|
|
Tags for This Article:
USA United States Of America (7159) Voting Integrity (2512) Voting Technology (1756) Voting Machines (1341) California (1278) Florida (878) New York (648) Ohio (647) Fraud (449) Privacy (423) Connecticut (248) France (171) Germany (171) Cuyahoga (53) Netherlands (23) Bibliography (5)
|
(more...)
(less...)
Add to My Group
The paper concludes that the standards structurally encourage and reward election system vendors for using less exacting database design standards. FLORIDA: Software Review and Security Analysis of the Diebold Voting Machine Software, Security and Assurance in Information Technology (SAIT) Laboratory Florida State University, July 2007. The two primary systems analyzed consist of the Diebold Optical Scan, firmware version 1.96.8, and Touch Screen, firmware version 4.6.5. We also examined the Diebold Touch Screen bootloader version 1.3.6 as well as GEMS server software version 1.18.25. We considered flaws in previous versions of the software for all parts of the system, including those found in the AccuBasic interpreters. Our analysis focuses on two attacker categories… voters and poll workers. Attacks by elections officials and voting system vendors are largely outside the scope of this review. We did not conduct penetration or red team testing for these systems. Our analysis examined only those flaws previously reported in the cited literature. Flaws in the Optical Scan software enable an unofficial memory card to be inserted into an active terminal. Such a card can be preprogrammed to swap the electronically tabulated votes for two candidates, reroute all of a candidate’s votes to a different candidate, or tabulate votes for several candidates of choice toward a different candidate. Data on optical scan memory cards is neither encrypted nor authenticated, leading to many potential attacks that could manipulate vote counts on a memory card prior to or during the voting day. Unsupervised access allows an attacker to place the Optical Scan terminal into diagnostics mode and obtain all or most of the data on the memory card, or to reset the machine clock. The hand-coded RSA signature verification is insecure and can be forged. This applies to both the optical scan and touch screen systems. With technical knowledge and unsupervised access, an attacker can copy or dump the memory card contents by connecting a laptop or modem to the optical scanner. The system uses the same cryptographic key for multiple purposes and is tied to publicly-known machine serial numbers. Its value is never changed after being created. The security key cards are insecurely protected, the same as all other smart cards, which allows anyone to read all data from them. The public key is hard-coded into the source code. Such key-reuse is discouraged by the cryptographic community since such reuse introduces vulnerability. Supervisor PIN is not cryptographically protected. System configuration information is unprotected. The “protected” counter is stored in a mutable file, and the ballot definition file is unprotected. Since stored votes are only associated with a candidate number and not a name, the ability to create custom ballot definition files allows one to alter or switch candidate names without any record in the vote counts or electronically stored ballots. In the Touch Screen software, flaws allow an adversary to prepare official, activated voter smart cards that would enable voters to cast multiple ballots in a ballot-stuffing attack. Once an adversary obtained the necessary information, smart cards could be created and used in any precinct through a county. Even if detected, this attack is not correctable: the malicious ballots, either in electronic or paper form, are essentially unidentifiable and thus cannot be removed. Memory card update file is unprotected. The file assure.ini remains unencrypted and unauthenticated and is subject to malicious manipulation. Removal of a memory card allows an attacker to create valid voter cards. If the authentication key necessary to validate voter cards is the same across precincts, as we understand to be common practice in Florida, these cards could easily be modified to be used at any other precinct within a county.
http://www.re-mediaetc.org/ In 2004, Rady Ananda began contributing to the Web, as part of the growing community of citizen journalists. Focusing mainly on elections, her blogs also address religious, gender, sexual and racial equality, as well as environmental issues; and are sprinkled with book and film reviews on various topics. She spent most of her working life as a legal investigator for lawfirms, and about 5 years as an editor. She currently serves as a senior editor at OpEdNews. All material offered here is the property of Rady Ananda, copyright 2006, 2007, 2008. Permission is granted to repost, with proper attribution including the original link. In a time of universal deceit, telling the truth is a revolutionary act. Tell the truth anyway. Sign this petition: http://www.electiondefensealliance.org/ny_levers_petition
Copyright © OpEdNews, 2002-2008 |
|
