Planning to E-Vote?规划电子投票？ Read This First阅读这本第一
With less than three months before the presidential election, the hotly contested state, Ohio, along with others, continue to have problems with E-voting technology与少于3个月前的总统选举，竞争激烈的有争议的国家，俄亥俄，沿与他人一起，继续有问题的电子投票技术
By通过 Larry Greenemeier拉里greenemeier
In their rush to avoid a repeat of the controversy that plagued the 2000 presidential election, and to meet the requirements of Congress’s hastily mandated在他们的繁忙，以避免重复的争议困扰2000年美国总统选举，并符合国会的授权匆匆 2002 Help America Vote Act 2002年帮助美国投票法案 (HAVA), states and counties flocked to （ hava ） ，国家和县蜂拥而至 electronic voting systems电子投票系统 they hoped would eliminate hanging chads and other flaws inherent in paper-based systems.他们希望将消除悬chads及其他方面的缺失所固有的文件为基础的系统。 Six years later, with another presidential election less than three months away, many e-voting systems are fraught with security glitches, and the technology has yet to prove itself as the solution voters were looking for.六年后，与另一总统大选不到3个月的距离，许多电子投票系统充满了安全故障，和技术至今仍未证明自己作为解决选民正在寻找。
Such systems could allow voters and poll workers to place multiple votes, crash the systems by loading viruses, and fake vote tallies, according to studies commissioned by the states of这种系统可以让选民和投票的工人把多张选票，崩溃系统加载的病毒，假投票吻合，根据委托进行的研究由国 California加州 and和 Ohio俄亥俄州 within the past year.在过去一年的工作。 Makers of these systems have countered that the test settings were unrealistic.制造商，这些系统已反驳说，测试设置不现实的。 But that is not helping election officials sleep better at night.不过，这是没有帮助的选举官员每晚都可以高枕无忧。
One of the reasons e-voting systems turned out to be such a failure is that the only people involved in checking these systems were the vendors, who wanted to sell their technology, and the local election officials, who were ill-equipped to understand the其中一个原因是电子投票系统，原来是这样的失败是唯一的人参与了检查这些系统的供应商，谁想出售他们的技术，和当地选举官员，谁生病装备精良的了解 security issues安全问题 , says说， David Dill朱莳萝 , a Stanford University computer science professor and founder of the ，斯坦福大学计算机科学教授和创始人之一 Verified Voting Foundation核实投票的基础 , a nonprofit organization pushing for the implementation of voting processes that can more easily be verified and audited. ，非盈利性组织，推动实施的投票过程，可以更容易地核实和审定。 “There was a certification process in place,” Dill says, “but it had very little to do with security.” “有一个认证过程中的地方， ”莳萝说， “但它很少这样做与安全” 。
Dill is the author of莳萝是作者 Attackdog attackdog , threat modeling software that can examine more than 9,000 potential ways a voting system can be attacked, including computer hacking, ballot tampering and voter impersonation. ，威胁建模软件，可以检查多个9000潜在的方式表决制度可以被攻击，包括非法进入他人电脑，篡改选票和选民的模仿。 Attackdog is part of a larger effort called A Center for Correct, Usable, Reliable, Auditable and Transparent Elections ( attackdog的一部分，是一个更大的努力，所谓的中心，正确，实用，可靠，审计和透明的选举（ ACCURATE精确的 ) , which was launched in 2005 by the National Science Foundation with $7.5 million in funding. ） ，这是在2005年推出的由美国国家科学基金会与750万美元的资金。 “Nothing we do now will affect the November election,” Dill says. “没有，我们现在要做的是会影响十一月的选举， ”莳萝说。 “We don’t know how to make secure paperless voting.” “我们不知道如何使安全无纸投票” 。
