Hack a US Election in 3 E-Z steps with your friend, Diebold

quantumushroomsays...

1) What about the ballot card that you remove from the machine? Is that also infected? It's what gets dropped in the ballot box. What if the voting machine records and the cards' records don't match?

2) That sure is a lot of sneakernet work to infect thousands of machines, one at a time.

3) Where I live, an armed deputy is assigned to almost every polling place. Hope the Conspiracy paid them all off.

4) If a victicrat wins any election in a time of war, I'd certainly suspect fraud.

5) theo47 is correct. Eternal vigilance is the price for liberty.


pho3n1xsays...

QM,
1) yes. it was explained in the video that it will infect the memory cards once on the machine.
2) 1 infected memory card in 1 machine before they all go through the testing phase would be all it takes.
3) where i live, the polling places are held in local churches and elementary schools 'guarded' with volunteers. (2005 est population 369,815)

oohahhsays...

quantummushroom asked, "1) What about the ballot card? ... It's what gets dropped in the ballot box. What if the voting machine records and the cards' records don't match?"

That's not how it works. Much like your car key, the smart card grants you the ability to use a voting machine. The only thing that card does is signify that you may vote. Before it is ejected from the machine, each smart card is marked as invalid so you can't vote twice. In the normal course of events, the voter returns the used card to a poll worker, who can mark the voter card as valid again and hand to the next voter. [1] Wash, rinse, repeat.

The only record of your vote is on the machine itself. There are no records that have to match up. You, the voter, get no receipt. If the machine catches fire, several hundred or thousand votes may be lost. [2] Gee, it sure would suck if a one or several machines suddenly had amnesia at the end of the day.

One point that I'll mention briefly now and come back to later: Normal voters do *not* get a printed receipt. The internal printer is only used for initial and final tallies [3].

---

quantummushroom stated, "2) That sure is a lot of sneakernet work to infect thousands of machines, one at a time." and "3) Where I live, an armed deputy is assigned to almost every polling place."

The machines run Windows CE [4]. They're vulnerable to viruses. [5] All you need to do to infect a machine is to open the side door, "secured" by what amounts to a desk-drawer lock, insert your our memory card, and reboot. [6] This can be accomplished in under a minute. You certainly won't raise eyes until you've used a voting machine for over twenty.

Let's look at two ways to infect thousands of machines:

First, if you already know which machine will act as the accumulator, you don't have to infect thousands of machines. At the end of the night, the memory cards are pulled from every machine and fed to one that adds all of the cards up. Just infect that machine. And then, if that card is taken to the next polling station for accumulation of several polling stations, even more results can be manipulated. [7]

Second, I quote: "A poll worker, election official, technician, or other person who had private access to a machine for as little as one minute could use these methods without detection. Poll workers often do have such access; for instance, in a widespread practice called “sleepovers,” machines are sent home with poll workers the night before the election [8]."

---

quantummushroom stated: "4) If a victicrat wins any election in a time of war, I'd certainly suspect fraud."

Strawman argument that has no bearing on Diebold machine security.

---

quantummushroom stated: "5) theo47 is correct. Eternal vigilance is the price for liberty."

There's no way to be vigilant while voting with one of these machines because there's no paper trail and no way to guarantee that you voted the way you voted. If the machines break, your vote is lost.

Consider a different model of electronic voting that does offer these things: first off, the voting machine doesn't record any votes. All it does it help you pick candidates. When you're done, hit the print button, which will print out a two-part receipt, of which you keep half. It should be time-stamped, include a way to identify the voter but not reveal their name, and the votes in plain text.

A voter can read it, verify it, put the submission in a ballot box to be scanned later, and take the receipt home. The receipt is a backup, if you will, that could be used if, for example, the ballot box caught fire.

A final thought: Diebold makes ATM's. Do you think they would they use a lock that can be picked in 10 seconds by an amateur [9] on those?

