Democratic Underground Latest Greatest Lobby Journals Search Options Help Login
Google

CA LAW: EVERYONE Must be able to attempt Diebold Hack Test!!!!!!

Printer-friendly format Printer-friendly format
Printer-friendly format Email this thread to a friend
Printer-friendly format Bookmark this thread
This topic is archived.
Home » Discuss » Archives » General Discussion (Through 2005) Donate to DU
 
nicknameless Donating Member (1000+ posts) Send PM | Profile | Ignore Fri Dec-09-05 09:36 PM
Original message
CA LAW: EVERYONE Must be able to attempt Diebold Hack Test!!!!!!
Edited on Fri Dec-09-05 10:30 PM by nicknameless
California Elections Code Section 19202 (19202 Request) provides:

ANY PERSON OR CORPORATION OWNING OR BEING INTERESTED IN ANY
VOTING SYSTEM OR PART OF A VOTING SYSTEM MAY APPLY TO THE
SECRETARY OF STATE TO EXAMINE IT AND REPORT ON ITS ACCURACY
AND EFFICIENCY TO FULFILL ITS PURPOSE.
THE SECRETARY OF STATE
SHALL COMPLETE HIS EXAMINATION WITHOUT UNDUE DELAY.



So this explains California's SoS McPherson's "invitation" to BBV to attempt to hack a Diebold TSx machine?
In fact, he was just responding in compliance with state law? The test has NOT been done, despite previous reporting that it would be.


Here is the email I received, in full, from BBV.org. Take it with as many grains of salt as you need.

UPDATE ON CALIFORNIA DIEBOLD VOTING MACHINE "HACK" TESTING

Letter faxed and mailed Dec. 9, 2005
To: California Secretary of State, Bruce McDannold, cc: Bruce McPherson
From: John S. Baker, Atty at Law, Dorsey & Whitney So. Cal. Office

I represent Black Box Voting, Inc., a non-partisan, non-profit 501c(3)
corporation. On June 16, 2005, Black Box Voting sent a request to
examine the Diebold Election Systems component: the programmed
electronic ballad box memory cards used in optical scan and touch
screen voting systems (Component). This request was made pursuant
to California Elections Code Section 19202 (19202 Request), which
provides:

ANY PERSON OR CORPORATION OWNING OR BEING INTERESTED IN ANY
VOTING SYSTEM OR PART OF A VOTING SYSTEM MAY APPLY TO THE
SECRETARY OF STATE TO EXAMINE IT AND REPORT ON ITS ACCURACY
AND EFFICIENCY TO FULFILL TIS PURPOSE. THE SECRETARY OF STATE
SHALL COMPLETE HIS EXAMINATION WITHOUT UNDUE DELAY.


In the 19202 Request, Black Box Voting asked that the Component be
evaluated for five possible flaws with respect to: the latest optical scan
systems (firm wear 1.96.4); the paperless touch screen, as used in Alameda
County on November 2, 2004; the new TSx system proposed for certification;
and any older optical scan model still in use in California. A copy of the 19202
Request is attached for your convenience.

Even though Section 19202 requires the Secretary of State to complete his
or her examination without "undue delay", Black Box Voting did not receive
a response to its Request until Saturday, November 19, 2005. In that e-mail
response, you indicated that the Secretary of State would afford Black Box
Voting an opportunity to demonstrate the vulnerabilities with the Diebold
AccuVote-Os, based on the exploits outlined in the Hursti report. You also
stated that Diebold agreed to make their equipment and their staff available
for such tests on November 30, 2005, at the California Secretary of State's
office, 1500 11th Street, Sacramento. In connection with your response,
you attached a document that provided the "actual protocol and conditions"
(Protocols) for the proposed test.

