FacebookTwitter
Hatrack River Forum   
my profile login | search | faq | forum home

  next oldest topic   next newest topic
» Hatrack River Forum » Active Forums » Books, Films, Food and Culture » How to hack Diebold

   
Author Topic: How to hack Diebold
human_2.0
Member
Member # 6006

 - posted      Profile for human_2.0   Email human_2.0         Edit/Delete Post 
Boot it off of an exteral flash media. That is right, just flip the switch to boot a custom OS that counts votes using *special* math.

Diebold is either the stupidist company on the planet or they are manics making sure elections in the US can't be trusted ever again.

Read the article and look at more pictures.

Posts: 1209 | Registered: Dec 2003  |  IP: Logged | Report this post to a Moderator
James Tiberius Kirk
Member
Member # 2832

 - posted      Profile for James Tiberius Kirk           Edit/Delete Post 
"Oops."

--j_k

Posts: 3617 | Registered: Dec 2001  |  IP: Logged | Report this post to a Moderator
Samprimary
Member
Member # 8561

 - posted      Profile for Samprimary   Email Samprimary         Edit/Delete Post 
To be fair, that's not the only ridiculously easy way to hack a Diebold machine. There's about 17 other ways.
Posts: 15421 | Registered: Aug 2005  |  IP: Logged | Report this post to a Moderator
Dagonee
Member
Member # 5818

 - posted      Profile for Dagonee           Edit/Delete Post 
Is the EPROM socketed? If so, I don't see how this allows someone to do anything that changing the existing EPROM or FLASH* doesn't allow.

*According to the article, this is distinct from the external flash, which despite its name requires access to the inside of the case.

Posts: 26071 | Registered: Oct 2003  |  IP: Logged | Report this post to a Moderator
Nighthawk
Member
Member # 4176

 - posted      Profile for Nighthawk   Email Nighthawk         Edit/Delete Post 
Doesn't anyone feel comfort that the primary product of Diebold are, in fact, ATM machines?

I use to work at Fritz Companies, the freight forwarder for IBM and Diebold. I was standing in a warehouse with 200 other Diebold machines, and I could walk up to any one of them, dismantle them, and see how they worked. Very enlightening.

Posts: 3486 | Registered: Sep 2002  |  IP: Logged | Report this post to a Moderator
BaoQingTian
Member
Member # 8775

 - posted      Profile for BaoQingTian   Email BaoQingTian         Edit/Delete Post 
Is there a response from the company on this issue? Often times in the development of our boards (the company I work for, not Diebold) we will have test points and other ways to do development work on a prototype. Then when we do the production version, we simply don't load the part.

I find a few things odd about this.
1) They left the instructions for it on the silkscreen where anyone could read it. Terrible practice.
2) They designed it in such a way that the switch must be left on the board to insure other functionality.
3) They didn't control access to the interior better, with some indication if the box had been opened.

The fact of the matter is, if you give someone unlimited hardware access, then you can pretty much hack anything. That's kind of the problem with the whole electronic voting thing.

Posts: 1412 | Registered: Oct 2005  |  IP: Logged | Report this post to a Moderator
BlackBlade
Member
Member # 8376

 - posted      Profile for BlackBlade   Email BlackBlade         Edit/Delete Post 
I say we go back to blowing out labeled candles.
Posts: 14316 | Registered: Jul 2005  |  IP: Logged | Report this post to a Moderator
DarkKnight
Member
Member # 7536

 - posted      Profile for DarkKnight   Email DarkKnight         Edit/Delete Post 
So where are all the calls for a rigged election? Where are the investigations into Evil Diebold and how votes were never counted? Widespread hacking attacks?
I wonder why there are no articles about how bad this election was? Very curious....

Posts: 1918 | Registered: Mar 2005  |  IP: Logged | Report this post to a Moderator
KarlEd
Member
Member # 571

 - posted      Profile for KarlEd   Email KarlEd         Edit/Delete Post 
quote:
Originally posted by DarkKnight:
So where are all the calls for a rigged election? Where are the investigations into Evil Diebold and how votes were never counted? Widespread hacking attacks?
I wonder why there are no articles about how bad this election was? Very curious....

It's because the Republicans had put Rumsfeld in charge of the rigging. Why do you think he resigned?
Posts: 6394 | Registered: Dec 1999  |  IP: Logged | Report this post to a Moderator
twinky
Member
Member # 693

 - posted      Profile for twinky   Email twinky         Edit/Delete Post 
quote:
Originally posted by DarkKnight:
So where are all the calls for a rigged election? Where are the investigations into Evil Diebold and how votes were never counted? Widespread hacking attacks?
I wonder why there are no articles about how bad this election was? Very curious....

Because many of the methods of committing electronic voting fraud are undetectable. There could easily have been widespread fraud in this election and no one would ever know.
Posts: 10886 | Registered: Feb 2000  |  IP: Logged | Report this post to a Moderator
aspectre
Member
Member # 2222

 - posted      Profile for aspectre           Edit/Delete Post 
Actually, I do think that the first and foremost business of the new Congress should be securing the ballot box. That a voting machine is far far more susceptible to tampering than an ATM is absurd beyond belief.
There are no property rights, or any other rights, without the right to make our voices heard through an honest vote count.

