Slashdot Mirror


Electronic Voting Researcher Arrested In India

whatajoke writes "Hari Prasad, a security researcher in India who had demonstrated the vulnerability of electronic voting machines used in all elections in India, was arrested by the police on charges of stealing an electronic voting machine. The election commission of India has maintained that EVM are non-hackable. The election commission had previously provided access to the device to the security researchers for a day and asked for a hack in only that time."

32 of 188 comments (clear)

  1. governments by roman_mir · · Score: 3, Insightful

    It doesn't matter where you are, there is a government there, some are worse than others, but all of them have evolved into similar structures with the relationship between a citizen and government of a country is very abusive, and the government is the one doing the abuse.

    Name a country, any country, there are people there abused their governments, it is what it is. Feels like terrorism against governments is the only meaningful life pursuit at this point.

    1. Re:governments by DoofusOfDeath · · Score: 3, Insightful

      Yeah, or maybe he really stole a voting machine. Shouldn't people usually be arrested for doing that?

    2. Re:governments by frodo+from+middle+ea · · Score: 5, Insightful
      It's more do do with, way too few people wanting to hold their elected officials accountable.

      So those few who do, are easy to eliminate.

      Take your own country USA for example, as an Indian, I can't help but laugh when I see people being used as mere pawns in the bi-partisanship circus. The right and the left both are equally suckered in to believing that the other side is evil, and will be the end of your country if given a chance to govern. Very few realize that both are sides of the same coin. Same BS sold in different flavor.

      --
      for the last time people, I am "frodo from middle eaRTH", not "middle eaST".
    3. Re:governments by belmolis · · Score: 3, Informative

      According to http://www.indiaevm.org/, the voting machine studied was "provided by an anonymous source". So it may have been stolen, though apparently by someone else. He might be guilty of something, but it would be receiving stolen property, not theft. Or maybe the source had legitimate access to the machine. It is also not clear whether the machine was returned.

    4. Re:governments by fastest+fascist · · Score: 4, Insightful

      What do you propose, exactly, as the goal to be achieved by wanton acts of violence? As long as you have government, you will have abuses. That is the nature of the beast - deciding how power is distributed and whose rights come first. You always end up trampling on someone, either by design or by accident.

      As for having no government... I can't really grasp what that would mean. Government is the entity with the power to make others bend to its will. I have a hard time seeing a group of people of any appreciable size where such an entity does not arise.

    5. Re:governments by roman_mir · · Score: 3, Insightful

      Yes, but have you ever heard of any government just giving up its powers? That is completely unheard of, that's the trillion dollar reason why there were so many revolutions all over the world, civil wars, so called 'terrorists' etc., understand, they all were fighting the machine one way or another.

      Lately the masses have been brainwashed so much, they completely don't understand this, but think back through some of the revolutions and civil wars... you know, many kings had their heads chopped off...

    6. Re:governments by wickedskaman · · Score: 3, Informative

      No. You can't rape a machine. You can definitely steal one.
      </BSGreference>

      --
      Sand's overrated... it's just tiny little rocks.
    7. Re:governments by 5pp000 · · Score: 3, Insightful

      Flamebait? Come on, mods. You can find very similar statements in the writings of Thomas Jefferson. Like this one: "The tree of liberty must from time to time be refreshed with the blood of tyrants."

      --
      Your god may be dead, but mine aren't!
    8. Re:governments by roman_mir · · Score: 5, Insightful

      You think Jefferson would be electable in the USA today? I think not.

    9. Re:governments by OFnow · · Score: 4, Informative

      Yeah, or maybe he really stole a voting machine.

      The article says it was given to a group of researchers for a day, who found nasty defects
      and the politicians did not like that. Nothing suggests the machine was not
      returned after a day. Retroactively the grant of the machine is now
      considered theft. One suspects the intent is to discredit the research.

  2. Security Theater, Act 230982394 by Takeel · · Score: 4, Funny

    Surely this will increase the security of electronic voting in India.

  3. Oops... by fuzzyfuzzyfungus · · Score: 3, Insightful

    It looks like somebody may have violated the time-honored "never embarrass overconfident idiots, however tempting it is" rule...

