven't you? I applaud the clerk for taking this stand. The very idea that the machines can't be inspected by a third party shows just how fragile such systems are. If they were truely secure it wouldn't matter who looked at them or how.

    1. Re:obvious problem here by djmurdoch · · Score: 4, Interesting

      Presumably the worry is that the degree of access given to the Black Box Voting inspectors is greater than a voter would have. Did they spend several hours taking the machine apart? Did they put it back together properly? A clerk might have noticed this happening on voting day.

      Of course, this raises the question: if the machine could be compromised in a few hours of hacking, are all the other machines stored securely enough that this couldn't have happened to them, too?

    2. Re:obvious problem here by rossifer · · Score: 5, Insightful
      The very idea that the machines can't be inspected by a third party shows just how fragile such systems are.

      In my opinion, at least as important is the belief that the proper group to see if the machines are compromised is the manufacturer.

      "We've decided we are going have Diebold come and go through these machines and see if they are compromised," [Comissioner Ira Hatch] said

      If the machines can't be verified as uncompromised on voting day by an election staffer at a voting location multiple times throughout the day, that's a huge problem. For the voting commission to accept Diebold's line that "That's the way it is." is simply unconscionable.

      Slot machines in Nevada can be checked against any number of parameters to make sure that 1) hardware has not been added or replaced, 2) the software has not been altered (from the registered version on file with the NGC) and 3) the settings for the software match the casino's payout statements. The casino can do these checks, the NGC can do these checks, interested public parties can do these checks (with the cooperation of either the casino or the NGC).

      Shouldn't we expect at least as much from the recordkeepers of democracy as we expect from a gambling house?

      Regards,
      Ross
    3. Re:obvious problem here by Jerf · · Score: 4, Insightful

      Presumably the worry is that the degree of access given to the Black Box Voting inspectors is greater than a voter would have. Did they spend several hours taking the machine apart? Did they put it back together properly? A clerk might have noticed this happening on voting day.

      But they should be given that much access. An attacker is unlikely to just be "A Voter". These sorts of things are often, if not usually, inside jobs. An attacker should be assumed to have volunteered to manage the vote (which I gather is easy to do since few people want to do it) and should be assumed to be able to spend hours with a machine, probably in the comfort of their own home, and with access to any number of helpful resources, including the full resources of the local political party apparatus or the mafia. That last one's no joke, either.

      I'm not very worried about "A Voter", I'm worried about the entire system.

      In Diebold's defense, any machine handed over to an investigator should not be trusted again, for the very same reasons. However, Diebold should allow any customer to randomly select a voting system to subject to any arbitrary analysis, and replace it at no (extra) charge.

  3. At least you're not showing an bias. by hal2814 · · Score: 4, Insightful

    Witch doctors? Jinxes? I read the entire linked article and didn't see any of that. What I did see was that Diebold wants to make sure the machines still work after a 3rd party possibly tinkered with them. I'd certainly be concerned if I sent a machine out into the wild, a 3rd party took a look at it, and now it may not be functioning properly. Diebold may be a little over the top here, but their concern is certainly warranted.

    1. Re:At least you're not showing an bias. by hal2814 · · Score: 5, Insightful

      No, what I'm saying is that I left the machine with a voting official who has some sort of administrative access to the machine. That administrator gave a third party company with no official material on the inner workings of the machine that administrator access to run some unknown tests on the machine and now they're claiming the machine may be broken dur to a memory error. I'd certainly be suspicious of what that 3rd party did to the machine. However, unlike Diebold, I would probably approach that third party directly to ask them what tests they've run and even provide them with an environment where they could reproduce their testing procedure before I went crying to the press about it.

  4. What I would like to know... by parasonic · · Score: 5, Interesting

    Why does Diebold design these machines in such a way that they *CAN* be hacked? I think that involving an Operating System and software in the design of such a machine is a critical error. As a computer engineer, I realize that overcomplicating things can lead to errors. DSP's can make hardware extremely cheap, but there are places where analog circuits are cheaper and more realiable! Why hasn't Diebold designed a hardwired electronic circuit or a mechanical system with failsafes such that the machine can't be hacked, and the wrong candidate will not be selected if the machine fails? There are so many places where their current design can and will go wrong. I believe that it's time for these loonies (or preferrably someone else who has more sense) to come up with a more rudimentary and failsafe design!

