Slashdot Mirror


Ohio Audit Reveals More Diebold Problems

armb writes with a link to a Wired Blog entry about irregularities found in Diebold databases from the state of Ohio. The election in question here is November 2006, and the corruption of the entries may raise doubts about accurate tabulations. "Vote totals in two separate databases that should have been identical had different totals. Although Diebold explained that this was part of the system design for separate vote tables to get updated at different times during the tabulation process, the team questioned the wisdom of a design that creates non-identical vote totals. Tables in the database contained elements that were missing date and time stamps that would indicate when information was entered. Entries that did have date/time stamps showed a January 1, 1970 date. The database is built from Microsoft's Jet database engine. The engine, according to Microsoft, is vulnerable to corruption when a lot of concurrent activity is happening with the database, such as what occurs on an election night when results are uploaded and various servers are interacting with the database simultaneously."

222 comments

  1. here we go again by willie_nelsons_pigta · · Score: 0, Offtopic

    Let us remember a phrase I once heard on Slashdot.

    "Arguing on Slashdot is like competing in the Special Olympics...
    You may win but you're still retarded."

    1. Re:here we go again by jimstapleton · · Score: 0, Troll

      Actually, in 2006, Ohio switched from red to blue, so by your logic, we shouldn't be hearing this...

      --
      34486853790
      Connection too slow for X forwarding? Try "ssh -CX user@host"
    2. Re:here we go again by fredrated · · Score: 1

      And your desire is what, to remain ignorant? Good luck with that, you have already achieved it.

    3. Re:here we go again by Anonymous Coward · · Score: 2, Funny

      Arguing on Slashdot is like competing in the Special Olympics...

      Is not!

      You may win but you're still retarded.

      I know you are, but what am I?

    4. Re:here we go again by feed_me_cereal · · Score: 1

      you're cynical. Do you honestly think that no one (or perhaps very few) on slashdot, a hub for politically minded technology geeks, cares about how electronic voting is implemented, and are only upset that a democrat wasn't elected in the last election? Let me rephrase: you're absurdly cynical. Cynical would be assuming that a lot of people don't care if their votes are counted or not, not the vast majority of people who are already likely to care.

      --
      "Question with boldness even the existence of a god." - Thomas Jefferson
    5. Re:here we go again by rlp · · Score: 3, Funny

      > Do you honestly think that no one ... cares about how electronic
      > voting is implemented, and are only upset that a democrat wasn't
      > elected in the last election?

      Yes, next question.

      BTW, when Bush came into office the solar system had nine planets ...

      --
      [Insert pithy quote here]
    6. Re:here we go again by errxn · · Score: 1

      Meanwhile, it's perfectly acceptable to post the wild tinfoil-hat Diebold conspiracy theories. Yeah, I guess I'm just imagining the bias in submissions and sources around here. My bad.

      --
      In Soviet Russia, Chuck Norris will still kick your ass.
    7. Re:here we go again by Old+Benjamin · · Score: 1

      Thats true, but hopefully we will stop hearing about this because Diebold will stop using things produced by Microsoft, and hopefully we will never see an America hater as president. Sorry Democrat

      --
      "The quickest way to end a war is to lose it" -Orwell
    8. Re:here we go again by Anonymous Coward · · Score: 0

      are only upset that a democrat wasn't elected in the last election?

      Actually, Ohio voted Democratic last election, but don't worry, we'll forgive your hypocrisy when you turn around and demand something must be done because the election machines are not reflecting "the will of the people". After all, it's pretty much standard operating procedure for the Republicans, whether it's voting machines, investigations, ethics charges, or pretty much everything else that's managed to smack Democrats and Republicans in the face... when it's the Democrats that are being investigated, charged, or having their votes mysteriously disappeared its just whining liberals, but when its the Republicans who get the short end of the stick, they can't fall over themselves fast enough to repeal their own ethics rules.

  2. I don't know anything about databases by The-Ixian · · Score: 2, Informative

    But I know from experience with Citrix that Jet does not scale to more than 1000 simultaneous users. This seems to be borderline incompetence to me.

    --
    My eyes reflect the stars and a smile lights up my face.
    1. Re:I don't know anything about databases by codepunk · · Score: 4, Insightful

      Jet is damn lucky to scale to 10 much less your claimed 1000. I have never seen 1000 concurrent users in a jet database. Not that it matters, I cannot believe anyone would trust it to tabulate election results.

      --


      Got Code?
    2. Re:I don't know anything about databases by j00r0m4nc3r · · Score: 2, Insightful

      Everything Diebold does is borderline incompetence. I can't wait for these bozos to get out of this business and go back to making vending machines.

    3. Re:I don't know anything about databases by Rob+the+Bold · · Score: 2, Insightful

      But I know from experience with Citrix that Jet does not scale to more than 1000 simultaneous users.

      I bet it doesn't. It's really more of a single-user database engine. It's nice for redistributing with a single user application, but not appropriate in a network setting. Makes you wonder if they (Diebold) just didn't have anyone with any multi-user database experience.

      --
      I am not a crackpot.
    4. Re:I don't know anything about databases by ktappe · · Score: 1

      Everything Diebold does is borderline incompetence.
      If you are "borderline incompetent" at enough tasks, doesn't that push you over the line into full-blown incompetence?
      --
      "We can categorically state we have not released man-eating badgers into the area." - UK military spokesman, July 2007
    5. Re:I don't know anything about databases by EvilTwinSkippy · · Score: 4, Insightful

      I agree. With a plethora of free or easily liscensed SQL databases out there, and the fact that ODBC data sources are every bit as easy to connect as Jet, there is NO excuse. The only reason to drop something like Jet into a production system is to make it crippled by design.

      --
      "Learning is not compulsory... neither is survival."
      --Dr.W.Edwards Deming
    6. Re:I don't know anything about databases by Anonymous Coward · · Score: 0

      More like one concurrent user! What idiots. Any developer worth his salt knows not to build a multi-user application against a toy like Jet, which is nothing more than a glorified name for Microsoft Access. Diebold needs to pony up and hire some real developers. It's not like they don't have the money to hire people with experience.

    7. Re:I don't know anything about databases by Jaysyn · · Score: 1

      Nah, you're just a "jerk of all trades" in that case!

      --
      There is a war going on for your mind.
    8. Re:I don't know anything about databases by Orange+Crush · · Score: 1

      Everything Diebold does is borderline incompetence. I can't wait for these bozos to get out of this business and go back to making vending machines.

      I never knew they made vending machines! This is great! I mean, it's a shame we lost our democracy to trivial-to-compromise voting machines, but at least we all get free Cheetos!

    9. Re:I don't know anything about databases by operagost · · Score: 1

      Exchange still uses the Jet engine. Its limit is 1,900 concurrent connections.

      --

      Gamingmuseum.com: Give your 3D accelerator a rest.
    10. Re:I don't know anything about databases by operagost · · Score: 1

      I guess you don't use Exchange, then (see my reply to the GP post).

      --

      Gamingmuseum.com: Give your 3D accelerator a rest.
    11. Re:I don't know anything about databases by hchaos · · Score: 2, Insightful

      This seems to be borderline incompetence to me.

      I think the term you are looking for is gross incompetence.

      Maybe they're trying to convince people that even if they wanted to rig the election, they're too stupid to do it properly?

    12. Re:I don't know anything about databases by quantum+bit · · Score: 4, Informative

      Exchange still uses the Jet engine. Its limit is 1,900 concurrent connections.

      Not quite. Exchange uses Jet Blue, as do AD and other things embedded in Windows (DHCP server, WINS, etc.). It was strictly for MS-only internal use until Windows 2000, when it was renamed Extensible Storage Engine and the API was made available.

      Diebold is using Jet Red. Jet Red is what MS Access uses, as well as the "Microsoft Jet DB Engine" ODBC source that many crappy third-party VB apps use.

      Despite sharing the same name (though Jet Blue was renamed, Exchange still refers to it as simply "Jet" in a few places), there's almost nothing in common between the two. Blue/ESE is a lot more fault-tolerant than Red, but concurrent access must be provided by a server application running on top of it -- multiple apps can't open the database file directly at once. That's probably a good thing, since Red/MS Access's cooperative concurrency scheme is what's responsible for most of the corruption issues people have with it.

      Jet Blue/ESE is nowhere near the design of say, Oracle or PostgreSQL, or even MSSQL for that matter. It's about on the level of version 3 or 4 of MySQL (using MyISAM, not InnoDB), or perhaps SQLite.

      Jet Red/MS Access is just plain garbage and should never be used. Shame on you, Diebold. Shame!

    13. Re:I don't know anything about databases by quantum+bit · · Score: 1

      It was strictly for MS-only internal use until Windows 2000, when it was renamed Extensible Storage Engine and the API was made available.

      Minor correction, it was renamed in 2000 and the DLL was distributed with Windows 2000, but the API documentation wasn't published until 2005.

    14. Re:I don't know anything about databases by hpavc · · Score: 1

      this is from here http://support.microsoft.com/default.aspx?scid=kb; en-us;Q303528 its a hilarious read in this context.

      Microsoft Jet is a file-sharing database system. A file-sharing database system means that the processing of the file occurs at the client. When a file-sharing database, such as Microsoft Jet, is used in a multi-user environment, multiple client processes use file read, file write, and file locking operations on the same shared file across a network. If a process cannot be completed, the file may be left in an incomplete state or in a corrupted state. A process may not be completed for either of the following reasons:
              When a client is stopped unexpectedly
              When a network connection to a server is dropped

      Microsoft Jet is not intended for use with high-stress server applications, high-concurrency server applications, or 24 hours a day, seven days a week server applications. This includes server applications, such as Web applications, commerce applications, transactional applications, and messaging server applications. For these types of applications, the best solution is to switch to a true client/server-based database system, such as Microsoft Data Engine (MSDE) or Microsoft SQL Server. When you use Microsoft Jet in high-stress applications such as Microsoft Internet Information Server (IIS), you may experience any one of the following problems:
              Database corruption
              Stability issues, such as IIS crashing or locking up
              Sudden failure or persistent failure of the driver to connect to a valid database that requires re-starting the IIS service

      --
      members are seeing something, your seeing an ad
    15. Re:I don't know anything about databases by vought · · Score: 2, Funny

      The database is built from Microsoft's Jet database engine.

      As Hyneman would say..."There's your problem."

    16. Re:I don't know anything about databases by thePowerOfGrayskull · · Score: 1

      Why in the hells would any idiot trust Jet for critical data? I have seen it fail m iserably when just 4 people access it concurrently. And these fools use it to handle VOTES? No wonder they don't want their source code audited.

    17. Re:I don't know anything about databases by LifesABeach · · Score: 1

      You know, there something good about the Jet Data Base Engine,(MJDBE), that folks might not have considered. It wakes developers up to other SQL solutions like mySQL. It also cures that syndrome that has to do with betting your pay check on the products you buy/use to develop with. I am a convert, thank you MJDBE; Without it, I would have never discovered Batch Processing, mySQL, Oracle, Portgres, and flat files.

    18. Re:I don't know anything about databases by ThinkFr33ly · · Score: 1

      Jet Blue/ESE is nowhere near the design of say, Oracle or PostgreSQL, or even MSSQL for that matter. Even MSSQL? SQL Server is on par with Oracle in most ways (and surpasses it in many), and it is far more advanced than PostgreSQL in every possible way.

      Just a small nitpick. SQL Server is a great DB server, and it shouldn't be discounted simply because it's from Microsoft.
    19. Re:I don't know anything about databases by indifferent+children · · Score: 1
      The only reason to drop something like Jet into a production system is to make it crippled by design.

      Never attribute to malice that which can be explained by incompetence.

      --
      Censorship is telling a man he can't have a steak just because a baby can't chew it. --Mark Twain
    20. Re:I don't know anything about databases by aichpvee · · Score: 4, Interesting

      And never attribute to incompetence what is clearly not. Diebold makes TONS of other electronic transaction machines (include, probably, your bank's ATM machines) and they don't have these kinds of problems. Perhaps they do it on purpose to give them a cover of incompetence. Perhaps it really is incompetence on the part of the guy they get to write this stuff since whoever is hiring him doesn't care if he's incompetent because they're going to fool with the results anyway and it will only add cover for them.

