Slashdot Mirror


Electronic Voting Researcher Arrested In India

whatajoke writes "Hari Prasad, a security researcher in India who had demonstrated the vulnerability of electronic voting machines used in all elections in India, was arrested by the police on charges of stealing an electronic voting machine. The election commission of India has maintained that EVM are non-hackable. The election commission had previously provided access to the device to the security researchers for a day and asked for a hack in only that time."

18 of 188 comments (clear)

  1. Security Theater, Act 230982394 by Takeel · · Score: 4, Funny

    Surely this will increase the security of electronic voting in India.

  2. Who's making these hackable machines? by iamhassi · · Score: 5, Insightful

    I keep reading story after story of how easily hackable these machines are and my only question is why do they keep making easily hackable machines? Who are the geniuses making a voting machine that can be hacked? Why aren't they contacting these professors and researchers while they're creating the machine and say "Hey you're good at hacking. We're trying to create a voting machine that can not be hacked, can you help us?"

    I just don't understand, it's like building a car that explodes at the slightest impact and then arresting people that expose it. Wouldn't it be easier just to make a better voting machine?

    --
    my karma will be here long after I'm gone
    1. Re:Who's making these hackable machines? by grim4593 · · Score: 5, Interesting

      Maybe, just MAYBE the companies want the machines to be able to be hacked by the Right People. So when word gets out that these machines have flaws that anyone with the right tools and knowledge can control it makes things harder for the company, and those Right People get miffed.

  3. Re:governments by frodo+from+middle+ea · · Score: 5, Insightful
    It's more do do with, way too few people wanting to hold their elected officials accountable.

    So those few who do, are easy to eliminate.

    Take your own country USA for example, as an Indian, I can't help but laugh when I see people being used as mere pawns in the bi-partisanship circus. The right and the left both are equally suckered in to believing that the other side is evil, and will be the end of your country if given a chance to govern. Very few realize that both are sides of the same coin. Same BS sold in different flavor.

    --
    for the last time people, I am "frodo from middle eaRTH", not "middle eaST".
  4. Re:Disgusting Moderation by roman_mir · · Score: 4, Insightful

    One man's terrorist is another man's freedom fighter.

    AFAIC fighting governments in any way is fighting against oppression for freedom.

  5. Re:governments by fastest+fascist · · Score: 4, Insightful

    What do you propose, exactly, as the goal to be achieved by wanton acts of violence? As long as you have government, you will have abuses. That is the nature of the beast - deciding how power is distributed and whose rights come first. You always end up trampling on someone, either by design or by accident.

    As for having no government... I can't really grasp what that would mean. Government is the entity with the power to make others bend to its will. I have a hard time seeing a group of people of any appreciable size where such an entity does not arise.

  6. OT: How to build an trustable voting machine by davidwr · · Score: 5, Interesting

    1) The voter gets to see the vote being cast.
    2) Auditors and manual re-counters get to see the exact same thing the voter saw. This means it must be a tangible artifact.
    3a) Audit all elections "to 5%" or "to the margin of victory" whichever is less. This provides a very high confidence any fraud wasn't enough to sway the elections nor was it enough to sway more than 5% of the tally. Do the same if any candidate is "close" to a significant threshold number, such as the number of votes needed to avoid a runoff.
    3b) Random audits "to 0.5%" or some other high confidence interval sufficient to expose and deter general game-playing by a candidate who lost so bad that the cheating didn't help him. If a losing candidates know they have a 1 in 10 chance of getting a "very close audit" they won't try to play games.
    4) Automatic recounts using different equipment PLUS a more thorough audit on any close election.
    5a) Manual recounts on any close election on the request of the candidate who is within the "margin of possible error/fraud" that the audits show could exist.
    5b) Manual recounts on any election where any candidate is very close to a significant threshold number.

    It's not hard folks. Machine-readable paper ballots typically meet 1 & 2. The rest is a matter of spending money after the votes are initially tallied, not a function of the voting machines.

