Electronic Voting Machine Hacked

Status
Not open for further replies.

Waitone

Member
Joined
Dec 25, 2002
Messages
5,406
Location
The Land of Broccoli and Fingernails
Perhaps Jim March can ride by and comment. I've heard of the test hack done to see if voting machines can indeed be hacked with some ease. Here is an article that describes the test and explores some of its implications. Jim March has been yelling loud and long about the dangers. Here is a picture that frankly bothers me greatly.

http://www.axisoflogic.com/artman/publish/article_20950.shtml

Florida: The Harri Hursti Hack and its Importance to our Nation
By Susan Pynchon
Feb 1, 2006, 06:42

[updated January 21, 2006] I was one of ten people present at the "hack" of the Leon County, Florida voting system, which took place on Tuesday, December 13, 2005 around 4:30 in the afternoon at the county elections warehouse. Leon County's voting system is the Diebold Accu-Vote OS 1.94w (optical scan).

The Leon County Supervisor of Elections, Ion Sancho, authorized a "test" of his Diebold voting system to see if election results could be altered using only a memory card. Harri Hursti (photo at right), a computer programmer from Finland, who has been working with Black Box Voting, facilitated the test and it has come to be known as the "Harri Hursti Hack."
Following is a description of that hack and its significance for our nation, which I hope will correct much of the misinformation circulating regarding this event.

The Hack

To select which voting machine to use for the test, Ion drew a serial number of one voting machine from a container holding all the serial numbers of all the Leon County machines.
Since the test took place at the elections warehouse, all the voting machines were already stored there and the one machine, whose serial number was selected, was located and brought into the warehouse office, where it was plugged into an electrical outlet (so it could operate!). It was not networked to any other machines. We checked the serial number of the machine against the serial number that Ion had randomly selected.

Earlier, Ion had given ONE Diebold memory card to Hursti. Bev Harris and Kathleen Wynne of Black Box Voting were also present at the test.

Harri had programmed the memory card that morning, in his hotel room, using an off-the-shelf crop scanner. I drove Harri in my car from the hotel to the warehouse. When we arrived, Harri was asked to stay outside the warehouse office where the central tabulator is located, so that there would be no question about whether he had had any access to the central tabulator. When the randomly-selected voting machine was brought into the warehouse office, all of us went into the warehouse office except Harri, whom we could see sitting in a chair on the other side of a plate glass window separating the office from the rest of the warehouse.
Ion ran a complete mock election. He had had actual paper ballots pre-printed with the following question:

"Can the votes on this Diebold system be hacked using the memory card?"

There were two possible answers: "Yes" or "No," with an oval to the left of each answer to be filled in by the voter.

Everything was conducted as in a normal election. Ion first printed a "zero tape" (a poll tape from the machine that is supposed to show that nothing has been altered before the election begins). This was the first step in the hack --the zero tape showed zero votes for both the "Yes" answer and the "No" answer, even though Harri had altered the memory card and votes had been subtracted from one answer and added to the other answer. Harri used the interpreted (executable) code to cover up the fact that he had changed the vote counters.

Then eight of us voted, filling in the oval on our paper ballot. Six of us voted "No," the election could not be hacked. Two of us voted "Yes," it could be hacked. Then, one by one, we inserted our ballots into the voting machine. Ion checked after each voter to make sure that the counter on the machine was counting properly as each ballot was inserted. So, we ended up with an accurate count of 8 ballots cast on the screen on the front of the voting machine. Then Ion placed an "ender card" in the machine to end the election and printed the poll tape.

Instead of two "Yes" votes, the poll tape showed seven "Yes" votes.

Instead of six "No" votes, the poll tape showed one "No" vote.

Harri did not just flip the votes, as he wanted to show how easy it was to change the totals completely.
<snip>
 
Black box voters=tinfoil too tight.

Cheating in elections is nothing new.

Ask Dino Rossi or Coke Stevens.
 
I agree that electronic vote hacking is a totally new and dangerous animal. A single person with the right knowledge could control the election in any district or state he wanted, WITHOUT ANY collusion or inside access (doesn't have to be seen anywhere near the machines or facilities).

If a single person, without any help, can rig an election anyway he wants, without limits, THATS trouble.

http://www.chuckherrin.com/hackthevotedemo.htm
 
Jeez StandingWolf since Diebold and its only major competitor are both owned by extremely well connected Republicans, have secret and unaudited software with no possible trail of any changes, can you maybe think it might not be Democrats who benefit from this one, just maybe?

"I will do anything in my power to deliver OH's electoral votes for....".Kerry? Hmmm.......nope.
 