This sentiment is echoed in many places throughout the US, most prominently in the hotly contested state of Ohio, where这种情绪是呼应，在许多地方整个美国，最突出的，在竞争激烈的争议，美国俄亥俄州，那里 Secretary of State Jennifer Brunner国务秘书珍妮佛布鲁勒尔 has commissioned a series of tests over the past year to determine whether e-voting systems are secure enough to be trusted.已委托了一系列的测试，在过去的一年里，以确定是否对电子投票系统的安全性不够是不可信的。 Based on these tests Brunner has concluded that they are not secure, a decision that基于这些测试布鲁勒尔得出结论认为，他们并不安全，决定 Premier Election Solutions, Inc.总理选举的解决方案，公司 , in Allen, Tex., took exception to. ，在李鹏飞， Tex 。 ，不以为然。 Premier sued Brunner and one Ohio county board of elections in May in a move to get the courts to rule that the company had fulfilled its contractual obligations to the state.总理起诉布鲁勒尔和俄亥俄州的一个县选举局在5月1动议获得法院裁定，该公司已履行其合同义务给该国。
Brunner struck back August 6 by countersuing Premier, formerly Diebold Election Systems, Inc., and maker of the touch-screen voting systems into which Ohio has invested more than $62 million since 2005.布鲁勒尔击中回到8月6日，由反诉总理，原diebold的选举制度， Inc 。和制造商的触控式萤幕投票系统纳入其中俄亥俄州已投资超过6200万美元自2005年以来。 Brunner’s suit accuses Premier of, among other things, breach of contract and breach of warranty, and seeks court acknowledgement that Premier did not honor its contract.布鲁勒尔的诉讼指责总理，除其他事项外，违反合同和违反保证，并寻求法院承认，总理没有履行合同。 The countersuit also asks for damages of at least $25,000 against Premier for voting system malfunctions that have caused problems in at least 11 of the 44 counties using Premier’s technology during elections since 2005.该反诉，并要求赔偿至少二点五零万美元对总理进行表决系统故障造成的问题，至少有11的44个县用总理的技术，在选举期间自2005年以来。 “We believe that Premier’s equipment has failed to perform as required by its contracts and according to state law,” Brunner says. “我们相信，总理的设备却没有执行的规定，其合同和按照国家有关法律， ”布兰说。 “We have taken this action to recover taxpayer funds spent for voting systems used in half of the state’s 88 counties.” “我们已经采取了这项行动，以收回纳税人的资金用于投票系统中使用的一半国家的88个县” 。
Brunner and Premier have locked horns several times since she took office in January 2007 over whether the company’s DRE (direct recorded election) touch-screen electronic voting technology works properly and is secure.布鲁勒尔和总理有争执多次，由于她上任于2007年1月，是否该公司的dre （直接录得的选举）的触摸屏，电子投票技术的工程，妥善和安全。 The problem came to a head in April, when election officials in Ohio’s Butler County detected a vote count discrepancy during the primary election.这个问题来到一个头部在4月，当选举官员在俄亥俄州的巴特勒县侦破一票的差距，在初选。 The county board of elections staff determined that the Premier DRE system had malfunctioned and failed to count votes from memory cards uploaded to the system’s vote tabulation computer server, Brunner says, adding, “This is not what we bargained for.”县选举局工作人员认定，总理dre系统发生故障，未能票从记忆卡上载于该系统的投票制表电脑伺服器，布兰说， “这是不是我们的讨价还价。 ”
