Critical Security Hole Found in Diebold Machines

ckswift writes "From security expert Bruce Schneier's blog, a major security hole has been found in Diebold voting machines." From the article: "The hole is considered more worrisome than most security problems discovered on modern voting machines, such as weak encryption, easily pickable locks and use of the same, weak password nationwide. Armed with a little basic knowledge of Diebold voting systems and a standard component available at any computer store, someone with a minute or two of access to a Diebold touch screen could load virtually any software into the machine and disable it, redistribute votes or alter its performance in myriad ways."

Comments

It's not a bug, it's a feature!

[TripMaster Monkey]

Considering that Walden O'Dell, chief executive of Diebold Inc., was quoted in August of 2003 as saying that he was "committed to helping Ohio deliver its electoral votes to the president next year", this shouldn't be too surprising.

Why doesn't diebold?

[Whiney Mac Fanboy]

Why doesn't diebold just use the same security system it uses on its ATMs? After all (quoting):

Sygate defends your ATM with multiple layers of security:

First, the system locks down all electronic points of entry - making them invisible to hackers, viruses, and worms.

Next, it monitors, analyzes, and authenticates any external source attempting to connect to the ATM- and blocks anything the software doesn't recognize.

Failing that, they should just use the blue force shields that feature prominently in their Digital Security Videohahahaha - as long as your attacker is using little yellow balls to stage their attack.

Re:Why doesn't diebold?

[RoffleTheWaffle]

"Failing that, they should just use the blue force shields that feature prominently in their Digital Security Video - as long as your attacker is using little yellow balls to stage their attack."

Yes, because I'm fairly certain that somebody somewhere has come up with an insidious plot to rig the elections with a Nerf gun.

"any" software, eh?

[chrish]

Installing "Goatse.cx Screensaver", please wait...

Re:"any" software, eh?

[RoffleTheWaffle]

Or...

"Who is this 'Cockmongler', and why should I vote for him?"

Sweet!

[raider_red]

I'm getting myself elected emporor!

Re:The Shock! The Surprise!

[Ohreally_factor]

Because Diebold is only interested in stealing elections, not your money. So rest easy.

No worries here

[imkonen]

Jeez...what's everyone so paranoid about? How could a hacker possibly get access to a voting machine for a minute or two with enough privacy to load malicious software? He'd need to find one that for some reason or another had a curtain around it and hope no one thinks it's suspicious that he'd be in there alone with the machine.

Re:Cue rimshot

[dave-tx]

Come on. Tell us something we didn't know.

OK. OLN has hired a man named Stanley Cup to promote the NHL playoffs this year.

Re:What I would like to know..!

[Detritus]

Acccuse me of left-wing moonbattery all you like, but the fact remains that Diebold has shown themselves to be capable of making reasonably secure ATM machines. There's no defense by incompetence available to them. These ridiculous security holes can only be intentional.

You underestimate the venality of American corporate management. Many of them would bottle toxic waste and sell it as a health tonic if they thought that there was an easy dollar to be made and that they could get away with it.