Audio Archives: Brad Guest Hosts 'Malloy Show'
Interviews with Edmonds, Asner, Rowley, many more...
Monday, Tuesday, Wednesday, Thursday, Friday
Latest Featured Reports | Saturday, July 4, 2009
EXCLUSIVE: PALIN RESIGNS AS 'ICEBERG SCANDAL' SAID COMING
Alaskan sources tell The BRAD BLOG sudden resignation is 'damage control' for scandal 'not of family nature'... MORE: Federal embezzlement investigation related to materials used in Palin's house may bring indictments soon, according to AK sources...
End of the World Edition!
Brad & Desi's LISTEN: CA wins for a change; Where's the beef? Recalled!; EPA suppression? Really?; PLUS: WINGNUT MELTDOWN!
Previous GNRs: 6/30/09 - 6/25/09 - Archives...
NYTimes Fails to Correct Erroneous Endorsement of Holt Election Bill
One week later, and still no correction to huge error. Was the 'paper of record' misled by the bill's Democratic author?
Disbar Complaints For Two CIA Attorneys
Authorized/oversaw torture techniques resulting in death...
Coleen Rowley: How CBS '60 Minutes' Killed My Iraq Warning
The FBI's 9/11 whistleblower writes about being ignored yet again...

Help Restore Justice at Justice
Sign on to VR's campaign demanding accountability at DoJ.
Brad's Upcoming Appearances
(All times listed as PACIFIC TIME unless noted)
Media Appearance Archives...


By Brad Friedman on 5/20/2006 12:58PM  
Reports from Pennsylvania During Last Tuesday's Primary
(Brad Consulted NPR a Bit on the Report)...UPDATE: Now Includes Text Transcript of Report...

This morning, NPR's Weekend Edition covered the latest trouble with Diebold's touch-screen systems. They went to Pottsville, PA during last Tuesday's primary election.

The producer on the story had contacted us last week, prior to the story, for some background information. The resultant report, aired this morning, was generally a good --- and for a chance, accurate! --- one, we think.

By way of quick summary: Diebold spokesman Mark Radke explains the latest security hole, which had caused a lockdown of all Diebold touch-screen machines in PA, just days prior to the election, was there for a good reason --- to update software quickly, he says.

No explanation, of course, for why Diebold didn't feel it necessary to warn PA themselves about such a need for these extreme measures long ago. Especially since they were warned about the problem as long ago as January 2004.

Johns Hopkins computer science professor, Avi Rubin, says he can't think of a problem ever revealed in a voting machine as severe as this one --- the one which Radke predictably downplays --- adding that a TIVO system has more built-in security than a Diebold voting machine!

Radke says the physical security of the machines would make it impossible to exploit the security hole. Radke, of course, knows he's just spinning. Rubin makes that clear in his response, explaining how he could have compromised an election in about 5 seconds as a poll worker through this ridiculous vulnerability.

-- Listen to the full report (about 5 mins) here...

...And let us know what you thought of it in comments.

UPDATE: Barb Burt over at CommonCause, blogs on the NPR item as well this morning, giving it high-marks, along with a few other notable thoughts.

UPDATE 5/24/06: A text transcript of the NPR report is now included below...

LINDA WERTHEIMER, host:

After the very, very close presidential election in 2000, when results were in doubt for weeks, Congress appropriated funds to help states modernize their voting. And companies that manufacture voting machines have rushed new computerized systems onto the market. But there are concerns about the new machines. Apart from the inevitable glitches and new equipment, critics raise questions about machines that have no paper record of votes and about the possibility that computerized systems could somehow be reprogrammed to change votes, perhaps even change the outcome of an election.

Tuesday was Pennsylvania's primary election. In the town of Pottsville, they used brand new voting machines manufactured by a company called Diebold. Pottsville is home to a Yingling and it's the county seat of Schuylkill County. Generally, voters in Pottsville liked their new Diebold machines.

Unidentified Woman: Did you see the machine before?

Unidentified Man: No.

Unidentified Woman: So push that button. Here's your actual voting page.

Unidentified Man: Just (unintelligible) vote?

Unidentified Woman: Right. Say you want that. If you don't want him, just touch it again and it erases.

Unidentified Man: Okay.

Unidentified Woman: So we have to stand back.

Unidentified Man: I found it relatively easy to use and different screens could help you go back and forth if you needed to change anything. And I thought it was very helpful, and a step forward for progress here.

Unidentified Woman: Well, it seems funny, you know. It's sort of awkward, 'cause you're use to the paper, but now I would rather do it this way.

