Slashdot Mirror


Indian Election Officials Challenges Critics To Hack Electronic Voting Machine (thehindu.com)

Slashdot reader erodep writes: Following the recent elections in India, there have been multiple allegations of electoral fraud by hacking of Electronic Voting Machines... Two weeks ago, a party even "demonstrated" that these machines can be hacked. The Election Commission of India has rubbished these claims and they have thrown an open challenge, starting June 3rd to hack these EVMs using WiFi, Bluetooth or any internet device. This is a plea to the hackers of Slashdot to help secure the future of the largest democracy on the planet.
Each party can nominate three experts -- though India's Aam Aaadmi Party is already complaining that there's too many terms and conditions. And party leader Sanjay Singh has said he also wants paper ballots for all future elections, arguing "All foreign countries like America, Japan, Germany and Britain have gone back to ballot paper."

52 comments

  1. Going back? by pjt33 · · Score: 1

    And party leader Sanjay Singh has said he also wants paper ballots for all future elections, arguing "All foreign countries like America, Japan, Germany and Britain have gone back to ballot paper."

    Britain never switched away from paper ballots, so it hasn't gone back.

    1. Re:Going back? by Anonymous Coward · · Score: 0

      So you "rubbished" that claim?

    2. Re:Going back? by Anonymous Coward · · Score: 0

      Neither did Germany. Some morons wanted to, but ultimately sanity prevailed..

    3. Re: Going back? by Anonymous Coward · · Score: 0

      Some state level ellections were conducted with electronic voting machines but never on the federal level thanks to the Chaos Computer Club who demonstrated multiple times that the voting machine cannot be trusted .

    4. Re:Going back? by Anonymous Coward · · Score: 0

      I don't see what's wrong with paper ballots. It's not like they'd wipe their asses with them, is it?

  2. How to embarrass your country in one easy step by ilsaloving · · Score: 1

    So he issued an open challenge to hack the election two weeks after it was demonstrated hacks were easily possible?

    *gets the popcorn* This should be entertaining. I wonder how many meters deep the smoking craters of their servers will be.

    1. Re: How to embarrass your country in one easy step by Anonymous Coward · · Score: 1

      The political party (AAP) used a prototype, not the original Electronic Voting Machine, to show how it can be done. Now the Election Commission has organised hackathon for the original machine. Such hackathon have been previously also organised without any success.

    2. Re:How to embarrass your country in one easy step by ShanghaiBill · · Score: 3, Informative

      The challenge is meaningless. It is far easier to install a backdoor than to detect one. Heartbleed went undetected for years, and that was an unintentional bug with full source available to anyone. A maliciously designed backdoor, specifically designed to be hidden, would be far harder to detect. It is not clear from TFA if the hackers will have access to the source code, but since it says they will not be allowed to "tweak" the EVMs, it sounds like they will not, and they certainly will not be allowed to recompile to install instrumentation to capture intermediate state. They are also only give 4-5 days, which is nowhere near enough time to understand a complex system.

      This "hacker challenge" is designed to ensure failure. Why? They only reason I can think of is that they are hiding something.

    3. Re:How to embarrass your country in one easy step by Anonymous Coward · · Score: 0

      One Indian news story tried to demonstrate why hacking wasn't possible by asking the guard sitting next to the EVM why. The guard came up with the most bizarre explanation: namely that if one substitutes the motherboard of an EVM, the other motherboard would be that of a washing machine, or a microwave, or something else, and then that won't do the job of the voting machine.

      Somehow, the genius had never heard of software, where the code could easily be changed to increment the votes of a party by 5 times the other, and decrement the votes of other parties by an equal amount, so that the total looked right, while rigging the results. What was funnier was that the stupid reporter fell for that 'explanation' hook, line & sinker. When it would have been easier to 'rubbish' it.

    4. Re:How to embarrass your country in one easy step by 140Mandak262Jamuna · · Score: 1
      That machine has no network interface. No ethernet, no bluetooth, no wifi nothing. The data is collected by shutting down the machine and unplugging the memory module. There are 64 buttons to push on the voting machine, and one button in the controller.

      It would easier to switch the memory module when it is transported or when it is tabulated. It is as simple as it can be for a machine without paper trail.

      --
      sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
  3. so... by Anonymous Coward · · Score: 0

    so goat.se or tubgirl? Or trol lo lo?

  4. Yum by mentil · · Score: 1

    Hope they enjoy the taste of crow.

    --
    Corruption is convincing someone that the selfless ideal is the same as their selfish ideal.
  5. Receipt by Neuronwelder · · Score: 1

    Is a receipt too much to ask for in a vote??