    Auditing an election of, say, 3M voters where one candidate allegedly beat the other 50.5% to 46.5% to 3% for minor candidates need only determine that there's less than a 5% chance that the true election result had the winning candidate with 50%+1 votes to avoid a runoff. With a paper ballot satisfying #1 and #2 and generally accepted statistical analysis, this won't require a recount of nearly the entire pool of votes, only a random sample from each ballot box sufficiently large to rule out the need for a runoff.

    If on the other hand the alleged winning amount was exactly 1,500,001 out of 3M votes, or if it was 1,499,499 and the winner wanted a recount to avoid a runoff, a full manual recount would likely be necessary.

    --
    Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
    1. Re:OT: How to build an trustable voting machine by GiveBenADollar · · Score: 4, Insightful

      There are two contradictory things which must happen for machine voting.

      1. Each person must be identifiable as having voted and see the result of the vote.

      2. Each vote must be anonymous.

      Machine readable ballots make sense, but they still leave the possibility of simple fraud. Take a stack of ballots and replace them with your own skewed ballots. This means that each ballot must have a unique identification, while at the same time have no way of revealing the name of the voter. I've heard of states allowing mail in ballots, this makes some sense although things do get lost in the mail. The best solution I can come up with is a ballot that you have to pick up in person from the DMV possibly. It has its own serial number and when you pick it up it is entered into the system, not as a vote from you, but simply as a vote. Your information is also entered into the system. Neither is time/date stamped and both are randomized as much as possible to hide voter identity.When you have made your educated vote you return the ballot to the polling station. If there is any doubt then the number of people who voted can be checked against the number of ballots. Also it seems logical that an individual can check to see if he/she voted, for example if I voted in the last presidential election, but I didn't actually vote it would be a sign of fraud.

  7. Re: according to the article by MRe_nl · · Score: 4, Informative

    "The arrest was made on the flimsy charge of 'theft of EVM' used for vulnerability demonstration by Hari Prasad and a team of security researchers that included Alex Halderman, professor of computer science, University of Michigan and Rop Gonggrijp, a security researcher from Netherlands along with a team of their colleagues".

    For more info see http://www.youtube.com/user/ropgonggrijp

    Hack-tic times.

    --
    "Kill 'em all and let Root sort 'em out"
  8. Get a grip. by AnonymousClown · · Score: 5, Insightful

    Its beyond offensive and disgusting that any post that defends and advocates terrorism like the above does is moderated insightful.

    The moderators should be ashamed of themselves here.

    Who's advocating terrorism?

    This is what was said:

    Feels like terrorism against governments is the only meaningful life pursuit at this point.

    Notice the "Feels" part? The poster was expressing feelings of outrage and his frustration with his inability to stop Governments from abusing their power. He was expressing the frustration that Democracies or Republics still do not prevent a Government from abusing its citizens. No matter how we vote or who we vote for, what letters we write that fall on deaf ears, or protest and get our asses kicked by the cops, it seems as though, we the little people get shit on. People who are trying to show how possible finagling of the voting process gets done and hopefully prevent some of those injustices end up being victims of the powers that be.

    I'm sure with events in the present and past, many of us had fantasies of disintegrating Congress (See "Mars Attacks!"). Would we do it? No. The only thing we can do is express our outrage and impotence with regards to controlling a government.

    The rich and powerful have been doing this since time began. They manipulate the populace with jingoism, bogus issues to distract us, and in the background, they're taking their power to boost their own pathetic (much wealthier) little life.

    --
    RIP America

    July 4, 1776 - September 11, 2001

  9. Machine-ASSISTED voting by davidwr · · Score: 5, Insightful

    Machine-readable paper ballots have three major flaws:
    1) cost and bulk
    2) not usable without assistance by blind and those who can't use a marking pen
    3) High waste or too costly with multi-precinct ballots or multi-language ballots, where a single voting station may have hundreds of different ballots and keeping a sufficient supply of each is difficult.

    To help with #2 and #3, you can use a machine that prints the ballot "on-demand," either blank or, if the voter wants to use the touch-screen or other machine-input to indicate his vote, filled out.

