Researcher arrested for allegedy stealing Indian voting machine
IDG News Service - A security researcher who investigated electronic voting machines (EVM) used in Indian elections was arrested by police in Mumbai on Saturday. He is charged with stealing one of the machines, police sources said Monday.
Hari Prasad and other researchers released a video earlier this year demonstrating how, after tinkering with the internal electronics of an EVM, they could perform attacks on it that could manipulate the outcome of an election. The EVMs used in India are made by two Indian government-owned companies and the one Prasad used was made by Electronics Corporation of India.
Prasad has so far refused to seek bail and has been remanded to police custody until Aug. 26, said GVL Narasimha Rao, president of the Citizens' Forum for promoting Verifiability, Transparency and Accountability in Indian Elections (VeTA).
In April, Prasad told IDG News Service that his group of researchers obtained access to a working EVM that was used in an election through an anonymous source.
One of the attacks demonstrated by the researchers involved replacing the display board of the machine with a look-alike component that could be instructed through a Bluetooth connection on a mobile phone to steal a percentage of the votes in favor of a chosen candidate.
Another attack used a pocket-sized device that clips to the memory which records the number of votes stored in the EVM and can change the tally in the period between the closing of the election and the counting of the votes, which in India can take several weeks.
The EVM used by Prasad was a control unit that had been kept in a locked area by the District Election Officer (DEO) in Mumbai, India's Election Commission said on Sunday in a statement on its website. When the machine was discovered missing, the DEO filed a complaint with the Mumbai police on May 12.
Rao of VeTA contends that the researchers did not commit theft as the EVM was provided by an insider from the Election Commission. Officials were not available for comment, but the commission did say in its statement that possession of stolen property is a crime under the Indian Penal Code.
Prasad met with the Election Commission on Aug. 10, about three months after the complaint of a stolen EVM. The commission described the meeting as "cordial" and that it was open to receiving suggestions for improving the system. The meeting was unrelated to the ongoing police investigation, an Election Commission official said on the condition of anonymity.
EVMs have been opposed by a number of political parties, which wrote to the Election Commission in April expressing concerns about the reliability of the machines. Those parties urged the Election Commission to organize a meeting with all of the political parties in the country, Rao said.
There also have been problems with the machines. In an election in July in the state of Andhra Pradesh, the Election Commission was forced to use ballot boxes as there were more candidates in some constituencies than could be listed in the EVMs used.
The move to field a large number of candidates that were not serious contestants may have been deliberately planned by a local political party, Telangana Rashtra Samiti, which is opposed to EVMs, according to political analysts.
VeTA has advocated that a verifiable paper trail should be provided for EVMs or the country should go back to traditional ballot boxes, Rao said.



- Excel 2010 Cheat Sheet
- Register for this Computerworld Insider Cheat Sheet and gain access to hundreds of premium content articles, guides, product reviews and more.
- Overcome Top 7 Admin Challenges of Active Directory
- As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable,...
- Insiders Can Ruin Your Company. Take Action.
- Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in...
- Top Solutions and Tools to Prevent Devastating Malware
- Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring...
- X-Ray of the PCI Process-4 Proactive Steps
- This white paper from Forrester Research Inc., helps break PCI into understandable components. Security and risk professionals will gain knowledge and insight into...
- Identity Governance: The Business Imperatives
- This white paper describes the business challenges and opportunities that are driving interest in Identity Governance while discussing considerations your organization should make... All Security White Papers
- Live Webcast
Playing Defense: Staying on Top of Your Disaster Recovery Game - When it comes to disaster recovery, rapidly growing data volumes, distributed computing models, and new technologies all combine to present an ever-changing playing...
- Introduction to VMware vCenter Site Recovery Manager 5
- Traditional disaster recovery solutions are often too expensive, complex and unreliable to meet business requirements. As a result, IT departments are hesitant to...
- The Top Ten Secrets to Avoiding SAN Performance Problems
- Maintaining peak performance while simultaneously addressing the root cause of SAN errors is challenging. Learn the most common SAN problems and explore new...
- Deduplication Without Compromise
- Go inside Quantum's scalable, high-performance, multi-protocol new DXi deduplication appliances, designed to make backup much more effective. Discover how the new future-proof DXi6700...
- Director of Disk Products Discusses DXi6700
- Discover how the new DXi 6700 series of deduplication appliances provide investment protection and a future-proof feature set, all while delivering fast, scalable,...
- Playing Defense: Staying on Top of Your Disaster Recovery Game
- When it comes to disaster recovery, rapidly growing data volumes, distributed computing models, and new technologies all combine to present an ever-changing playing... All Security Webcasts