Slashdot Mirror


Top Voting Machine Vendor Admits It Installed Remote-Access Software on Systems Sold to States (vice.com)

Kim Zetter, reporting for Motherboard: The nation's top voting machine maker has admitted in a letter to a federal lawmaker that the company installed remote-access software on election-management systems it sold over a period of six years, raising questions about the security of those systems and the integrity of elections that were conducted with them. In a letter sent to Sen. Ron Wyden (D-OR) in April and obtained recently by Motherboard, Election Systems and Software acknowledged that it had "provided pcAnywhere remote connection software ... to a small number of customers between 2000 and 2006," which was installed on the election-management system ES&S sold them.

The statement contradicts what the company told me and fact checkers for a story I wrote for the New York Times in February. At that time, a spokesperson said ES&S had never installed pcAnywhere on any election system it sold. "None of the employees -- including long-tenured employees, has any knowledge that our voting systems have ever been sold with remote-access software," the spokesperson said. ES&S did not respond on Monday to questions from Motherboard, and it's not clear why the company changed its response between February and April. Lawmakers, however, have subpoena powers that can compel a company to hand over documents or provide sworn testimony on a matter lawmakers are investigating, and a statement made to lawmakers that is later proven false can have greater consequence for a company than one made to reporters.

21 of 244 comments (clear)

  1. Garbage systems. by Gravis+Zero · · Score: 4, Insightful

    If your electronic voting booth runs a commercial operating system then you have already failed to secure your systems.

    --
    Anons need not reply. Questions end with a question mark.
    1. Re:Garbage systems. by hey! · · Score: 3, Insightful

      You are talking about software engineering approaches to securing the system. Those are important, but the overall system design has to be secure, otherwise it doesn't matter how secure the operating system is.

      A better approach would be to have the system print out human readable, machine readable paper ballots, which the voter carries from the voting booth to a secure ballot box. This wouldn't prevent the machine from mismarking ballots, but there would be a high probability of someone detecting an effort large enough to swing an election.

      --
      Post may contain irony: discontinue use if experiencing mood swings, nausea or elevated blood pressure.
  2. The big heist by paiute · · Score: 4, Insightful

    The Man finally figured out that stealing money is for chumps. The best crime is to steal the whole country.

    --
    If Slashdot were chemistry it would look like this:Cadaverine
  3. Admin credentials written on the side, too? by Voyager529 · · Score: 5, Insightful

    "provided pcAnywhere remote connection software ... to a small number of customers between 2000 and 2006,"

    The same PCAnywhere that was so egregiously exploitable that Symantec - Symantec of all companies, gave out free copies of version 12 to users who owned literally any prior version no matter how old it was? THAT is the product that was being utilized on voting machines?!

    It has become abundantly clear that any company selling technology-based solutions to the government which can successfully win a bid should under no circumstances be allowed to do the job.

  4. Re:wow digging by Anonymous Coward · · Score: 3, Insightful

    and yet after spending millions of dollars on dozens of investigations, no one has found any significant voter fraud in recent memory.

    but the right has demonstrably suppressed minority and democratic likely voting through stacks of well documented dirty tricks including bogus voter purges ( based on matching first and last names alone, as if those never are shared ), removing polling places, reducing machines in those voting places, etc... not to mention gerrymandering voting districts past any semblance of rationality.

  5. Primal scream by Catbeller · · Score: 4, Informative

    I TOLD YOU SO GOD DAMN IT.

    Why would you assume they wouldn't install a backdoor? WHY??? Changing election totals gave them trillions of dollars in tax cuts and complete power.
    Don't talk about open-source replacements. Any solution with electrons will be hacked and controlled. Go back to paper, the way Canada does, or did before the Tories rammed e-voting in. I wonder why, I wonder.

    1. Re:Primal scream by hey! · · Score: 3, Insightful

      Paper ballots with machine tallying combines the most of the best features of both systems and is cheap, logistically simple, and auditable. It also scales with license or technical limitations. I live in a state which uses that system and if turnout is heavy at the polling place they just set up another row of cheap pop-up voting booths, doubling the polling place's throughput for less than a price of a single voting machine.

      Of course one man's bug is sometimes another man's feature.

      I'm convinced that the reason these machines are so popular despite their cost, insecurity, and logistical burden is that they enable political parties to manipulate election results, not by hacking, but simply using the bottleneck they represent to generate long lines in precincts unfavorable to them.