    1. Re:What I would like to know... by swillden · · Score: 4, Insightful

      Diebold shouldn't be worried about voters. They should be worried about volunteers who have access to the system. In that case, it's just as trivial for one of the volunteers to hack the system, and also print out fake paper trails as well.

      No, the old ways are the best ways here, and they're adequate. A locked metal box with a slot in the top, where voters drop their ballots under the watchful eyes of multiple volunteers who are not only dedicated to the integrity of the process, but represent different political parties as well, is almost foolproof. In my area, when the polls close, the volunteers (all four of them) seal the box with tamper-evident tape and then sign their names over it. Then the box is transported by guards, accompanied by party reps and stored securely until the counting.

      You don't want a paper trail. You want an auditable system. Your instincts tell you that paper is auditable. I don't agree.

      I'm a professional security architect; I design and build high-security systems for a living, including designing and implement cryptographic protocols for all sorts of high-security systems. Regardless of what my instincts may or may not tell me, my experience and expertise tells me that bits are not trustworthy. I know just how hard it is to build an electronic system that is truly tight. All electronic security must build, in theory, on some known-good starting point, but with an election system there really isn't any such place to begin.

      Actually, there is almost never any such place to begin. The real world doesn't provide those sorts of certainties. In security system design the way we address that issue is by spreading the risk; ensuring that the only way the system could be compromised is through the collusion of multiple parties who have good reasons not to collude. This applies to the designers of the system as well as its owners, operators and users.

      Whether with paper in boxes or bits in whatever medium, to secure an election you *have* to provide detailed oversight by all interested parties at every stage. Using complex technology serves no purpose other than to artificially limit the number of people who are capable of understanding and verifying the steps. In contrast, given a paper solution, anyone who wants to can understand each step of the process by which ballots make it from voter to counter.

      The safer thing to do is reassure the public by explaining the process.

      Absolutely. And the safest thing to do is reassure the public by designing a process they can all understand, and then explaining that.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
  5. Why are they concerned? by Tackhead · · Score: 4, Funny
    > Since EVERY SINGLE VOTER who uses these machines is a potential hacker looking to alter election results, why is Diebold so concerned?

    Because if every single voter gets to hack the election results, then it's be a fair election. Duh!

    January 20, 2009: President Stallman took the oath of office today, after the GNU/ESR ticket (GNU's Not United-states!) narrowly beat the Gates/Ballmer team campaign in an election that stunned the ruling Demopublican coalition...

  6. Troubling, indeed by Captain+Sarcastic · · Score: 4, Insightful

    According to Diebold, the polling machines are suspect, and it'll cost $40,000 to verify everything.

    On the one hand - what if Diebold is purely running a bluff? Then the election board is going to have to pay $40,000 for Diebold to send in someone who will attach some alligator clips somewhere, run something that flashes lights, and generally run some dog and pony show before deciding whether its in their interest to declare the polling machines as sabotaged, just damaged, or just fine.

    On the other hand - what if Diebold is honest? Then the election board is going to have to pay $40,000 for Deibold to send in someone who will attach some alligator clips somewhere run something that flashes lights, and generally run some dog and pony show before deciding whether the machines are in fact sabotaged, just damaged, or just fine.

    Whether Diebold is bona fide or not, they are likely to claim trade secret privilege to hide the actual workings of their machine or their testing mechanisms... and again, if they're telling the truth, then they would claim that, and if they're not, then their claim would be hard to challenge.

    So the fundamental question is this: do you trust Diebold?

    --
    Strike while the irony is hot! -- The Freethinker
  7. Suddenly I don't feel bad my stories are rejected by loggia · · Score: 5, Funny

    I guess I forgot to run them through Babelfish a few times?

  8. Re:what does it matter? by VJ42 · · Score: 4, Insightful

    Or perhaps you should go back to pecnil, paper and a sealed box, like we still use over here in the UK. I trust that system much more that I'd ever trust a voting machine.