  4. Who's making these hackable machines? by iamhassi · · Score: 5, Insightful

    I keep reading story after story of how easily hackable these machines are and my only question is why do they keep making easily hackable machines? Who are the geniuses making a voting machine that can be hacked? Why aren't they contacting these professors and researchers while they're creating the machine and say "Hey you're good at hacking. We're trying to create a voting machine that can not be hacked, can you help us?"

    I just don't understand, it's like building a car that explodes at the slightest impact and then arresting people that expose it. Wouldn't it be easier just to make a better voting machine?

    --
    my karma will be here long after I'm gone
    1. Re:Who's making these hackable machines? by grim4593 · · Score: 5, Interesting

      Maybe, just MAYBE the companies want the machines to be able to be hacked by the Right People. So when word gets out that these machines have flaws that anyone with the right tools and knowledge can control it makes things harder for the company, and those Right People get miffed.

    2. Re:Who's making these hackable machines? by eulernet · · Score: 3, Insightful

      Wouldn't it be easier just to make a better voting machine?

      Why would they need a voting machine ?

      There are several major problems with voting machines in India:
        1) you cannot double-check the vote, thus cheating is easy, even if you have secure machines.
        2) a lot of people in India don't know how to read, and simple tasks like voting with a computer is impossible for them.
        3) machines need electricity. In India, there can be an outage at any time of the day.

      Before using expensive voting machines, India's governement should concentrate on improving the infrastructures, like water, electricity and roads.

  5. Re:Disgusting Moderation by roman_mir · · Score: 4, Insightful

    One man's terrorist is another man's freedom fighter.

    AFAIC fighting governments in any way is fighting against oppression for freedom.

  6. OT: How to build an trustable voting machine by davidwr · · Score: 5, Interesting

    1) The voter gets to see the vote being cast.
    2) Auditors and manual re-counters get to see the exact same thing the voter saw. This means it must be a tangible artifact.
    3a) Audit all elections "to 5%" or "to the margin of victory" whichever is less. This provides a very high confidence any fraud wasn't enough to sway the elections nor was it enough to sway more than 5% of the tally. Do the same if any candidate is "close" to a significant threshold number, such as the number of votes needed to avoid a runoff.
    3b) Random audits "to 0.5%" or some other high confidence interval sufficient to expose and deter general game-playing by a candidate who lost so bad that the cheating didn't help him. If a losing candidates know they have a 1 in 10 chance of getting a "very close audit" they won't try to play games.
    4) Automatic recounts using different equipment PLUS a more thorough audit on any close election.
    5a) Manual recounts on any close election on the request of the candidate who is within the "margin of possible error/fraud" that the audits show could exist.
    5b) Manual recounts on any election where any candidate is very close to a significant threshold number.

    It's not hard folks. Machine-readable paper ballots typically meet 1 & 2. The rest is a matter of spending money after the votes are initially tallied, not a function of the voting machines.

    Auditing an election of, say, 3M voters where one candidate allegedly beat the other 50.5% to 46.5% to 3% for minor candidates need only determine that there's less than a 5% chance that the true election result had the winning candidate with 50%+1 votes to avoid a runoff. With a paper ballot satisfying #1 and #2 and generally accepted statistical analysis, this won't require a recount of nearly the entire pool of votes, only a random sample from each ballot box sufficiently large to rule out the need for a runoff.

    If on the other hand the alleged winning amount was exactly 1,500,001 out of 3M votes, or if it was 1,499,499 and the winner wanted a recount to avoid a runoff, a full manual recount would likely be necessary.

    --
    Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
    1. Re:OT: How to build an trustable voting machine by GiveBenADollar · · Score: 4, Insightful

      There are two contradictory things which must happen for machine voting.

      1. Each person must be identifiable as having voted and see the result of the vote.

      2. Each vote must be anonymous.

      Machine readable ballots make sense, but they still leave the possibility of simple fraud. Take a stack of ballots and replace them with your own skewed ballots. This means that each ballot must have a unique identification, while at the same time have no way of revealing the name of the voter. I've heard of states allowing mail in ballots, this makes some sense although things do get lost in the mail. The best solution I can come up with is a ballot that you have to pick up in person from the DMV possibly. It has its own serial number and when you pick it up it is entered into the system, not as a vote from you, but simply as a vote. Your information is also entered into the system. Neither is time/date stamped and both are randomized as much as possible to hide voter identity.When you have made your educated vote you return the ballot to the polling station. If there is any doubt then the number of people who voted can be checked against the number of ballots. Also it seems logical that an individual can check to see if he/she voted, for example if I voted in the last presidential election, but I didn't actually vote it would be a sign of fraud.

