Blogged by John Gideon on 5/11/2006 4:16PM  
EXPERTS AGREE: 'It's the Most Serious Security Breach Ever Discovered in a Voting System
3 States Issue Mitigation Plans, Georgia Ignores The 'Black Hole', AP Ignores BRAD BLOG Reporting...

Guest Blogged by John Gideon

As was expected the corporate media picked-up the latest in Diebold's sordid story --- which we reported first here last Friday --- with articles by Ian Hoffman yesterday and today and even the Associated Press stepped in as well.

Unfortunately the headline of Hoffman's article yesterday characterized the security hole as being a 'glitch'; which this certainly is not. It is also not a 'flaw' as it was characterized by today's Hoffman and AP articles. (Ed note: Hoffman has been very good at reporting on all of these related stories, so we don't wish to be overly critical of him, but rather point out the inaccurate characterization.)

This is a 'feature' that was knowingly installed by Diebold. It was not a mistake or something that was overlooked in the design of the software. It is not a 'bug', 'glitch', 'flaw', 'error in programming' or any other simplistic name. Michael Shamos, a Carnegie Mellon University computer science professor and veteran voting-systems examiner for the state of Pennsylvania has said this:

"It's the most serious security breach that's ever been discovered in a voting system. On this one, the probability of success is extremely high because there's no residue.... Any kind of cursory inspection of the machine would not reveal it."

Johns Hopkins University computer science professor Avi Rubin, who published the first security analysis of Diebold voting software in 2003 had this to say:

"I think it's the most serious thing I've heard to date. Even describing why I think its serious is dangerous. This is something that's so easy to do that if the public were to hear about it, it would raise the risk of someone doing it. ... This is the worst-case scenario, almost."

In the meantime the state of Georgia has decided that there is nothing that they have to do because their administrative rules already mitigate the problem. Of course, they made that statement without knowing what the full problem is.

A redacted copy of the Hursti "Critical Security Alert: Diebold TSx and TS6 voting systems" can be found at BlackBoxVoting.Org. Bev Harris guarantees that the redaction only resulted in 50 words being removed from this copy of the report.

Finally, I would be remiss in not pointing to this final line of Dan Goodin's article for AP:

The story was reported earlier by the Oakland Tribune.

Uh, Dan, you could have had a more timely article, and probably scooped Ian Hoffman if you had read The BRAD BLOG on Friday, where you would have found the whole story posted exclusively that day.

It's about time that the corporate media begin looking to the blogs as a source instead of ignoring us like we aren't here. Or at least admitting that they're looking to the blogs as a source, instead of only attributing those in the MSM.

Will Dan Goodin or the AP post a clarification to their story? We're not holding our breath.

Buzz this story! C2NN: Submit it!


READER COMMENTS ON
"DIEBOLD'S DELIBERATE SECURITY VULNERABILITY"
(18 Responses so far...)

COMMENT #1 [Permalink]
... bluebear 2 said on 5/11/2006 @ 4:34 pm PT...


With the apparent coup d'etat and war with Iran coming, this may all be a moot issue - getting way scary out there!


COMMENT #2 [Permalink]
... Grizzly Bear Dancer said on 5/11/2006 @ 5:30 pm PT...


While the AP makes money selling their "glitched" stories to newspapers etc., i find that their stories tend to misinform the reader especially if the reader has no previous knowledge of what the AP author is writing about AND tend to be in favor of the Bush administration's position from the slant they put on the story. This can be illustrated by recent articles i read by AP writer Becky Bohrer on Yellowstone brown bear delisting. There was a long article of Bushit in the Orange County Register about a month ago. For example, while Wild Bears Project Director Louisa Willcox submitted a paper stating 57 IMPORTANT REASONS AGAINST DELISTING THE ISOLATED YELLOWSTONE POPULATION OF BROWN BEARS SUFFERING FROM INBREEDING, Ms. Bohrer mislead the reader by skimming over the important reasons against delisting and many other fact, such as the importance of the bear. She ended her story with the following quote: "If we do not delist now when can we delist>." So, if there is a way for AP to screw up a story, when and if they finally write it, the article can twist the story away from the truth and and mislead the American people under the disguise of being written by an unopinionated 3rd party.


COMMENT #3 [Permalink]
... Grizzly Bear Dancer said on 5/11/2006 @ 5:33 pm PT...


Uninformed 3rd party perhaps.


COMMENT #4 [Permalink]
... bluebear 2 said on 5/11/2006 @ 5:49 pm PT...


Grizzly - it's off topic, but I thought you would like it - at least part of it:

DNA Test Confirms Hybrid Bear in the Wild

The bad part is it was shot by a hunter and will now be a "Trophy" - that part disgusts me!