    --
    If I have nothing to hide, you have no reason to search me
  9. Money more important than a fair vote? by Anonymous Coward · · Score: 5, Insightful

    Man Diebold looks slimier and slimier every passing week, but I'm more disturbed by Joe Demma's, Salt Lake's chief elections officer, response to Bruce Funk's actions. Granted, Funk acted by going around Demma by calling in Black Box Voting to check the Diebold machines, when presumably Demma is supposed to be responsible for that (just my guess as he's the chief elections officer).

    However, Demma seems more incensed at Funk because he may cost the state $40,000 for Diebold's astronomical recertification fee. He doesn't seem to be worried that people might not trust these machines. He doesn't seem to care that a state officer was worried enough to call in a non-profit third party to verify the integrity of these machines. I mean, these things could possibly affect the outcome of a vote, the foundation for a democratic republic! But instead of worrying about these machines he's clearly more upset about the $40,000 and Funk not talking to him about his concerns regarding the voting machines.

    And of COURSE Diebold is going to tell you the machines are fine and fair. Sheesh, they want to make money don't they?

    Isn't it great that chief elections officers have their priorities straight?

    Give me a ballot sheet and a pencil any day over these closed, proprietary black box machines.

  10. Here's the right answer by tkrotchko · · Score: 4, Insightful

    "Then the election board is going to have to pay $40,000 for Deibold to send in someone who will attach some alligator clips somewhere run something that flashes lights, and generally run some dog and pony show before deciding whether the machines are in fact sabotaged, just damaged, or just fine."

    Here's where this particular lie is exposed:

    1) How can a single voting machine even cost $40K? I want to see the parts breakdown on *that*.

    2) Wouldn't you want all the machines recertified before each election? I mean, if they're sitting in warehouse someplace between elections, who knows who poked at them? So each machine costs $40K to use every election?

    3) And if this is all T&M, lets assume a generous hourly rate of $250/hour and the guy is staying in a $500 a night hotel. That means this takes about 3 full weeks to certify a machine!

    Does anybody understand the implications of Diebold claiming $40K worth of damages here?

    --
    You were mistaken. Which is odd, since memory shouldn't be a problem for you
  11. It's also a CONFESSION by NigelJohnstone · · Score: 5, Insightful

    "On the other hand - what if Diebold is honest? "

    On the third hand, it is a clear confession from Diebold that third parties can't accurately verify their voting machines and that their voting machines can be rigged.

    So any county that thinks it is verifying that the machine isn't rigged by runnig pre-ballot checks is wrong.
    They can point to this statement and say "IT ISN'T ENOUGH THAT WE VERIFY IT, BECAUSE DIEBOLD ADMITS THEY CAN BE RIGGED IN WAYS ONLY IT CAN DETECT".

  12. Well, I think he got it almost right by hey! · · Score: 5, Insightful

    Yes, a third party should examine the machines.

    However, it should be a disinterested third party, not an advocacy group. No matter how well meaning and ethical the people in the group are, they can nonetheless be painted as enemies of the vendor.

    What should be done is to have a professional firm that specializes in computer security audit the machines and provide a report on whether the machines are secure; if not whether and how they can be suecured. And provided the machines can be secured, what policies and procedures are needed to operate them so that fraud can be discouraged and detected.

    This is just like having an independent financial auditor come in and look at your books and your financial control procedures.

    --
    Post may contain irony: discontinue use if experiencing mood swings, nausea or elevated blood pressure.
  13. From TFA by Ravenscall · · Score: 4, Insightful

    Joe Demma, chief of staff for Lt. Gov. Gary Herbert, the state's chief elections officer, was plainly incensed with Funk for allowing Black Box to probe the machines.
          "The problem is that instead of asking us or Diebold, Bruce Funk allowed a third party to put the warranty in jeopardy,"


    So let me get this straight.

    Election commissioner notices an irregularity in the memory of some voting machines, from whom the owner of the manufacturing company has very clear partisan leanings.

    Election commissioner calls in a third party to run testing on the machines.

    Now, I do not see a problem with third parties running audits on the machines used to count my votes. In fact, I want as MANY third parties running tests on thes to insure thier accuracy, as the fate of myself, my family, mmy state, and my country will be affected by what this machine spits out.