  7. Re: according to the article by MRe_nl · · Score: 4, Informative

    "The arrest was made on the flimsy charge of 'theft of EVM' used for vulnerability demonstration by Hari Prasad and a team of security researchers that included Alex Halderman, professor of computer science, University of Michigan and Rop Gonggrijp, a security researcher from Netherlands along with a team of their colleagues".

    For more info see http://www.youtube.com/user/ropgonggrijp

    Hack-tic times.

    --
    "Kill 'em all and let Root sort 'em out"
  8. Get a grip. by AnonymousClown · · Score: 5, Insightful

    Its beyond offensive and disgusting that any post that defends and advocates terrorism like the above does is moderated insightful.

    The moderators should be ashamed of themselves here.

    Who's advocating terrorism?

    This is what was said:

    Feels like terrorism against governments is the only meaningful life pursuit at this point.

    Notice the "Feels" part? The poster was expressing feelings of outrage and his frustration with his inability to stop Governments from abusing their power. He was expressing the frustration that Democracies or Republics still do not prevent a Government from abusing its citizens. No matter how we vote or who we vote for, what letters we write that fall on deaf ears, or protest and get our asses kicked by the cops, it seems as though, we the little people get shit on. People who are trying to show how possible finagling of the voting process gets done and hopefully prevent some of those injustices end up being victims of the powers that be.

    I'm sure with events in the present and past, many of us had fantasies of disintegrating Congress (See "Mars Attacks!"). Would we do it? No. The only thing we can do is express our outrage and impotence with regards to controlling a government.

    The rich and powerful have been doing this since time began. They manipulate the populace with jingoism, bogus issues to distract us, and in the background, they're taking their power to boost their own pathetic (much wealthier) little life.

    --
    RIP America

    July 4, 1776 - September 11, 2001

    1. Re:Get a grip. by NFN_NLN · · Score: 3, Interesting

      Its beyond offensive and disgusting that any post that defends and advocates terrorism like the above does is moderated insightful.

      The moderators should be ashamed of themselves here.

      Who's advocating terrorism?

      The founding fathers for one:

      "Occasionally the tree of Liberty must be watered with the blood of Patriots and Tyrants."
      — Thomas Jefferson

  9. Machine-ASSISTED voting by davidwr · · Score: 5, Insightful

    Machine-readable paper ballots have three major flaws:
    1) cost and bulk
    2) not usable without assistance by blind and those who can't use a marking pen
    3) High waste or too costly with multi-precinct ballots or multi-language ballots, where a single voting station may have hundreds of different ballots and keeping a sufficient supply of each is difficult.

    To help with #2 and #3, you can use a machine that prints the ballot "on-demand," either blank or, if the voter wants to use the touch-screen or other machine-input to indicate his vote, filled out.

    The voter fills out the ballot if he didn't have the machine do it for him, examines it for correctness, and puts it in the ballot box as you would with a machine-readable paper ballot today. From here on out the system is identical to today's machine-readable paper ballot system.

    This would allow those who cannot mark a ballot but who can read the filled-in ballot the ability to cast their vote unassisted.

    Blind people could use on-site "reading" machines to verify the ballot unassisted or, if they didn't trust the government, they could bring their own document-reading hardware, or bring a trusted sighted friend to verify the ballot is accurate.

    By printing non-common languages or outlying precinct ballots only "on demand" or only as needed to have a small supply of each at any given time, it would save paper.

    --
    Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
  10. Anybody who claims "unhackable" by straponego · · Score: 4, Insightful

    ...is a crook or a fool. You can reduce the probability of hacking... by an amount that is not easy to quantify.

    I heard an interview with an enthusiastic Indian programmer/marketer (sorry, I don't recall if I heard his exact job description), in which he claimed that very soon Indians would be vote via mobile phones. &#65279;What a recipe for disaster. It's difficult to think of a less reliable and verifiable voting mechanism-- though it would certainly destroy anonymity for honest voters. It's not impossible that someday an open source, mobile voting platform will be more secure than existing mechanisms. But that will be many years in the future, and not developed quickly and cheaply in a nation overrun with corruption (so our best bet is somewhere in Scandinavia).

