[IP] re Top Voting Machine Vendor Admits It Installed Remote-Access Software on Systems Sold to States

[Dave Farber]

Date: July 18, 2018 at 11:21:59 GMT+9
Subject: Re: [IP] Top Voting Machine Vendor Admits It Installed Remote-Access Software on Systems Sold to States
Dave,
It seems the problem isn't electronic voting machines per se.
It's machines made by for profit entities that refuse oversight/audit and also are often controlled by partisan stakeholders.
Rahul
Sent from my handheld... pardon my brevity if not poor grammar

Subject: Top Voting Machine Vendor Admits It Installed Remote-Access Software on Systems Sold to States
Date: July 18, 2018 at 2:19:36 AM GMT+9
Top Voting Machine Vendor Admits It Installed Remote-Access Software on Systems Sold to States
Kim Zetter
Jul 17 2018, 8:00am
https://motherboard.vice.com/en_us/article/mb4ezy/top-voting-machine-vendor-admits-it-installed-remote-access-software-on-systems-sold-to-states

Archives | Modify Your Subscription | Unsubscribe Now

-------------------------------------------
Archives: https://www.listbox.com/member/archive/247/=now
Modify Your Subscription: https://www.listbox.com/member/?member_id=26461375
Unsubscribe Now: https://www.listbox.com/unsubscribe/?member_id=26461375&id_secret=26461375-c2b8a462&post_id=20180717222440:B74760FA-8A31-11E8-B274-F0DD8E1F88D0
Powered by Listbox: https://www.listbox.com

[Dave Farber]

Date: July 18, 2018 at 14:34:57 GMT+9
Subject: Re: [IP] re Top Voting Machine Vendor Admits It Installed Remote-Access Software on Systems Sold to States
Hi Dave,
Yesterday I streamed an event "Protecting New York' of which one panel was pretty much entirely devoted to election security.
https://livestream.com/InternetSociety3/protectingny/videos/177812488
https://livestream.com/InternetSociety3/protectingny/videos/177818676
Something I learnt from it,thanks to NY Senator Liz Krueger (30 mins in in the first clip) , is that NY held off upgrading to electronic machines til 2010, despite being mandated to do so by the Help America Vote Act of 2002 aka HAVA, precisely because they considered them hackable. The compromise -- and according to Sen Krueger NY is the only state that does this -- was to use machines that are not networked whatsoever, and include two distinct forms of vote storage. One that is removed and used to tally votes, and another that is solely used for auditing, along with paper.
At 37 mins, she talks about how NY regulators were very much influenced by anecdotes about how first year college CS students easily hacked Ohio's systems.
joly

Date: July 18, 2018 at 11:21:59 GMT+9
Subject: Re: [IP] Top Voting Machine Vendor Admits It Installed Remote-Access Software on Systems Sold to States
Dave,
It seems the problem isn't electronic voting machines per se.
It's machines made by for profit entities that refuse oversight/audit and also are often controlled by partisan stakeholders.
Rahul
Sent from my handheld... pardon my brevity if not poor grammar

Subject: Top Voting Machine Vendor Admits It Installed Remote-Access Software on Systems Sold to States
Date: July 18, 2018 at 2:19:36 AM GMT+9
Top Voting Machine Vendor Admits It Installed Remote-Access Software on Systems Sold to States
Kim Zetter
Jul 17 2018, 8:00am
https://motherboard.vice.com/en_us/article/mb4ezy/top-voting-machine-vendor-admits-it-installed-remote-access-software-on-systems-sold-to-states

--
---------------------------------------------------------------
Joly MacFie 218 565 9365 Skype:punkcast
---------------------------------------------------------------
This message was sent to the list address and trashed, but can be found online.