COMMENT #5 [Permalink]
... John Dean said on 5/11/2006 @ 6:51 pm PT...


My sincere thanks to Bev Harris, Brad Friedman, and everyone else involved in this battle.

John


COMMENT #6 [Permalink]
... Bev Harris said on 5/11/2006 @ 8:04 pm PT...


Thanks, Brad and John Gideon, for your persistence in covering story after story illustrating the need for real election reform.

As of 8 a.m. this morning I was doing final edits on a 23-page report. You may notice that it is only 12 pages.

Harri had hoped to split the report into two --- one concerning the devastating and inexcusable flaws, and another "laundry list" of secondary issues, some of which are also quite troubling.

Then we put the whole thing into one report. Harri and I were both up pretty much the whole night making final decisions as to what to redact and who needs to receive the unredacted portion and so forth. I left to get coffee around 8 a.m. and realized that the "laundry list" was very easy for reporters to understand, lots of photos and so forth. Problem is, the devastation is in the triple-play (bootloader/operating system/files) and that part is harder to understand.

If we kept the whole report together, reporters would pick up the easy stuff and use that instead of the really important story on the triple-play.

Therefore, we pulled the laundry list for Monday publication. It has a concise but very interesting section on macros, as well as some other disturbing news.

It is time for all communicators and activist groups to truly work together to pull these beasts out of elections.


COMMENT #7 [Permalink]
... city of angels lady said on 5/11/2006 @ 8:38 pm PT...


When are we going to do something? Why have we let them get away with fraud, stealing the election, then one crime after another?

Do we have to put a comedian into office to get something done?

Kay In L.A>


COMMENT #8 [Permalink]
... Tandalayo Scheisskopf said on 5/11/2006 @ 9:23 pm PT...


This reads to me like they built in an intentional backdoor. Keep looking people. Likely there are more.

In the computer world, redundancy is A Very Good Thing.


COMMENT #9 [Permalink]
... Simon Magus said on 5/11/2006 @ 10:17 pm PT...


RELEASE THE HACK TO THE PUBLIC!!

That is the only way they will listen. Public exposure has been used many times with security exploits involving software like Microsoft Windows. The vendors cannot ignore a serious security flaw that is in the wild and nor can election supervisors.


COMMENT #10 [Permalink]
... Larry Bergan said on 5/12/2006 @ 2:02 am PT...


Wow! Things really seem to be converging into something tangible, even for the MSM.

The press has been guilty of ignorance until now. It's VERY maddening to see this plagiarism of the brave people who cared enough to do something about this years ago!

At least there are hundreds of us who know who the real hero's are, and we will NEVER forget you!


COMMENT #11 [Permalink]
... Floridiot said on 5/12/2006 @ 4:39 am PT...


The way I'm reading this,
Are we only able to talk about vulnerabilities in the future tense , and not past election hacks to be noticed by the Corporate media ?

Just wondering


COMMENT #12 [Permalink]
... Bev Harris said on 5/12/2006 @ 7:20 am PT...


to Simon Magus:

"RELEASE THE HACK TO THE PUBLIC!!"

We have released the hack to the public. Fewer than 50 words were redacted from a 12 -page report. Quite possibly it would violate the Patriot Act to release the names of the files to the public before CERT, EAC, NIST and the secretaries of state of Florida, Georgia, California, Pennsylvania, Utah, Washington, Arizona, Texas, Illinois, Michigan, Minnesota, Iowa, Kansas, Missouri, Mississippi, Virginia, Maryland, New Hampshire, Vermont, Wisconsin, Kentucky, Tennessee and Ohio have the opportunity to pull the machines out of use.

However, if they do NOT act promptly to remove these machines from service, and they have had time to do so, it is quite likely that we will release the filenames needed to hack the system.

Really that's all we redacted. Specific filenames. The road map is in the report, but at this time we did not put gas in the car.


COMMENT #13 [Permalink]
... Dredd said on 5/12/2006 @ 9:29 am PT...


A "deliberate security vulnerability" in this context is a deliberate attempt to destabilize the American government.

If the people, for any reason, cannot change their government thru their vote, then we have by definition a dictatorship.

A republican dictatorship. Big brother is a republican.

In theory there are only 3 IT managers at the big 3 election machine companies. Diebold has a head of IT in its election systems division, ES & S has one, and Sequoia has one.

Massive destabilization of the ability to change the government, transparently and honestly, has taken place.

Wake up and smell the republican dictatorship.


COMMENT #14 [Permalink]
... Dredd said on 5/12/2006 @ 9:33 am PT...