Unfortunately, the Protocols, which were written by Diebold, were
seriously flawed, because they contemplated testing equipment that
was specifically hand-picked by Diebold, rather than randomly sampling
voting machines that were currently in existence and being utilized. The
proposed test system (Optical Scan terminal 1.96.6) was of a type that had
not been certified or used in California and was not an item requested for
examination in my client's 19202 request. However, my clients would be
willing to evaluate this item, but only in addition to the requested items. The
test also contemplated that Diebold would control all of the conditions,
despite the fact that it had a vested interest in the outcome of the test and
would stand to lose millions of dollars if the test showed flaws in the voting
systems created by Diebold. My clients have other concerns with the initial
test protocols; for example the time limits were listed as "required" but were
left blank. We can discuss these issues once a proper dialog on these issues
is established. A copy of your response and the Protocols are attached as
Exhibit 2.

On November 22, 2005, less than two business days after you sent your
response, you sent an e-mail at 5:11 p.m. stating that if Black Box Voting
would like to participate in the test it would have to respond by 10:00 a.m.
the following morning. You also said that the time of the test would be moved
from 8:00 a.m. to 10:30 a.m. A true and correct copy of your November 22, 2005
response is attached as Exhibit 3.

Less than three hours after receiving your November 22 e-mail, Black Box
Voting responded by suggesting that the Protocols be changed by selecting
machines from certain County election offices which have not shown a bias
for Diebold. Unfortunately, you have never responded to this correspondence
or permitted the inspection, despite Black Box Voting's reasonable request under
California Election Code Section 19202. As such, the Secretary of State has
clearly violated Section 19202.

Accordingly, please contact me upon receipt of this letter as to whether
the Secretary of State will allow Black Box Voting's 19202 Inspection and,
if so, which Protocols he is agreeable to. If we do not receive a response
to this letter by December 16, 2005, Black Box Voting will be forced to pursue
other available legal remedies.

# # # # # # # # # # # # # # #
END OF ATTORNEY LETTER
# # # # # # # # # # # # # # #

From Black Box Voting:

AT ISSUE
Procedures to be negotiated include:

1) The secrecy provisions written by Diebold -- Black Box Voting takes the
position that all facets of the test should be open to the public and to the media

2) Access and time limits -- Diebold wrote that a time limit would be set but
did not specify whether it would be 30 seconds or two weeks. Diebold left
a "blank" after the time limit item

Diebold involvement in writing procedures sent to Black Box Voting by Calif.
Secretary of state:

The California Secretary of State provided written testing procedures to
Black Box Voting in the form of a Word Document.

A review of the "properties" feature on this electronic document reveals that
it was written by Steve Pelletier of Diebold Election Systems, then sent to
Black Box Voting from the Secretary of State's office as the Secretary of State's
proposed testing protocols.

It is the position of Black Box Voting that the vendor should not be involved in
nor control the testing of this system.

* * * END * * *Black Box Voting

Printer Friendly | Permalink |  | Top
nicknameless Donating Member (1000+ posts) Send PM | Profile | Ignore Fri Dec-09-05 09:43 PM
Response to Original message
1. So, in compliance with California State Law, any and all experts,
with interest in this matter, should be able to test-hack these f'ing machines.

MIT? Chuck Herrin? Others?
Printer Friendly | Permalink |  | Top
 
autorank Donating Member (1000+ posts) Send PM | Profile | Ignore Fri Dec-09-05 09:44 PM
Response to Original message
2. Recommended. Great stuff. I love this.
Edited on Fri Dec-09-05 09:47 PM by autorank
I have two place where they can pick up at least 1000 late teen/twenty somethings who can hack through that Diebold POS in no time; nah 5000, and that's just the California residents.


http://www.arstechnica.com

http://www.somethingawful.com

And that's before you even go near IRC or one of those other Wild West places.

No one hacker selected by Kevin McMuffin, no matter how good. Let's get a serious army of 'haxors' to do the deed.



'leet leik JeffK
Printer Friendly | Permalink |  | Top
 
nicknameless Donating Member (1000+ posts) Send PM | Profile | Ignore Fri Dec-09-05 09:53 PM
Response to Reply #2
6. Let's enlist these young geniuses!
Some of these kids can hack into just about anything!

