I've been following a story about the Princeton professor who has a working virus that he can inject into a Diebold voting machine and alter vote tallies in any way he wishes.
Main Findings The main findings of our study are:Today, I read a follow-up article in which new findings from the same professor paint a very bleak picture.
- Malicious software running on a single voting machine can steal votes with little if any risk of detection. The malicious software can modify all of the records, audit logs, and counters kept by the voting machine, so that even careful forensic examination of these records will find nothing amiss. We have constructed demonstration software that carries out this vote-stealing attack.
- Anyone who has physical access to a voting machine, or to a memory card that will later be inserted into a machine, can install said malicious software using a simple method that takes as little as one minute. In practice, poll workers and others often have unsupervised access to the machines.
- AccuVote-TS machines are susceptible to voting-machine viruses -- computer viruses that can spread malicious software automatically and invisibly from machine to machine during normal pre- and post-election activity. We have constructed a demonstration virus that spreads in this way, installing our demonstration vote-stealing program on every machine it infects.
- While some of these problems can be eliminated by improving Diebold's software, others cannot be remedied without replacing the machines' hardware. Changes to election procedures would also be required to ensure security.
Diebolds' machines can be opened with a standard office furniture key. "The access panel door on a Diebold AccuVote-TS voting machine -- the door that protects the memory card that stores the votes, and is the main barrier to the injection of a virus - can be opened with a standard key that is widely available on the Internet," Felten wrote. "The exact same key is used widely in office furniture, electronic equipment, jukeboxes, and hotel minibars."
Let me boil this down for you...
In less than a minute and a half, someone could reprogram a Diebold voting machine to manipulate votes in any way they wish. All they need is an off-the-shelf memory card and a key they could buy on eBay for a buck.
Diebold says everything is fine, their product is secure.
We can all sleep well knowing Democracy is safe.