-------------------------------------------
Archives: https://www.listbox.com/member/archive/247/=now
Modify Your Subscription: https://www.listbox.com/member/?member_id=26461375
Unsubscribe Now: https://www.listbox.com/unsubscribe/?member_id=26461375&id_secret=26461375-c2b8a462&post_id=20180718072047:9CAAF7F2-8A7C-11E8-B2F5-911BB54A3D11
Powered by Listbox: https://www.listbox.com

[Dave Farber]

Date: July 18, 2018 at 10:36:48 PM GMT+9
Subject: Re: [IP] re Top Voting Machine Vendor Admits It Installed Remote-Access Software on Systems Sold to States
[for IP]
1. Because the software that *runs* the voting machine is not created or maintained in a secure environment, the absence of networking does not render a voting machine secure. Further: there have been multiple demonstrations of successful on-site compromises of non-connected machines.
2. Of even greater concern, there is considerable evidence that the vote TABULATING machines have been compromised in close jurisdictions. This means that paper ballots can’t be trusted in those jurisdictions without a thorough audit.
3. The very close votes in key jurisdictions mean that statistical sampling is not sufficient to audit the vote in those jurisdictions. Each ballot must be individually confirmed.
4. The overwhelming vulnerability of our election process, coupled with the time limits on certification and the obstruction (both by political means and technical means) of vote validation means that we cannot have well-founded confidence in the results of recent elections.
5. The Russian compromise of voter databases severely hampered Democratic efforts to get out the vote in 2016. I can say from personal experience that a staggering percentage of allegedly Democratic residents in door-to-door canvassing during the 2016 election turned out to be Republicans. While the database is never perfect, our experience suggests a 25%-30% error rate. That’s un-heard of.
Best regards,
Jonathan Shapiro

-------------------------------------------
Archives: https://www.listbox.com/member/archive/247/=now
Modify Your Subscription: https://www.listbox.com/member/?member_id=26461375
Unsubscribe Now: https://www.listbox.com/unsubscribe/?member_id=26461375&id_secret=26461375-c2b8a462&post_id=20180718104007:738412F2-8A98-11E8-96D7-FDAFDB4C7C34
Powered by Listbox: https://www.listbox.com

[Dave Farber]

Date: July 18, 2018 at 11:52:12 PM GMT+9
Subject: Re: [IP] re Top Voting Machine Vendor Admits It Installed Remote-Access Software on Systems Sold to States
Dave,
[for IP]
Have to agree with Jonathan. My recent reporting took a closer look at
Want to hack a voting machine? Hack the voting machine vendor first
https://www.csoonline.com/article/3267625/security/want-to-hack-a-voting-machine-hack-the-voting-machine-vendor-first.html
best,
jmp
--
J.M. Porup
www.JMPorup.com

Date: July 18, 2018 at 10:36:48 PM GMT+9
Subject: Re: [IP] re Top Voting Machine Vendor Admits It Installed Remote-Access Software on Systems Sold to States
[for IP]
1. Because the software that *runs* the voting machine is not created or maintained in a secure environment, the absence of networking does not render a voting machine secure. Further: there have been multiple demonstrations of successful on-site compromises of non-connected machines.
2. Of even greater concern, there is considerable evidence that the vote TABULATING machines have been compromised in close jurisdictions. This means that paper ballots can’t be trusted in those jurisdictions without a thorough audit.
3. The very close votes in key jurisdictions mean that statistical sampling is not sufficient to audit the vote in those jurisdictions. Each ballot must be individually confirmed.
4. The overwhelming vulnerability of our election process, coupled with the time limits on certification and the obstruction (both by political means and technical means) of vote validation means that we cannot have well-founded confidence in the results of recent elections.
5. The Russian compromise of voter databases severely hampered Democratic efforts to get out the vote in 2016. I can say from personal experience that a staggering percentage of allegedly Democratic residents in door-to-door canvassing during the 2016 election turned out to be Republicans. While the database is never perfect, our experience suggests a 25%-30% error rate. That’s un-heard of.
Best regards,
Jonathan Shapiro

-------------------------------------------
Archives: https://www.listbox.com/member/archive/247/=now
Modify Your Subscription: https://www.listbox.com/member/?member_id=26461375
Unsubscribe Now: https://www.listbox.com/unsubscribe/?member_id=26461375&id_secret=26461375-c2b8a462&post_id=20180718183843:515DB8F2-8ADB-11E8-92EC-A2C9A11669B0
Powered by Listbox: https://www.listbox.com