:D
Printer Friendly | Permalink |  | Top
 
sproutster Donating Member (1000+ posts) Send PM | Profile | Ignore Sat Dec-10-05 10:29 AM
Response to Reply #2
22. alt.malicious.hackers
They play hacking games and have a bit of a conscience. :D
Printer Friendly | Permalink |  | Top
 
klebean Donating Member (268 posts) Send PM | Profile | Ignore Fri Dec-09-05 09:48 PM
Response to Original message
3. tried to reply earlier
but a message the thread was locked...weird.

Thanx anyway for the heads up.
I wrote the DNC today (after yet another request for money)
that I wasn't giving one more dime until the dems get behind
this issue big time.
Printer Friendly | Permalink |  | Top
 
nicknameless Donating Member (1000+ posts) Send PM | Profile | Ignore Fri Dec-09-05 09:51 PM
Response to Reply #3
5. Sorry, I posted it originally in a different forum, then deleted it.
(I'm lousy at multi-tasking ;) )

Thank you for keeping up the pressure on the DNC! They have got to pay attention to this #1 issue!
Printer Friendly | Permalink |  | Top
 
Justice Is Comin Donating Member (1000+ posts) Send PM | Profile | Ignore Fri Dec-09-05 09:50 PM
Response to Original message
4. Problem is
they're going to be sure those machines are debugged and accurate as a Swiss timepiece. They will keep the video poker ones in the backroom for the real thing.
Printer Friendly | Permalink |  | Top
 
nicknameless Donating Member (1000+ posts) Send PM | Profile | Ignore Fri Dec-09-05 09:59 PM
Response to Reply #4
7. True, except that Diebold was designed to be flimsy in terms of security,
Edited on Fri Dec-09-05 10:11 PM by nicknameless
and some of these hackers have managed to break into high-level government systems, which were DESIGNED to be ultra-secure.

Diebold hasn't even been able to make a machine that can't be spotted as a security risk.
Printer Friendly | Permalink |  | Top
 
Crazy Guggenheim Donating Member (1000+ posts) Send PM | Profile | Ignore Sat Dec-10-05 01:57 AM
Response to Reply #4
15. LOL. Makes no difference.
:rofl:
Printer Friendly | Permalink |  | Top
 
nicknameless Donating Member (1000+ posts) Send PM | Profile | Ignore Fri Dec-09-05 10:54 PM
Response to Original message
8. Kicking this *fascinating* information
:)
Printer Friendly | Permalink |  | Top
 
Benhurst Donating Member (1000+ posts) Send PM | Profile | Ignore Fri Dec-09-05 11:06 PM
Response to Original message
9. Recommended NT
Printer Friendly | Permalink |  | Top
 
nicknameless Donating Member (1000+ posts) Send PM | Profile | Ignore Sat Dec-10-05 12:55 AM
Response to Original message
10. This is a HUGE deal!!!!!!
Edited on Sat Dec-10-05 01:48 AM by nicknameless
... Maybe I shouldn't have put in the "grains of salt" line? :shrug:
B*v has nothing to do with existing California law.

ANYONE can do this hack test.
ANYONE can prove that Diebold machines are too flawed and insecure to be used.

This is a wonderful little law, left over from the good old days of Kevin Shelley, our previous, decent SoS.

Too many dirty tricks are being played on us by the current repug SoS, Bruce McPherson.
We've just got this month before HAVA requirements might leave California Diebolded. :(


Please K&R this for more people to see.
Printer Friendly | Permalink |  | Top
 
nicknameless Donating Member (1000+ posts) Send PM | Profile | Ignore Sat Dec-10-05 01:46 AM
Response to Original message
11. Kicking to STOP Diebold in California! We only have until January!!!
:kick:
Printer Friendly | Permalink |  | Top
 
upi402 Donating Member (1000+ posts) Send PM | Profile | Ignore Sat Dec-10-05 01:53 AM
Response to Original message
12. R & K for Andy
:applause: :woohoo:
Printer Friendly | Permalink |  | Top
 
nicknameless Donating Member (1000+ posts) Send PM | Profile | Ignore Sat Dec-10-05 01:57 AM
Response to Reply #12
14. Imagine how happy he would be to find this little gem of a law!
:bounce: :toast:
Printer Friendly | Permalink |  | Top
 
