Welcome to DU! The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards. Join the community: Create a free account Support DU (and get rid of ads!): Become a Star Member Latest Breaking News General Discussion The DU Lounge All Forums Issue Forums Culture Forums Alliance Forums Region Forums Support Forums Help & Search

Snellius

(6,881 posts)
Sun Aug 26, 2018, 04:54 PM Aug 2018

I Just Hacked a State Election. I'm 17. And I'm Not Even a Very Good Hacker.

Source: Politico

It took me around 10 minutes to crash the upcoming midterm elections. Once I accessed the shockingly simple and vulnerable set of tables that make up the state election board’s database, I was able to shut down the website that would tally the votes, bringing the election to a screeching halt. The data were lost completely. And just like that, tens of thousands of votes vanished into thin air, throwing an entire election, and potentially control of the House or Senate—not to mention our already shaky confidence in the democratic process itself—into even more confusion, doubt, and finger-pointing.

I’m 17. And I’m not even a very good hacker.

I’ve attended the hacking convention DEF CON in Las Vegas for over five years now, since I was 11 years old. While I have a good conceptual understanding of how cyberspace and the internet work, I’ve taken only a single Python programming class in middle school. When I found out that the Democratic National Committee was co-sponsoring a security competition for kids and teens, however, my interest in politics fed into curiosity about how easy it might be to mess with a U.S. election. Despite that limited experience, I understood immediately when I got to Las Vegas this year why the professionals tend to refer to state election security as “child’s play.”

The Voting Machine Village at DEF CON, the aforementioned competition where attendees tackled vulnerabilities in state voting machines and databases, raised plenty of eyebrows among election boards and voting machine manufacturers alike. It’s a hard pill to swallow for the public, too: No one wants to believe that—after waiting in a lengthy line, taking time off from work or finding a babysitter in order to vote—their ballot could be thrown away, or even worse, altered.

https://www.politico.com/magazine/story/2018/08/21/i-just-hacked-a-state-election-17-not-a-good-hacker-219374

9 replies = new reply since forum marked as read
Highlight: NoneDon't highlight anything 5 newestHighlight 5 most recent replies
I Just Hacked a State Election. I'm 17. And I'm Not Even a Very Good Hacker. (Original Post) Snellius Aug 2018 OP
Thank God the Russians can't do this. I'm fucking not serious. dem4decades Aug 2018 #1
Which is why the Rs have been 2naSalit Aug 2018 #2
Russiapublicans aren't even pretending anymore. "Vlad, please come help us cheat!" lagomorph777 Aug 2018 #7
And we need to respond appropriately...nt 2naSalit Aug 2018 #9
Not really buying it, myself ... mr_lebowski Aug 2018 #3
Paper Receipts or Paper Ballots shadowmayor Aug 2018 #4
PAPER, NOT VAPOR! lagomorph777 Aug 2018 #8
What they set up in Las Vegas was a "demo" voting machine FakeNoose Aug 2018 #5
This story is bogus and has been debunked Gothmog Aug 2018 #6

2naSalit

(86,775 posts)
2. Which is why the Rs have been
Sun Aug 26, 2018, 05:18 PM
Aug 2018

thwarting all efforts to protect the election, they can't win w/o cheating.

lagomorph777

(30,613 posts)
7. Russiapublicans aren't even pretending anymore. "Vlad, please come help us cheat!"
Mon Aug 27, 2018, 09:55 AM
Aug 2018

They've put out a very public message to that effect.

 

mr_lebowski

(33,643 posts)
3. Not really buying it, myself ...
Sun Aug 26, 2018, 05:30 PM
Aug 2018

1) The official vote tally would be unlikely to be performed by a 'website',
2) The website in question would likely have it's own set of local database tables, and those would populate what's physically shown on the site, but IRL those would be populated by a data feed (such as via webservice) from a separate, master database, which is also from whence the official tally would be derived, and thus data being 'lost' from the website's local tables would be immaterial (and said master database would not have likely been a part of this hacking simulation),
3) The election would not come to a screeching halt if the website showing the results was hacked, esp. given that government websites don't begin showing results until AFTER voting has completed,
4) A copy of the Website, made available to a 'Hacking Conference' would be unlikely to have all the same ancillary security measures that an official in-situ website (firewalls, etc) would have deployed to prevent hackers from getting in the first place.

shadowmayor

(1,325 posts)
4. Paper Receipts or Paper Ballots
Sun Aug 26, 2018, 07:41 PM
Aug 2018

Why are we still subjected to this nightmare????

I think we aren't asking too much to have a verifiable paper trail for how we vote? The silence on the part of both political parties is stunning.

FakeNoose

(32,748 posts)
5. What they set up in Las Vegas was a "demo" voting machine
Sun Aug 26, 2018, 09:39 PM
Aug 2018

These kids (mostly high school and college age) are just getting together and trying stuff out at this convention. He's not saying what brand of machine he hacked, and they probably were only given one kind to practice on.

I think he's certainly reinforcing what we've been saying on DU: the electronic voting machines are not secure. The system was setup to be hacked and the entire idea was championed by the Republican Party. They know the machines can be hacked - or secretly reprogrammed - and it probably happens whenever they install an upgrade.

Paper ballots must be used in every state until these machines can be made secure. If they can't be made secure then trash them all.



Latest Discussions»Issue Forums»Editorials & Other Articles»I Just Hacked a State Ele...