sequoia posts
Princeton publishes how-to guide for hacking Sequoia e-voting machines
[Via Ars Technica]
Sequoia takes aim at Princeton profs over e-voting analysis plans
Voting machine producers criticize critiques
Voting machine makers scoffing at bad reviews? That's preposterous! Actually, it's not all that alarming to hear that Diebold, Hart InterCivic, and Sequoia Voting Systems all had less-than-amicable responses to a state study that "found that their machines could be breached by hackers." Of course, we're not exactly sure what all that groaning is about, as we've seen nothing but proof to back the investigation up. Nevertheless, Sequoia dubbed the review "an unrealistic, worst-case-scenario evaluation," Diebold kvetched that the study didn't look at its most recently developed software, Hart found "several inconsistencies, alternate conclusions, and errors," and Elections Systems & Software bypassed the rigmarole entirely by failing to provide their information to the secretary of state. Oh, the irony. [Warning: Read link requires subscription]California prepares to crack down on e-voting manufacturers
In an unprecedented attempt to shore up any possible flaws in its counties' electronic voting machines -- the same machines that have been examined and criticized nationwide on many occasions -- California will undertake a so-called "top-to-bottom" review of numerous systems from some half-a-dozen vendors, who must meet a set of seemingly rigid criteria if they want to receive certification for the 2008 election. Giving the proposed three-pronged approach -- initiated by Secretary of State Debra Bowen in collaboration with the University of California -- some real teeth is the fact that each of the three teams tasked with the actual work will be spearheaded by respected academics and leading private sector consultants, including none other than Princeton's Ed Felten, whose tireless efforts to expose the dangers of these shoddy machines are well known to readers of this site. Specifically, each system from manufacturers such as Sequoia, ES&S, and yes, everyone's favorite whipping boy Diebold will see a thorough review of their source code and documentation, along with what are being referred to as "red team penetration" attacks to test the terminals' hardware and software. Since companies are required to submit equipment for testing if they wish to partake in future elections, we could be seeing Diebold make the same begrudging exit from the Golden State as it did from North Carolina, for what we are not alone in suspecting is fear of exposing its flimsy code. Anyone who does choose to participate still risks being forced to make significant changes to their gear or perhaps even complete decertification, so when you Californians go to cast your votes in about eighteen months, don't be surprised if you have to mark up a piece of paper and drop it into a Equalivote-brand ballot box.
[Via Slashdot]
Princeton prof picks up e-voting machines on the cheap
Sequoia voting gear allows for ballot stuffing, calls it a "feature"
There's an old adage in election-year politics: "Vote early, and vote often." While that second part is usually meant as a little humorous jab, Sequoia Voting Systems apparently wasn't in on the joke. See, in California and other states, some polling places have these e-voting devices (made by Sequoia) known as AVC Edge voting machines, and each machine comes with a yellow button located on the back of each device. The button is designed as a manual backup, which activists claim allows people to vote as many times as they like. Fear not, though: Sequoia will resubmit the system for certification (after the election), and doesn't really consider this button to be a flaw at all. As Michelle Shafer, vice president of communications for Sequoia, told internetnews.com: "It's a deliberate back-up feature to prevent the Edge from having a single point of failure -- an inoperable card activator -- at a polling location and preventing voters from casting their ballots." Plus, Shafer continued, even if someone did push the button, the machine issues a loud beep when it's pressed -- obviously a completely foolproof system. The California Secretary of State's office has already issued instructions to poll workers to listen for the fateful beeping, so voters can rest assured that no one will try this hack. Goodness knows what will happen if a bunch of voters come in with pagers that all go off simultaneously, though. [Via TechDirt]


















