Q&A: Go back to paper ballots, says e-voting expert
Avi Rubin, a Maryland elections judge and professor, cites security woes
Computerworld - Avi Rubin is unique in that he is both a professor of computer science who specializes in e-voting security issues and someone who directly participates in the electoral process as a Maryland elections judge. His interest in e-voting began when he co-authored a study of Diebold Election Systems Inc. touch-screen voting software, released in July 2003. Rubin is also the author of Brave New Ballot: The Battle to Safeguard Democracy in the Age of Electronic Voting. The book, released this month, is highly critical of the security of e-voting machines used across the nation. Rubin, a professor at Johns Hopkins University, participated as an election judge in last week's primary in Baltimore County and detailed his experiences in a blog.
This week, Rubin talked with Computerworld about e-voting, last week's elections and his new book. Excerpts from that interview follow:Can you talk about that original study you made of Diebold's AccuVote TS machine code? The software in the AccuVote TS machine was really bad. One comment I made at the time was that if a student had turned in a program like that, he'd have gotten an F. It had outdated encryption, which was used in [the] wrong places and in the wrong mode of operation. The list goes on and on. Some [glitches] are comical. Diebold said they have a new system that fixes them, but I have no way to find out. That's their track record -- they're always saying, "It's an old system." They're saying that about the Princeton study. We asked for the new machines but were never given access. All I can say is that they say they fixed them, but I can't tell if they did, and some of the fixes are nontrivial.
What's the main point made in your book? It says the country moved too quickly to e-voting and there are security and transparency problems and it was a big mistake. It's a first-person narrative, and an exciting story of what happened that blends together all the issues. I have two chapters devoted to my experience as an election judge in 2004. One thing that came out of that was that people were always saying, "He might know a lot about computers, but doesn't understand how elections work." I have a good understanding of how elections work now. It also gave me a lot of credibility with the federal Election Assistance Commission.
What happened in last week's primary election in Maryland? There were problems in Baltimore County, as there were in Montgomery County, correct? The problems weren't as bad in Baltimore County. The e-poll books were crashing a lot, and some precincts didn't get their voter access cards. We had 10 minutes of waiting time, and at some point, up to an hour, and that was too long. One voting machine crashed. One froze up when tallying the votes and then 10 minutes later came back online.
This pilot fish is a contractor at a military base, working on some very cool fire-control systems for tanks. But when he spots something obviously wrong during a live-fire test, he can't get the firing-range commander's attention.
- IT Certification Study Tips
- Register for this Computerworld Insider Study Tip guide and gain access to hundreds of premium content articles, cheat sheets, product reviews and more.
- Reduce federal infrastructure risk with compliance management and situational awareness
- IBM continuous monitoring and management solutions deliver real-time situational awareness to help federal agencies understand vulnerabilities, and protect the infrastructure.
- Improving IT Efficiencies: Four Advantages of Multi-Tenant Data Centers
- Increasing demands on IT are forcing organizations to rethink their data center options. For many organizations, that means turning to the flexibility afforded...
- Accelerating Cloud Deployment and Operations with Managed Services
- Companies that do not have sufficient in-house expertise to either deploy or maintain an IaaS cloud should turn to Managed Service Providers .
- Rethinking IT Operations in the Cloud
- This paper breaks down the challenges that often prevent the cloud from delivering the fast, flexible and affordable infrastructure companies seek - and...
- Gartner Magic Quadrant for Cloud-Enabled Managed Hosting, North America
- Cloud-enabled managed hosting brings cloudlike consumption and provisioning attributes to the traditional managed hosting market All Government IT White Papers
- NSS Labs & Cisco Present: Evaluating Leading Breach Detection Systems Today's constantly evolving advanced malware and APTs can evade point-in-time defenses to penetrate networks. Security professionals must evolve their strategy in lockstep to...
- Will the Real Endpoint Threat Detection and Response Please Stand Up? This webinar explores new technologies & process for protecting endpoints from advanced attackers as well as the innovations that are pushing the envelope...
- What should I look for in a Next Generation Firewall? SANS Provides Guidance With so many vendors claiming to have a Next Generation Firewall (NGFW), it can be difficult to tell what makes each one different....
- Why Are Customers Really Deploying an NGFW? It seems every IT Security expert is talking about the NGFW, but what are people really doing? This webcast covers 5 real-world customer...
- Charting Your Analytical Future - "Making predictive analytics part of your business processes" Webinar This session will show how predictive analytics can be used throughout the organization by anyone looking for answers and how organizations can make...
- All Government IT Webcasts