Create an Account
username: password:
 
  MemeStreams Logo

Diebold Machines

search

Decius
Picture of Decius
Decius's Pics
My Blog
My Profile
My Audience
My Sources
Send Me a Message

sponsored links

Decius's topics
Arts
  Literature
   Sci-Fi/Fantasy Literature
  Movies
   Sci-Fi/Fantasy Films
  Music
   Electronic Music
Business
  Finance & Accounting
  Tech Industry
  Telecom Industry
  Management
  Markets & Investing
Games
Health and Wellness
Home and Garden
  Parenting
Miscellaneous
  Humor
  MemeStreams
Current Events
  War on Terrorism
Recreation
  Cars and Trucks
  Travel
Local Information
  United States
   SF Bay Area
    SF Bay Area News
Science
  Biology
  History
  Math
  Nano Tech
  Physics
Society
  Economics
  Politics and Law
   Civil Liberties
    Internet Civil Liberties
    Surveillance
   Intellectual Property
  Media
   Blogging
Sports
Technology
  Computer Security
  Macintosh
  Spam
  High Tech Developments

support us

Get MemeStreams Stuff!


 
Diebold Machines
Topic: Computer Security 3:57 pm EDT, Jul 20, 2004

Well, I voted today. A few impressions.

1. There seemed to be a lot of polling locations around my apartment, and a lot of machines. No lines when I showed up (at 3). If you DOSed one machine I think it would have little effect on the outcome unless a race was very close.

2. You can't get access to the machines unless you are registered to vote in the district in question. This means that you would either have to attack your own district or you would need to be able to effectively fake the identity of someone in the district of choice while preventing them from showing up before or during your visit.

3. Old people can easily distract poll workers with stupid questions.

4. Swaping the smart cards would have been dead easy. If the system could be attacked with a bad smartcard, then you could get away with this, and you would have at least 10 minutes to play around on the console without drawing any attention.

5. You're not in an enclosed booth, so putting a sniffer inline between the smart card and the reader might get noticed. You'd have to be pretty slick to hide it. Maybe drop your copy of the league of women voter's guide on top of the reader once the card is inserted. Also, the card snaps into place in the reader. That mechanism might interfere with any custom hardware, but it depends.

6. The smart card reader is attached to the machine with a plainly visible rs232 cable. If you were really slick you might be able to place a device inline between the reader and the cable, but you might get noticed, and certainly such a device would be discovered later.

7. You could probably Van-Ek phreak polling places. I don't think anyone has discussed that. I was happy to see that in Georgia they enter you registration on a scantron form. In Tennessee they used a computer, which seemed to be network conected. I figured one might be able to associate votes with people because of that.

8. If Diebold could devise a way to make the machine start beeping in the event that one of the critical processes crashed or the administrative modes were accessed this would be a somewhat effective security mechanism. Any attack would depend on a lot of slight of hand under the noses of other people. Things that make loud noises tend to draw attention. Obviously this could never be fool proof.

9. The UI was nice. I had some trouble getting the touch screen to recognize some of my presses, but all in all it was a good voting experience.



 
 
Powered By Industrial Memetics
RSS2.0