Suspecting problems with all of the e-voting technology that had so far cost Ohio $112 million, Brunner last year commissioned怀疑的问题，与所有的电子投票技术，至今已成本俄亥俄州1.12亿美元，布鲁勒尔去年委托 Project EVEREST项目珠穆朗玛峰 , a comprehensive security review of the electronic voting technology used throughout Ohio, to identify any problems that might make elections vulnerable to tampering. ，全面的安全审查电子表决所使用的技术在整个俄亥俄州，以找出任何问题，可能使选举容易受到干扰。 During the 10-week project, teams of academic researchers from Pennsylvania State University, the University of Pennsylvania and WebWise Security (a security firm formed in 2005 by faculty and students from the University of California, Santa Barbara’s security research group) examined DRE touch-screen and optical-scan voting systems from Premier,在10个星期的项目，团队的学术研究由宾夕法尼亚州立大学，宾夕法尼亚大学和webwise安全（一家安全公司成立于2005年由教师和学生从加州大学圣塔芭芭拉的安全研究小组）审查dre触控式萤幕及光学扫描投票系统由总理， Election Systems and Software选举系统和软件 (ES&S) in Omaha, Neb., and Austin, Tex.–based （安老服务及s ）在奥马哈，内布拉斯加州，与柯士甸， Tex 。基于 Hart InterCivic赫德intercivic as well as the software that manages these systems.以及为管理软件，这些系统。
EVEREST researchers found exploitable security weaknesses in all three vendors’ systems, Brunner said in a statement when the project concluded in December.珠穆朗玛峰研究人员发现，利用的安全弱点，在所有这三个厂商的系统，布兰在一份声明中说，当该项目12月结束。 “Many of these vulnerabilities represent practical threats to the integrity of elections as they are conducted in Ohio,” she said. “许多这些弱点的代表实际威胁的完整性选举，因为他们在俄亥俄州进行的， ”她说。 “We found vulnerabilities in different vendor systems that would, for example, allow voters and poll workers to place multiple votes, to infect the precinct with virus software or to corrupt previously cast votes—sometimes irrevocably.” “我们发现的漏洞，在不同供应商的系统，例如，让选民和投票的工人把多张选票，感染派出所与病毒软件或腐败，以前的投票-有时是不可改变的” 。
“None of the systems out there are even remotely adequate given the importance of the data they handle,” says “没有一个系统出来，甚至还有遥控给予足够的重要性，数据处理，说： ” Patrick McDaniel帕特里克麦克丹尼尔 , a Penn State professor of information security who led the EVEREST testing. ，宾州州立大学教授，信息安全谁带领珠穆朗玛峰测试。 A lot of the attacks that McDaniel and his team tested could be carried out at a polling place or county elections office in a matter of seconds.很多的攻击，麦克丹尼尔和他的团队测试，可以进行的一个投票站，地方或县选举办公室在事秒。 An example: when researchers placed a piece of white tape over part of an e-voting system’s scanner, they were able to effectively block it from reading the entire ballot.一个例子：当研究人员把一块贴着胶布的一个组成部分电子投票系统的扫描仪，它们能够有效地阻止它从阅读整个选票。 In other words, a person could put the tape in a place that kept the system from counting votes for a particular candidate.在其他换句话说，一个人可以把磁带在一个地方，保持了系统从票为特定的候选人。 The team also found that the keys to unlock Hart’s ballot box could also be used to open the ballot boxes on the Premier systems.小组还发现钥匙开锁哈特的投票箱也可以用来打开票箱对总理的系统。
In a more serious attack, McDaniel found that his researchers could replace the memory card in some of the e-voting systems.在更严重的攻击，麦克丹尼尔发现他的研究可取代记忆卡在一些电子投票系统。 “Any software you put on your card would uploaded into the system’s computer,” he says. “任何软件，您提出的关于您的信用卡将上传到系统中的计算机， ”他说。