Unidentified Man #2: 'Cause you're in the booth there and it was dark.

Unidentified Woman: And you're closed in.

Unidentified Man #2: That's right.

WERTHEIMER: Election judge Izzy Adams(ph) at Precinct 51 said things were going better than she'd expected with touch screen voting machines. But in late afternoon, when another election official appeared with the Diebold pamphlet and pin number, Ms. Adams didn't know what she was suppose to do with it.

Ms. IZZY ADAMS (Election Judge): Did you see 051606? That's a pin number. Now where did they get, see there's a lot of things yet we don't know about these. She never mentioned pin word or password, did she? Do you remember her...

Unidentified Woman No. 2: No, I don't remember, no.

Ms. ADAMS: No, I don't remember her saying anything about password or pin number.

WERTHEIMER: Several weeks ago, the nonprofit watchdog group Black Box Voting.org raised questions about the Diebold TSX. That's the machine Pottsville is using. A computer expert hired by the group reported that the machines were designed with a portal, a significant security vulnerability. Diebold spokesman Mark Radke(ph) says it is there, but it's there for a good reason.

Mr. MARK RADKE (Diebold Spokesman): When a new version of software must be loaded on the unit because of election law changes and items like this that might take place during the life of the equipment, those new versions of software are uploaded into the system through this path.

WERTHEIMER: So the portal, the door into the system, is there to update it?

Mr. RADKE: That's correct.

WERTHEIMER: Others say that may be so, but it's also a real security threat.

Professor AVI RUBIN (Johns Hopkins): I believe that this is not only the most serious security problem that I've seen in a voting machine, but I can't think of a security problem that I've seen in any kind of system that is severe as this.

WERTHEIMER: That is Johns Hopkins computer science professor Avi Rubin. He's been studying the technical aspects of the electronic voting systems since 1997. He says that Tivo, a home device that records television shows, has tighter security than the Diebold machine.

Mr. RUBIN: Now, the reason that this is a security concern is that they made it very, very easy for someone to modify that software. So easy, in fact, that all you really need is a few seconds of physical access to the machines. You could introduce something by putting a memory card inside of them that would cause the machines to be unusable without hardware repair.

WERTHEIMER: But all of these things are not networked, right?

Mr. RUBIN: Right.

WERTHEIMER: So if you got into one machine and changed things, that would be one machine in one precinct.

Mr. RUBIN: Despite the fact that the machines are not networked, you could change the software on there so that it would put a virus on the on the memory card. The memory cards are transferred from one machine to the other.

And so the thing to keep in mind is that the virus or the malicious software that's introduced, it could cause the machines to fail, but it could also do something that would be undetectable. What if the malicious software simply said, if we're in a precinct that votes a particular way that we don't like, swap 10 percent of the votes.

WERTHEIMER: Diebold's spokesman Mark Radky(ph) says that cannot happen because poll workers see to it that voting machines are securely locked away. And before each election, the machines are retested and marked with special security tags.

Mr. MARK RADKY (Diebold Spokesman): It's a very simple and clear way to validate that, yes, that unit has been tested, it is secure and it can be used for the election.

WERTHEIMER: So what you're saying is that you can secure the machines, but there is nothing inherent in the machine to protect it from being tampered with if somebody happened to be able to get at it.

Mr. RADKY: Well, if someone has direct access to a unit, just like with your PC as an example, if someone had direct access to your PC over an extended period of time, which you wouldn't let that happen, obviously, they could, you know, remove the hard drive, put a new hard drive in and so on. And unless you tested it, you would never know.

In this situation, though, every one of the voting stations is tested before every election, it's locked down as far as the security tags are concerned, and it goes through extensive testing before the memory cards are locked into the unit.

Mr. RUBIN: I don't buy that at all.

WERTHEIMER: Security expert Avi Rubin worked with Diebold machines in Maryland.

Mr. RUBIN: I worked as an election judge and I spent a whole day with these machines. At the end of the day I collected the memory cards out of them and held them all in my hand and fed them into the accumulator machine. That's how the Diebold system works. You put all the memory cards into one machine and it counts the votes off of all of them and totals them.

It would have been extremely easy for me to have another memory card, these are very small cards, up my sleeve and stick it in the machine for five seconds. And that's all I would have to do to infect the entire precinct and compromise that election.

When you take hundreds of thousands of voting machines across the country being protected in sometimes absolutely ridiculous ways like having poll workers take them home overnight, which does happen, and you tell me that the security of the whole election depends on nobody getting a few seconds of access to that machine, I think that's crazy.