Crazy Guggenheim Donating Member (1000+ posts) Send PM | Profile | Ignore Sat Dec-10-05 01:56 AM
Response to Original message
13. Ooooooo. I just might!
:popcorn: :popcorn: :popcorn:
Printer Friendly | Permalink |  | Top
 
nicknameless Donating Member (1000+ posts) Send PM | Profile | Ignore Sat Dec-10-05 02:03 AM
Response to Reply #13
16. Everybody with hacking abilities should have a shot at defeating and
exposing these machines' flaws and insecurities.

... Everyone else should have a shot at them with their cars.

:evilgrin:
Printer Friendly | Permalink |  | Top
 
Crazy Guggenheim Donating Member (1000+ posts) Send PM | Profile | Ignore Sat Dec-10-05 02:11 AM
Response to Reply #16
17. LOL.
Printer Friendly | Permalink |  | Top
 
nicknameless Donating Member (1000+ posts) Send PM | Profile | Ignore Sat Dec-10-05 04:38 AM
Response to Original message
18. 19205. (c) The system shall be safe from fraud or manipulation.
From FindLaw.com, California Elections Code Section 19200-19213

19205. The Secretary of State shall establish the specifications
for and the regulations governing voting machines, voting devices,
vote tabulating devices, and any software used for each, including
the programs and procedures for vote tabulating and testing. The
criteria for establishing the specifications and regulations shall
include, but not be limited to, the following:
(a) The machine or device and its software shall be suitable for
the purpose for which it is intended.
(b) The system shall preserve the secrecy of the ballot.
(c) The system shall be safe from fraud or manipulation.


http://caselaw.lp.findlaw.com/cacodes/elec/19200-19213.html

So McPherson is in violation of both 19202 AND 19205
Printer Friendly | Permalink |  | Top
 
nicknameless Donating Member (1000+ posts) Send PM | Profile | Ignore Sat Dec-10-05 06:03 AM
Response to Original message
19. Pick an outrage, any outrage. Some of my favorite highlights:
McPherson waited 5 months to respond:
“On June 16, 2005, Black Box Voting sent a request to examine the Diebold Election Systems component: the programmed electronic ballad box memory cards used in optical scan and touch screen voting systems (Component).

“Even though Section 19202 requires the Secretary of State to complete his or her examination without "undue delay", Black Box Voting did not receive a response to its Request until Saturday, November 19, 2005.


Unreasonable timing, and ultimate violation of 19202:

“On November 22, 2005, less than two business days after you sent your response, you sent an e-mail at 5:11 p.m. stating that if Black Box Voting would like to participate in the test it would have to respond by 10:00 a.m. the following morning. You also said that the time of the test would be moved from 8:00 a.m. to 10:30 a.m. ...

“Less than three hours after receiving your November 22 e-mail, Black Box
Voting responded by suggesting that the Protocols be changed by selecting
machines from certain County election offices which have not shown a bias
for Diebold. Unfortunately, you have never responded to this correspondence
or permitted the inspection, despite Black Box Voting's reasonable request under
California Election Code Section 19202. As such, the Secretary of State has
clearly violated Section 19202.”


Diebold is working out of McPherson's office?

“A review of the "properties" feature on this electronic document reveals that it was written by Steve Pelletier of Diebold Election Systems, then sent to Black Box Voting from the Secretary of State's office as the Secretary of State's proposed testing protocols.”


Also noteable:
"Actual protocol and conditions" of the test were devised by Diebold?!!!
Since when does Diebold have any place determining conditions of California Laws?

Diebold selected the machine to be tested. A model that had never been certified, requested, or in use:

"...they contemplated testing equipment that was specifically hand-picked by Diebold, rather than randomly sampling voting machines that were currently in existence and being utilized. The proposed test system (Optical Scan terminal 1.96.6) was of a type that had not been certified or used in California and was not an item requested for examination in my client's 19202 request.