      But CLEARLY this kind of stuff is not because Diebold isn't capable of doing it properly. It's because they explicitly don't want to do it properly.

      If we're going to have electronic voting machines, and I don't think that we should (not even optical scan), they should be developed, owned, and maintained by the government. Period.

      --
      The Farewell Tour II
    21. Re:I don't know anything about databases by Gat0r30y · · Score: 1

      They do a really good job on ATM's... Seems to me they are actively choosing to hose voting machines.

      --
      Prediction: The real iPhone killer is going to be sex robots from Japan. Think about it.
    22. Re:I don't know anything about databases by Amadodd · · Score: 1

      1900 Concurrent connections to Exchange, but I would guess only a few from Exchange to the DB.

      --
      Freedom of speech doesn't come with bandwidth.
    23. Re:I don't know anything about databases by Master+of+Transhuman · · Score: 1

      "it shouldn't be discounted simply because it's from Microsoft."

      Yes, it should.

      --
      Richard Steven Hack - This sig is TOO GODDAMN SHORT TO DO ANYTHING USEFUL WITH! MORONS!
    24. Re:I don't know anything about databases by heinousjay · · Score: 2, Insightful

      I think it's more the fact that ATM deal with bank money, which is far more important than the right of citizens to express their votes.

      --
      Slashdot - where whining about luck is the new way to make the world you want.
    25. Re:I don't know anything about databases by ravenshrike · · Score: 2, Insightful

      Or maybe it's because a certain level of competence is demanded of Diebold by the other customers, which, given it's the US government and not military or NSA, does not demand the same level of competence. Instead as long as it remotely works, the government doesn't give a shit.

    26. Re:I don't know anything about databases by quantum+bit · · Score: 2, Insightful
      The only way in which SQL Server surpasses Oracle is the UI, which isn't too hard since Oracle's UI is terrible. As far as actual database technology goes, while I do think Oracle is somewhat overrated, it's still pretty hard to beat.

      More advanced that PostgreSQL? Hardly! Especially versions before SQL 2005. MS SQL still used row locking for updates until 2005, which meant it was horrible under load and impossible to scale to high levels of concurrency. Oracle and PostgreSQL both used MVCC since the very beginning and never suffered from such problems. PostgreSQL added transaction log shipping for backup / hot spare situations with its 8.0 release. MS added that feature 8 months later. I've used all 3 databases quite extensively and could ramble on for a while about the mess of built-in stored procedures in SQL server, lack of UTF-8 support, defaulting to case-insensitive queries, the lack of extensible authentication methods, and so on.

      The other downside of SQL 2005 is that it embeds a bunch of unneeded junk, such as the .NET CLR (which itself is a huge memory hog), and wastes RAM that could be used for caching data.

      Just a small nitpick. SQL Server is a great DB server, and it shouldn't be discounted simply because it's from Microsoft. If you're stuck on Windows, SQL server is an okay DB server.

      It has nothing to do with the Microsoft name. It wouldn't matter if it were still called Sybase, it simply doesn't measure up against the competition in the medium-to-high end space. It's all right for low-to-medium end applications (the stuff most people unfortunately use Access databases for), but I certainly wouldn't use it to track Russian nuclear weapons. I'd put PostgreSQL as solid medium contender.
    27. Re:I don't know anything about databases by ThinkFr33ly · · Score: 1

      MS SQL still used row locking for updates until 2005, which meant it was horrible under load and impossible to scale to high levels of concurrency. Huh? Your statement makes little to no sense. On both v2000 and v2005, the type of lock that SQL Server uses depends on a wide variety of factors, not to mention the fact that you can heavily customize the locking that is used via lock hints in your SQL statements.

      PostgreSQL added transaction log shipping for backup / hot spare situations with its 8.0 release. MS added that feature 8 months later. Really? v8 of PostgresQL was release in Jan. of 2005. SQL Server has had transactional log shipping since version 7.0, which came out a really, really long time ago. (1998, I think)

      Since then, Microsoft has dramatically improved their clustering / failover capabilities. They added some advanced mirroring features, snapshot replication, and a wide variety of other features. They're still not as good as Oracle, but they're getting damn close.

      I've used all 3 databases quite extensively and could ramble on for a while about the mess of built-in stored procedures in SQL server, lack of UTF-8 support, defaulting to case-insensitive queries, the lack of extensible authentication methods, and so on. Lack of UTF-8 support in what sense?
      Case sensitivity is an easy option to change. It even asks you what you want to use when you install SQL Server.
      As far as the "lack of extensible authentication methods", I've never encountered a scenario where I needed something other than "SQL Server Authentication" or "Windows Authentication". Pretty much covers all bases in a Windows environment.

      The other downside of SQL 2005 is that it embeds a bunch of unneeded junk, such as the .NET CLR (which itself is a huge memory hog), and wastes RAM that could be used for caching data. That's a bunch of crap. First, SQL Server's CLR host is disabled by default. Second, the CLR itself uses perhaps 5 or 6 MB of ram when loaded. It uses more only when you're taking advantage of it via .NET sprocs or what have you. So that's a silly argument.

      The fact of the matter is that SQL Server has shown it can play with the big boys (DB2 and Oracle) just fine. In fact, it often dominates.
    28. Re:I don't know anything about databases by MemoryDragon · · Score: 1

      There is another reason, total incompetence, it always amazes me how much of that especially in the Microsoft centric world can be found.

      Lots of developers in that area I know simply do not know better and use everything Microsoft feeds to them.

      Just recently a friend of mine asked me after being burned several times already with VSS, if VSS is garbage. The reason he still after 10 years have thought Microsoft finally has fixed this thing which inherently is broken by design.
      Needless to say I pointed him towards subversion, which he should have used in the first place.

      So now back to Diebolt, they probably needed an embedded DB, so they just used jet, after all it is from Microsoft right. Since Diebold even uses Windows on their Cash mashines (which is another huge issue, but they are not the only ones) I cannot really say they have the most competent people.

      Probably the guys doing this did not even know that dbs and embedded engines outside of the Microsoft world exist. They probably do not even know that there is something else besides Microsoft and even think Microsof thas invented relational DBs.

  3. Jet by truthsearch · · Score: 5, Insightful

    I programmed with the Jet DB "engine" years ago. I wouldn't even run a web site with it. The only thing I found it useful for was business applications, such as connecting an Excel spreadsheet to Access. But that was years and years ago. Why would anyone write such a large and critical system using Jet today, when even Microsoft tells you not to? The only answer is incompetence.

    1. Re:Jet by MeanderingMind · · Score: 1

      Tenured programmers/engineers tend to like what they know. Obviously when the execs walked down the latter and said, "We need a database" this person said, "Alright, we'll use this" and went wax nostaligic about Jet.

      That, or the morass of our government dictated a few things that didn't make sense. They tend to be behind the times in terms of software/hardware advances.

      --
      Thunderclone: ONE MAN ENTERS! TWO MEN LEAVE! ONE MAN ENTERS! TWO MEN LEAVE!
    2. Re:Jet by mrogers · · Score: 1

      The only answer is incompetence.

      Incompetence is the charitable answer; there are others.

    3. Re:Jet by DigitalCrackPipe · · Score: 1

      I've seen some pretty boneheaded database uses... it's one thing if the in-house tool is in Access (with weekly instances of "everybody out so we can rebuild the corrupt database"), but there is no excuse for some commercial tools I've seen using an improper database platform.

      Proper use of database technology can be difficult, but if a company is unable or unwilling to do it properly, they shouldn't be selling the product. Governments have a responsibility to the perople to slap down companies trying to sell products that demonstrate such incompetence, particularly with something as important as voting.

    4. Re:Jet by kilodelta · · Score: 1

      Indeed - I picked up a client because their Access database was banging against the wall. I wouldn't recommend Jet for much of anything these days, not with the plethora of open source relational database products out there today.

    5. Re:Jet by lawpoop · · Score: 4, Insightful

      Why would anyone write such a large and critical system using Jet today, when even Microsoft tells you not to? The only answer is incompetence. There is another answer.

      If you wanted to make an insecure system that was easy to hack and manipulate, didn't have basic security features, data integrity, and no audit trail, and thus no record of how data was altered outside of specifications, you might use such a deprecated application.
      --
      Computers are useless. They can only give you answers.
      -- Pablo Picasso
    6. Re:Jet by Phrogman · · Score: 1

      There is no possible intelligent reason that a developer would choose such an outdated and ill-reputed database engine when so many completely viable options exist at the moment. The *only* reason I can contemplate is that it was a deliberate choice for exactly the reasons you stated. Using this tool would make the fact that the Diebold systems were being actively used to rig an election much harder to trace. No one can be so stupid as to deliberately choose an unreliable DB engine like Jet, knowing its unreliable, can't handle large numbers of transactions, is subject to massive corruption etc. It has to be deliberate.

      I worked at a company that used this engine for their software, but it was 9 years ago. Once they realized that their software was coming up against the wall of the engine's performance on a regular basis, the number one priority in development was integrating a different db system. I worked in Tech Support and easily 50% of our calls related to corrupt databases.

      --
      "The first time I got drunk, I got married. The second time I bought a chimpanzee, after that I stayed sober" Arian Seid
    7. Re:Jet by uab21 · · Score: 2, Insightful

      The old quote about never assigning to conspiracy that which can adequately be explained by incompetance comes to mind (Machievelli?). People are doing stupid things all the time. That being said... there is no reason that someone with deviousness in mind could not *find* the stupidity and decide to advance and take advantage of it. Use what is available - and stupidity is in rampant abundance.

    8. Re:Jet by uab21 · · Score: 1

      The old quote about never assigning to conspiracy that which can adequately be explained by incompetance comes to mind (Machievelli?)

      Correction: Napolean (mea culpa): http://www.quotedb.com/quotes/2308

    9. Re:Jet by lawpoop · · Score: 1

      You are right, but we have plenty of evidence of malfeasance and election fraud.

      " Clinton Eugene Curtis, A former programmer for NASA and Exxon has finally come forward to testify before the US Judiciary that he was ... all enlisted by Republicans to create a program which could guarantee Bush's presidential election victory"

      Add to that the fact that your 'working-stiff' programmer actually wants to get the job done and not have to fix all kinds of crazy bugs in crappy, old, deprecated software, it looks more like it was a deliberate choice to use Jet, and it was not for reasons of creating secure, accurate elections.

      --
      Computers are useless. They can only give you answers.
      -- Pablo Picasso
    10. Re:Jet by Gogo0 · · Score: 1

      So, because the democrats won Ohio in 2006, did the republicans try to steal the election and not do a good enough job, did the democrats steal the election, or did the democrats win fair and square because theyre saints?

      Nevermind, stupid question to ask in these parts...

    11. Re:Jet by lawpoop · · Score: 1

      If you're going to steal the election, you can't steal it by too much, because then it's obvious that the results are far away from reality. You can only tip the scales a little bit without people noticing. Therefore, you can only turn tight races and get away with it.

      What happened in Ohio in 2004 was that the turnout was so great, it didn't matter even the little bit that they cheated. If they had changed enough votes to overturn the election, it would have been obvious what they had done.

      --
      Computers are useless. They can only give you answers.
      -- Pablo Picasso
    12. Re:Jet by lawpoop · · Score: 1

      Sorry, I mean in Ohio in 2006.

      --
      Computers are useless. They can only give you answers.
      -- Pablo Picasso
    13. Re:Jet by mrchaotica · · Score: 1

      Of course, they were also using these same machines in '04 when the Republicans did win...

      --

      "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

    14. Re:Jet by pipingguy · · Score: 1

      is subject to massive corruption

      Are you referring to data corruption or some other kind?