If an election can be tainted by any means the means need removed. Election fraud should be meant with a .45 ACP hardball to the back of the head upon proof. Both those that did it and those who benefitted.
 
Bruce H: your scenario has a flaw.

J. Random Blackhat could throw the election in favor of someone he doesn't like, make a deliberate mess of things so he's found out.

It'd cost him his life, but I can't think of a more successful asassin of politicians in this country.
 
Jeez StandingWolf since Diebold and its only major competitor are both owned by extremely well connected Republicans, have secret and unaudited software with no possible trail of any changes, can you maybe think it might not be Democrats who benefit from this one, just maybe?

You're right. It certainly could be Republicans; it you check the record, howevere, you'll find allegations and convictions for vote fraud by representatives of the Democratic (sic) party are running far, far ahead of allegations and convictions for vote fraud by Republicans.
 
Of the major voting systems, Diebold has come under the most fire. Not because they’re the worst, but because they’ve been the dumbest in regards their own product’s security, leaving copies of not just code but source code, manuals, even internal Emails accessible to the public. Copied and heavily examined, we know a lot about their product line.

Diebold's central vote tabulator was written in MS-Access. For you non-geeks that means the security is beyond “flawed”. Anybody with physical access to the box that counts the votes at county HQ can mess with the totals.

There’s a whole interconnected slew of security holes to enable that tampering. And Diebold is constantly finding or creating ways of accessing the box. In some counties they have “support contracts” requiring the county to maintain a “modem support line” right into that central tabulator for remote access connections that would allow remote vote rigging. Kern County California’s contract has one, but pressure from the activist community has caused them to shut that line down.

In smaller counties with minimal PC support staff of their own, Diebold often runs the elections outright.

Now, Diebold corporate in Canton OH does have GOP links. A lot of ‘em. But Diebold Election Systems Inc. (“DESI”) is a new subdivision bought when corporate purchased Global Election Systems, a Canadian company. Global had no political ties to speak of.

They had *criminal* ties.

Right, let’s go back to the beginning.

One of the key developers of this junkware was a gent name of Jeffrey Dean.

Dean...go grab something to munch on and follow this tale:

1986 - 1988 range, Dean worked as an accountant running the computerized bookkeeping for a Seattle law firm name of Culp, Guterson & Grader. Dean was convicted of 23 counts of computer aided embezzlement of that firm, totalling over $400k. Odd thing: he said years later in testimony in another court case that "yeah, I took the money, but it didn't go into my pocket" (paraphrase). On being questioned further, he claimed that a large group of lawyers within the firm were diverting money out, investing it, keeping the profits and returning the original cash. As the accountant, he was a key "bit player" in the scam and the only one to go down for it, four years state pen when it all blew up. This was in Seattle, all handled out of the King County (WA) prosecutor's office.

So he gets out of the pokey and a year later he owns a printing company (under his wife's name to hide his assets from the court-ordered restitution) called "Spectrum Print and Mail". He lands a printing contract with the King County elections office - to print ballots. By around 1996 - 1998 timeframe he's developing software for the county under contract, including "VoteRemote" for automating the absentee ballot checking process and the rest of the software used to sort and process absentee ballots for the county at the Spectrum printing plant in Everett, WA. (VoteRemote is now a Diebold product and Diebold now owns and runs that plant with its procedures and software written by Dean.)

Towards the latter half of the period in which he was working literally at the King County elections office, the prosecutor's office on a different floor of the same building was allegedly looking for him due to the restitution failure. Yet despite riding up and down the elevator with him daily they did nothing.

By 2000 he sold Spectrum to Global Elections Systems, the voting machine manufacturer later bought by Diebold in 2002 and now known as Diebold Election Systems. Immediately upon joining Global he was put in charge of development for that MS-Access-based central tabulator, GEMS...whose Windows program icon is a fist holding a globe. Dean was writing add-ons to GEMS while still at Spectrum. Diebold Corporate kept almost the entire Global management structure in place in the new elections division.

One of Spectrum's top employees was John Elder, somebody Dean met in the pokey. A coke dealer and no, I don't mean the kind you drink.

OK, back to King County. Who was still a major customer of Global after their buyout of Spectrum and where Dean frequently supported the elections division until in 2002 elections supervisor Julie Ann Kemf (may have that spelling wrong) got one too many "bad vibes" off of Dean and did some checking, found out about his massive felony embezzlement conviction and booted him out of the building for good, and started the process of ripping out every voting machine he’d ever touched. At which point Kemf was arrested for DUI and assault on a local cop, a lurid story made the local paper and she was fired...after which all charges were dropped. Her punishment for trying to clean up that county's election process.