[1] http://itpolicy.princeton.edu/voting/ts-paper.pdf 3.3.2 Voting
[2] ibid. 2.1.2 Denial-of-Service Attacks
[3] ibid. 3.1 Hardware
[4] ibid. 3.1 Hardware
[5] ibid. 4.3 Demonstration Voting Machine Virus
[6] ibid. 2.2.1 Direction Installation
[7] ibid. 4.4 Demonstration Denial-of-Service Attack
[8] Marc Songini. E-voting security under fire in San Diego lawsuit. Computerworld, August 2006.
[9] http://itpolicy.princeton.edu/voting/ts-paper.pdf 2.2.1 Direct Installation

joedirtsays...

quantum, please get some more smarts about how electronic voting works. You have a DRE which records votes. It may or may not produce a paper verifiable voting record. It does produce one final print out with the results for the open-close period of the machine.

Now, the DRE cartridges or memory cards are all taken and put into a tabulator. (This software is already proved to be easily hacked, but that's another issue) The tabulator reads all the cartridges and puts them in a nice database to report the election results.

At no time does anyone verify the paper receipt matches what went into the electronic results. (Don't believe me, how did Franklin county precinct get 4000 extra votes for Bush on a machine that can only record about 300 votes in a day? What happened was a communication glitch as the cart was inserted or something and the data got screwed up... No one caught it until citizens downloaded the official abstract and noticed the huge precinct results. That's right, no sanity checks are EVER performed before they post the winner)

Even during a recount in Ohio, where by law you HAVE to compare 3% of the precincts paper results to final electronic results, THEY refused to do this in any county in Ohio. Sure, counties that used punchcards did do handcounts of 3% for punchcards, but NO county did hand counts for any electronic DREs.

Why do you have to put your head in your ass and say crap like victicrat? Just because your brownshirt fascist-thug party does NOT care about honest elections, doesn't mean that people who do care about honest, verifiable, guaranteed election integrity are losers.

Take your machiavellian logic and go hack your car's brake line.

joedirtsays...

Thanks oohahh. That video has gotten 2000 views in the last few hours.
Go view it in Youtube and click on favorite.
#15 - Most Discussed (Today), #8 - Top Rated (Today), #5 - Top Favorites (Today)

[EDIT] Shoot, I just found one with even more hits. http://www.youtube.com/watch?v=aZws98jw67g
#50 - Most Discussed (Today), #1 - Top Rated (Today), #32 - Top Favorites (Today)

As you can see the online effort to favorite the first one and comment has it shooting up quicker.

ultimateforcesays...

quantumushroom

1) What about the ballot card that you remove from the machine? Is that also infected? It's what gets dropped in the ballot box. What if the voting machine records and the cards' records don't match?

It's a simple piece of memory that is either used for "Allowed to vote" or "Has voted." I suggest you did not watch or understand the video, in either case the cards don't really hold any voting data. That's what keeps it a "secret" election. It's not like it says "John.Smith:John.Kerry". It's used and dumped in a box.

2) That sure is a lot of sneakernet work to infect thousands of machines, one at a time.

It takes a minute tops to do something like this. Where there's 3 or 4 machines per polling station it could all be done in one shot by a small group of people. Even then, if these machines were networked (Oh God please tell me they aren't) you'd only have to infect one.

3) Where I live, an armed deputy is assigned to almost every polling place. Hope the Conspiracy paid them all off.

I could do this in a voting booth while I was casting my vote. When I voted it was behind a screen curtain, it's not like they made me empty out my pockets before I went in.

4) If a victicrat wins any election in a time of war, I'd certainly suspect fraud.

I had no idea what you were talking about at first.. And I still don't. Explain.

gaffasays...

Actually, following what oohahh said, you don't need to initially infect the accumilator machine. Just any of the machines so at the end of the day the accumilator is infected with that machines memory card and the vote is adjusted for the final tally.
And as I recall, Diabold released a software update before one election before the update had the opportunity to be approved by election officials.

Send this Article to a Friend



Separate multiple emails with a comma (,); limit 5 recipients






Your email has been sent successfully!

Manage this Video in Your Playlists




notify when someone comments
X

This website uses cookies.

This website uses cookies to improve user experience. By using this website you consent to all cookies in accordance with our Privacy Policy.

I agree
  
Learn More