Posts: 8501 | Registered: Jul 2001  |  IP: Logged | Report this post to a Moderator
KarlEd
Member
Member # 571

 - posted      Profile for KarlEd   Email KarlEd         Edit/Delete Post 
Explanantion #2: It's because the elections turned out exactly as the Illuminati planned, and they now control the ballot boxes and the media.
Posts: 6394 | Registered: Dec 1999  |  IP: Logged | Report this post to a Moderator
Icarus
Member
Member # 3162

 - posted      Profile for Icarus   Email Icarus         Edit/Delete Post 
Well, for one thing, not all precincts use those Diebold machines. Mine, for instance, does not. Second, such a hack would only be useful in a very tight race, because if a landslide for one party suddenly turned into a narrow victory for another, I think people would notice.
Posts: 13680 | Registered: Mar 2002  |  IP: Logged | Report this post to a Moderator
twinky
Member
Member # 693

 - posted      Profile for twinky   Email twinky         Edit/Delete Post 
Unfortunately, while Diebold machines appear to be the least secure, machines by other companies (e.g. Sequoia) also have well-known security flaws.
Posts: 10886 | Registered: Feb 2000  |  IP: Logged | Report this post to a Moderator
Icarus
Member
Member # 3162

 - posted      Profile for Icarus   Email Icarus         Edit/Delete Post 
But not all precincts do the "no paper trail" thing, which is really, as I see it, the new flaw Diebold introduced. I mean, the old card readers could have been programmed dishonestly too, or the people in charge of reporting results could have all been compromised, who knows? And then, ballot boxes could be stuffed, or votes could be thrown away. At some level, trust was always necessary. But in the past, we had the idea that if there were doubts, we could always recount while looking at the physical original votes. I think that's where the Diebold machines are the most problematic.
Posts: 13680 | Registered: Mar 2002  |  IP: Logged | Report this post to a Moderator
Dan_raven
Member
Member # 3383

 - posted      Profile for Dan_raven   Email Dan_raven         Edit/Delete Post 
DK I think I understand what you are saying.

This current election has just proven one important point.

Dem Hackers whoop'd them Rep Hackers big time.

(insert current and semi-relevant hacker slang/text-message slang here)

I mean, while our forefathers pictured the elction process as an enlightened gathering of civic fathers calmly debating the national situation, we've seen other trends.

We've seen the Machine Politics of the 1800s, the Fashion politics of the Harding era, the General politics of the post WWII era, and the fear politics of the past decade.

However today all had changed.

We bring forth the new, true, technocratic democracy--a Hackocracy.

One day before the election, Karl Rove on NPR was bragging about the secret data-set he had that proved the Republicans would hang onto power.

Some think this was just denial, or positive attitude.

I believe it was source code for voting machines. In the wee hours of Wed morning Rove and his top hacker, Rumsfeld, were busy adjusting votes to give them the self-predicted victory.

Unfortunately another was their hacking better.

For every backdoor R&R (Rove and Rumsfeld) entered, they were defeated by some mysterious uber-hacker. For every state they targeted from Cheney's hidden bunker, two other states were forced into Dem hands.

Finally they had to admit defeat.

For his failure, Rumsfeld was sent into the purgatory of private contractor land.

For Rove's bigger failure, he was denied the financial opportunity to be made in the purgatory of private contractor land.

But the question remains, who was it? What Democrat had the nerve, the drive, the awsome skills to defeat R&R?

They would have to be a computer genius.

They would have to be an internet god.

They would have to be the nerd's nerd.

I can't name names, not where the NSA can track me down, but I can give a hint.

He may not be the real father of the internet, but I swear when he passed Cheney in the halls of power yesterday, he said "Who's your daddy now #$@#$?"

And you thought all Gore was good for was hacking weather computers to forecast global warming predictions, didn'y you.

Posts: 11895 | Registered: Apr 2002  |  IP: Logged | Report this post to a Moderator
Lupus
Member
Member # 6516

 - posted      Profile for Lupus   Email Lupus         Edit/Delete Post 
people talk about hacking voting machines, but it would be a lot easier to "hack" paper ballots. All you need to do is stuff the ballot box. It would be a whole lot easier than hacking a voting machine.
Posts: 1901 | Registered: May 2004  |  IP: Logged | Report this post to a Moderator
kmbboots
Member
Member # 8576

 - posted      Profile for kmbboots   Email kmbboots         Edit/Delete Post 
Lupus, that would require election judges to be "in on it." It also leaves evidence.

I was somewhat reassured by the checkable, paper record of my vote.

Posts: 11187 | Registered: Sep 2005  |  IP: Logged | Report this post to a Moderator
kmbboots
Member
Member # 8576

 - posted      Profile for kmbboots   Email kmbboots         Edit/Delete Post 
Lupus, that would require election judges to be "in on it." It also leaves evidence.

