Diebold e-Voting Machines Can Be Opened With Standard Hotel Key Available Online

from the great-security dept

As Diebold continues to try (weakly) to defend itself from yet another batch of evidence that their security isn’t particularly secure, Ed Felten points out another weakness in Diebold’s defense. The company likes to claim that on top of the computer security aspect (which study after study has found is lacking) they have “physical” security. Avi Rubin’s report from the field last week showed that the “security tape” and “security tags” on the machines aren’t particularly secure at all (removing them and replacing them without anyone noticing is easy — and apparently done quite often). However, a colleague of Felten has also noticed that the “lock” on the box uses an off-the-shelf standard key seen for things like hotel minibars. Apparently, it’s quite easy to buy an identical key online or at an office furniture shop. In other words, the physical security isn’t so secure. It’s just designed to look secure, so they can say it’s secure.

Rate this comment as insightful
Rate this comment as funny
You have rated this comment as insightful
You have rated this comment as funny
Flag this comment as abusive/trolling/spam
You have flagged this comment
The first word has already been claimed
The last word has already been claimed
Insightful Lightbulb icon Funny Laughing icon Abusive/trolling/spam Flag icon Insightful badge Lightbulb icon Funny badge Laughing icon Comments icon

Comments on “Diebold e-Voting Machines Can Be Opened With Standard Hotel Key Available Online”

Subscribe: RSS Leave a comment
Amos says:

Re: Why don't they?

Umm…America is NOT a democracy. This is a republic at best. If it were a democracy, then there would be no such thing as someone winning the “popular vote” (ie, getting the most real votes) but losing the “electoral vote” (ie, the archaic system in which we vote for people to go vote for us). The will of the majority has no real value in America’s political system, except as a tactical ratings boost when it happens to match the ambitions of the people in charge.

If more people understood our voting system, then there would be demand for change. But the polititions do NOT want that to happen…why should they, when they’re basically the only ones who know the rules of the game?

It doesn’t matter if our votes are counted perfectly or made up by a random number generator at this point, because the system is broken. Debating the security of voting machines is just a distraction from the real task: we need to debate the very structure of our voting system!

Angry Rivethead says:

Here is something to debate...

How many people do we REALLY want voting?

Given the rule that people are generally stupid…do we really want a true democracy?

Also, readers of this site are probably slightly more intelligent than say inner city folk and trailer trash that continually vote for more handouts…do we really want people that desire free handouts voting? I certainly don’t. I pay enough property tax to put kids that I don’t have through school. If I were to take my property tax and invest it, I’d have more than enough to pay for schooling for the children I may have in the future. Why can’t anyone else be trusted to do this?

Landowners ONLY should vote in local elections.

A more extensive civics course needs to be required at the highschool level or independantly partially subsidized by the gov’t. The basis of this course costing a few hundred dollars is to only allow people who actually care to vote. If someone can’t figure out how to raise $200 or so by the time they’re 18…I really don’t think I feel comfortable having them anywhere near a ballot box. I’ll stop now… *hides under asbestos plate*

OmniPresent Systems (user link) says:

The Road Political e-Monarchy

Making a secure online voting machine is actually a rather difficult task. http://evm2003.sourceforge.net/architecture.html
The lack of funding and the donation of time from developers has enabled politicians to control who wins public bids forvoting machines.

Many efforts have popped up on sites such as

Diebold obtained its certification wrongfully by not declaring some of the custom components of their software as custom components. This exempted these components from oversight by independent testing authorities (ITAs) assigned to the task.

Upon examining the inner workings of one of the most popular paperless touch screen voting machines used in public elections in the United States, it has been determined that with the flip of a single switch inside, the machine can behave in a completely different manner compared to the tested and certified version.

ebrke says:

Everyone Must Be Able to Vote

Again, the slippery slope. If you start restricting who can or should be able to vote, you start down a slope where eventually the only people who will be allowed to vote are the politicians themselves, so they can just keep voting themselves back into office. I personally am unhappy with the idea of having to have ballots and instructions in different languages–if people don’t have a sufficient grasp of English to vote in that language, it makes me uncomfortable–where are they getting the information they use to decide how to vote if they don’t have basic English comprehension? But again, they’re citizens and they should be able to vote, so I swallow it.

TechNoFear (profile) says:

Diebold makes ATM (automated Teller Machines) for banks.

Can you tell me where I can buy a key for one of those?

Diebold can obviously create a machine secure enough to dispense money and keep a paper trail the bank can follow.

So Diebold is not incompetent.

Why do they have difficulty with vote machines then?

The obvious answer, in my opinion, is that Diebold is corrupt.

PV (user link) says:

if it ain't broke…

Why, in the first place, use a computer in the voting process? I thought a basic rule of applied science was to choose the right technology to solve a problem. What is the problem here ? High-speed calculation? Certainly not. The point is: collect votes and count them in a way that makes every citizen confident in the final result. CONFIDENT. Do you think a computer, which is a black box and nobody knows what’s inside, is a good way to produce CONFIDENCE. No way.
On the contrary, I would like to emphasize the great contribution to democracy of another technology, namely chemistry, which permitted the invention of the TRANSPARENT ballot box.

Kevin (user link) says:

Not even a 1337 g33k can understand this...

I am a self-proclaimed computer geek, and I am a registered voter in the independent city of Virginia Beach, VA. Last May, when the city council and school board elections were taking place, it had to take some explanation on how to use the dang thing, and I still couldn’t understand how the system worked.

Being exposed to computers at an early age (age four with a Tandy TRS-80 Color Computer, then an Apple IIe [I seem old–but I’m only 29!]), I should be able to know how to use the machine without any explanation from the election official that happened to volunteer that day.

Now the idea of the machines can be hacked by a simple key that I can purchase at my local office supply store? WTF? Now this sounds odd.

FWIW, the people I voted for in that election may now have meant nothing.

Something is going down. And now since everything can now be done online (well, almost anything), why not take the elections online? It may save the taxpayers some money.

Oh, wait. There may be some n00bs who don’t even know how to do so.

To put it this way: we live in a corrupt society and these politicians will do anything that it takes to win the elections, at any cost.

Just ask George Allen and Jim Webb… Phil Kellam and Thelma Drake.

Add Your Comment

Your email address will not be published. Required fields are marked *

Have a Techdirt Account? Sign in now. Want one? Register here

Comment Options:

Make this the or (get credits or sign in to see balance) what's this?

What's this?

Techdirt community members with Techdirt Credits can spotlight a comment as either the "First Word" or "Last Word" on a particular comment thread. Credits can be purchased at the Techdirt Insider Shop »

Follow Techdirt

Techdirt Daily Newsletter

Techdirt Deals
Techdirt Insider Discord
The latest chatter on the Techdirt Insider Discord channel...