  4. JET?? by revlayle · · Score: 4, Insightful

    That is an old outdated desktop engine. Databases needs compressing and repairing all the freaking time - want to go multi-user? or over a network? forget it, it's have never performed well in that capacity in ANY version. Microsoft even advises not to use it anymore. They push desktop version of the SQL Server 2005 Engine (and now even have a version that just requires a couple DLLs in the application directory, however I do not know if that is available yet).

    1. Re:JET?? by laffer1 · · Score: 1

      Yeah, and as far as concurrency goes its a terrible choice. When I first started learning ASP years ago, I started with Access databases. My website could not handle over 5 concurrent users without giving errors. I think at that time there was a hard limit of 5 concurrent users. This thing was read only most of the time. The database only changed a few times a week.

      Now if access couldn't handle a Jewel fan site how on earth could it handle an entire state's voting data? Switching to SQL Server and later migrating to MySQL was a godsend. Prior to SQL Express, there was MSDE as well. They had other options at the time. As much as they probably charged, couldn't have purchased and setup SQL Server or gone with an OSS database?

      Either the developers were idiots or management made a terrible mistake.

    2. Re:JET?? by rabbit994 · · Score: 1

      Actually, it's called SQL Server 2005 Express edition. .Net 2 programs can either directly access the Database or you can set up a full blown SQL Server and connect via TCP/IP. If you do it via TCP/IP, multiple users can be accessing it without issue.

    3. Re:JET?? by morgan_greywolf · · Score: 1

      No kidding. Jet doesn't even support true record locking -- it locks pieces of the database in blocks. Diebold would have had less chance of corruption with even something as broken as MySQL 3.x. Heck, they would have had less chance of corruption using a comma-delimited text file stored on a 5.25" HD floppy disk stuck to the fridge with a magnet, but that's besides the point.

      The point is that this is cannot be just mere incompetence. As you say, even Microsoft, who wrote Jet and used it for years as the basis of Microsoft Access and Visual Basic's database component, says not to use it 'cause it's crap. There's always SQL Server 2005 Express/Compact/whatever Edition, and this is what Microsoft recommends today.

    4. Re:JET?? by revlayle · · Score: 1

      To be fair, SQL Server *still* uses page locking (less resource intensive) for updates. You can desginate row-level locking for inserts (good for table that do a lot of insert only operations, like audit logs). However, being a server managed database, concurrency is not nearly as much of an issue as it is in Jet.

    5. Re:JET?? by dave420 · · Score: 1

      I didn't think it ran multi-user OR over a network... isn't it just in the actual voting machines? As for compression and repairing, these databases are only in use for a day on the machine, and as long as the vote count takes on the tabulator machines. These aren't massive histories, just one-shot databases. I'm not excusing them (shit, I hate electronic voting), or criticising you, btw, just trying to figure it out :)

  5. Jet Database Engine by mypalmike · · Score: 4, Interesting

    Jet Database Engine, a.k.a. Microsoft Access.

    --
    There are 0x40000000 types of people: those who understand 32-bit IEEE 754 floating point, and those who don't.
    1. Re:Jet Database Engine by RingDev · · Score: 1

      Yeah, I saw that "The database is built from Microsoft's Jet database engine." and WTF'd out loud.

      The software used to tabulate votes is build on an Access database!?!? holy crap! Talk about the mother of all bad ideas. There are so many know issues and so many better options that this should never have gotten this far. Who the crap was in charge of designing this system? Jim from Accounting?

      -Rick

      --
      "Most people in the U.S. wouldn't know they live in a tyrannical state if it walked up and grabbed their junk." - MyFirs
    2. Re:Jet Database Engine by afidel · · Score: 1

      I wonder if this is JET Red (aka the Access/MDAC DB engine) or JET Blue (aka the Exchange/AD DB engine). The two are both referred to as JET but they are very different animals. Given the problems it's probably Red, which would be an almost criminally stupid idea, MSDE has been around forever and is MUCH more suited to this kind of application. If it's Blue then it's not such a big deal since Blue runs some of the largest email and LDAP implementations in the world.

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
    3. Re:Jet Database Engine by Anonymous Coward · · Score: 0

      After several times losing data due to corrupting access databases (don't ask, the boss finds the ms access icon and goes, weeeeeee, it integrates with word..), the problem was fixed using a laminated piece of paper saying "TOKEN, access granted". patent pending (tm)(r)(c).

  6. Re:This crap again?? by jimstapleton · · Score: 0, Flamebait

    Actually, in 2006, ohio switched from Red to Blue (no, not Red vs. Blue, though that's a more interesting topic admittedly).

    Regardless, the usual complainers, would not be complaining much about their side loosing on this one.

    --
    34486853790
    Connection too slow for X forwarding? Try "ssh -CX user@host"
  7. I'm leaving...on a Jet plane. Don't know when... by Impy+the+Impiuos+Imp · · Score: 3, Funny

    > The database is built from Microsoft's Jet database engine.

    Jet? Shit.

    I'm gonna submit proposals to program up a new Mars Rover using Visual Basic!

    --
    (-1: Post disagrees with my already-settled worldview) is not a valid mod option.
  8. MS Access *is* a leading-edge product? by Anonymous Coward · · Score: 0

    Wow - an MS-Access Database? If that's indicative of the level of tech they've got inside those puppies, no election is safe!

  9. 1000?!?!? by JeanBaptiste · · Score: 2, Insightful

    Good lord, I'd say anything over 10 users is a problem with Jet, from my experience anyways.

    Jet is fine for what it is, but like any other tool it has a proper purpose and should not be mis-used.

    I don't know the specifics of the Diebold stuff, it would seem to me though if you had one Jet DB on each machine along with a proper upload tool it should work just fine.... at the same time if I was building a voting machine process from scratch I wouldn't think of using it.

    fwiw. ymmv.

  10. Recount? by ArcherB · · Score: 1

    TFA didn't say, but does anyone know if it is possible to get an accurate, tally? Would it make a difference?

    --
    There is no "I disagree" mod for a reason. Flamebait, Troll, and Overrated are not substitutes.
    1. Re:Recount? by feed_me_cereal · · Score: 1

      my guess is no. over 100,000 votes is a lot to fuck up.

      --
      "Question with boldness even the existence of a god." - Thomas Jefferson
    2. Re:Recount? by ArcherB · · Score: 1

      my guess is no. over 100,000 votes is a lot to fuck up.

      I believe you are talking about 2004 election. This deals with the 2006 election where, for example, the Senate race was decided by less than 50,000 votes. It would take a 25,000 (7%) change of votes to change the outcome.

      However, your point is still valid as 25,000 is still a lot to fuck up. But one county mentioned in the article as being totally fucked up is Cuyahoga, which has a difference of about 186,000 votes between the two candidates, and that's just one county.

      Of course, the example I provide is just for the Senate race. I don't know about the House elections. I'm sure the "local dog-catcher" elections would be closer still.

      --
      There is no "I disagree" mod for a reason. Flamebait, Troll, and Overrated are not substitutes.
    3. Re:Recount? by stinerman · · Score: 1

      Yeah, I live in Ohio and know of Cuyahoga county's incredible incompetence. The entire board needs to be sent to a federal PMITA prison.

      I was a recount observer in 2004, so I know a bit more than your average bear with respect to the process. We were given the official rules and procedures for how each machine was supposed to be operated in case of a recount. Especially interesting was the procedure for zeroing out a DRE machine. The board would put in a special memory card in order to zero out the machine and then run a report showing all races had been zeroed out. The document said that if the report did not run as expected to repeat the process as many times as is necessary. Nice.

      Despite being of the opinion that Kerry > Bush (I actually voted for Badnarik, though), I can say that in the elections I monitored, all votes were counted correctly. I can't speak to any voter intimidation issues or anything like that, but I'm confident that the votes were counted correctly during the recounts. The only thing that bothered me was that in more than a few counties there were a different number of ballots counted during the recount than during the first count.

    4. Re:Recount? by feed_me_cereal · · Score: 1

      I don't live in ohio anymore, but I lived in columbus during the 2004 elections, and the thing that bothered me the most was the lines. I lived in a black neighborhood and waited for more than 3 hours to vote. They had 3 machines running. I remember that 2 years prior there were 7 machines and practically no line. Also, my boss, who lives in a more conservative rural area, had 7 machines and no line. I don't know what kind of mistakes or non-mistakes led to that happening, but to me, that was pretty bad. Why would they move the machines *out* of my district, when we clearly needed them?

      --
      "Question with boldness even the existence of a god." - Thomas Jefferson
    5. Re:Recount? by stinerman · · Score: 1

      Yeah, I can't testify to seeing any of that in 2004. I waited about an hour in the early afternoon in a largely Republican area (Fairborn, OH). AFAIK, local election boards ask for requests for machines from the SoS, who grants the allocations. As far as I know the local board allocates those machines as they see fit. So your problem is with Matt Damschroder (R), and his allocation of the machines in Franklin county.

      Oddly enough, the general trend was more machines in rural (Republican) areas and less machines in urban (Democratic) areas. I leave it as an exercise to the reader to decide if this was random incompetence or a strategy to decrease urban turnout.

  11. Would now be a good time by Rob+T+Firefly · · Score: 1

    for a simultaneous nationwide facepalm?

  12. Re:Give It Up!! by Anonymous Coward · · Score: 0

    What is really sad is how you so reflexively defend the republicans against vote fraud that you didnt even bother to notice that the 2006 elections were mostly won by democrats.

  13. Don't ATMs access databases too? by mdsolar · · Score: 4, Insightful

    I've had very few banking errors using ATMs and I'm quite sure that I am not the only user on the system when I do use them. Why would this company have any trouble with this kind of operation? Is it because there is no accounting so they don't bother to get it right?
    --
    Vote with your roof! http://mdsolar.blogspot.com/2007/01/slashdot-users -selling-solar.html

    1. Re:Don't ATMs access databases too? by Ken+Hall · · Score: 5, Insightful

      A number of years ago, I was responsible for handling software problem reports for a couple of vendors ATM machines. (We were a third-party service company.)

      The things that went wrong with ATMs were both funny and scary. I have no reason to believe things have changed. The banks and manufacturers go to great lengths to satisfy customers without letting details of the problems get out, because this would undermine confidence in the devices.

      With ATMs, if you're smart, you have a slip of paper to verify a transaction. If there's a dispute with the bank, the bank will usually honor the paper documentation, and the customer has no reason to make an issue of the problem.

      With voting, there's no going back and fixing results after the fact. Often there's no piece of paper. And on top of that, the whole process is under fairly intense public and governmental scrutiny.

      So I wouldn't say there are less problems with ATMs. You just don't hear about them.

    2. Re:Don't ATMs access databases too? by mdsolar · · Score: 1

      I guess you're right, my experience of reliability is not an adequate sample. I have had a chance to partially check that my vote is counted a few times. Most recently, our candidate for state comptroller was removed from the ballot for no apparant reason. So, I wrote him back in and saw a vote counted in my precinct. That the system worked in one instance does not mean that it worked overall. He's a fun candidate, won't take any contributions over $100 when he runs and he gives great interviews.

    3. Re:Don't ATMs access databases too? by M.+Baranczak · · Score: 1

      I've had very few banking errors using ATMs and I'm quite sure that I am not the only user on the system when I do use them. Why would this company have any trouble with this kind of operation? Is it because there is no accounting so they don't bother to get it right?

      Yeah, accountability is key. If there's money missing from your account, you WILL raise a stink. If your vote wasn't counted, you won't even know about it.

      The other reason: the ATM company doesn't actually maintain the database, the bank does that. An ATM is just a database client, which only has to handle one transaction at a time. Much harder to screw up. (At least, that's my understanding of it. I've never worked on banking systems.)

    4. Re:Don't ATMs access databases too? by darkwhite · · Score: 1

      One key difference is that I'm pretty sure ATMs use a very mature client-server protocol on a dedicated link. As such, ATMs remain single-user devices where the database end is not the ATM maker's problem. Also, compartmentalizing of departments may mean little to no technology is shared between the ATM and voting departments at all...

      --

      [an error occurred while processing this directive]
  14. Re:Give It Up!! by jimstapleton · · Score: 1

    Learn to read and analyze data instead of kneejerking please

    This is about the 2006 election. To remind you, that's when Ohio went Blue.

