#JAILTOTHECHIEF- Shit Just Got Real

Status
Not open for further replies.

Kara Spengler

Queer OccupyE9 Sluni-Goon, any/all pronouns
Joined
Sep 20, 2018
Messages
6,140
Location
SL: November RL: DC
SL Rez
2007
Joined SLU
December, 2008
SLU Posts
23289
Here's a presentation about the sorrow state of security the voting machines used in America, and how easy it would have been to manipulate the 2016 election:


The short version: the voting machines are unsafe shit with no update since years, some decades; having no paper trail is just nuts, a haven for manipulation and most likely some happened. And manipulating the 2016 result for example into a tie would just need tweaking around 0,2% of the votes thanks to the electoral college.

Summary
Recent attacks against elections in the U.S. and Europe demonstrate that nation-state attackers are becoming more aggressive, even as campaigning and voting are becoming increasingly reliant on computers. How much has changed since 2016, when the U.S. experienced unprecedented attacks on its election infrastructure? What has to happen to ensure that the 2020 presidential election is secure? In this talk, I'll give a progress report on election security in the U.S. and around the world, informed by results from my own research and my work with legislators and election officials over the past two years. I'll also hold a mock election with a current U.S. voting machine to demonstrate how cyberattacks on election infrastructure could potentially change the results of national elections. Finally, I'll explain what everyone can do to get involved and help safeguard the foundations of democracy.

Strengthening election cybersecurity is essential for safeguarding democracy. For over 15 years, I and other computer scientists have been warning about the vulnerable state of election security, but attacks against recent elections in the U.S. and Europe demonstrate that sophisticated attackers are becoming more aggressive, even as campaigning and voting become increasingly reliant on computers.

Since 2016, I’ve been working with election officials and members of congress to strengthen election cybersecurity. In this talk, I’ll give a progress report about what’s happened since then and what still needs to happen to secure future elections. While many U.S. states have made progress at securing some aspects of their election infrastructure, and Congress provided $380M in new funding to the strengthen elections, significant vulnerabilities remain that put the integrity of future elections at risk. To demonstrate the ongoing threat, I’ll hold a mock election on stage with a real U.S. voting machine still used in 18 states, and show how remote attacks could potentially affect the outcome of a close national contest.

Finally, I’ll explain how defenses developed by researchers over the past decade could provide practical and cost-effective safeguards. Unfortunately, they have yet to be widely deployed due to a lack of resources and political leadership. I’ll describe legislative efforts in the U.S. and other countries that could, if successful, go a long way to making elections secure. I’ll also explain what technologists and other concerned humans can do to help secure elections at all levels.
Actually the fact that each area of the country has different processes and machines actually helps security from a *direct* attack on the machines. A technological attack that works in one state may or may not work in the next one. Where we are extremely vulnerable is to go after the voter and change the inputs the machines get though because that is a common denominator.
 

Bartholomew Gallacher

Well-known member
Joined
Sep 26, 2018
Messages
6,818
SL Rez
2002
Security by obscurity rarely ever worked. The speaker of this presentation, J. Alex Halderman, is professor for computer sciences at the University of Michigan, and has researched the 2016 election for abnormalities.

Having said that, I am pretty sure that there are only a few companies around who produce those machines, which narrows the ecosystem down a lot. And Halderman is mentioning enough examples, that shunning all those fancy voting machines in favor for the good, old paper ballot is a really good idea.

I really never understood, why of all things America has still this hardon for using those unsecure machines, which are quite known to be a nightmare; or at least didn't fix the most common security holes/problems by now, by e.g. adding a paper trail to all of them.
 

Govi

Crazy woman yells at clouds
VVO Supporter 🍦🎈👾❤
Joined
Sep 20, 2018
Messages
1,552
Location
North of Surf City
SL Rez
2004
Joined SLU
27.05.2009
SLU Posts
5294
Yet, the most common form of election tampering is to prevent people from voting by various disenfranchisement schemes, from stringent voter ID requirements through changing the number and convenience of polling places to lying about voting dates/procedures. Mostly, these are GOP perpetrated schemes intended to stop Democrats from voting.
 

Kara Spengler

Queer OccupyE9 Sluni-Goon, any/all pronouns
Joined
Sep 20, 2018
Messages
6,140
Location
SL: November RL: DC
SL Rez
2007
Joined SLU
December, 2008
SLU Posts
23289
Security by obscurity rarely ever worked.
That is certainly the truth! Actually, I was just telling someone how a security problem was 'fixed' that I discovered awhile back: telling me not to tell anyone else about it. That is not quite what I mean though, I meant there are so many systems out there it is not like you can write a small virus to attack every system. Not a huge comfort but at least it is a small one.

As to how I think about electronic voting in general though, well Tom says it better:

 

Innula Zenovka

Nasty Brit
VVO Supporter 🍦🎈👾❤
Joined
Sep 20, 2018
Messages
23,694
SLU Posts
18459
As I understand it, one reason often given for the US' (to me, very strange) predilection for electronic voting systems is the (again, to me, inexplicable) US custom of making elected offices out of posts that are, just about everywhere else, neutral appointments. So you end up with mammoth ballot papers that are, at least in theory, more readily tallied electronically than by hand.

I suspect, too, that part of is good old traditional graft -- there's money to be made out of supplying and maintaining electronic voting systems (more money than there is to be made from printing ballot papers and selling pencils, certainly) and backhanders and kickbacks to be made from that money.