Premier had already responded to EVEREST’s findings as well as a similar project commissioned by California Secretary of State Debra Bowen called总理已作出回应，珠穆朗玛峰的调查结果，以及一个类似的项目委托加利福尼亚州国务秘书黛布拉宝云所谓 Top-to-Bottom Review自上而下的检讨 in March by issuing a report that emphasized that the EVEREST researchers did their work with “no physical or operational security controls” and did not simulate realistic election day conditions.在3月发表了一份报告，强调指出，珠穆朗玛峰的研究人员没有他们的工作与“没有身体或业务的安全管制” ，并没有实际的模拟选举日的条件。 Premier could not be reached for comment.总理未能达成任何评论。
The EVEREST researchers don’t dispute that.该珠穆朗玛峰研究者不争的事实。 Sandy Clark沙质克拉克 , an EVEREST researcher and the computing systems manager of Princeton University’s Atmospheric and Oceanic Sciences Program, said at the ，一珠穆朗玛峰研究员和计算系统经理普林斯顿大学的大气和海洋科学计划，表示在 Last HOPE hacker’s conference最后的希望黑客的会议 held last month in New York City that she and her EVEREST colleagues “treated the project as a hack.”上个月举行的在纽约市说，她和她的同事珠穆朗玛峰“治疗项目作为一个开刀” 。
At the Last HOPE conference, University of Pennsylvania researchers who led EVEREST’s analysis of ES&S e-voting technology described exploitable security vulnerabilities in almost every hardware and software component of ES&S’s touch-screen and optical-scan systems.在会议的最后希望，宾夕法尼亚大学的研究人员谁主导的珠穆朗玛峰的分析胚胎干＆ S的电子投票技术的描述利用的安全漏洞，几乎在每一个硬件和软件组成的安老服务及s的触摸屏和光学扫描系统。 Some of these flaws, Clark said, could allow a single voter or poll worker with bad intentions to alter countywide election results, possibly without election officials ever knowing that the results had been tampered with.一些这些缺点，克拉克说，可能会允许一个单一的选民或投票的工人与不良的意图改变countywide选举结果，可能是没有选举官员以往任何时候都知道的结果已被篡改。 “There wasn’t an attack that we tried that we weren’t able to carry out,” she added. “有没有攻击我们尝试，我们无法进行， ”她补充说。 “We learned that every current e-voting system has serious exploitable vulnerabilities.” “我们了解到，目前每个电子投票系统存在严重的利用的漏洞” 。
In addition to investing in Premier systems, Ohio has spent more than $41 million on ES&S e-voting technology and is one of 43 states that are ES&S customers.此外，投资在总理系统，俄亥俄州已用了超过4100万美元对中文＆ S的电子投票技术和是一个有43个国家是安老服务及主要客户。
When contacted for this story ES&S pointed to statements made earlier this year regarding EVEREST.当接触了这个故事，中文＆ S的指出，所作的发言今年早些时候，关于珠穆朗玛峰。 Like Premier, ES&S’s conclusion is that anyone attempting to replicate many of EVEREST tests would need “unfettered access to the DRE unit” as well as detailed knowledge of how the system works (to wit, its communications protocol with its audit log).像总理，安老服务及s的结论是，任何企图复制的许多珠穆朗玛峰测试，将需要“不受阻碍地进入到dre单位” ，以及详细了解该系统如何工程（束手无策，其通信协议与审核日志） 。
Despite their differences, Ohio and Premier are stuck with each other for the 2008 presidential election.尽管他们的分歧，俄亥俄和总理是坚持与对方为2008年总统选举。 “With the election being less than three months away, the counties will be using the technology they have,” Brunner says. “与选举正在不少于3个月的距离，县将要使用的技术他们， ”布兰说。 To head off any potential problems, Ohio counties using touch-screen voting systems are being required to print a hard copy of at least a portion of electronically cast votes, which will provide an audit trail.主管小康任何潜在的问题，俄亥俄县利用触控式萤幕投票系统现正需要打印的硬拷贝，至少部分电子投票，这将提供审计线索。 Voters will also be offered the option of filling out paper ballots that can be read by optical scanners and registered in a database.选民也将提供类似的选择，填写文件的选票可以读取光学扫描器，及注册在一个数据库中。