Printer Friendly | Permalink |  | Top
 
goclark Donating Member (1000+ posts) Send PM | Profile | Ignore Sat Dec-10-05 10:21 AM
Response to Original message
20. So let's get the party started ~ what do we do NOW,TODAY?

What is our plan and when do we get started?

Somebody needs to tell me 1,2,3 what we can do --- a timeline please.


This is a gem!
Printer Friendly | Permalink |  | Top
 
nicknameless Donating Member (1000+ posts) Send PM | Profile | Ignore Sat Dec-10-05 08:07 PM
Response to Reply #20
27. Well, I would think that more people and organizations should be applying
to test this garbage. I just sent a letter to Chuck Herrin. He has some great information on his website regarding election fraud and the simplicity of vote tampering.
http://www.chuckherrin.com/hackthevote.htm

(My letter to him: Reply #26)
Printer Friendly | Permalink |  | Top
 
goclark Donating Member (1000+ posts) Send PM | Profile | Ignore Sun Dec-11-05 01:27 PM
Response to Reply #27
30. Calling All Computer Hackers!

Do they have to meet some qualifications, if not, my 18 yr. old cousin can understand computers real well.


If they don;t have to have any real knowledge, like a Rove or a Brownie, than we can all qualify to try our best to discover the way they do it.

It would be a lot of fun for a good cause.

Printer Friendly | Permalink |  | Top
 
nicknameless Donating Member (1000+ posts) Send PM | Profile | Ignore Sun Dec-11-05 08:15 PM
Response to Reply #30
31. I really want to get the Best of the Best to get a shot at exposing these
machines' failings. Your 18 yr. old cousin could undoubtedly defeat them, but Diebold is putting an unknown time limit on any effort. (Why is our SoS allowing Diebold to determine the terms of this test?!!!)

I want computer geniuses, with the most familiarity with these flipping machines, to take them down in seconds. I think Harri Hursti is a great choice, given what he was able to do in Florida. But I want to see more than just one test.

We have only a couple of weeks left before the Jan. 1, 2006 HAVA deadline.
McPherson is already in violation of the formal Request by BBV.org.
Printer Friendly | Permalink |  | Top
 
sproutster Donating Member (1000+ posts) Send PM | Profile | Ignore Sat Dec-10-05 10:26 AM
Response to Original message
21. Dudes I would be all over this
Edited on Sat Dec-10-05 10:28 AM by sproutster
I work with the operation system daily. There are tons of nooks and cranny's to play with.

The question is - will it have the same accessories as it does when in an election?

Are they blue-toothing? Does it have a usb port? Ethernet? Serial port?

As soon as you have the ip - all you probably have to do is get a really good port sniffer - and see what happens.

There is also the touch screen - fingernail the screen see if you can find the magic pixels to get into the os.

There is tons of fun stuff that after reading what we have read, I am sure is wide open.

**edited to add** Power it down - chances are there is a window in during boot.
Printer Friendly | Permalink |  | Top
 
nicknameless Donating Member (1000+ posts) Send PM | Profile | Ignore Sat Dec-10-05 07:11 PM
Response to Reply #21
24. There are TOO MANY problems with Diebold machines.
Even the machine aspects they've tried to design correctly have ended up failing. The point is, hackers can get into them VERY EASILY. Eg: The professional hacker, Harri Hursti, getting the screen to flash "Are we having fun yet?" during a similar test in Florida.

The LAST thing McPherson or Diebold wants is another demonstration of these crappy machines' failings. Diebold wants any and all tests to be done in secret for good reason.
Printer Friendly | Permalink |  | Top
 
Gregorian Donating Member (1000+ posts) Send PM | Profile | Ignore Sat Dec-10-05 12:00 PM
Response to Original message
23. It's not about hacking. (am I wrong?)
Hackers are not the problem. Reliability is not the problem.

The problem is meddling by officials. That is not hacking. That is not reliability. It's fraud.

