Stories
Slash Boxes
Comments

SoylentNews is people

posted by on Saturday March 04 2017, @06:28AM   Printer-friendly
from the elections-going-dutch-now? dept.

In an age of superfast computers and interconnected everything, the only sure way to protect the integrity of election results is to return to paper and pen. That is the view of Sijmen Ruwhof, an ethical or "white hat" hacker, who last month revealed that the Dutch election's commission computer software was riddled with vulnerabilities.

In a shock announcement just weeks before the March 15 elections—seen as a bellwether of the rise of far-right and populist parties across Europe—Dutch officials announced they were abandoning the computer system in use since 2009 to return to counting ballots by hand. It was Ruwhof who discovered the problem. At the request of Dutch broadcaster RTL he spent just one evening examining the OSV software, developed for the Dutch government by a German company, via an online YouTube explanatory video, finding 25 weak points.

[...] "If you want to protect your system against state sponsored hacking, ditch your computer. You cannot trust it," he said. Computers are "highly sophisticated spy devices" and they "are everywhere in our society"—with more and more devices from our cars to our coffee machines becoming interconnected.

Countries who want to use computers for vote counting should build their own system from scratch. And they can't use existing operating systems for fear someone could have written a backdoor into millions of lines of code. "You have to write your own operating system, you have to design your own hardware and you must understand that the election process is of the utmost high integrity. So you really have to have the highest standards for security," said Ruwhof.

Ruwhof's original blog post: How to hack the upcoming Dutch elections – and how hackers could have hacked all Dutch elections since 2009

[Video]: https://www.youtube.com/watch?v=0ofvgCk8fPQ (in Dutch)


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 3, Interesting) by jmorris on Saturday March 04 2017, @05:44PM (2 children)

    by jmorris (4844) on Saturday March 04 2017, @05:44PM (#474948)

    The U.S. Military showed everyone how an election can be run under even the most adverse conditions. Register everyone ahead of time, issue a photo ID. Allow enough time to get those details sorted out and settle disputes. Then on election day you put a clear plastic tub on a table in the middle of the room with a small hole cut in the top. ID is checked, ballots are handed out and marked secretly, then the voter puts the ballot into the tub and their finger is marked with the famous purple ink. When voting ends the tub is opened the ballots counted out in the open with any objections handled on the spot. Observers from all interested factions are permitted to be present from before the tub is put on the table until the final count is announced and are allowed to see everything except the actual marking of ballots by the voters.

    We did this Iraq and Afghanistan. Note that we have never done anything so secure in the U.S. itself. We know how to do it, we still have too many Democrats in power to permit it here.

    Starting Score:    1  point
    Moderation   +1  
       Interesting=1, Total=1
    Extra 'Interesting' Modifier   0  
    Karma-Bonus Modifier   +1  

    Total Score:   3  
  • (Score: 0) by Anonymous Coward on Saturday March 04 2017, @06:10PM

    by Anonymous Coward on Saturday March 04 2017, @06:10PM (#474958)
  • (Score: 2) by dry on Sunday March 05 2017, @05:54AM

    by dry (223) on Sunday March 05 2017, @05:54AM (#475159) Journal

    Your method is good as long as the election officials, the military in your example, are impartial. The weak point is the ID part. The right wing government here was set on repressing votes from voters who might not vote the right way, which is the right wing way. They almost got my wife. She's always used her maiden name to vote, as her ID is in that name, along with some bills. We checked online that she was correctly registered and the report was that she was. On voting day it turned out that she was registered in her married name, with all her ID in her maiden name. Luckily it was quiet at the polling station and the returning officer was willing and after an hour of arguing on the phone to Ottawa, she got to vote.
    Control the registration and ID requirements and you can repress voters such as my wife who is a minority who is more likely not to vote right.