DC Internet Vote Scheme Hacker: "Within 36 Hours We Had Total Control of Server, Ability to Change Votes, Reveal Secret Ballot"

Brad Blog - As we posited in our coverage yesterday of DC's Internet Voting scheme which was hacked with the University of Michigan fight song, J. Alex Halderman, asst. professor of electronic engineering and computer science at the university, was, indeed, at the heart of the hack.He details tonight that he and a small team of students were happy to participate in the test that DC election officials had announced, with just three days notice, inviting hackers to try and penetrate the system they planned to use this November, as developed with the Open Source Digital Voting Foundation.Halderman writes in his explanation of how they did it:
Within 36 hours of the system going live, our team had found and exploited a vulnerability that gave us almost total control of the server software, including the ability to change votes and reveal voters’ secret ballots. Read more.

Comments