      --
      Post may contain irony: discontinue use if experiencing mood swings, nausea or elevated blood pressure.
  6. Re:wow digging by layabout · · Score: 3, Informative

    Personally, I would be more concerned about a properly bribed election official or two losing votes in a voting machine or even worse, a voting machine with remote access https://www.newsweek.com/elect....

    This article from Vox highlights one of vote-by-mail strengths which is that it is very distributed and hard to tamper with at large scale. It's second strength is that is a fair process making voting accessible to anyone who is registered to vote. No need for polling places or special times and days, only a voting deadline of when your vote must be in an order to be counted. https://www.vox.com/policy-and...

    of course, if you want to steal an election, here's your how to: https://foreignpolicy.com/2018...

  7. 43 states had machines older than 2006 by Anonymous Coward · · Score: 4, Interesting

    Reading up on verified paper voting trails. (=My personal wishlist item for verifiable elections) reveals some disturbing stuff from 2016's election:

    https://www.nbcnews.com/news/us-news/paperless-pennsylvania-can-swing-state-verify-2016-vote-n660266

    "Even benign breakdowns of aging equipment — 43 states have machines that are more than a decade old ", i.e. states with voting machines from before 2006, the new standards didn't come in until 2007 and ESS only removed this software on machines made AFTER 2007.

    You claimed it was 15-20 years ago, but the article says 2007 was the time they removed them and then only for new voting machines sold.

    "when Pennsylvanians go to the polls to elect a new president in a month, more than 80 percent of them will be using machines that don't have a paper-backed audit."

    Let me guess, Pennsylvania was polling strongly for Clinton yet elected Trump by a slim and plausible margin.
    "Hillary Clinton leading by up to 12 points in Pennsylvania..."
    (From Wikipedia after the article)
    Trump wins Pennsylvania by 48.18% to 47.46%...

    I'm guessing that this is odd.
    2012, strong Obama, 2008 strong Obama, 2004 kerry, 2000 Al Gore....

    Yeh right, and now you can't even verify it because you didn't have a paper trail to verify against.

    FFS,

  8. We no longer have representation in government. by AmazingRuss · · Score: 3, Insightful

    We are subjects, and we have no control.... if we ever did.

  9. Re: wow digging by Jesus+H+Rolle · · Score: 4, Insightful

    What's really racist is the idea that minorities are just incapable of getting an ID.

    I support voter ID, but a California driver license costs $35. A California ID card (drinker's license) is $30. At the very bottom of the socioeconomic ladder are those for whom this is too much of an expense. Demanding payment in exchange for the privilege of voting is an illegal poll tax. Either change the Constitution or offer free IDs.

  10. Re: wow digging by jeff4747 · · Score: 4, Informative

    It's not just the ID itself, but the supporting documentation.

    A new copy of my birth certificate costs $50, or I have the option of traveling 2000 miles to get a free copy at the county's offices.

  11. Re:Not a big deal my ass by GrumpySteen · · Score: 5, Insightful

    Voting machines decide who gets a huge amount of power in our government. Backdoor access via a software package whose source code had been leaked and exploited, leading to the manufacturer recommending that it be removed, is huge goddamn deal.

  12. Re: wow digging by Anonymous Coward · · Score: 3, Insightful

    It's a well known open secret that liberals routinely bus "voters" around on election day thanks to the fact that all you need to vote is know the registered voter list.

    What you describe is illegal. I must assume that at least a small percentage of these frauds are caught, so of course you can provide some documentation of convictions for this, right?

    I should note that one of the first things DJT did after he became president is to start a committee to investigate voter fraud. It has been disbanded recently, and I am not aware of any reports from this committy. Why? I think I can make a pretty good guess.

  13. Re: wow digging by jeff4747 · · Score: 5, Informative

    No, they don't. They verify that the name you gave them is a registered voter. And that's all they do

    Actually, they verify name and address, and that you have not voted yet.

    Btw, think voter ID is gonna fix it? Guess what you need to produce a fake id? Name and address.

    It's a well known open secret that liberals routinely bus "voters" around on election day

    If this was actually happening at a large scale, it would be easy to catch and result in a lot of convictions. Yet there have been 0 people caught transporting false voters.