WERTHEIMER: The other issue frequently raised about new equipment, including the machines Pottsville used, is that if tampering did take place there would be no way to recount the election, no record at all of how each voter voted, and at least one state has already decided that won't work.

New Mexico has a new law mandating paper ballots, which are then electronically scanned and counted. Governor Bill Richardson pushed for the new law because New Mexico had all kinds of difficulties with touch screen equipment in 2004, making it one of the last states to report results.

Governor BILL RICHARDSON (New Mexico): We became one of the laughing stock states in the country because we had these technological machines that were not working, that in several counties were defective, were slow, were unreliable, and I basically said to myself I'm not going to go through this again. And I just think that the paper ballot system, as untechnical as it seems, is the most verifiable way we can assure Americans that they're voting and their vote is counting.

WERTHEIMER: Governor Richardson told us he expects to see other states follow his lead and go for a hybrid system with paper ballots that can be tallied quickly by computers, or if necessary, more slowly by people.

But let's go back to Pottsville, PA and to people voting at the West End Hose Company Firehouse.

Unidentified Man #3: (unintelligible)

WERTHEIMER: There were a few glitches there and elsewhere around the state. In the Pittsburgh area, machines manufactured by a competitor, Electronic Systems and Software, refused to start in many polling places, and there were similar mechanical problems in Philadelphia. Those occurred with yet another voting machine manufacturer, Danaher.

This Tuesday, Arkansas holds its primary. All but three counties will use new voting machines from Electronic Systems and Software.

Buzz this story!


READER COMMENTS ON
"NPR's Weekend Edition Covers the Latest Diebold Security Issues"
(12 Responses so far...)

COMMENT #1 [Permalink]
... John Gideon said on 5/20/2006 @ 1:28 pm PT...


Notice some of the discussions in the background and that poll workers seem to be helping the voters do their voting. Also note the PIN number that was given: 051606 or the date of the elections. Good information to have to go along with the password: 111111


COMMENT #2 [Permalink]
... bvac said on 5/20/2006 @ 1:36 pm PT...


The Diebold snake oil salesman said that the machines are locked down before the election. But it was reported that election officials were bringing them home with them until election day. He also said they are checked before being used in an election. Do they do a CRC check on the software? Do they verify it some other way? Or do they just check to see if it "looks" alright?


COMMENT #3 [Permalink]
... Dan said on 5/20/2006 @ 3:19 pm PT...


Well, of course security is going to be tighter on the new TIVO's, you understand they guarantee you WILL watch each and every ad. Corporate revenue is so much more important to our government than vote integrity.

Keep it going Brad. the heat is on.


COMMENT #4 [Permalink]
... big dan said on 5/20/2006 @ 4:32 pm PT...


I have to say, after that scare where the Republicans were trying to make NPR into FOX news, NPR resisted, thanks in no small part to the great Bill Moyers. NPR is great. Although they can't do what Democracy NOW! news does, because Democracy NOW! doesn't even take government money.

That being said, I applaud NPR for their utmost attempt at uncensored/unbiased/unsuppressed news.


COMMENT #5 [Permalink]
... Anonymous said on 5/20/2006 @ 6:24 pm PT...


bvac #2: I don't know if they use a checksum, but if they do, you're probably right, they probably use CRC! CRC is not a secure algorithm. It's great for detecting accidental data corruption, but it's useless to detect deliberate tampering, because there's an easy way to make tampered data that has the same CRC as the untampered data.

Even if they use a secure algorithm, they probably use it stupidly. Instead of unplugging the flash chip and checking it with separate equipment, they probably just trust the suspected machine to calculate its own checksum!

Even if they plug the chip into some kind of super secret secure chip checker, how would we know that somebody didn't tamper with the chip checker?

All the ideas that involve verifying the equipment, instead of verifying the ballots, are doomed to failure. There is ALWAYS a way for a smart insider to make the tampered equipment "pass the test" and appear to be untampered.


COMMENT #6 [Permalink]
... Bluebear2 said on 5/20/2006 @ 6:35 pm PT...


bvac #2:

They plug it in, turn it on and if the screen comes up and has the correct colors - good to go!


COMMENT #7 [Permalink]
... bailey77 said on 5/20/2006 @ 10:53 pm PT...


{Ed note: Comment deleted. Disinformation. "BlackBoxWatchdog" folks, knock it off. That shit's not welcome here. Run your disinfo campaign elsewhere. Thanks!}


COMMENT #8 [Permalink]
... Larry Bergan said on 5/21/2006 @ 2:31 am PT...