    Don't get me wrong, there are many cases where 'sore looser leftie' is a potentially valid complaint. This isn't one of them.

    --
    34486853790
    Connection too slow for X forwarding? Try "ssh -CX user@host"
  15. Problem-free election? by Kohath · · Score: 1, Troll

    I await the next problem-free election. You know, the one where no one can even insinuate anything went wrong.

    - There will have to be perfect information about every tiny detail of that election, or they'll say "What are they not telling us? What are they trying to hide?"
    - Everyone will have to find out absolutely everything at exactly the same time. Otherwise "Why did they wait to release that information? What were they trying to hide?"
    - All of the ballots will have to be exactly the same. Otherwise "The ballots were misleading!". (Even though every locality has to have different ballots. Hmm.)
    - All of the ballots will have to be in every dialect of every language, modern, extinct, or completely made up. Otherwise, it's "not fair".
    - No voter can ever have ambiguous eligibility. I guess we'll all have to agree on who is a voter and who isn't before the election. This will have to include a comprehensive list of names there's unanimous agreement on.
    - And voters will have to be able to "become" eligible up to the end of voting on election day. Otherwise, someone will be disenfranchised.
    - And, of course, none of the thousands of election workers can even make the tiniest mistake.

    Without this, the election is FIXED. (Unless my guy won. Then it was fair.)

    1. Re:Problem-free election? by Dr.+Manhattan · · Score: 4, Insightful

      I await the next problem-free election. You know, the one where no one can even insinuate anything went wrong.

      In point of fact, there is a difference between "requiring perfection" and "avoiding obvious incompetence". Just, y'know, for future reference.

      --
      PHEM - party like it's 1997-2003!
    2. Re:Problem-free election? by truthsearch · · Score: 2, Insightful

      While there's no such thing as perfect, we can still try to get reasonably close. For elections we can sure get a lot closer to real accuracy. A few people will always claim it's fixed. But when you have multiple documentary films, books, and protests there's obviously something wrong.

    3. Re:Problem-free election? by Danathar · · Score: 3, Insightful

      NO! There is only OBVIOUSLY something wrong if there is EVIDENCE that something is wrong.

      Mob, Press and Documentary video TV accusations do not constitute legitimate evidence unless they have facts to back up their claims (not saying they don't).

      Guilt by association is one Logical Fallacy which is throw around a lot these days.

    4. Re:Problem-free election? by Bill,+Shooter+of+Bul · · Score: 1

      Depends on the margin of victory. There will always be "multiple documentary films, books, and protests " whenever the margin of error is close to the margin of victory. There aways have been, and there always will.

      --
      Well.. maybe. Or Maybe not. But Definitely not sort of.
    5. Re:Problem-free election? by SeaFox · · Score: 2, Insightful
      1. Diebold practices incompetence in design of voting machine tabulation backend.
      2. Diebold fights tooth-and-nail to have voting machine software closed and not available for inspection by anyone.

      Coincidence? Gee, I wonder...
    6. Re:Problem-free election? by Anonymous Coward · · Score: 3, Informative

      So, I've worked federal elections in Canada multiple times, and we *do* accomplish most of what you suggest above. The election is managed at the federal level by an arms-length organization.

      The public is allowed to watch at every step of the process (especially counting).
      Voting times are staggered across the country so that everyone learns what happened at the same time.
      All the ballots *are* exactly the same. This is not a difficult task.
      The ballots have only the name of the candidate and the name of the party. Voters of all different ethnicities (this is Toronto) seem to have no problem. Also, we try to station people who speak the language of the neighbourhood at the polling stations. If the voters really need to, they bring a copy of the literature with them, and find the name which is the same on the ballot, and mark their 'X'.
      The eligibility standard is very simple: All Canadian citizens 18yrs or older on election day who are resident in that riding may vote. Credentials are not required unless in the case of a challenge, or if they need to register or change ridings.
      They can register at any time up to the end of election day, at the polling station. This is important, so that people will not be disenfranchised.
      The purpose of having thousands of election workers and having distributed counting is so that mistakes are relatively random. If it's too close, it's sent to judicial recount, and things are looked at more closely.

      This is one way to run a fair election.

      I was not involved in the Ohio election, so I cannot give my professional opinion, but from what I've heard from the media, there were numerous conflicts of interest which would be illegal in Canada, and numerous other irregularities which would be illegal even in the U.S.

  16. Mindboggling by Anonymous Coward · · Score: 0

    What neophyte picked MS Access for a dynamic multiuser environment, and how is it that their life isn't a living hell of crashes and deadlocks as a result? (You know, the way mine was.)

  17. Dumb Idea by the+Dragonweaver · · Score: 2

    I think this is what you call "not ready for prime time." I much prefer my county's system, which has a Scantron-like form that you fill in with pen and which gets scanned on-site, giving you an instant total-- and an immediate notification if there's an overvote or undervote. Plus there's that handy little paper trail...

    Of course, the part that gets me angriest, as a former poll worker, is the fact that there are people who will mess with someone else's vote. You don't do that.

    --
    Actually I am a lab rat in an elaborate plot to take over the world.
  18. Next up on "Government Contracts!" by RyanFenton · · Score: 5, Funny

    In the last episode, the capitol building collapsed - and now, the following letter appeared on the broken stairsteps to the Ohio capitol:

    "We're sorry that the capitol building collapsed, but it ends up that we used Licoln Logs to build the dome, and it ends up that it collapses when the wind hits it from multiple directions at once.

    We've gotten some complaints that we should have expected this, and were "total morons" for choosing such a design. We think this is a gross oversimplification, and more than a little unfair. We used multiple layers of high-quality chewing gum to secure the dome, which required countless hours of chewing, along with thousands of gallons of spittle. When you complain against such a massive effort, you insult the sore mouths of our hard working employees.

    Sincerely,
    Halliburton CEO
    Bozo D. Clown"

    Next episode: FEMA picks up the pieces.

    Ryan Fenton

    1. Re:Next up on "Government Contracts!" by 192939495969798999 · · Score: 1

      I'll have you know the dome is chewing gum, ceiling wax, and other fancy stuff!

      --
      stuff |
  19. Monkeys by Anonymous Coward · · Score: 0

    They should have hired those monkeys from the careerbuilder.com commercial to design the system. They would have done a better job. Who in their right mind would use Jet for this or for anything important for that matter? "Free" apparently drove the choice.

    1. Re:Monkeys by debozero · · Score: 1

      "......Who in their right mind would use Jet for this or for anything important for that matter?"

      To answer the above question:
      A: A salesman who just got back from a MS sales conference. The sad part is I am not to suprised they would make a stupid move like using Jet considering I have worked at places that could not understand why their accounting system kept crashing once they got to 99,000 records. It was because the sales manager decided the entire accounting system should be run on MS Access because SQL Server or Oracle was to expensive which was the stated reason, the actual reason was that $30,000 or so he saved in not using a DBMS designed for large data sets was then given to him in the form of a bonus for his ability to save the company money. He quit 3 weeks after the product was completed and rolled out. Oh and it cost them an additional $100,000 after 3 months of problems to develop a new accounting system which they decided then to get input from their IS department.

      Question: What database do the DIEBOLD ATM systems use for transactions?

      If you are not angry can I have some of your drugs?

  20. Re:This crap again?? by Anonymous Coward · · Score: 0

    > about their side loosing on this one.

    How did one side become less tight than the other?

  21. Re:Give It Up!! by Anonymous Coward · · Score: 0

    Hey genius, you don't think that there's a few corrupt Dems that would take advantage of exploiting known weaknesses in Diebold's shitty voting machines to steal an election? If you don't, then you're fucking naïve.

  22. I was going to ask for the hahaha tag, but by zappepcs · · Score: 3, Insightful

    this really isn't about MS having a shitty database. It's really about Diebold not knowing how to design a database application. Other than that, I'm just too shocked to say anything while quietly making a mental note to avoid all things called Jet from MS and anything that comes from Diebold.

    1. Re:I was going to ask for the hahaha tag, but by Rob+the+Bold · · Score: 1

      this really isn't about MS having a shitty database. It's really about Diebold not knowing how to design a database application.

      The fact that it was built with Jet suggests that it was initially designed as a non-networked, single-user system initially. Votes were probably uploaded one machine at a time (batch style) for counting purposes. What happened next was "organic growth" of the product. Let me speculate (harp music plays) . . .

      Along comes the idea that they need to network the voting machines together at a polling place, or even an entire voting jurisdiction. It makes sense. Only thing is, they use Jet. And worse than that, they use a bunch of proprietary features. So switching to a multi-user database is way worse than just switching database engines. They face a huge code rewrite. Database-specific code is mixed together with other aspects of the system. Nothing is split into any kind of tiered structure. And the "Jet Guy" has moved on to another job.

      So they puzzle out how to access a remote Jet database, set up the voting machines so they can be configured for local or remote db, and now you've got networked voting machines. Problem solved. No rewrite, no expensive contracting.

      --
      I am not a crackpot.
    2. Re:I was going to ask for the hahaha tag, but by sgt_doom · · Score: 1
      really about Diebold not knowing how to design a database application.

      No, I would strenuously disagree - Diebold is fully aware of what they are doing and fully capable of doing otherwise - to continue to ascribe incompetence to specific, culpable behavior in 2007 - after all the forensic accounting has been done on the profits from the 9/11/01 attacks, the extraordinary and historic war profiteering going on under the present super-criminal administration in the Oval Office, no longer flies.....

  23. So... by Lithdren · · Score: 3, Insightful

    When does someone bring them to court over SCREWING UP AN ELECTION.

    Seriously, I dont care if the errors caused changed the outcome or not, its fairly clear that they failed, in the worst possible way, to maintain the level of creditability needed for a damn election. This isn't a "oops, my bad" This should be a federal offence with manditory jail time.

    No system is perfect, but come on, JET!? Might as well have the vote counted in diffrent states by the party currently in power, would be just as accurate.

  24. Re:Give It Up!! by mroberts47 · · Score: 0, Flamebait

    I'll give you, Republicans ain't always right and neither are Democrats, but when Democrats almost always scream fraud! when they don't win it's pretty easy to discount them quickly just because they are always up in arms about it.

    --
    "When you can't run anymore, you crawl... and when you can't do that, you find someone to carry you." - Malcolm Reynolds
  25. can't believe they're still used by jack455 · · Score: 2, Insightful

    They make horrible voting machines, and in TFA it's claimed they tabulate results at the precinct level not the machine level. DUMB.

    I do understand why Republicans get so defensive about this,but these machines have to GO.

    The /. articles will likely continue until they're no longer used, for obvious reasons.

  26. I smell fud by ericlondaits · · Score: 4, Interesting
    I smell FUD here...

    The engine, according to Microsoft, is vulnerable to corruption when a lot of concurrent activity is happening with the database, such as what occurs on an election night when results are uploaded and various servers are interacting with the database simultaneously."


    Now, I'd never think about developing this on a Microsoft Jet DB, since it's been somewhat deprecated for the MS Desktop SQL Server (MSDE) and SQL Server 2005 Express, which are much better and lightweight enough for a current desktop.

    Nonetheless... what MS probably stated is that basically access to a JET Db is not thread safe, which means that concurrent access will cause corruption with a probability directly proportional to the amount of activity. YET if you serialize access to a Jet Db (which is a necessary and basic requirement given that it's not thread safe) there shouldn't be a fear of corruption, unless the API is buggy. If each voting station has a Jet Db and they all get exported to a central (thread safe) db then there's no need for concurrent access to any of the individual Jet DBs, and there shouldn't be a big fear of data corruption (which, anyway, can be verified somewhat easily).
    --
    As a Slashdot discussion grows longer, the probability of an analogy involving cars approaches one.
    1. Re:I smell fud by RingDev · · Score: 1

      The fact that they are using a Jet DB in this way should give you a clue as to their ability to write thread safe code.