    1. Re:Receipt by Minupla · · Score: 1

      Receipts are problematic. If you can prove to officials that you voted one way, you've also broken the concept of a secret ballot, which opens the door for vote manipulation (bribery, threats, etc).

      I know of one local election that was decided by my mother's vote. She regularly lied to my father about how she voted.

      Min

      --
      On the whole, I find that I prefer Slashdot posts to twitter ones because I don't get limited to 140 chars before
    2. Re:Receipt by JaredOfEuropa · · Score: 1

      That's one important aspect of voting systems. Another important aspect also involves your mum: can she personally verify that the ballots have been counted correctly? (together with a sufficiently large number of other mums). If not, then the voting system is not fit for purpose.

      --
      If construction was anything like programming, an incorrectly fitted lock would bring down the entire building...
    3. Re:Receipt by Neuronwelder · · Score: 1, Flamebait

      After seeing Jeff Sessions throw a woman in jail for laughing I don't see us having much to lose. We have Gerrymandering screwing with voters. We already have seen Nominees order their followers to go after minorities or people they don't like and beat them up or worse.. We need to make voting mandatory and also let felons vote as well.

    4. Re: Receipt by Anonymous Coward · · Score: 0

      Already happening. The latest 3rd Generation Electronic Voting Machine with Voter Verifiable Paper Audit Trail (3G EVM with VVPAT) is already being produced which will provide receipt facility where receipt would be put in a ballot box which can be counted when any election result is contested.

  6. Do your duty, Slashdot by Khyber · · Score: 1

    Get CowboyNeal elected as India's PM!

    --
    Still waiting on Serviscope_minor to wake up to fucking reality and realize that Jessica Price isn't going to fuck him.
    1. Re:Do your duty, Slashdot by Anonymous Coward · · Score: 0

      Who's CowboyNeal?

    2. Re:Do your duty, Slashdot by Anonymous Coward · · Score: 0

      Slashdot could never pull it off. It'll be some kids on 4chan.

  7. Re:What? I guess the colonial mentality still thri by DontBeAMoran · · Score: 1

    So you want to do the opposite of other countries just to be different or avoid being a follower? Even when it doesn't make sense?

    --
    #DeleteFacebook
  8. Re: What? I guess the colonial mentality still thr by Albanach · · Score: 1

    What a stupid strawman argument. As if looking to others' experiences somehow implies that anyone is suggesting copying because they're former colonial powers.

    There are, and rightly so, huge concerns with any election that doesn't have verifiable paper ballots or receipts. That's reality the world over and has zilch to do with colonialism. It affects Italy as it does India and the American countries as it does those in Africa.

    Bruce Schneier isn't a colonialism (at least not that I'm aware of), rather he's one of the most highly regarded experts on computer security. The points he raised in 2004 are every bit as valid today. Or, as he said elsewhere, "a secure Internet voting system is theoretically possible, but it would be the first secure networked application ever created in the history of computers."

  9. Infosys wrote the code by Anonymous Coward · · Score: 0

    What could possible go wrong with code written by ex taxi drivers?

    1. Re:Infosys wrote the code by Anonymous Coward · · Score: 0

      What could possible go wrong with code written by ex taxi drivers?

      Hey don't knock it!

      MS, Apple, FB, Amazon, and the NSA can't all be wrong!

  10. Next week... by Anonymous Coward · · Score: 0

    Trump wins election in India. Will be making curry great again. The best.

    1. Re:Next week... by Hognoxious · · Score: 1

      Trump making curry? With me it's the other way round.

      --
      Confucius say, "Find worm in apple - bad. Find half a worm - worse."
  11. Re:What? I guess the colonial mentality still thri by ShanghaiBill · · Score: 1

    So, according to him, Indians should simply follow the west like a trailer?

    If you have a choice of X and Y, and you notice that almost everyone else, including people that that did plenty of due diligence, chose X over Y, then that is pretty solid evidence that X is a better choice. If some people that chose Y, later admitted it was a mistake and went back to X, then that is even more evidence for X. If, despite all that, you want to choose Y, then you should be able to explain why everyone else is wrong.

  12. Only one way by EmperorOfCanada · · Score: 3, Interesting

    There is only one way to do electronic elections.

    You can have an electronic ballot machine, and it will store and tabulate the votes.

    The key part is that it also prints the ballot in large clear print showing what you picked. This paper ballot is the "source of truth". So the election will use the electronic ballots for a quick result. Any interested party can participate in scrutinizing the paper ballots and in the case of a discrepancy, the paper ballots will be used.