In tribute:

"The citizenry owes an immense debt of gratitude to Bruce Funk, the Emery County Clerk for Emery County, Utah who, upon noticing anomalies in the Diebold TSx machines delivered to his county, requested an independent evaluation of this voting system." (Bev Harris and/or Black Box Voting)


COMMENT #15 [Permalink]
... Simon Magus said on 5/12/2006 @ 11:32 am PT...


Thank you Bev. I was worried the details would remain secret. That is a relief.


COMMENT #16 [Permalink]
... Larry Bergan said on 5/13/2006 @ 4:08 am PT...


Wow, these comments are taking a long time to register tonight! That was redundant!


COMMENT #17 [Permalink]
... Larry Bergan said on 5/13/2006 @ 12:03 pm PT...


Floridiot #11

Good point, I think you're probably right.


COMMENT #18 [Permalink]
... Larry Bergan said on 5/13/2006 @ 12:29 pm PT...


Floridiot #11

Good point! I think you might be right on that.


-=- Comments on this item are now closed. -=-


VotersUnite.org's Daily Voting News 'Daily Voting News'
For December 04, 2008

by John Gideon

The Help America Vote Act of 2002 (HAVA) was signed into law in Oct. 2002. Amongst other things HAVA required the formation of the Election Assistance Commission (EAC) and provided some mandates, in Title III of the law, for federal elections including some standards for voting systems. Those standards include, but are not limited to, accessibility for voters with disabilities and accuracy in the vote count. Testing by experts in accessibility has shown that none of the Direct Recording Electronic (DRE, usually touch-screen) voting systems presently in use meet the requirements for accessibility for disabled voters. Failures in testing and vote counting in real elections have also proven that, at times, the voting systems presently being used across the country do not meet the federally mandated requirements for accuracy.

So what guidance has been provided by the EAC to the states with regards to Title III? Well, actually none. In fact even though voting systems presently in use do not meet federal law the EAC is just now getting around to issuing guidance to state and local election officials and, according to the draft of the plan ‘featured’ below, it is going to take another two years before the EAC can complete the guidance.

Why can’t they just tell the vendors and the states that the law is clear and, if they fail to follow that law, violations will be referred to the DoJ? The fact that the vendors misrepresent their products as being accessible is a clear violation of the law. It is time they are held responsible and it doesn’t take two years of studying Title III of HAVA to make that clear....

Click for links to all of today's notable voting news headlines...

Support The BRAD BLOG
Please visit our advertisers




Spend your advertising dollars wisely! And support the good guys at the same time! or Advertise with the good guys! We're it!



Fight the H8 in Your State











OTHER SITES
Groomsmen Gifts - Pub signs can be personalized for a unique gift for your wedding party.

Support The BRAD BLOG
Please visit our advertisers
Brad Friedman's
The BRAD BLOG



Go to front page...

Recent Entries

Archives
Important Docs
A Few Great Blogs
Political Cartoonists
Special Coverage Pages...
Touch-Screen Vote-Flipping 2008

L.A. County "Double Bubble" Debacle

2008 New Hampshire Primary Mess

Riverside CA, Sequoia Hack Challenge

Tom Feeney/Clint Curtis Voting Riggging Scandal
Summary...
Key Articles/Docs...
GOP ACORN 'Voter Fraud' Hoax

Ann Coulter's Voter Fraud Felony

Thor Hearne's 'American Center for Voting Rights'
GOP 'Voter Fraud' Scam

NM GOP/Rep. Heather Wilson 'Vote-Buying' Scandal

Rush Holt's Election Reform Bill (HR811)

'04 White House Website Scrubbing

· Make The BRAD BLOG your Homepage!
· Add The BRAD BLOG to favorites/bookmarks!
· Or syndicate The BRAD BLOG...
BRAD BLOG RSS 2.0 FEED
Add to My Yahoo! Subscribe in NewsGator Online
Add to My AOL
Add to Google

· Select a BRAD BLOG color scheme...

Dark on Light Classic BRAD BLOG
Please Help Support The BRAD BLOG...
One-time
any amount you like...
$
Monthly
any amount you like...
$
Or by Snail Mail
Make check out to...
Brad Friedman
7095 Hollywood Blvd., #594
Los Angeles, CA 90028

The BRAD BLOG receives no foundational or corporate support. Your contributions make it possible to continue our work.
About Brad Friedman...
· Bio & Testimonials
· Media Appearance Archive
· Articles & Editorials Elsewhere
· Contact

Additional Stuff...
Brad Blog Named...



Wikio - Top of the Blogs - Politics

The BRAD BLOG - Year in Review 2006
Part 1 - Part 2 - Part 3

Other Brad Related Places...
The BRAD SHOW On the Air! Via RAW RADIO!