      -Rick

      --
      "Most people in the U.S. wouldn't know they live in a tyrannical state if it walked up and grabbed their junk." - MyFirs
    2. Re:I smell fud by Red+Flayer · · Score: 1

      and there shouldn't be a big fear of data corruption (which, anyway, can be verified somewhat easily).
      And what do you do if there is a discrepancy due to data corruption? It's not like there is a paper trail to go back to...
      --
      "Trolls they were, but filled with the evil will of their master: a fell race..." -- J.R.R. Tolkien on Olog-hai
    3. Re:I smell fud by EvilTwinSkippy · · Score: 4, Funny

      That's a bit like saying you can run a traffic light with a Lego Mindstorms on a massive intersection where 8 lanes of traffic intersects another 8 lanes, with both right and left turns allowed.

      You just have to boost the 5v output using an op-amp, and secure the lead with a clamp or some electrical tape so it won't wiggle out.

      --
      "Learning is not compulsory... neither is survival."
      --Dr.W.Edwards Deming
    4. Re:I smell fud by icepick72 · · Score: 1

      Kudos. That's the best explanation I've seen posted here yet.
      A simple C# code fragment to serialize access to the Jet DB can go like this.
      -----

      // NOTE: To Diebold -- Please copy and paste this into your application. Thank you.

      public class DbWriter
      {
        private static object _sync = new object();

        public static void WriteSomeData(/* args ....*/)
        {
          lock(_sync) {
            /*Put statements here to write data */
          }
        }

        private DbWriter() {/* hidden ctor */}
      }

      // or VB.NET is just as easy

      Shared Sub WriteSomeData() 'Args
          SyncLock _sync
              /* Put Db writing statements here. */
          End SyncLock
      End Sub

    5. Re:I smell fud by sholden · · Score: 4, Insightful

      1. The data is corrupted (totals are different)
      2. There's a known data corruption issue in the engine caused by concurrent activity

      A reasonable conclusion is that the programmers were idiots and wrote an non-thread safe application with multiple threads. Another conclusion would be they intentionally attempted to fix the election. Incompetence before dishonest is the usual way to approach those things...

    6. Re:I smell fud by Anonymous Coward · · Score: 0

      So you are defending their use of a product in a situation which the vendor strongly advises against? It is FUD that they used a product with known problems affecting reliability? In an election?

      Their design would probably get me fired, and I'm not in charge of elections.

      Pointing out gross incompetence is FUD?

    7. Re:I smell fud by ericlondaits · · Score: 1

      I mean Data corruption during the merge of all the voting stations. That can be checked through a hash or similar procedure. Assuming of course that the merge is done in a serialized fashion and not exposed to a very likely corruption.

      During the voting, assuming each station has it's own Jet db, then the db is hit with a single INSERT every N minutes. Hardly critical. It could be trusted to a simple comma separated file as well. The fact that the jet db doesn't keep a log only means that a vote might be lost if the system goes down at the time a vote is being cast... (or that the data could be in an inconsistent state IF there was any need for transactions, but then Jet wouldn't be enough and I don't see the need for transactions in a simple voting db) but that's not enough to significantly affect the election, and with a solid db with transaction support you'd still have to convince the general public that their vote is safely stored even though the power went down right after they pressed the button.

      I wouldn't have used Jet... that's for sure... but I don't think it's so easy to point as why it's not kosher. After all... let's start with the fact that this are windows desktops and not real time systems chock-full of redundant hardware or anything, so the whole solution is probably based on the idea of using cheap non-fail-safe parts with some strict points of control here and there to avoid data loss or corruption.

      --
      As a Slashdot discussion grows longer, the probability of an analogy involving cars approaches one.
    8. Re:I smell fud by Rob+the+Bold · · Score: 1

      A simple C# code fragment to serialize access to the Jet DB can go like this.

      Sure, you could lock the database on the server every time a client updates a record. And you could make sure that the clients know how to wait and retry if the server table is locked. In theory, that works fine. In practice, though, the clients probably update the server tables piecemeal, not nice atomic commits. So we'd have a recipe for deadlock.

      You are correct that it could be done, but with the amount of work it would take, I think that it would be a better use of resources to switch to a multi-tier architecture, and thus get rid of the Jet Engine. The fact that they apparently did neither says a lot.

      --
      I am not a crackpot.
    9. Re:I smell fud by blindd0t · · Score: 2, Informative

      Honestly, that has a much better chance of working than a voting system using a Jet database. ^_^

    10. Re:I smell fud by shalmaneser1 · · Score: 2, Interesting

      whenever a successful company, that should know better, doesn't know better, i can't help think that somewhere, someone said: "well let's put joe on the job. he's never actually programmed before, but the bug fixes will keep this contract going for years."
      i wonder if, to encourage problems, either diebold, or the government contracts with diebold, deliberately enshrined incompetence in some way via timelines, pricing, obtuse/antiquated software requirements.

    11. Re:I smell fud by Deadplant · · Score: 1

      The problem is not simply that the chosen db back-end has some significant drawbacks.
      Any system can and will have bugs and weak areas... What makes this scandalous is that Jet (MS Access) is literally THE crappy database engine and everyone knows/knew this.
      If a DB admin or programmer is going to make a joke about a farked-up database project the db will be ms-access.
      If you are going to mock a competitor you might suggest that they build their software using visual basic and a JET database.

      None of this is news, JET has been widely considered the worst possible choice for many years now.
      Choosing JET for an election system DB is right up there with re-publishing stories from the onion as real news.

      Guys, you are using the "joke" database. and that's not funny.

    12. Re:I smell fud by icepick72 · · Score: 1

      You're right. It's just fun to post a simple code fragment in an attempt to make Diebold look foolish. You know, kick the man when he's down type of thing. It's not straight up but it's still a lot of fun.

    13. Re:I smell fud by Secrity · · Score: 1

      Except for the fact that the company who built the machines seems to have an agenda that was better served by having properly corrupted data.

      In a Republican fund raiding letter, the president of Diebold indicates his bias by saying that he is "committed to helping Ohio deliver its electoral votes to the president next year."

    14. Re:I smell fud by natophonic · · Score: 1


      I think it's more like trying to haul semi-truck trailers using fourteen Toyota Celicas all roped to the tailer hitch.

      Acutally, that analogy sucks, because it refers to trucks as well as cars...

    15. Re:I smell fud by george14215 · · Score: 1

      Well, the important question to ask Diebold engineers is whether their use case scenarios ever exposed the Jet DB to concurrent access. And if so, whether they took mitigating steps to handle that known issue.

    16. Re:I smell fud by Anonymous Coward · · Score: 0

      I suspect you'll want to use triacs rather than opamps.

      No sense in messing up a great idea with a sloppy implementation! ;-)

  27. Re:Give It Up!! by jimstapleton · · Score: 1

    but this isn't necessarily even the democrats that are complaining.

    It's just people who found screwups in Dibold voting devices.

    --
    34486853790
    Connection too slow for X forwarding? Try "ssh -CX user@host"
  28. The Democrats Did Win by cwgmpls · · Score: 1

    The election in question here is November 2006. The Democrats did win in November 2006.

  29. Re:Give It Up!! by mroberts47 · · Score: 1

    You do have a point, sometimes I forget that just because I don't like certain doesn't mean they can't have a valid point.

    --
    "When you can't run anymore, you crawl... and when you can't do that, you find someone to carry you." - Malcolm Reynolds
  30. Re:Give It Up!! by Anonymous Coward · · Score: 0

    At the same time, when an election that was mostly won by democrats brings out republican shills that say "we won fair and square" automatically, it is kind of hard to see them as anything but ditto heads. Hell even rush limbaugh probably isnt that stupid.

  31. incompetent by HazMathew · · Score: 1

    I had a job interview with Diebold about 4 years ago. This makes me glad they never called me back.

    1. Re:incompetent by Anonymous Coward · · Score: 0

      I'm guessing they couldn't get the phones to work.

    2. Re:incompetent by Chosen+Reject · · Score: 1

      What does that even mean when not even the incompetent want you? I kid, I kid.

      --
      Stop Global Warming!
      Just say no to irreversible processes!
    3. Re:incompetent by Anonymous Coward · · Score: 0

      I think that means you're at fault for not getting the job there and doing it right!

    4. Re:incompetent by Anonymous Coward · · Score: 0

      What does that even mean when not even the incompetent want you?


      That maybe you're better than they are because
      a) they know you would make them look bad in comparison, or
      b) when you actually propose something rational, they think you are a fool because you disagree with them.

      See US politics, 2000-2007
  32. OK Is it just me or what by Anonymous Coward · · Score: 0

    I've been programming for 25 years and many various systems and this just does not seem like that difficult of a system to write. Am I missing something? You show a screen with the candidates for an election, have the person touch the screen, "Are you sure?" Yes/No got to the next one. At the end show all the selections. Are you sure again, print off the results twice, once for them once for an audit trail. Store the results in a database. And then it counts the votes. If they don't want to go through all the paper, send it to a PDF or something. Have a couple layers of redundancy (local, county, state) just to keep everything in sync. I guess I just don't see the difficulty. Allow officals to see the code. Count+=1

    Maybe this will be my summer project.

    1. Re:OK Is it just me or what by bodland · · Score: 1

      Yes but the tough part is writing it so you can manipulate the results with out detection....using a JET engine...sheesh...

    2. Re:OK Is it just me or what by Fahrenheit+450 · · Score: 1

      That will supply the voter with a third party verifiable proof of who they voted for. This is a bad thing.
      What you want is the ability for the system to prove to you that it tabulated your votes correctly, but to do it in a way that you can't use that proof to convince a third party.

      There's a whole lot of other niggling problems that are desirable and seem to oppose each other. Voting is a tough nut to crack correctly.

      --
      -30-
    3. Re:OK Is it just me or what by hchaos · · Score: 1

      That will supply the voter with a third party verifiable proof of who they voted for. This is a bad thing.
      Someone always brings this up, and I just don't buy it. For one thing, the ticket doesn't need to be stamped with any clear-text identifying information, so you can know that I possess a ticket that proves that someone voted a certain way, but you don't know how I got that ticket. Secondly, if I wanted verifiable proof, I can think of plenty of ways of doing that more reliably. For example, a cell phone camera will have good enough resolution, and everybody has one.
    4. Re:OK Is it just me or what by Fahrenheit+450 · · Score: 1

      For one thing, the ticket doesn't need to be stamped with any clear-text identifying information, so you can know that I possess a ticket that proves that someone voted a certain way, but you don't know how I got that ticket

      But if this is the case then you can't verify that your vote was tabulated correctly, either. Either your receipt has to have some official linkage to the system (otherwise you could generate a false receipt and falsely claim there was a flaw in the tabulation of your vote), or the receipt has to be devoid of information for everybody, the voter included.

      For example, a cell phone camera will have good enough resolution, and everybody has one.

      Yes, that's the equivalent of the analog hole in DRM. And as I believe it is, it's already illegal to take photographs of your votes (I could be wrong on that).
      You don't want to add a weakness into the system that doesn't have to be there.

      --
      -30-
  33. 2 databases?!? by Artaxs · · Score: 5, Insightful

    Look, let's say I had hired an accountant. Then, let's say that I found out that he was keeping two separate databases of my finances. Let's also say that they had different totals in them, and he was only showing me one of them.

    Not only would I fire his ass, but I'd make sure to press criminal charges of fraud. Why are these creeps from Diebold, Sequoia, ES&S, et. all not in prison yet?

    Diebold makes ATMs; don't tell me that they can't get something as simple as a vote database right. Occam's Razor points to outright fraud, not to simple incompetence.

    --
    Militant Agnostic: "I don't know, and damn it, neither do you!"
    1. Re:2 databases?!? by EvilTwinSkippy · · Score: 3, Interesting

      Diebold makes ATM's, but the banks keep all the records.

      That's a bit like saying Panasonic would make a great a telephone carrier because they make phones.

