
Subscribe to
Computerworld
or
Other Legislation/Regulation Stories
|
May 07, 2004 (IDG News Service) -- The comments of a computer science professor and electronic-voting security critic before the U.S. Election Assistance Commission this week prompted the Information Technology Association of America to label his testimony "misleading, at best."
The ITAA, which represents several electronic voting machine vendors, questioned the testimony of Avi Rubin, a computer science professor at Johns Hopkins University in Baltimore and co-author of a February paper critiquing the security of Diebold Inc.'s e-voting machines (see story). Rubin called the security of e-voting machines "close to terrible" at the hearing Wednesday.
But Harris Miller, president of the ITAA, shot back late Wednesday, saying the professor's statements don't make sense. After serving as an election judge in Baltimore County, Md., in March, Rubin said some of the attacks described in his paper were unlikely, and Miller questioned Rubin's statements describing a continuing lack of security in e-voting machines. Rubin's description of his day as an election judge is on his Web site.
Miller, in an e-mailed statement, compared Rubin's testimony to yelling "fire" in a crowded theater when there's no fire.
"Election officials around the country should base their decisions to use electronic voting technologies based on their outstanding track record and the fact that they are the most accurate, secure method available," Miller said. "We cannot allow something as important as the accuracy of our elections to be imperiled by the false claims of a small vocal minority. And Dr. Rubin's statement to the media that no computer security experts disagree with him is misleading at best and insulting to those who support electronic voting."
Rubin stood by his statements. Voters "loved" the Diebold machines used in Baltimore County, and some of the attacks described in his February paper were unlikely to work in Baltimore County, he said. But Rubin said that his day as an election judge raised new security concerns. At the end of the day, all vote tallies were loaded onto one e-voting machine that a malicious coder could take over to change the totals, he told the election commission.
Rubin, in an e-mail response to the ITAA statements, noted that his paper was accepted and published at a highly regarded security conference, the IEEE Security and Privacy Symposium. "That is a demonstration that the computer security community is in agreement with our conclusions," he wrote.
Rubin said the ITAA should look at his entire statement following his day as an election judge, not pick out pieces of his writing that support the e-voting vendors. "The trade group representing the companies selling the machines says that people should distrust the computer security experts and listen to the vendors," Rubin said. "What's wrong with that picture? ... They are really off base here."
|
|
Print this Story |
|
Send Us Feedback |
|
E-mail this Story |
|
Digg this Story |
|
Slashdot this Story |
|
|
|
|
|
|
All Zones Application Performance Zone Business Continuity Zone Data Center Management Zone Enterprise-Class Security Zone The File Data Management Zone Grid Computing on Windows Zone Security Management Zone ITIL Best Practices Zone The SAS Zone Storage Virtualization Zone Business Intelligence and Analytics Zone |
|
|
| ||||||||
| ||||||||
| ||||||||
|


Since You AskedA weekly storage column from storage analyst, Steve Duplessie of the Enterprise Strategy Group |
Eliminate SPAM, Gain Productivity Learn all about the dangers and the costs of spam in all its forms – from stock-touting to spreadsheet. Also, understand the drawbacks of traditional hardware- and software-based defenses – and the unique benefits of MessageLabs multi-layered, managed Anti-Spam solution; as illustrated by a real-world case study where MessageLabs stopped spam cold.
Download this white paper now!
See more Whitepapers ![]() |

The Spy FilesFor Congress to do anything that helps protect consumers and the critical Internet infrastructure as a whole, it must pass laws that require proactive processes to protect computers, not that tell people how to deal with the resulting mess, says Ira Winkler. Click here to read the latest column by Ira Winkler |
| Understand Messaging Archiving Download this white paper now!
|
| About Us Advertise Contacts Editorial Calendar Help Desk Jobs at IDG Privacy Policy Reprints Site Map |
|
CIO The Industry Standard |