Sunday, October 23, 2005
The GAO produces 107 page report on security of voting systems
The GAO has released a 107 page on the security of voting systems today.
What the GAO found -
"While electronic voting systems hold promise for improving the election
process, numerous entities have raised concerns about their security and
reliability, citing instances of weak security controls, system design flaws,
inadequate system version control, inadequate security testing, incorrect
system configuration, poor security management, and vague or incomplete
voting system standards."
Examples of Voting System Vulnerabilities and Problems:
• Cast ballots, ballot definition files, and audit logs could be modified.
• Supervisor functions were protected with weak or easily guessed passwords.
• Systems had easily picked locks and power switches that were exposed and unprotected.
• Local jurisdictions misconfigured their electronic voting systems, leading to election day problems.
• Voting systems experienced operational failures during elections.
• Vendors installed uncertified electronic voting systems.
The full 107 report is here.
What the GAO found -
"While electronic voting systems hold promise for improving the election
process, numerous entities have raised concerns about their security and
reliability, citing instances of weak security controls, system design flaws,
inadequate system version control, inadequate security testing, incorrect
system configuration, poor security management, and vague or incomplete
voting system standards."
Examples of Voting System Vulnerabilities and Problems:
• Cast ballots, ballot definition files, and audit logs could be modified.
• Supervisor functions were protected with weak or easily guessed passwords.
• Systems had easily picked locks and power switches that were exposed and unprotected.
• Local jurisdictions misconfigured their electronic voting systems, leading to election day problems.
• Voting systems experienced operational failures during elections.
• Vendors installed uncertified electronic voting systems.
The full 107 report is here.
Saturday, October 01, 2005
Comments to the EAC on the VVSG
Comprehensive comments submitted to EAC on their VVSG outlining required improvements and changes in approach.