      --
      "Learning is not compulsory... neither is survival."
      --Dr.W.Edwards Deming
    2. Re:2 databases?!? by k1e0x · · Score: 1

      When the government scrwes up.. It's not their fault.. they are almost impossible to sue or hold accountable.. and its only because they dont have enough funding.. naturally. ;-) We need to give them more money and build a bigger better Jet Database.

      --
      Bringing liberty to the masses. - http://freetalklive.com/
  34. Oh yes by WindBourne · · Score: 2, Insightful

    After seeing how they develop, I absolutely like the idea of their going back to handling my money.

    --
    I prefer the "u" in honour as it seems to be missing these days.
  35. What always amazes me by Anonymous Coward · · Score: 2, Insightful

    I consider voting machines to be a pretty straightforward application of computer technology: counting things. There are thousands of examples of this being done with complete accuracy. Heck, Wal-Mart always knows how many boxes of ice cream it has in every store and the exact temperature of each freezer. Diebold gets the contract and you'd think they were trying to land a man on Pluto.

    Voting machines need to be an open-source project anyway. We ALL need to know what's going on in those things.

  36. Unbelievable by Anonymous Coward · · Score: 0

    This is so pathetic. I recall a saying that basically says never attribute to malice what can be explained by incompetence. I suspect that these election failures are the result of serious incompetence on the part of Diebold and/or election officials.

  37. Re:This crap again?? by Anonymous Coward · · Score: 0

    > > about their side loosing on this one.

    > How did one side become less tight than the other?

    Too much gay sex, obviously.

  38. Re:Give It Up!! by Anonymous Coward · · Score: 0

    > 'sore looser leftie'

    WTF does that mean? The lefties are less tight than what? How does being loose make them sore?

  39. Re:This crap again?? by eln · · Score: 1

    How did one side become less tight than the other?

    By getting repeatedly fucked by the other party?

  40. Re:Give It Up!! by mroberts47 · · Score: 0

    Oh come on, that was so not flamebait.

    --
    "When you can't run anymore, you crawl... and when you can't do that, you find someone to carry you." - Malcolm Reynolds
  41. Isn't democracy mission critical? by MosesJones · · Score: 4, Interesting

    Reading this made me think about my time doing safety critical systems (it fails, someone dies) and its really stunning to think that something like voting in a democracy isn't considered mission critical to the country.

    There really is no excuse for voting to not be done on a comparative basis e.g. every vote to be checked via 3 different software lines (this isn't rocket science) and a voting system to then confirm that the vote is being applied correctly. This vote should then be written to two (at least) data sources to enable reconciliation at the end.

    This is a freaking implementation of a check-box system where is the sodding complexity that means its expensive to be professional.

    Voting in a democracy is mission critical, to not consider it that way is to say that voting doesn't matter.

    --
    An Eye for an Eye will make the whole world blind - Gandhi
    1. Re:Isn't democracy mission critical? by EvilTwinSkippy · · Score: 1

      Lets put it this way. More care goes into checking tickets at a rock concert.

      Your paper ticket has a barcode on it. The nice people at the turnstile scan it, the number is checked in the database and you get a nice instant feedback if the ticket has been used or is totally bogus. They handle thousands of people crushing into the gate in the space of minutes, on the outside hours. And they use off the shelf equipment and standard DSL or T1 lines.

      --
      "Learning is not compulsory... neither is survival."
      --Dr.W.Edwards Deming
    2. Re:Isn't democracy mission critical? by WhiteDragon · · Score: 1

      Lets put it this way. More care goes into checking tickets at a rock concert.

      Your paper ticket has a barcode on it. The nice people at the turnstile scan it, the number is checked in the database and you get a nice instant feedback if the ticket has been used or is totally bogus. They handle thousands of people crushing into the gate in the space of minutes, on the outside hours. And they use off the shelf equipment and standard DSL or T1 lines. Not to mention the fact that the database has total concurrency with independent (presumably networked) scanner-terminals. In fact, Diebold should ask ticketmaster who made their database system and use it.
      --
      Did you mount a military-grade, variable-focus MASER on an unlicensed artificial intelligence?
  42. They used JET? by hcmtnbiker · · Score: 1

    Vote totals in two separate databases that should have been identical had different totals. Although Diebold explained that this was part of the system design for separate vote tables to get updated at different times during the tabulation process, the team questioned the wisdom of a design that creates non-identical vote totals. That actually doesn't scare me at all, after working with DBs and knowing how they work you commonly fix problems by doing things such as that, but what does scare me is this...

    Tables in the database contained elements that were missing date and time stamps that would indicate when information was entered.

    Entries that did have date/time stamps showed a January 1, 1970 date.

    TFA didn't say, but does anyone know if it is possible to get an accurate, tally? Would it make a difference?

    Another interesting point, if this is the worst of the corruption then it's likely to be possible to retrieve a 'very accurate' tally. But why the hell did they use the JET engine, to save a few pennies? The JET engine is one of the WORST things ever to come out of M$, I would put it even in front of WinME on that list. I've seen database corruption with only one user doing very minimal read/write/modify to it before.
    --
    If i had one dollar for every brain you dont have, i would have $1.
  43. Dang. by JanusFury · · Score: 1

    If they're dumb enough to use Jet in this sort of application, I'd hate to see their database schema... it'd probably make my eyes bleed.

    --
    using namespace slashdot;
    troll::post();
    1. Re:Dang. by EvilTwinSkippy · · Score: 1

      I'd bet it's optimized for maximum corruption. With one giant index with all the fields in it. And stores binary copies of the hamsterdance song in every record.

      It's funny that these guys think that while you can be charged with conspiracy, you can't be charged with stupidity. Actually you can: it's called reckless endangerment. There is also the civil charges of malpractice. Since there is public money involved: Fraud. (Using substandard materials when you know it's completely inappropriate for the job at hand. And if you didn't know YOU DAMN WELL SHOULD HAVE IF YOU ARE TAKING THE GOVERNMENT'S MONEY.)

      The only thing keeping these jokers from breaking rocks is the fact the republicans are in power.... or were in power... ohh this is going to be interesting.

      --
      "Learning is not compulsory... neither is survival."
      --Dr.W.Edwards Deming
    2. Re:Dang. by KiltedKnight · · Score: 1

      The only thing keeping these jokers from breaking rocks is the fact the republicans are in power.... or were in power... ohh this is going to be interesting.
      While I agree that it will get interesting, if the Democrats knew about this problem and then used it, doesn't that make them just as criminally liable for misuse and voter fraud as the people who caused the problem in the first place?

      I can see it now... Democrats are going to lambaste me, Republicans are going to deny there's a problem, and anyone with the capability of logical thought will agree, or at least present a good argument as to how there are differences.

      I do not, for a moment, believe that anyone who knew about this "irregularity" in the system and failed to raise issues before the election is innocent. While the candidates themselves may not have known, party leaders and/or loyalists are the more likely candidates for who knew and abused the system. I also blame the designers for poor design and implementation work.

      --
      OCO is Loco
    3. Re:Dang. by EvilTwinSkippy · · Score: 1

      Nope, no Lambasting here.

      I don't vote as a Democrat or Republican. I vote as an American.

      --
      "Learning is not compulsory... neither is survival."
      --Dr.W.Edwards Deming
  44. FUD for sure by mdsolar · · Score: 1

    Yes, Finally Understanding Deceit or Fraudulantly Undermining Dependability. These guys tried to hide that they were peddling junk by saying it was proprietary. There are no accurate time stamps. You can verify corruption as has just happened, but you can't recover from it. Every single elections official that signed a contract with Diebold needs to be investigated. If there were no kickbacks, and they really knew nothing of this, then this surely is fraud.

  45. Incompetence? An excellent foil. by Anonymous Coward · · Score: 0

    Designed to fail, more likely.

    But don't worry, Diebold has spent the bucks to make SURE
    that at then end of the night, the machine prints.

    And then we know who rules the world for a decade.

    So I guess the real question is, knowing all this...
    why are we not throwing rocks and setting people on fire?

    Mod me pissed and ranting, but WHY do we put up with this shit?
    Our forefathers would bitchslap us until their arms got tired.

  46. why the hell would you use ANY MS product? by toby · · Score: 0, Troll

    ...ANYWHERE in the system.

    Surest sign of technical incompetence there is.

    --
    you had me at #!
  47. You are wrong by geekoid · · Score: 1

    that's not borderline at all, that IS incompetence.

    --
    The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
  48. Re:I'm leaving...on a Jet plane. Don't know when.. by Anonymous Coward · · Score: 0

    Visual Basic? You're crazy. You should use brainfuck!

  49. Fraud by TheLink · · Score: 1

    Isn't this fraud in so many ways?

    Calling something a voting machine AND selling it, when it isn't a voting machine fit for that purpose at all.

    It's as much a voting machine as my bedsheet is a certified parachute fit for skydivers.

    They're lucky they're in the USA. In other countries they might actually get lynched by angry voters or executed (for treason?) if they escape the mob.

    But it'll be hard to convince the rest of the world that the US is interested in democracy and fair elections in Iraq if this sort of thing keeps happening in the USA.

    Maybe the USA should just modify and use the American Idol voting system. It can't be much worse than using Microsoft Jet and all the other crap Diebold is making.

    --
  50. Reminds me of my plane by geekoid · · Score: 1

    to build the space stations onboard inventory system in access.
    Then when it crashed, insist that it can only be fixed 'on site'.

    --
    The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
  51. Re:Give It Up!! by FiloEleven · · Score: 0, Offtopic

    > 'sore looser leftie'

    WTF does that mean? The lefties are less tight than what? How does being loose make them sore? If there were ever a proper time for a Goatse link, this would be it.
  52. sigh by pak9rabid · · Score: 1

    WTF were they thinking building such a massive database-driven application with Access?? Jesus Christ. No wonder government jobs are so fucking easy to get.

    1. Re:sigh by Anonymous Coward · · Score: 0

      WTF were they thinking building such a massive database-driven application with Access?? Jesus Christ. No wonder government jobs are so fucking easy to get.


      Only if you're a visible minority.
  53. Audits can be done using real database engines by hey! · · Score: 2, Insightful

    Real database engines keep complete transaction logs.

    Which is why when explaining a result matters, you use a real database engine, not something like jet, which is simply a library to maintain indexed files.

    --
    Post may contain irony: discontinue use if experiencing mood swings, nausea or elevated blood pressure.
    1. Re:Audits can be done using real database engines by Anonymous Coward · · Score: 0

      Who wants a database you can actually audit? There'd be no way to cheat then...

  54. Yes, only ... by Bearpaw · · Score: 1

    Would now be a good time for a simultaneous nationwide facepalm?

    Yes, only it'd be a little tough for the entire nation to simultaneously slap Walden O'Dell's face. I humbly offer my services as the nation's representative in this matter.

    Would someone like to claim dibs on Ken Blackwell?

  55. Even Microsoft Says No! by blueZhift · · Score: 1

    This is nearly unbelievable! So essentially the voting machines were running Access. Even Microsoft says that the Jet DB engine should not be used in situations when a lot of concurrent users are expected. So I guess this is one case where Microsoft cannot be the bad guy, shocker!

    Why would they do this? If cost was the issue, Jet vs SQL server say, then why not go with PostgreSQL, MySQL, or other free alternatives? Even if you're a Microsoft shop, it isn't that hard to make MS stuff interface with OSS DB backends.

    1. Re:Even Microsoft Says No! by Anonymous Coward · · Score: 0

      If they chose JET over MSSQL, it certainly wasn't a cost based decision. Any software that can run on JET can run better on SQLExpress, which is free (as in beer) to redistribute.

  56. the winner of the 2008 presidential election is.. by insanius · · Score: 2, Insightful

    George W. Bush!!!!!....wait a minute...WTF?!?!?!?....

  57. Re:Give It Up!! by Anonymous Coward · · Score: 0, Flamebait

    Actually it was. There is nothing wrong with being right of center, but if one of your right of center friends starts ignorantly going off about how democrats are whining about an election they actually won, just look away. There are idiots on both sides, you have no obligation to step in and attack democrats for sometimes being as stupid as your friend.

