Avi Rubin, one of the primary authors of a highly critical look at Diebold’s electronic voting machines, decided to answer some of his critics, put his money where his mouth is, and spend a day as an election judge, working with the very machines about which he had expressed strong security concerns. In his very interesting recap of his day, he admits that some of his concerns may not be as much of a worry as he thought — but others may be far worse.
In our paper, we described how the smartcards used by these machines had no cryptography on them, and we made the widely criticized claim that a teenager in a garage could manufacture smartcards and use them to vote 20 times. I now believe that this particular attack is not a real threat — at least not in the primary I worked today. […] In general, multiple voting attacks during the election are not likely to work in a precinct such as the one where I worked.
[…]
There were also some security issues that I found to be much worse than I expected. […] The security risk I saw was that Diebold had designated which machine would be the zero machine, and at one point, all of the vote tallies were loaded onto that one machine in memory. That would be the perfect point to completely change the tallies. There is no need to attack all of the machines at a precinct if someone could tamper with the zero machine.
[…]
I continue to believe that the Diebold voting machines represent a huge threat to our democracy. I fundamentally believe that we have thrown our trust in the outcome of our elections in the hands of a handful of companies (Diebold, Sequoia, ES&S) who are in a position to control the final outcomes of our elections. I also believe that the outcomes can be changed without any knowledge by election judges or anyone else. Furthermore, meaningful recounts are impossible with these machines.
I also believe that we have great people working in the trenches and on the front lines. These are ordinary people, mostly elderly, who believe in our country and our democracy, and who work their butts off for 16 hours, starting at 6 a.m. to try to keep the mechanics of our elections running smoothly. It is a shame that the e-voting tidal wave has a near hypnotic effect on these judges and almost all voters. I believe that after today’s experience, I am much better equipped to make the arguments against e-voting machines with no voter verifiability, but I also have a great appreciation for how hard it is going to be to fight them, given how much voters and election officials love them.
(via Jason Kottke)