    In-person voter fraud is extremely rare. Those that do it and are caught are not all members of one political party. In fact, there's been slightly more Republicans caught doing it in the last few years, largely because of false claims like the one you make here.

  14. Re: wow digging by Bruinwar · · Score: 3, Informative

    What's really racist is the idea that minorities are just incapable of getting an ID.

    My step son turned 18 & never got an I.D. He didn't drive (or fucking work) so he never bothered. He wanted to vote. Getting all the documents together & getting him to the office to get a state I.D. was quite challenging. His dad had no idea where his birth certificate was so we had to get a copy. Without a car & financial resources, we would not have been able to do it.

    When we needed a marriage license I had no birth certificate. I had to go quite a long way to pay for a copy of it. I had a valid license, a passport, but no, they had to have the birth certificate. No public transportation would get me there & there was no way to get it for free.

    So it does not matter if your a minority or the color of you skin. What matters is the resources or the lack thereof. Voter I.D. laws & voter registration purges absolutely & veritably suppress the vote. That & lack of funding in poor areas helps a ton to keep the poor from voting. 2 hour waits only to find you're no longer registered. Florida 2000.

    --
    SLOWER TRAFFIC KEEP RIGHT
  15. Re:Not a big deal by Opportunist · · Score: 3, Insightful

    Even more of a reason to dump those voting machines.

    People pretty much have to trust paper and pencil. It's something everyone understands and trying to spin some conspiracy of how someone "stole" the election is pretty hard that way.

    That gets way easier with a tool that few people understand, even fewer can audit and only a handful actually get anywhere close to actually auditing it.

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  16. Re:wow digging by LynnwoodRooster · · Score: 3, Informative

    Or how about "discovering" hundreds of ballots, 6 weeks after the election, in an election decided by 261 total votes?

    --
    Browsing at +1 - no ACs, I ignore their posts. So refreshing!
  17. Re: wow digging by Rob+Y. · · Score: 4, Informative

    Also, even if it weren't overly hard to get the documentation (and I'm not saying it isn't), the voter ID folks are playing the margins. If they can prevent a small number of Democrats from voting in a few states in a close election, they can pull off an upset victory like Trump's.

    That's why the Russians targeted black voters with fake "Black Lives Matter" groups either misdirecting potential black voters or telling them not to bother voting. And it worked in places like Michigan and Winsconsin. Along with voter ID laws that similarly suppressed the black vote enough to tip the balance.

    The Electoral College allocation of extra votes to small population states is a problem too. But that's in the Constitution and hard to change. Voter suppression enjoys no such protection, and needs to be fought if you believe in one-person, one-vote.

    --
    Posted from my Android phone. Oh, I can change this? There, that's better...
  18. Re: Is that goverment ID free?? by Darinbob · · Score: 3, Insightful

    I'm in the center, and I am seeing BOTH sides being ridiculously incalcitrant here. Democrats bitch that any voter ID proposal is bad before even looking at it, and Republicans complain that voter fraud is rampant despite the total lack of evidence. Never mind both sides being hypocritical and creating gerrymandered districts.

    I think we should let everyone eligible be able to vote. If they don't have an ID or someone to vouch for them, then create a provisional ballot. It may slow down the counting, but I'd rather it take months to decide the winner than to disenfranchise someone. I also think college students should vote if they're living 2/3rds of the year in the county, and I think that ex convicts should vote also if they've served their time, and I think armed forces serving over time should be allowed to vote.

    Voting is every citizens right and duty and no one should stand in the way of it. That's the top priority, and I don't have issues with voter ID if it doesn't get in the way of anyone of any political persuasion from voting.

  19. Re: wow digging by Comrade+Ogilvy · · Score: 3, Insightful

    You can't claim voter fraud is not rare when lacking a shred of evidence. It is simply dishonest. It is not my job to prove how rare unicorns are, but the person who says unicorns are everywhere. AGs have looked and looked and they cannot find more than a rare isolated example here and there.

    For example, there is a consistent complaint that surely dead people are voting. Gee, it is the twentyeffinfirst century and it would be easy to detect that with computer technology if it were non-rare. No body looks into that because everyone with a brain knows the truth.

    If you could figure out how to prove there was significant amount of voter fraud, there is a rightwing PAC out there who will write you a seven figure check for the evidence, I guarantee it. Put you money where you mouth is, and quick your day job for a year to serve American democracy. And get rich, too.