Right, let's switch gears to Global, the chaps.

Founded in 1988 in Vancouver BC by:

Norton Cooper - jail for a year mid-1980s for fraud against the Canada government; ordered out of stock pitch schemes and was part of the collapse of the Vancouver stock exchange - ordered by decree not to pitch stock after 1992 or so because he caused havoc every time. Written up by Barron's and Forbes as a "hazard to avoid at the golf course". First convicted of political corruption in 1974 - look up a Canadian case titled "The Queen v. Norton Cooper" 1977 Canadian Supreme Court.

Charles Hong Lee - convicted of stock schemes; Cooper's partner pitching deals. Defrauded Chinese immigrants, $600,000(Can) court-ordered restitution mid-90s. Sold "real estate" which was actually the bail for the third partner below to the tune of about $300,000(can) circa 1995ish.

Michael K. Graye - nailed for stealing $18mil from three companies in the '88-'89 era, caught in '94, jailed in the US for stock fraud around '94 re: Vinex wines, released around 2000 - 2002(3?) in the US, brought back to Canada, still in jail there. Arrested for tax evasion and money laundering circa '94.

Charming, no? (Granted, the above three were re-jailed by the time of the Diebold buyout but their hand-picked management team was in place and retained to present.)

Oh yeah. I almost forgot the icing on the cake.

Was Dean lying about being a bit player in a bigger scam?

One of the top partners at Culp, Guterson & Grader is a gent name of Egil "Bud" Krogh. That name ring any bells? Look it up in connection to Watergate: Krogh managed the break-in and went to jail for it...took him years to get his law license back.

On getting out of jail, Dean didn't just land on his feet, he was dancing, and right smack in the middle of the elections for the dominant county in WA state.

What it looks like is, he DID take the fall for higher-ups and was not just rewarded, he was *used*. Once "the right people" knew he'd take a fall if necessary and was crooked as hell plus a decent code jockey, well hey, if you want to rig elections this is EXACTLY the cat you need, right?

Shall I continue?

How about how the old Spectrum plant in Everett is still in operation printing ballots, owned by Diebold, and has a 25% "spoilage rate" which is way over twice the norm for ballot printing...and the extra ballots aren't being tracked? Isn't it interesting that this plant still supplies blank ballots for King County and all through the governor's race recounts in '04 they kept finding "batches of uncounted ballots" until the numbers came out "right" for the Democrat, in a heavily Dem-controlled county?

Folks, this is NOT a “wingnut Democrat issue”. Not even close.

It’s a disaster in progress.
 
Jim March said:


......wow.......:scrutiny:

I'm just gonna add that I've been into hacking/encryption/security in general since grade school. (I don't really have any technical knowledge, but its a fascinating subject) Its actually where my handle comes from. I hang out in a lot of wild places on the internet, some might call them "all the wrong places", and the code for the Diebold machines has been floating around for a LONG time. The general consensus has always been that the system is TOTALLY INSECURE. They literally didn't even try. That link I posted will give you the idea.

Any election using those machines is wide open insecure to anybody.:fire:
 
Diebold's central vote tabulator was written in MS-Access. For you non-geeks that means the security is beyond “flawed”. Anybody with physical access to the box that counts the votes at county HQ can mess with the totals.

Just physical access?

Reason I ask is: last week I was asked by the county clerk, next county over, to put a second NIC in an office computer that was going to be directly cabled to their new, shiny Diebold touch screen machine. (It's mandated by the state and feds, so they said, for handicapped access.).

That machine turned out to be filthy infested with spyware, and have 2 seperate remote control programs that were there on purpose.

The wisdom of this was not my call. I cleaned out the crap and installed the NIC.
 
Sorry, I wasn't clear: physical OR remote.

Lee. Buddy. I need to talk to you. You have NO idea how important what you saw is. You must have been dealing with a central tabulator that adds up touchscreen votes, versus a touchscreen itself?

PM me, or EMail at [email protected]

Confidentiality *assured*.

-------------------

Another thing I wasn't clear about:

A lot of separate bits of info add up to an interesting picture: the "DESI" subdivision is NOT being controlled very well by the Diebold corporate office in Canton, OH. More like "they're running around completely off-leash" with a management team almost entirely left over from Global/Spectrum. So it's quite possible the entire shouting match that has broken out about Diebold being "REPUBLICAN DOMINATED!!!" is a giant red herring as far as the voting products division is concerned. They're not GOP dominated at all...they're just flat crooked.
 
If there's really that much potential to hack it, which I believe fully, and the gov't wants to go ahead and use it anyway... let's hope ALL sides hack equally. :D
 
Status
Not open for further replies.
Back
Top