    The voter fills out the ballot if he didn't have the machine do it for him, examines it for correctness, and puts it in the ballot box as you would with a machine-readable paper ballot today. From here on out the system is identical to today's machine-readable paper ballot system.

    This would allow those who cannot mark a ballot but who can read the filled-in ballot the ability to cast their vote unassisted.

    Blind people could use on-site "reading" machines to verify the ballot unassisted or, if they didn't trust the government, they could bring their own document-reading hardware, or bring a trusted sighted friend to verify the ballot is accurate.

    By printing non-common languages or outlying precinct ballots only "on demand" or only as needed to have a small supply of each at any given time, it would save paper.

    --
    Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
  10. Anybody who claims "unhackable" by straponego · · Score: 4, Insightful

    ...is a crook or a fool. You can reduce the probability of hacking... by an amount that is not easy to quantify.

    I heard an interview with an enthusiastic Indian programmer/marketer (sorry, I don't recall if I heard his exact job description), in which he claimed that very soon Indians would be vote via mobile phones. What a recipe for disaster. It's difficult to think of a less reliable and verifiable voting mechanism-- though it would certainly destroy anonymity for honest voters. It's not impossible that someday an open source, mobile voting platform will be more secure than existing mechanisms. But that will be many years in the future, and not developed quickly and cheaply in a nation overrun with corruption (so our best bet is somewhere in Scandinavia).

    Where there is a large incentive to cheat (to gain money, power, women), many people will try to cheat. Especially in societies with more habitual defectors than habitual cooperators (such as the US and India). Anybody who says otherwise is trying to cheat you.

  11. Re:Disgusting Moderation by Anonymous Coward · · Score: 4, Insightful

    Fighting governments in any way is beneficial for freedom? That's terribly simplistic and downright false.

    Would you consider fighting a democratically elected, egalitarian government, in order to replace it with a tribalistic theocracy, to be fighting for freedom??

    Would you consider working to bring down a government, which then gets replaced by a multitude of corrupt fiefdoms with the local rulers deciding the fate of anyone they don't like, to be fighting for freedom??

    The world is not black and white, it's not ones and zeroes and short boolean expressions. Every action has consequences that even the smartest of us cannot predict.

    Hell, I'm the first guy to follow the entire Bill Of Rights to the letter, and I'm not even American, but you have to realize that the only thing more oppressive than an oppressive government, is a complete lack of government, when the powerful are given complete free reign over the rest.

  12. Re:governments by roman_mir · · Score: 5, Insightful

    You think Jefferson would be electable in the USA today? I think not.

  13. Re:governments by OFnow · · Score: 4, Informative

    Yeah, or maybe he really stole a voting machine.

    The article says it was given to a group of researchers for a day, who found nasty defects
    and the politicians did not like that. Nothing suggests the machine was not
    returned after a day. Retroactively the grant of the machine is now
    considered theft. One suspects the intent is to discredit the research.

  14. Re: according to the article by MRe_nl · · Score: 4, Informative

    The answer to your question lies on page two of your own link.
    http://www.indiaevm.org/qa.html

    Q: How did you get the EVM you studied?
    A: It was provided by a source who has asked to remain anonymous.

    My point was that he had been charged with theft for refusing to reveal a source.
    If you click the link I provided you'll hear an interview with the scientist in question, by telephone, after his arrest.

    --
    "Kill 'em all and let Root sort 'em out"
  15. More Information by Philom · · Score: 5, Informative

    I'm a professor at the University of Michigan, and I coauthored the voting study at issue with Hari Prasad. I've posted part of a phone call with Hari while he was in the police car, along with more details about the arrest.

  16. Re: according to the article by MRe_nl · · Score: 4, Informative

    No, the legal theory of "innocent until proven guilty" stems from ancient (pre-Roman) times, and is in the United Nations Universal Declaration of Human Rights (article 11).
    If you're interested http://www.talkleft.com/story/2003/01/12/153/23800
    ps I'm Dutch ; ).

    --
    "Kill 'em all and let Root sort 'em out"