I was somewhat reassured by the checkable, paper record of my vote.

Posts: 11187 | Registered: Sep 2005  |  IP: Logged | Report this post to a Moderator
twinky
Member
Member # 693

 - posted      Profile for twinky   Email twinky         Edit/Delete Post 
quote:
Originally posted by Lupus:
people talk about hacking voting machines, but it would be a lot easier to "hack" paper ballots. All you need to do is stuff the ballot box. It would be a whole lot easier than hacking a voting machine.

When your votes are being tabulated by an internet-connected PC running a vanilla installation of Windows XP and being stored in an unencrypted Microsoft Access database, rigging the entire precinct electronically becomes a lot easier than doing it by stuffing ballot boxes. What's more, it can be done undetectably.

This is exactly the case with some Diebold systems.

-------

quote:
Originally posted by Icarus:
But not all precincts do the "no paper trail" thing, which is really, as I see it, the new flaw Diebold introduced. I mean, the old card readers could have been programmed dishonestly too, or the people in charge of reporting results could have all been compromised, who knows? And then, ballot boxes could be stuffed, or votes could be thrown away. At some level, trust was always necessary. But in the past, we had the idea that if there were doubts, we could always recount while looking at the physical original votes. I think that's where the Diebold machines are the most problematic.

It's true that a paper trail is better than no paper trail, but consider this from the last page of my link above:
quote:
Finally, it's worth reiterating that optical scan machines are vulnerable to many of the same exploits as the DREs [direct-recording electronic voting machines] on which this article focuses. Optical scan machines do leave a paper audit trail, but that trail is worthless in a state (like Florida) where manual audits of optical scan ballots are not undertaken to clear up questions about the unexpected returns from certain precincts. I've been told that such audits are now prohibited in Florida by law in the wake of the 2000 voting scandal.
About the last sentence -- is that prohibition actually there?

I've linked that article here before -- I think it's well worth reading the whole thing, along with the rest of Ars Technica's e-voting coverage.

Posts: 10886 | Registered: Feb 2000  |  IP: Logged | Report this post to a Moderator
Enigmatic
Member
Member # 7785

 - posted      Profile for Enigmatic   Email Enigmatic         Edit/Delete Post 
quote:
Dem Hackers whoop'd them Rep Hackers big time.

(insert current and semi-relevant hacker slang/text-message slang here)

I believe the terminology you are searching for is "pwn3d!"

--Enigmatic

Posts: 2715 | Registered: Apr 2005  |  IP: Logged | Report this post to a Moderator
human_2.0
Member
Member # 6006

 - posted      Profile for human_2.0   Email human_2.0         Edit/Delete Post 
I highly doubt this election got hacked. Too soon.

HOWEVER. I predict the next election will get hacked so bad, that all the hackers will step on each others hacks and it will all be exposed. It will be like the bot wars. Only the Central American drug lords, Pfizer, and Republicians will be the bad-hatters.

Kinda like Code Red, Nimda and a bunch of other agressive Windows malware. If they weren't so greedy for CPU and network resources, they wouldn't get noticed.

Posts: 1209 | Registered: Dec 2003  |  IP: Logged | Report this post to a Moderator
pooka
Member
Member # 5003

 - posted      Profile for pooka   Email pooka         Edit/Delete Post 
quote:
Lupus, that would require election judges to be "in on it." It also leaves evidence.
Am I understanding correctly that you would have to open the case of the voting machine in order to do this hack?

And the Dems have been known to make bold declarations of certain victory right before election day. If it hadn't been Rove saying it, no one would be questioning him.

Dan- [Big Grin]

Posts: 11017 | Registered: Apr 2003  |  IP: Logged | Report this post to a Moderator
aspectre
Member
Member # 2222

 - posted      Profile for aspectre           Edit/Delete Post 
Most of the hacks are phone-in or over the internet, depending on the connection to the tabulating machine. Making the tabulating machines equally vulnerable to hacking.
So there is no check between voting machines and tabulating machines inregards to after-the-fact hacks. Especially not between Diebold and ESS machines: the owners are brothers-in-law.

And what makes you think Rove failed?

[ November 12, 2006, 12:59 AM: Message edited by: aspectre ]

Posts: 8501 | Registered: Jul 2001  |  IP: Logged | Report this post to a Moderator
twinky
Member
Member # 693

 - posted      Profile for twinky   Email twinky         Edit/Delete Post 
Here is a summary of some of the problems with electronic voting machines that occured this past election. The example from Florida is particularly telling.
Posts: 10886 | Registered: Feb 2000  |  IP: Logged | Report this post to a Moderator
   

   Close Topic   Feature Topic   Move Topic   Delete Topic next oldest topic   next newest topic
 - Printer-friendly view of this topic
Hop To:


Contact Us | Hatrack River Home Page

Copyright © 2008 Hatrack River Enterprises Inc. All rights reserved.
Reproduction in whole or in part without permission is prohibited.


Powered by Infopop Corporation
UBB.classic™ 6.7.2