Hackers: California e-voting machines can be hacked

A team of hackers announced that the e-voting machines used in California could be very easily hacked and attackers can forge voter cards, install malicious software and overwrite the firmware installed.

Hackers: California e-voting machines can be hacked
A team of hackers announced that the e-voting machines used in California could be very easily hacked and attackers can forge voter cards, install malicious software and overwrite the firmware installed.

Led by Matt Bishop, the hackers were invited by Secretary of State Debra Bowen as part of the "top-to-bottom" review of ballot machines used in the state. The team found that machines supplied by Diebold Elections Systems, Sequoia Voting Systems and Hart Intercivic were most vulnerable to attacks from hackers.

Bishop added that his team could have found more vulnerabilities had the makers of the machines cooperated with the investigations. He revealed that his team received a majority of the documents just a week before the end of the investigations while a number of other documents and tools were not at all provided.

"Despite these problems, the red team testing was successful, in that it provided results that are reproducible and speak to the vulnerability of all three systems tested. They demonstrated that the security mechanisms provided for all systems analyzed were inadequate to ensure accuracy and integrity of the election results and of the systems that provide those results", Bishop wrote in his report.

However the three makers hit back, stating that all the investigation revealed was the extent of a worst case scenario. Sequoia released a press statement in which it said that the investigation was not carried out in a real-world scenario and had all the voting security procedure been followed, the report should not be given much credence.

"We believe the process would have been enhanced had the testing team included an experienced election official. Unfortunately, since no one on the testing team had experience in security procedures and protocols used in California, your team was deprived of having someone with hands-on experience running an election", the company said.

Agencies
Last Mod: 01 Ağustos 2007, 15:18
Add Comment