    As for online voting, HELL NO.

    1. Re:Only one way by phantomfive · · Score: 1

      Your comment should be modded up a thousand times, then printed out and mailed to every elected official and non elected official in the world. Bashar al-Assad should get a copy of your post. The sooner we get to voting machines being built (and required) the way you describe, the better off we'll be.

      --
      "First they came for the slanderers and i said nothing."
    2. Re:Only one way by zippthorne · · Score: 1

      Perhaps, but it's more efficient to use the paper receipt in the voting booth and skip the voting machine for that stage, instead having a single or small number of optical counting machines per polling location. That way the cost of expanding the number of booths is inexpensive - you just need some walls of any opaque material, a writing surface, and a marker.

      --
      Can you be Even More Awesome?!
    3. Re:Only one way by phantomfive · · Score: 1

      The problem with optical counting machines (I assume you mean hand-filled ballots) is that people are more likely to make mistakes when filling them in. "Hanging chads" and all that.

      --
      "First they came for the slanderers and i said nothing."
    4. Re:Only one way by Anonymous Coward · · Score: 0

      You'll be even better off if you just continue to use paper ballots, as there is no good reason not to. Having a machine over there counting ballots and a pile of paper ballots over there that may or may not have the same information on them is actually a recipe for chaos.

    5. Re:Only one way by tlhIngan · · Score: 1

      The problem with optical counting machines (I assume you mean hand-filled ballots) is that people are more likely to make mistakes when filling them in. "Hanging chads" and all that.

      Well, there are two ways.

      First, don't punch ballots. You get hanging/pregnant/etc chads because you're punching a hole and the punching tool can fail.

      Use a simple pen and paper. Or in Canada, we actually use pencil. You make a mark on the ballot and as long as it is distinct that one can infer your intent, it will be counted properly. So if you put an X, a check mark, or some other indication in the box on only ONE item, it's obvious what you meant. if you make a dot, and there's a dot on another space, then it is not obvious and it is not counted. If you make an X or checkmark and there are spurious dots, the X and check show you intended and those dots may have been dirt.

      Plus, pens are cheap, and if the mark isn't clear or the pencil is dull, you can return your ballot where it is destroyed and a new one issued with a replacement writing utensil. (Technically the ballot isn't destroyed - it's kept but not counted since the number of serialized counter foils must match the number of ballots including intentionally "destroyed" ones, but once the serial number is detached, there is no link between the ballot and the voter).

      They emphasize to make a clear mark to show intent - a checkmark and X are best because both require two distinct strokes which are better than a dot or other kind of mark. And we're talking about a huge mark - the circle to make your mark is roughly 0.75" in diameter and is a white spot surrounded by black. The only other white on the ballot is the name of the person you're voting for.

    6. Re:Only one way by phantomfive · · Score: 1

      You make a mark on the ballot and as long as it is distinct that one can infer your intent,

      You don't see potential problems with that?

      They emphasize to make a clear mark to show intent

      They emphasize it because people mess it up.

      --
      "First they came for the slanderers and i said nothing."
  13. Electronic count + paper trail by Anonymous Coward · · Score: 1

    The "receipt" is left at the voting location, placed inside a locked box that cannot be opened there.

    The "receipt" needs to have enough text on it for an average person/voter to review and see their actual votes.

    In this way, 100% separate counts is possible to validate the electronic counts which can be manipulated. If a human cannot take all the paper and come up with the exact same numbers for each candidate, then you don't have enough traceability.

    PERIOD.

    1. Re: Electronic count + paper trail by Anonymous Coward · · Score: 0

      Here's an idea. To make sure that the receipt has all the votes correctly listed, they could pick up a sheet with the list of candidates on it from the desk, put marks next to the ones they want, and put it into the receipt box.

  14. Hiding behind definitions by hyades1 · · Score: 3, Insightful

    Maybe the machines can't be "hacked", as we commonly define the word. But somewhere, one or more people have the keys to the kingdom: the passwords, code, access, and whatever else is necessary to make the machines do whatever they're told to do, then remove all proof they were compromised.

    So all these "hack it, if you can" dares mean nothing. "Hacked" does not mean "compromised", though people with a real interest in stealing an election would like us all to forget that distinction.

    Unless the machine spits out a paper ballot on the spot, and the voter can immediately rectify a wrongly-recorded vote (with proof), anything is possible. Only complete idiots would trust a vote-by-machine election without some unimpeachable method for verifying the results.

