Diebold

(Image used under: Creative Commons 2.0 [SRC])

So not only was Diebold dumb enough to use a universal key for all their voting machines, and not only did they sell those keys off their website (though supposedly only to "authorized people" as if we could trust them to handle who's authorized or not), but they posted a picture of the keys on the Internet which allowed at least one researcher to make a perfect working copy at home with a key blank bought from the store and a file.

This story came to light a while ago, but there's been some updates such as:

In a classic Diebold bury-the-evidence move, they've now replaced the entire page in their online store featuring the mechanical, copyable key with a page featuring a "Smart Card, Security Key Card." A digital key card. Same link, different key entirely. Which can only be done, given the database they use for their online store, quite deliberately in order to try to fool folks again. Par for the course. And, of course, shameless.

Whee.

Evoting

(Image is in the Public Domain)

I found this picture on Digg.com that has an easy 5 step process to hacking the voting machines to do your bidding. Remember when you go to vote soon, to thank your state's voting commission if they are using these well known, hackable, substandard, and completely worthless machines. Better yet sue them for incompetence or corruption (or both).

Evoting

(Image is in the Public Domain)

The Register reports that Diebold has hurt its relationship with customers and election officials with their pathetic voting machine fiasco.

Negative publicity about the voting machines - such as the HBO documentary Hacking Democracy - has cast a shadow over the 150-year old company, analysts say. Until its move into e-voting, the firm was better known for its safes and automated teller machines.

Which, of course, anyone would now question the ATMs as well. The article goes on to speculate that Diebold may try to sell off the division… if anyone would buy it.

Evoting

(Image is in the Public Domain)

The National Institute of Standards and Technology (NIST) is recommending that the 2007 version of the Voluntary Voting Systems Guidelines (VVSG) decertify direct record electronic (DRE) machines.

In the article, they explain how NIST has found that the machines have no paper trail, and that a single programmer could rig an entire election. Uh…hello? This is not news, this was well know for a long time before now. Hopefully now that NIST has said it, someone in congress will pay attention.

Also, for brilliant social commentary on the issue, please see this: Diebold Accidentally Releases Results of 2008 Election Early. Tags: Diebold, Evoting

Our most fundamental right as American citizens is being denied in Maryland. I went to the polls to vote today and explained that I wanted to vote, but would only use a paper ballot. While the check-in people suggested a "provisional ballot", the supervisor nixed that and showed me this nice large sign.

Barred from voting in Maryland

Why did I insist on a paper ballot? Perhaps it's because of the Princeton University Study proving the lousy security of this system (with instructional video).

For example, an attacker who gets physical access to a machine or its removable memory card for as little as one minute could install malicious code; malicious code on a machine could steal votes undetectably, modifying all records, logs, and counters to be consistent with the fraudulent vote count it creates. An attacker could also create malicious code that spreads automatically and silently from machine to machine during normal election activities — a voting-machine virus. We have constructed working demonstrations of these attacks in our lab.

Or it could be because of this study done by the Brennan Center for Justice at NYU School of Law

All of the most commonly purchased electronic voting systems have significant security and reliability vulnerabilities. All three systems are equally vulnerable to an attack involving the insertion of corrupt software or other software attack programs designed to take over a voting machine.

If you protest the e-voting, be prepared to give up your right to vote.

But that aside, forget studies and look at our own state's history:

As reported by the Baltimore Sun many poll workers did not show up for work this morning and when they did they many had no idea how to operate new voting technology called "e-poll books" which are a necessary part of the voting process in Maryland and many other Diebold states. The workers were not trained to use that technology because Diebold did not provide the technology to the state until it was too late to properly train the pollworkers.

It's clear that the e-voting system is unstable and NOT READY. The accounting and security, both hardware and software is heavily suspect and it's much safer to rely on the traditional method of voting rather than on the video-poker-like machines they forced on us. But if you try, you may be barred from voting as I was.