Bailey77:

Is that paycheck you get really worth the farce your life has become.

The really sad part is the sentence above doesn't even make you feel sick does it?


COMMENT #9 [Permalink]
... Arlene Montemarano said on 5/21/2006 @ 9:51 am PT...


I have been unsuccessful in getting the link to the story from NPR to work.

Is there another way for me to get it?


COMMENT #10 [Permalink]
... Bluebear2 said on 5/21/2006 @ 12:08 pm PT...


Brad

Thanks for cleaning up the mess left by #7.

They are also at the 2 threads above this one with links that some say are malicious.


COMMENT #11 [Permalink]
... Bluebear2 said on 5/21/2006 @ 12:17 pm PT...


Arlene Montemarano

try this one.
You will need Windows media player or (ugh) real player.
(It's a personal thing with real player - purchased their jukebox years ago and used it to code all my cd's and many LPs to mp3. When they came out with real-one it obsoleted and uninstalled all that and I had to recode everything to use it)


COMMENT #12 [Permalink]
... Anonymous said on 5/22/2006 @ 3:50 am PT...


bailey77 (#7), your web site says:
Because officials were unable to confirm with certainty which machines had actually been tampered with, technicians from the vendor were required to inspect, verify and reinstall the firmware for each of the county's 40 voting machines. Since the work was not covered under warranty, the county was ultimately required to pay $1,000 per unit to rehabilitate its equipment4.

Something there doesn't make sense. Why didn't Diebold just say to the county: "Don't worry, just remember to do the Logic and Accuracy test before the next election, like you're supposed to do anyway. After all, the purpose of the L&A test is to find out which machines, if any, have been tampered with."

Diebold didn't recommend the L&A test; instead they recommended this other process which cost $40,000 for 40 machines. This is a VERY important admission. Diebold is admitting that L&A testing DOES NOT WORK. Diebold is claiming that there is some other process which works, but this other process costs $1,000 per machine per election. How many trillions of dollars is that going to cost us? (Assuming we believe that the other process really works, which I'm sure it doesn't, since this is Diebold after all!


-=- Comments on this item are now closed. -=-


-->
VotersUnite.org's Daily Voting News 'Daily Voting News'
for July 2-3, 2009

by Ellen Theisen

Co-Editors: Dave Klein and John Washburn

While the goals of the U.S. and the Philippines seem to be the same regarding elections --- fair and fraud-free, their methods are diametrically opposed. The Philippines is desperate to get away from paper ballots and automate their elections, and the U.S., having been there done that, is heading in the opposite direction.

Happy Independence Day! We're taking the weekend off....

Click for links to all of today's notable voting news headlines...

Support The BRAD BLOG
Please visit our advertisers




Spend your advertising dollars wisely! And support the good guys at the same time! or Advertise with the good guys! We're it!





Greg Palast Investigates - a New Film on DVD







OTHER SITES

Support The BRAD BLOG
Please visit our advertisers
Brad Friedman's
The BRAD BLOG



Go to front page...

Recent Entries

Archives
Important Docs
Categories

A Few Great Blogs
Political Cartoonists
Special Coverage Pages...

· Make The BRAD BLOG your Homepage!
· Add The BRAD BLOG to favorites/bookmarks!
· Or syndicate The BRAD BLOG...
BRAD BLOG RSS 2.0 FEED Add to Google Add to My AOL
Add to My Yahoo! Subscribe in NewsGator Online Follow The BRAD BLOG on Twitter!

Please Help Support The BRAD BLOG...
One-time
any amount you like...
$
Monthly
any amount you like...
$
Or by Snail Mail
Make check out to...
Brad Friedman
7095 Hollywood Blvd., #594
Los Angeles, CA 90028

The BRAD BLOG receives no foundational or corporate support. Your contributions make it possible to continue our work.
About Brad Friedman...
Brad is an independent investigative journalist, blogger, author and broadcaster. He is the co-founder of VelvetRevolution.us, an expert on issues of election integrity, and a Commonweal Institute Fellow.
· Full Bio & Testimonials...
· Media Appearance Archive...
· Articles & Editorials Elsewhere...
· Contact...

Additional Stuff...
Brad Blog Named...
The 2008 Weblog Awards



Wikio - Top of the Blogs - Politics

Other Brad Related Places...
The BRAD SHOW On the Air! Via RAW RADIO!


Useful Tools...

Contact the Media
Admin
Brad's Test Area
(Ignore below! It's a test!)

All Content & Design Copyright © Brad Friedman unless otherwise specified. All rights reserved.
www.BradBlog.com