    However, here we have third party verification being spun by Diebold as being a VERY BAD THING.

    Whatever happened to transparency in government and in democratic processes? Is it not one of the core values of America?

    --
    You say you want a revolution....
  14. couple points of info by frankie · · Score: 4, Informative
    The article blurb here is low on detail and high on gasoline, so here's some tidbits:
    1. Emery County is majority Republican in both population and voting.
    2. Bruce Funk was not skeptical of the machines until after inspecting them.
    3. He was, however, a bit worried that the state expected local officials to be responsible for all problems, but mandated the use of these machines.
    4. He then noticed that supposedly identical & pristine machines had widely differing amounts of free memory.
    5. Rather than go to the state or to Diebold, he called Black Box Voting.
    6. It's really doubtful that (as Diebold claims) font differences could eat up 20MB.
  15. Re:Shouldn't voting machines be regulated? by tkrotchko · · Score: 4, Interesting

    "I don't blame Diebold for not wanting some 3rd party yahoo breaking seals on their machines."

    Well, I understand what you're saying. But they're not Diebold's machines any more than this PC is not Microsoft's PC. That's an important distinction.

    "But they can't point to a documented, legitimate qualification process to allay their customer's valid concerns."

    Exactly right. Moreover, they have no *re-certification* process. Think about what will happen to these machines. The election is over. They are taken to the county warehouse. You pull them out 1 year later. How do I certify they haven't been tampered with? Some seal on the door??????? Or do you have to pay a special technician to come out for 3-4 weeks per machine to cerify each machine?

    "This is lousy engineering of the kind that pervades traditional IT"

    Perhaps. But Diebold seems to figure out how to do it right when banks insist they do it right, but here they chose not to do it that way. Curious? Sure seems it.

    --
    You were mistaken. Which is odd, since memory shouldn't be a problem for you
  16. Re:what does it matter? by swillden · · Score: 5, Insightful

    Or perhaps you should go back to pecnil, paper and a sealed box, like we still use over here in the UK. I trust that system much more that I'd ever trust a voting machine.

    The difference is that in the US we vote on many more offices. My ballot generally includes some forty or fifty choices. It's easy enough to mark such a ballot with a pencil, but it gets difficult to count them, so some automation is useful. Further, a well-designed touch screen user interface is accessible to people with vision and motor skill deficiencies that would exclude them from voting with a paper ballot. Finally, a well-designed touch screen UI is less error-prone.

    So, there are good reasons to use machines, but there aren even better reasons *not* to use purely electronic tallies as the final results.

    Voting machines should print human-readable paper ballots, verifiable by the voter, that can also be counted by machine, and those ballots should be put in a locked metal box and then counted under supervision of all the major political parties to produce the official tallies.

    --
    Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
  17. Some more information about the testing... by no+haters · · Score: 4, Informative

    Over at blackboxvoting.org they have some more information about what tests were actually run on the machines, what they found, and what diebold's official response was. Apparently, BBV did not actually do the tests themselves, they arranged for 3rd party security experts to go in and do the analysis.

    Here's the link:

    http://www.bbvforums.org/cgi-bin/forums/board-auth .cgi?file=/1954/19743.html

    It's on black box voting's website, so obviously it will be biased, but at least it gives more detail than the gloss-over provided by the tribune.

  18. Re:Diebold earned bias, but it's partly ATM protoc by buysse · · Score: 4, Insightful
    When you use a Diebold ATM, it prints a paper trail inside the box, and gives you a printed receipt with a transaction number that can be matched to both the internal database and to the paper trail inside. If the printer inside jams, it stops accepting transactions. Detailed information about the inner workings and software are shared with the banks, and all transactions are registered in real-time with a central system (nearly instantaneous over ISDN or similar connection).

    When was the last time your bank "forgot" that you took money from an ATM? Do you ever hear of problems like that? No? Why does it happen with a vote?

    I've become far more cynical about the process as every recount that's happened has had discrepancies. New, uncertified code is loaded on the machines the day before the election. The code is not available for examination by third parties (yet, a slot machine is.)