E-voting systems have to be completely redesigned with security in mind, McDaniel says.电子投票系统须完全重新设计的与安全的心目中，麦克丹尼尔说。 In the short term, this means adding more thorough vote-auditing capabilities so that discrepancies can be investigated.在短期内，这意味着加入更彻底的投票审计能力，以便差异，可以进行调查。 “The elections systems should have the same quality, the same reliability, the same testing and the same certification requirements as financial systems,” he says. “选举制度应具有相同的质量，同样的可靠性，同时测试和认证要求，同时作为金融系统的， ”他说。 “If the systems used by banks, which have to report to the SEC [Securities and Exchange Commission], had this level of quality, no one would put their money in the bank.” “如果系统所使用的银行，其中有报告，向证券交易委员会[证券和交易委员会] ，这样的质量水平，没有人会提出他们的钱在银行” 。
Looking beyond November, Brunner says that she wants Ohio to rely more on optical-scan technology.展望11月之后，布兰说，她希望美国俄亥俄州更多地依靠光学扫描技术。 “Later on,” she adds, “there may be a place for touch-screen (systems).” “后来， ”她补充说， “有可能的地方，触摸屏（系统） ” 。
Have Your Say: Planning to E-Vote? 你说：规划，以电子投票？ Read This First 阅读这本第一
Please read our请阅读我们的 posting guidelines before posting发布指引，然后再发布 . 。
Alternatively或者 you can discuss this report here您可以讨论此报告在这里 . 。
This entry was posted on Friday, August 22nd, 2008 at 2:28 pm and is filed under 此项目被张贴于周五， 2008年8月22日在下午2时28分，并提交下 Contributions & Guests 贡献＆客人 . 。 You can follow any responses to this entry through the 您可以按照任何的反应，此项目通过 RSS 2.0 2.0 feed. 喂养。 You can 您可以 leave a response 留下的回应 , or ，或 trackback Trackback跟踪 from your own site. 从你自己的网站。
Translations 翻译
Related News 相关新闻
- Ohio voting machines have critical flaws俄亥俄州的投票机器有严重漏洞
- California Limits E-Voting加州限制电子投票
- 20 percent of election printouts were unreadable 20 ％的选举列印被不可读
- E-voting hacks to get Capitol Hill spotlight电子投票骇客获得国会山的焦点
- Uproar: Bush official’s quip on black voters轩然大波：布什正式的quip对黑人选民的
Email This Page To A Friend 电子邮件此页给朋友
Latest Headlines 最新的新闻标题
- McCain Office Mailed Threat, White Powder麦凯恩办公室邮寄威胁，白色粉末
- Wasted Food Is Also Wasted Water浪费食物，也是浪费水
- Man Selling Anti-War Shirts Wins Ruling男子出售反战衬衫赢得执政
- UK court rules against gov’t in key Guantanamo case英国法院规则对官立在关键关塔那摩案件
- Planning to E-Vote?规划电子投票？ Read This First阅读这本第一
- At JFK Airport, Denying Basic Rights Is Just Another Day at the Office在JFK机场，无可否认的基本权利，只不过是另一天在办公室
- LA City Council Decides to Outlaw New Fast Food Restaurants洛杉矶市议会决定取缔新的快餐店
- A Cultural History of the Magic Mushroom文化的历史，神奇的蘑菇
- US oil pipeline politics and the Russia-Georgia conflict美国的石油管道的政治和俄罗斯-格鲁吉亚冲突
- Pentagon can’t find $2.3 trillion, wasting trillions on ‘national defense’五角大楼无法找到二三〇 〇 〇 〇 〇 〇 〇 〇 〇 〇 〇美元，浪费了数万亿关于'国防'
More更多 Breaking News突发新闻
Archive 存档
- August 2008 2008年8月
- July 2008 2008年7月
- June 2008 2008年6月
- May 2008 2008年5月
- April 2008 2008年4月
- March 2008 2008年3月
- February 2008 2008年2月
- January 2008 2008年1月
- December 2007 2007年12月
- November 2007 2007年11月
- October 2007 2007年10月
- September 2007 2007年9月
- August 2007 2007年8月
- July 2007 2007年7月
- June 2007 2007年6月
- May 2007 2007年5月
- April 2007 2007年4月
- March 2007 2007年3月