  58. I haven't seen a link posted for that yet. by Medievalist · · Score: 1

    ...even Microsoft, who wrote Jet and used it for years as the basis of Microsoft Access and Visual Basic's database component, says not to use it 'cause it's crap. Got a link for that?

    There's always SQL Server 2005 Express/Compact/whatever Edition, and this is what Microsoft recommends today. Hmmm, don't use our old product, it sucks, use our new product (which, of course, has no bugs whatsoever) available from us to you today! Have you driven a Ford... lately?
    1. Re:I haven't seen a link posted for that yet. by heinousjay · · Score: 1

      It's not a matter of anyone claiming that SQL Server is perfect. It's just that Jet is well known to be massively broken. If you don't think it is, you've never tried to do anything non-trivial with it.

      --
      Slashdot - where whining about luck is the new way to make the world you want.
    2. Re:I haven't seen a link posted for that yet. by LunaticTippy · · Score: 1

      SQL Server express is a good, and free product. It has some throttling for very high transaction rates, but other than that is just as good as SQL Server. It is a top-shelf database server, and I say that as someone who hates Microsoft.

      --
      Man, you really need that seminar!
  59. [OT] Your .sig by BandwidthHog · · Score: 3, Interesting

    Who the f*** decided that sentences on the Internet shall no longer be formatted with two spaces after a period?!

    It was always thus... Two spaces after a period is only appropriate in circumstances where all characters are the same width, such as an old-school typewriter. So nobody “decided” that it would be that way “on the Internet;” we just stopped using the special-case rules that sprung up a few decades prior when we were using technology that wasn’t capable of proportionally spaced type.

    --

    Quantum materiae materietur marmota monax si marmota monax materiam possit materiari?
    1. Re:[OT] Your .sig by Anonymous Coward · · Score: 0

      If it is useful in monospace fonts to make things easier to read, it's also useful in proportional fonts for the exact same reason. That's the point I'm trying to make, and every time someone replies to my pith, they are just regurgitating the standard line.

    2. Re:[OT] Your .sig by BandwidthHog · · Score: 1

      Yes, and three spaces would be even easier.

      Hell, while we’re at it, “chief” would be easier to spell if we spelled it “cheef,” as its pronunciation would imply. But we don’t do that, either. So sorry.

      --

      Quantum materiae materietur marmota monax si marmota monax materiam possit materiari?
  60. I woudn't have used Jet by marcomarrero · · Score: 1

    I would have chosen something more reliable, although I don't think the problem was caused by Jet (storing wrong timestamps doesn't make any sense). Jet is not perfect, but it can handle small jobs, and probably it could have been made to handle voting machines also.

    Assuming they has plenty of experience with Jet (or MS Access), there are many ways to avoid corrupting data. Jet hates when the network is disconnected, having too many indexes, keeping records locked, and of course blue-screens and power failures. A daily "compact and repair" is good, but doing it for the first time after something begins to act weird is really dangerous! A good database design is also necessary. I would have kept a local copy, kept a log, manage most data locally, make a daily backup, etc.

    I unfortunately have worked with MS Access for 10 years, mostly small applications. I think at most I've had 25 users in Access 97 in a slow network, I never had corrupt data. I have corrupted things during the development process constantly. The undocumented SaveAsText and LoadFromtext are my friends.

    Thinking of the voting process, it is mostly appending data, which Jet should have handled easily...

    1. Re:I woudn't have used Jet by sirambrose · · Score: 1

      How does a daily backup help you when the machine only gets used on one day per year? Restoring an empty daily database over a partially corrupted vote database doesn't seem like a good idea.

  61. Feel free to ... by Bearpaw · · Score: 1

    Feel free to take your suggestion to the Department of Justice. I'm sure Attorney General Gonzales will give your suggestion the careful attention it deserves. [cough]

  62. Just a reason to spend yet more money? by Anonymous Coward · · Score: 0

    Great, so the election is possibly fraudalent (see other /. articles for all the other issues). Why should the reps and senators care? This just gives them a soapbox to stand on and state how they are going to fix it (again, not that they didn't 'fix' this election mighty well to start with), and it gives them reasons to funnel even more money to the corporate power-mungers in the name of getting it right.

  63. Re:Give It Up!! by zippthorne · · Score: 1

    So.. was the fraud corrected, or re purposed?

    --
    Can you be Even More Awesome?!
  64. Transparency is the issue by gelfling · · Score: 1

    We can use any tools we want. Hell if they want to shrink down tiny scribes who are placed in the machines to write everything down, then fine. But they have to fully disclose everything. Otherwise what will happen is that eventually we'll be unable to find problems and problems will continue to occur w/o our knowledge until at some point the whole process is a sham.

  65. MS Database - ROFLMAO! by sycodon · · Score: 2, Funny

    The database is built from Microsoft's Jet database engine

    Why not just put a degaussing coil in all the door frames?

    --
    When Fascism comes to America, it will call itself Anti-Fascism, and tell you to give up your guns.
  66. I have bad news for you... by C10H14N2 · · Score: 2, Insightful

    ...what is double-entry accounting but keeping two separate databases of financial transactions--specifically so when the numbers don't match, you know something is up? /Yes, I know the difference

    1. Re:I have bad news for you... by Pollardito · · Score: 1

      ...what is double-entry accounting but keeping two separate databases of financial transactions--specifically so when the numbers don't match, you know something is up? /Yes, I know the difference that's great but his quibble is that these don't show the same totals and they say that this is perfectly fine
    2. Re:I have bad news for you... by Bearhouse · · Score: 1

      No, double-entry book-keeping is keeping two, balancing entries for the same transaction. In all accounting systems I've worked on, they've been in the same database.

  67. Why is Diebold in elections anyway? by Anonymous Coward · · Score: 0

    But the Ohio Constitution should keep Diebold out of the election process.

  68. [OT] His .sig by Red+Flayer · · Score: 0, Offtopic

    And who the f*** decided that using two punctuation marks is acceptable on the internet... never mind asking who the f*** decided that * is an acceptable replacement for letters in a written sentence (not just in a file system)?

    --
    "Trolls they were, but filled with the evil will of their master: a fell race..." -- J.R.R. Tolkien on Olog-hai
    1. Re:[OT] His .sig by BandwidthHog · · Score: 0, Offtopic

      And who the f*** decided that using two punctuation marks is acceptable on the internet...

      Huh?

      who the f*** decided that * is an acceptable replacement for letters in a written sentence (not just in a file system)?

      People who are too chickens*** to say “fuck.”

      --

      Quantum materiae materietur marmota monax si marmota monax materiam possit materiari?
    2. Re:[OT] His .sig by Anonymous Coward · · Score: 0

      Huh?
      .sig of OP ended with !?

      Blockquote>People who are too chickens*** to say "fuck."Then they should use a synonym, or a replacement expletive.
    3. Re:[OT] His .sig by Anonymous Coward · · Score: 0

      Multiple adjacent whitespace characters in html content (except for pre-formatted text) get counted as a single space.

    4. Re:[OT] His .sig by Anonymous Coward · · Score: 0

      Thank you for that interjection, Rain Man.

    5. Re:[OT] His .sig by mikiN · · Score: 1

      Not just that, for filesystems, using more than one glob '*' in a row is redundant and may also match more than one character. Filesystem standard way would be to write 'f?ck' and 's??t'. Geek way would be to write a fancy and convoluted regex, left as an exercise to the reader.

      --
      The Hacker's Guide To The Kernel: Don't panic()!
  69. The JET engine is not the real problem... by tom448 · · Score: 3, Insightful

    Back in 1995 I came in touch with the JET engine for the first time. It was used in a database application for a commercial aircraft carrier (!) Databases were corrupt all the times. It was obvious that the technology was a mess. At that time, much better alternatives were available for a little more $$. Hence I could not understand why anyone would spend time and money with such broken technology.

    Now we see the use of this technology again, and in an application that is crucial to the future of the U.S and to the future of many other countries... the same mistakes are being made again.

    But that is not the real problem. Yes, we know that electronic voting machine manufacturers have a long record of being lazy, careless, and incompetent. The actual problem is with the opinion of the decision makers in the administration and with the opinion of the public. Information technology is widely accepted as a means to make collecting, sorting, and counting, of numbers, names, addresses, etc. more reliable and more efficient. So why not use it also to collect and to count voter ballots?

    There is this subtle difference between paper and electronic storage. If you write something on a paper or make a hole, then it will be very difficult and time-consuming to remove the writing or the hole. In any case, too much work to alter ballots in significant numbers! And, if you still do, you leave a trace to be discovered by the forensic experts. In contrast, the information stored on a hard disk, in a flash ram, or transferred via network, can be altered very quickly and, if done well, without leaving any trace. Hence it is by nature that electronic voting machines are insecure and unreliable.

    Badly designed and badly implemented electronic voting machines just add up to the insecurity and the lack of reliability that this technology has by its virtue. On the other hand, measures like paper audit trails are certainly very helpful, but these are mere attempts to improve a technology that is bad from the outset.

    Looking at people's difficulties in understanding and dealing with today's computer security threats, I guess that it will take a lot of time until the aforementioned difference is in the heads of majority of the public and of those involved in the voting process. In the meantime, we will have many more "voting machine news": For every major election where electronic voting machines will be used, there will be stories about malfunctioning machines, missing audit trails, about elections being stolen, and so on. This is the wrong approach to "strengthen the democratic tradition".

    My credo is that running a democracy has a prize that is called "counting by hand".

  70. Plausible deniability by erroneus · · Score: 1

    Now they've done it... there's an element of plausible deniability now. It may not be that Diebold is corrupt and in the pocket of the GOP. It could also be that they're a bunch of idiots who are unqualified to deliver voting equipment upon which a large part of our democratic processes depend. Either way, though, they should go.

    1. Re:Plausible deniability by dbIII · · Score: 1

      Isn't it possible that they are both? There are a lot of jails full of stupid and lazy criminals - it's a lot harder to catch the other kind and a lot of people really do crime because it is the easy option.

  71. M$ Liability by mdsolar · · Score: 1

    What is M$' liability? Surely they were collecting licensing fees and knew what the machines were being used for. Given their warning, should they not have refused to license? Does their warning get them off the hook? Didn't work for Napster....
    --
    Rent solar power: http://mdsolar.blogspot.com/2007/01/slashdot-users -selling-solar.html

  72. Proves Diebold did not test by laughingskeptic · · Score: 1

    What this proves is that Diebold either did not test their software sufficiently or covered up bad test results at layer of their company. The state of Ohio was certainly incompetent in not fully testing the product they bought before deploying it.

    1. Re:Proves Diebold did not test by Anonymous Coward · · Score: 0

      Surely the state of Ohio, when putting the voting machines out to bid, put something in the contract about accuracy?!?

  73. Cronyism in contracting = crime by h00manist · · Score: 1

    This is the result of crony-ism in the contracting. The crime isn't so much of Diebold's, it's of who hires them. There's been numerous stories in the news about their incompetence, over and over, about what proper procedures should be, and whoever hires them after all that is simply doing it under pressure, orders or favoritism.

    --
    Build your own energy sources from scratch. http://otherpower.com/
  74. Different folks. by pavon · · Score: 3, Interesting

    Diebolds electronic voting division was purchased wholesale from Global Election Systems in 2002. GES produced crap back then and it is no suprise that they continued to produce crap under new management. Their incompetence shouldn't reflect poorly on the ability of the engineering staff in the ATM division, although it does say quite a bit about the top-level management.

    1. Re:Different folks. by symbolic · · Score: 1

      Incompetence isn't the only thing states have been fighting - it's the cavalier attitude had by Diebold itself. You'd think that a company handling such an important part of a country's political process would have a little more respect for what they do, but they treat it as though it doesn't matter whether or not the problems get fixed. I've never once seen Diebold *proactively* make any kind of improvement.

  75. These guys are much smarter than you think by Anonymous Coward · · Score: 1, Insightful

    It's all about "plausible deniability".

    Look at it this way: If you are planning to engage in high-profile, widespread illegal activity, why not make it difficult to trace the crime? By creating multiple ways that the data can corrupt itself - poor choice of database, drivers, security, etc. - there is now so much white noise that it is far more difficult to prove malice.