This is another premise that should be ashcanned.
Printer Friendly | Permalink |  | Top
 
nicknameless Donating Member (1000+ posts) Send PM | Profile | Ignore Sat Dec-10-05 07:20 PM
Response to Reply #23
25. These machines are pure junk. And hack-ability is very much an issue.
That's often how vote flipping and switching occurs. The design of these machines is deeply flawed -- they were designed to be insecure so that vote tampering could occur. There are innumerable problems that can easily be revealed. That's why McPherson has been violating the Request. It's also why both he and Diebold want any machine tests to be done in secret.

Illustration: Harri Hursti getting the voting machine screen to flash "Are we having fun yet" during the Florida test.
Printer Friendly | Permalink |  | Top
 
nicknameless Donating Member (1000+ posts) Send PM | Profile | Ignore Sat Dec-10-05 07:58 PM
Response to Original message
26. My letter to Chuck Herrin:
Edited on Sat Dec-10-05 07:59 PM by nicknameless
Dear Mr. Herrin,

I enjoy your website very much.

I just became aware of a California Election Code section which provides that anyone who is interested in testing voting machine equipment may file a request to do so. The Secretary of State is to respond without delay, and a test shall be scheduled.

Here is a link to FindLaw.com, which contains the Request provision:
http://caselaw.lp.findlaw.com/cacodes/elec/19200-19213.html

“19202. Any person or corporation owning or being interested in any voting system or part of a voting system may apply to the Secretary of State to examine it and report on its accuracy and efficiency to fulfill its purpose. The Secretary of State shall complete his or her examination without undue delay.”

Perhaps you, or someone you know, would be interested in testing these machines or their components? BlackboxVoting.org apparently filed to do so last June. They just received a reply in November but still have not been allowed to perform any tests, which would appear to violate Section 19202.

The devices they requested to check, according to what I have read:
“In the 19202 Request, Black Box Voting asked that the Component be evaluated for five possible flaws with respect to: the latest optical scan systems (firm wear 1.96.4); the paperless touch screen, as used in Alameda County on November 2, 2004; the new TSx system proposed for certification; and any older optical scan model still in use in California.”

Also noteworthy:
Section 19205. (c) The system shall be safe from fraud or manipulation.

The January HAVA requirement deadline is looming. Any assistance or suggestions you might be able to provide would be very much appreciated.

Respectfully,
xxxxxxxxx
Printer Friendly | Permalink |  | Top
 
goclark Donating Member (1000+ posts) Send PM | Profile | Ignore Sat Dec-10-05 08:46 PM
Response to Original message
28. Oh I sure wish my computer skills were more Columbo like...

Sure would like to be of service.
Printer Friendly | Permalink |  | Top
 
nicknameless Donating Member (1000+ posts) Send PM | Profile | Ignore Sat Dec-10-05 09:56 PM
Response to Reply #28
29. Well ...
I know that there are people and groups out there who are outraged over election fraud. I just sent an email to Kim Alexander about this Election Code issue. She may not be a hacker or technically savvy, but she may know someone who is. I think spreading this information around will be key to getting valid tests underway.

(Classic B*v: she sat on it for months, rather than involving others and publicizing the fact that she was being stonewalled. :eyes: )
Printer Friendly | Permalink |  | Top
 
DU AdBot (1000+ posts) Click to send private message to this author Click to view 
this author's profile Click to add 
this author to your buddy list Click to add 
this author to your Ignore list Tue Apr 23rd 2024, 04:40 AM
Response to Original message
Advertisements [?]
 Top

Home » Discuss » Archives » General Discussion (Through 2005) Donate to DU

Powered by DCForum+ Version 1.1 Copyright 1997-2002 DCScripts.com
Software has been extensively modified by the DU administrators


Important Notices: By participating on this discussion board, visitors agree to abide by the rules outlined on our Rules page. Messages posted on the Democratic Underground Discussion Forums are the opinions of the individuals who post them, and do not necessarily represent the opinions of Democratic Underground, LLC.

Home  |  Discussion Forums  |  Journals |  Store  |  Donate

About DU  |  Contact Us  |  Privacy Policy

Got a message for Democratic Underground? Click here to send us a message.

© 2001 - 2011 Democratic Underground, LLC