    Where there is a large incentive to cheat (to gain money, power, women), many people will try to cheat. Especially in societies with more habitual defectors than habitual cooperators (such as the US and India). Anybody who says otherwise is trying to cheat you.

  11. Re:Disgusting Moderation by Anonymous Coward · · Score: 4, Insightful

    Fighting governments in any way is beneficial for freedom? That's terribly simplistic and downright false.

    Would you consider fighting a democratically elected, egalitarian government, in order to replace it with a tribalistic theocracy, to be fighting for freedom??

    Would you consider working to bring down a government, which then gets replaced by a multitude of corrupt fiefdoms with the local rulers deciding the fate of anyone they don't like, to be fighting for freedom??

    The world is not black and white, it's not ones and zeroes and short boolean expressions. Every action has consequences that even the smartest of us cannot predict.

    Hell, I'm the first guy to follow the entire Bill Of Rights to the letter, and I'm not even American, but you have to realize that the only thing more oppressive than an oppressive government, is a complete lack of government, when the powerful are given complete free reign over the rest.

  12. Re: according to the article by MRe_nl · · Score: 4, Informative

    The answer to your question lies on page two of your own link.
    http://www.indiaevm.org/qa.html

    Q: How did you get the EVM you studied?
    A: It was provided by a source who has asked to remain anonymous.

    My point was that he had been charged with theft for refusing to reveal a source.
    If you click the link I provided you'll hear an interview with the scientist in question, by telephone, after his arrest.

    --
    "Kill 'em all and let Root sort 'em out"
  13. Re:Disgusting Moderation by bane2571 · · Score: 3, Insightful

    Many revolutions set up Good Government, it was only after a period of time that they became Bad Government. The only real measure is of fitness is how long it took. You're living in the waning times of the US government, it has been going down hill ever since it was founded. The same is true for every government.

  14. Re: according to the article by thrawn_aj · · Score: 3, Insightful

    While you're correct as a matter of principle, the legal theory of "innocent until proven guilty" (while self-evident) is only valid (again, from a legal point of view) in the United States (which is why I'm glad I live here now - the justice system sucks balls in India). I assure you that things are quite excellent in the US when you compare it to the rest of the world.

    A blanket shout-out to everyone in this thread - this is a different country we're talking about. Check your US-centric legal opinions at the door before posting ;)

  15. More Information by Philom · · Score: 5, Informative

    I'm a professor at the University of Michigan, and I coauthored the voting study at issue with Hari Prasad. I've posted part of a phone call with Hari while he was in the police car, along with more details about the arrest.

  16. Re: according to the article by MRe_nl · · Score: 4, Informative

    No, the legal theory of "innocent until proven guilty" stems from ancient (pre-Roman) times, and is in the United Nations Universal Declaration of Human Rights (article 11).
    If you're interested http://www.talkleft.com/story/2003/01/12/153/23800
    ps I'm Dutch ; ).

    --
    "Kill 'em all and let Root sort 'em out"
  17. Re: according to the article by bane2571 · · Score: 3, Insightful

    "Provided by an anonymous source for scientific purposes"

    So their "friend" provided them with something they had no legal right/reason to have and they were holding it when the officer arrested them.

    Seems like a pretty accurate example of "I was just holding it" to me.

  18. Dutch... by denzacar · · Score: 3, Interesting

    In 2002 Dutch government resigned as they have accepted partial responsibility for Srebrenica Massacre.
    Mind you, this was a government resigning over something that happened long before they were in office and over an act that they did not instigate.
    So not only did the government step down, it took on their shoulders what they felt was NATIONAL shame.

    Sort of like what should the current US government resign over the My Lai Massacre.
    Except US soldiers actually massacred the civilians there, while Dutch soldiers only failed to protect the civilians.

    --
    Mit der Dummheit kämpfen Götter selbst vergebens
  19. Re: according to the article by smallfries · · Score: 3, Funny

    Of course when you say only in the US you do in in fact mean only in the Western World as most of Europe has had this principle enshrined in law for the past thousand years. In fact we are where your ancestors got the basic idea from.

    Still, the irony of an American trying to tell other American's that there is a world outside of America but getting the important details wrong is not lost on me.

    --
    Slashdot: where don knuth is an idiot because he cant grasp the awesome power of php