    They figure someone will realize the numbers are wrong, but now try proving that it was a conspiracy. It is much more difficult to find exactly where the numbers were changed a) on purpose and b) by the same consistent source with so many other discrepancies clouding it over.

  76. OK... by Anonymous Coward · · Score: 0

    I see quite a few responses that start with "In MY country..."

    Diebold has been in the news so much, especially at slashdot, that folks (especially those overseas) can be forgiven for thinking that the whole US uses Diebold voting machines.

    It doesn't. I've never voted on a Diebold machine. Here (ironically, since we are known as home of the world's most corrupt governments, especially in Chicago) in Illinois (Springfield, the state capital, to be exact) we had elections last month. They were Diebold-free.

    Here, you get a paper ballot (!!!) and a card. You stick the ballot and card in the machine, and use a touch screen stylus. When you're done, the machine tabulates your vote AND prints the vote on the paper ballot, which you then put in a box.

    If the election is contested they have paper votes to recount.

    I voted for Janazzo (I know her dad), but Mahoney (the incumbent) beat her two to one.
    -mcgrew

    1. Re:OK... by Anonymous Coward · · Score: 0

      > I've never voted on a Diebold machine.
      > I voted for Janazzo (I know her dad), but Mahoney (the incumbent) beat her two to one.

      Maybe if you used diebold, Janazzo would have gotten a better score .-)

  77. No, it isn't by Shadowlore · · Score: 2, Insightful

    its really stunning to think that something like voting in a democracy isn't considered mission critical to the country. ...to not consider it that way is to say that voting doesn't matter

    You are incorrect on both counts.

    First, if something is "mission critical" do you entrust it to people who have no idea of the necessary details, or will just use a default position to produce the end result as opposed to careful thought and analysis? No.

    Perhaps you don't understand what "mission critical" means. I'll clue you in a bit. Take a look at the Space Shuttle. See those massive engines? Those are mission critical. If they fail so does the mission.

    Does the country continue to operate if voting fails? Yes. Every election has had issues with voting. Every election from the beginning has had counting issues, validity of the voter issues, etc.. Yet the *Republic* marches on (though it is becoming more of a democracy - yes that's a bad thing). The troops still fight, stupid laws still get passed, political games still occur, the courts still continue functioning, ambassadors still do their jobs, the IRS still siphons the results of your work from your paycheck, the cops still arrest people, the people still work, shop, and generally live their lives, and so on.

    Now that said, it does not mean voting shouldn't be taken seriously. But to say it is mission critical is to say something that isn't true.

    Why do companies like Diebold not take voting seriously? The people don't. To paraphrase "K" a bit, a person may take voting seriously but the people do not. When you have a large portion of the voters who vote on "single-issue" or party-line they are not taking it seriously. When people go in and punch votes that they didn't research, they aren't taking it seriously. When people are given the choice of evils, the decision is generally not taken seriously.

    The candidates and lawmakers don't take voting seriously either. If they did they wouldn't put all manner of blocks in the way of political speech. They also would not make laws to "protect" us from stupidity. They act as if we are stupid except for that short moment of casting a vote - for them. Hell look at all the accusations by the Gore-siders when Bush was elected: the other voters were stupid.

    You want voting to be taken seriously? Give us a "none of the above" option. How does it work? Simple: if NOTA "wins" all who were on the ballot are barred from the next election, and it is held 90 days from the first. If NOTA still wins, the office goes vacant until the next election. Clearly nobody was able to fit the bill so nobody sits in the office. If the office goes a couple cycles w/o a victor, dissolve it wherever not constitutionally required.

    Another option: Require a majority. Not just a majority of voters, but a full-on majority of citizens. Most elections (in the US at least) don't require a majority, just a plurality (yes that means less than half of the votes can still win - as Clinton did) of the votes cast. Consider the whole of the adult citizenry the body, and in order to have a solid vote mandate that votes of more than half of the citizenry are required to be voted in.

    Right now if a third of those eligible vote, and half of them vote for one guy you've got about 1/6th of the population voting someone into office. Where a majority is not required, the numbers can drop down to 20% of votes cast which in the above example would mean what, 1/30th of the population?

    Do the same thing for all issues in front of the voters. Bond issues, levies, tax raises, initiatives, etc..

    Voting is marginalized by the government (which has a vested interest in doing so), by the voters (who do not do "due diligence"), and by the candidates (who know they don't really need a majority of people, just a plurality of those who hauled their asses down to teh voting station or sent their mail-in ballot in). Something so heavily marginalized can not be mission critical.

    Yes, the

    --
    My Suburban burns less gasoline than your Prius.
  78. Different People by pavon · · Score: 2, Informative

    I posted this somewhere else, but it needs to be restated. The reason that Diebold can't get this right, is because they don't have their ATM engineers working on it. Diebold Elections Systems did not exist until 2002 when Diebold purchased Global Elections Systems. The basic software architecture (including the use of Jet) goes back to a touch screen voting system designed by iMark in 1995. In that system the database was single use - stored on a smart card, and had to be merged together later.

    The purchase of GES was in response to the federal voting legislation passed after "hanging chad" issue. This legislation, while not requiring the use of electronic voting machines, including many provisions (such as requiring that people with disabilites be able to vote using the same system as everyone else) that certainly encouraged them. Diebold expected a huge increase in voting machine purchases as a result of this, and didn't have time to build their own system from scratch, so they acquired one. Thier predictions were correct and they have made a ton of money from the deal holding 80% of the market, even though their design is garbage.

    Basically all these problems with voting machines are because of misguided voting reform, where after ignoring an issue for years voters turned around and demanded something be done, and the politicians happily obliged by passing knee-jerk laws and buying up whatever snake-oil was available at that minute. Which is pretty much politics in a nutshell - ignore a problem until it gets really bad and then overreact and make things worse than they were to begin with.

    1. Re:Different People by mdsolar · · Score: 1

      OK, I get it that different people designed the system. But it is not the case that different people sold the system. When you sell a house (that someone else built) and fail to disclose that the basement floods every year, you are responsible for that failure. They made representations that the systems are reliable and reaped the profits. You can hardly blame the purchaser in this case for not checking out the system since it was kept hidden and the seller was trading on its banking reputaion to gain market share ("don't go with that other company, they don't have our experience with secure accurate machines that interface with the public"). Those are the people, the ones who sold the machines.

  79. Hanging Chads? by RancidMilk · · Score: 1

    Ohio is a little smarter than Florida(by the heat to brain ratio), but perhaps they fell victim to computerized hanging chads.

  80. Say WHAT? by encoderer · · Score: 0, Troll

    "Jet Blue/ESE is nowhere near the design of say, Oracle or PostgreSQL, or even MSSQL for that matter. It's about on the level of version 3 or 4 of MySQL (using MyISAM, not InnoDB), or perhaps SQLite."

    Huh?

    1. "Oracle or Postgre" ... You say that as if these two databases are anywhere NEAR the same level. They're not.
    2. "or even MSSQL" ... You say THAT as if MSSQL is somehow a lesser DB than Postgre. It's not. In fact, it's just as capable and worthy as Oracle for many tasks
    3. "It's about on the level of version 3 or 4 of MySQL" OK, this is the killer sentence. MySQL 4 doesn't allow nested select statements ANYWHERE (Not in SELECT, FROM or WHERE clauses), it doesn't support HAVING it's prone to full table scans when they're not really needed. I'm a HUGE MySQL supporter--look at my recent comments, I've been defending MySQL--but, frankly, Jet is a better database than MySQL 4. Hands down. Now, MySQL 5 beats its pants off, but c'mon, the query optimizer in 4.x alone is enough to give Jet the win.

  81. Re:Plausible deniability:Missing option by badc0ffee · · Score: 1
    Plus: fraud, FUD, incompetence, Microsoft, Diebold, JET DB, corruption, graft....

    Missing option: Slashdot Poll

    --
    1011 1010 1101 1100 0000 1111 1111 1110 1110
  82. Still haven't seen a link posted for that. by Medievalist · · Score: 1

    ...Jet is well known to be massively broken. Still haven't seen any proof of that here... I'm not trying to say anyone is lying, but I'm not going to sign off on "Microsoft says don't use it" until I see a link to microsoft.com to that effect.

    If you don't think it is, you've never tried to do anything non-trivial with it. Hell, I haven't tried to do anything with it. I'm old, in my day if we needed a database we wrote one. Nowadays mysql seems to do the job just fine (at least it works for my MythTV box) but filesystems and diskdrives have gotten so fast I typically just use a journalling filesystem on a RAID array as a data sink. It's easier than mucking about with extensible hash tables in the app code, and compatible with pretty much all backup and search utilities.
    1. Re:Still haven't seen a link posted for that. by Anonymous Coward · · Score: 0
      Since you seem to be really persistent on this point. From MSDN: http://msdn2.microsoft.com/en-us/library/ms810810. aspx

      Deprecated MDAC Components

      These components are still supported in the current release of MDAC, but might be removed in future releases. Microsoft recommends that when you develop new applications, you avoid using these components. Additionally, when you upgrade or modify existing applications, remove any dependency on these components.

              * Jet: Starting with version 2.6, MDAC no longer contains Jet components. In other words, MDAC 2.6, 2.7, 2.8, and all future MDAC releases do not contain Microsoft Jet, Microsoft Jet OLE DB Provider, or the ODBC Desktop Database Drivers.
  83. Obvious Solution by Weirsbaski · · Score: 1

    After sending Diebold their check and W-2 (or whatever the business equivalent is), and Diebold asks "why is our check $37, but the W-2 reports $7Billion in taxable income", tell them "because mutliple clients were writing the two databases, maybe one of them is corrupt. The fault is the outdated Microsoft software we use, we don't know which number is incorrect, so we're not changing anything. Have a nice day! ."

    --

    I am not a sig.
  84. Why do we keep screwing around with toys? by frankShook · · Score: 1

    Microsoft keeps making ridiculous toys that don't stand up to real problems. It keeps happening again and again. Stop screwing around with Microsoft and use some real tools for critical applications.

  85. Damn good thing.... by axia777 · · Score: 0

    That Diebold is not making voting machines anymore. So they stole one...er..two elections. The big questions is how will they steal the vote in the next election????

  86. Seems like by MemoryDragon · · Score: 1

    Diebolt used the worst DB Engine in existence, even MySQL probably would have been a better choice...

  87. Is Jet an open spec? by jesterzog · · Score: 1

    If you wanted to make an insecure system that was easy to hack and manipulate, didn't have basic security features, data integrity, and no audit trail, and thus no record of how data was altered outside of specifications, you might use such a deprecated application.

    Is Jet a closed specification? Because if it's closed, there's no easy way to know for sure that there's no record of how data was altered... unless you're Microsoft. Obviously this doesn't mean that it's all good because there is a record, but it'd be very difficult for someone to corrupt the system in complete knowledge that they couldn't be traced. An open spec system might be easier to corrupt in many ways, assuming there was a fault in the spec (which would probably be unlikely), if only because it'd be possible to know for sure whether the traces had been removed.

    That said, I'd easily believe that there was incompetence in an attempt to be corrupt.

  88. This Explains 2006 by Bob9113 · · Score: 1

    Awww - I was out of town this past weekend, so noone's going to see my extraordinarily witty comment. No matter. The tree must fall anyway. To wit:

    So Diebold's machines weren't working as Diebold intended in 2006? That explains how the Democrats won both houses of Congress.

  89. Thank you! by Medievalist · · Score: 1

    In the link you kindly provided, Microsoft is not saying "Jet sucks and you shouldn't use it" (although certainly there are people outside MS who are saying exactly that) but rather Jet is no longer supported by Microsoft.

    Which is a good enough reason not to have anything to do with it, it really doesn't matter if it sucks or not; nobody should be buying product based on unsupported closed-source software.

    A government that claims to be representative and democratically elected certainly shouldn't be trusting elections to a company that is shipping product based on unsupported closed-source software.