A bit like textbooks for "creation science" and homeschooling (which needs homeschooling materials) and school vouchers --- niche markets that depend on state support, and from which there's money to be made, and bribes to be had.
 

Bartholomew Gallacher

Well-known member
Joined
Sep 26, 2018
Messages
6,818
SL Rez
2002
That is certainly the truth! Actually, I was just telling someone how a security problem was 'fixed' that I discovered awhile back: telling me not to tell anyone else about it. That is not quite what I mean though, I meant there are so many systems out there it is not like you can write a small virus to attack every system. Not a huge comfort but at least it is a small one.
The thing is when listening to Halderman, that you don't need to be able to manipulate tons of those machines; a few select are enough to deliver a very different outcome of the total election!

Here's the minimum manipulation required for the presidential election of 2016, which would have turned Trumps lead into a tie with Hillary Clinton:


So manipulating around 27.000 votes in MI and PA would have been enough. Of course predicting this and knowing where to mangle needs some serious research... probably undoable, but it shows in the end that you don't need to manipulate much to change the outcome drastically... though the bigger problems are IMHO gerrymandering and caging lists.
 
Last edited:

Bartholomew Gallacher

Well-known member
Joined
Sep 26, 2018
Messages
6,818
SL Rez
2002
Since America is now withdrawing from Syria, there are rumors that Turkey is right now very, very busy preparing for an invasion in Syria to oust the Kurds out of Manbidsch, maybe other cities later as well, which can start any time.

The supposed manpower is around 8000 soldiers; if the Syrians and Russians are going to support the Kurds or not, nobody knows. The Kurds for sure cannot rely on both.

Lage in Syrien spitzt sich zu: „Die Schlacht wird bald beginnen“

Google Translate

The only Kurdish supporting country left is France; but it has only 200 soldiers in Syria at the moment. And if France wants to act against a NATO ally, or not, we are going to see. Then again France has been the goal for several IS's attack in the past, the last one in Strasbourg just happened at the 12th of December, so they do mean business when it comes to battling IS.

France becomes Turkey’s newest bugbear as Kurds court Macron
 
Last edited:

Shiloh Lyric

Staying Woke
Joined
Sep 20, 2018
Messages
937
Location
A virtual world. And Pennsylvania.
SL Rez
2007
Joined SLU
August, 2008

danielravennest

Well-known member
Joined
Sep 21, 2018
Messages
3,708
SLU Posts
9073
As I understand it, one reason often given for the US' (to me, very strange) predilection for electronic voting systems is the (again, to me, inexplicable) US custom of making elected offices out of posts that are, just about everywhere else, neutral appointments. So you end up with mammoth ballot papers that are, at least in theory, more readily tallied electronically than by hand.
In the otherwise backward state of Alabama, where I used to live, we used ballots where you filled in circles with a pen, then the ballot was scanned by a machine. The ballots fall into a sealed box under the scanner, and are retained for recounts (machine or manual) if the need arises. Large ballots are not a problem to count, the machine can scan a long ballot about as fast as a short one.

Here in Georgia, we are still stuck with the all-electronic machines which have no paper trail. Those are ripe for errors, accidental or intentional.
 

Myficals

Nein!
Joined
Sep 19, 2018
Messages
502
Location
a sunburnt country
SL Rez
2007
Joined SLU
Feb 2010
SLU Posts
4075
As I understand it, one reason often given for the US' (to me, very strange) predilection for electronic voting systems is the (again, to me, inexplicable) US custom of making elected offices out of posts that are, just about everywhere else, neutral appointments. So you end up with mammoth ballot papers that are, at least in theory, more readily tallied electronically than by hand.
Meh, they're not trying hard enough. In Oz we hand tally these babies every Senate election...

 

Govi

Crazy woman yells at clouds
VVO Supporter 🍦🎈👾❤
Joined
Sep 20, 2018
Messages
1,552
Location
North of Surf City
SL Rez
2004
Joined SLU
27.05.2009
SLU Posts
5294
The USA's predilection for electronic systems was born after the 2000 election, when we were nauseated by Florida's ridiculous paper ballot designs. The "hanging chad" nonsense went on forever and we said, through our many elected representatives, that we wanted something better. Obviously, we're still in great need of what we think should be a technical solution. It's becoming increasingly apparent that there still is no better method than paper ballots that can be kept secret and counted publicly before the interested parties.
 

Kara Spengler

Queer OccupyE9 Sluni-Goon, any/all pronouns
Joined
Sep 20, 2018
Messages
6,140
Location
SL: November RL: DC
SL Rez
2007
Joined SLU
December, 2008
SLU Posts
23289
The USA's predilection for electronic systems was born after the 2000 election, when we were nauseated by Florida's ridiculous paper ballot designs. The "hanging chad" nonsense went on forever and we said, through our many elected representatives, that we wanted something better. Obviously, we're still in great need of what we think should be a technical solution. It's becoming increasingly apparent that there still is no better method than paper ballots that can be kept secret and counted publicly before the interested parties.
Of course most programmers have been pretty much SCREAMING since then 'oh fuck! why the HELL would you EVER trust your vote to something everyone has a story about it getting wrong about something or other'. Look at hospitals and such .... they have multiple layers of redundancy before they trust a computer.
 
Joined
Sep 19, 2018
Messages
6,769
Location
NJ suburb of Philadelphia
SL Rez
2003
SLU Posts
4494
Status
Not open for further replies.