    Why were exit polls so much more accurate in the days of paper ballots? I find it unlikely that the methodology has gotten that much worse, especially considering that similar districts in the same election have varying margins of error that correlate to the voting system in use at the polling location.

    --
    -30-
  19. It is a serious problem. by Irvu · · Score: 4, Informative

    In answer to the poster's question Diebold is behaving this way because the machines are not secure nor can they be. Anyone who gets a close look at them can see that. Diebold, like ES&S, and Sequoia is opting to muscle in and abuse people rather than admit that no machine is perfect and try to make them as good as possible.

    The companies have done similar things in other states. In Florida All 3 have refused to sell any systems to Volusia County. The county's Election Director Ion Sancho was the one who allowed his systems to be tested for security and discovered the "Hrusti Hack" namely whereby the machines will load arbitrary code stored on their memory cards and execute them. Such a hack makes it trivial to change ballots, erase totals, etc. It has since been shown that systems by Sequoia Inc. are vulnerable to the same hack.

    Volusia county is also the county that caused Al Gore to initially declare defeat in 2000. During election night Al Gore was leading Bush with a comfortable margin. At 10om someone uploaded a card that reported -16,022 votes for Al Gore and 10,000 for some socialist canidate all from a precinct with 600 voters.

    This card passed all of Diebold's stringent "safety checks" (whatever the hell they were) and changed the statewide totals putting Gore well behind Bush. Gore declared defeat. After that the county discovered the errors and reset the system claiming that the new totals were correct. Nevertheles the fact remains that the card got in, was loaded, and threw off a U.S. Presidential election.

    Now the companys won't sell to Volusia and are telling the state and the feds that it's Sancho's fault because he wants to test the systems for security. Florida's Governor Jeb Bush (brother of shrub) has also personally blamed Sancho for putting the state behind.

    Meanwhile the Department of Justice is threatening to sue the state or withold funds because the county has not bought new systems even though noone will sell said systems to them. The idea being, apparently, that he should just sell out the elections.

    At the end of the day the collusion and bullying going o by the companies, by the U.S. Government over HAVA (written by Bob Ney former congressmen for Diebold and now a leading figure in the Abramoff corruption investigation) and by frightened state governments is insane. At the end of the day the only losers will be the American People, of all stripes.

  20. It's Uncertifiable by NigelJohnstone · · Score: 4, Insightful

    If it can't be independently verified then it is uncertifable.

    The claim in previous elections is that it CAN be verified by running a trial ballot on the machines before the election. This is clearly false, since Diebold now asserts that this test will not detect this 'tinkering' you speak of.

    Which means that any Diebold 'tinkering' cannot be detected either. Which means the machines can't be certified as accurate.

  21. Re:what does it matter? by swillden · · Score: 4, Informative

    o you've never heard of having a different voting slip for each actual office position then... and putting the marked slips in the correct boxes makes things easier at the counting places as well

    We'd need at least 30 boxes. That's just impractical. Come to that, it's better to put everything on one paper ballot and then figure out how to count (which is what has been done for many, many years).

    You have to remember how governments are structured in the US. City, County, State and Federal governments are all separate, and we vote for offices for each. Within each government, executive, legislative and judicial branches are separate, and we vote for people in most of them. On top of that are ballot initiatives at the city, county and state level.

    Whether or not having so many choices actually improves democracy is an open question, but this is the system we have, and the voting approach must work with it.

    --
    Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
  22. Re:What you're missing... by ewhac · · Score: 4, Insightful
    What everyone is missing is that this clerk allowed unauthorized access to the machine, regardless of the intent. He went beyond the scope of his responsibility and did not follow the chain of command.

    No, we're not missing that at all. It seems evident that the Chain of Command was either dazzled, baffled, or bribed into accepting these faulty machines from an ethically deficient corporation, and the only way the integrity of the voting process could be preserved was to solicit an independent examination into the machines' trustworthiness.

    That the Chain of Command is now throwing a hissy fit about "warranty violations" serves only to illustrate that they are paying attention to the wrong things. Of course you independently test the machines. When you're dealing with something this important, you never believe the four-color glossies; you acquire your own facts and test stuff.

    Schwab