    --
    I've calculated my velocity with such exquisite precision that I have no idea where I am.
  15. "Official coordinates with Russian hackers." by Anonymous Coward · · Score: 0

    That's what would be written if the man had any ties to Trump.

  16. Re:What? I guess the colonial mentality still thri by Hognoxious · · Score: 1

    X has death panels!

    --
    Confucius say, "Find worm in apple - bad. Find half a worm - worse."
  17. The indian EVM is very simple by 140Mandak262Jamuna · · Score: 2
    As far as I remember the Indian EVM (Electronic Voting Machine) is a very simple thing, 64 registers, all simple ripple counters. Button push to vote. Two interlocks, Vote button disabled till the controller unlocks it. Controller is locked till vote button is pressed once. Thus multiple press of vote button is not possible. Controller is at the table of the election official with representatives from contestants present and watching. Voting machine has a small privacy screen. I think one controller and one voting machine per booth. It had no bluetooth or wifi or IR or ethernet or any form of communication.

    Voting data is extracted by taking a memory module out of the machine and plugging it into a tabulator or something. The memory chip is physically transported to the tabulator under seal. Police, election officials and agents accompany the chip. This was what the documentary showed way back when it was introduced.

    This machine was designed by an engineer for BEL (Bharat Electronics Limited) who is very famous for his writings. He goes by the pen name Sujatha and has written wonderful science fiction, mystery novels, humorous articles and some formal literature and formal poetry.

    --
    sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
    1. Re:The indian EVM is very simple by 140Mandak262Jamuna · · Score: 1

      Yes the machine has 64 buttons, one per candidate.

      --
      sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
    2. Re:The indian EVM is very simple by Anonymous Coward · · Score: 0

      The very fact that the machine was developed by a brahminical fart is a proof that hindutva forces are getting benefited from EVMs.

    3. Re:The indian EVM is very simple by Anonymous Coward · · Score: 0

      Why the hell a country where there is no limitation on number of parties/independent candidates is opting for such a machine with limitations? Remember RK Nagar? At the last minute some candidates withdrew so that EVMs can be used (else due to larger numbers, paper ballot should have been used and the election itself was cancelled when DMK victory was predicted by IB). Why a nation where majority of people are without proper sanitation, electricity and education should go for EVMs? How can we be sure that the mother board of the machines are not tampered? Even an electronics hobbyist can develop a EVM board and it doesn't need a plagiarist and pseudo-intellects like Sujata to shit out such novel inventions.

    4. Re:The indian EVM is very simple by gwolf · · Score: 1

      This machine was designed by an engineer for BEL (Bharat Electronics Limited) who is very famous for his writings. He goes by the pen name Sujatha and has written wonderful science fiction, mystery novels, humorous articles and some formal literature and formal poetry.

      Science fiction such as, "The intelligent, autonomous voting machines".
      Mystery novels such as, "Mr. Prime Minister gets 115% of the votes".
      Humorous articles such as "Security and privacy in e-voting systems".
      Formal literature such as "An essay on popular but stupid ideas".
      Formal poetry such as "A B C, I hack thee!"

  18. An unhackable IoT device? by TheOuterLinux · · Score: 1

    Yeah...

    1. Re: An unhackable IoT device? by Anonymous Coward · · Score: 0

      The machine in question cannot be connected to the Internet.

  19. Re:What? I guess the colonial mentality still thri by unixisc · · Score: 1

    India was never a colony of America, Japan or Germany. Just of Britain. So it hardly makes sense to suggest that Indians want to copy the other 3 for reasons other than them actually being superior in their bureaucracies.

  20. Re:What? I guess the colonial mentality still thri by jezwel · · Score: 1

    If you have a choice of X and Y, and you notice that almost everyone else, including people that that did plenty of due diligence, chose X over Y, then that is pretty solid evidence that X is a better choice. If some people that chose Y, later admitted it was a mistake and went back to X, then that is even more evidence for X.

    You should talk to the PM of Australia - still forcing the build of a copper based communications network (primarily fibre to the node, then copper to the premise) when every other country / company is abandoning copper for straight through fibre for fixed line.

    If, despite all that, you want to choose Y, then you should be able to explain why everyone else is wrong.

    Smart politicians ensure their words contain enough ambiguity to weasel out of poor decisions. The first excuse is infallibly "blame the previous guy".

  21. Re: How to embarrass your country in one easy ste by Anonymous Coward · · Score: 0

    CV sent,

  22. largest democracy by Anonymous Coward · · Score: 0

    Where you are killed or imprisoned if you eat a hamburger