BBV - Snohomish County - WTF? Mini-disks?

[harmonyguy]

Since when do DREs have mini-disks? IS this MORE uncertified crap, or just an article-writer who doesn't know a mini-disk from a herniated disk? Check out the part about Miami-Dade wanting to do similar testing to 'restore voter confidence'.
When WILL they learn??????
----------------------------------
Voting machines get careful exam
County double-checks software codes

By Jerry Cornfield
Herald Writer

EVERETT - In an unprecedented security check, Snohomish County election officials took apart several touch-screen machines Monday to verify each is using the correct vote-counting software before today's primary election.

Observers from the Democratic and Republican parties watched Michelle Smith open up nine machines and remove a mini-disc from each for examination. Coding on each disc was checked against an inventory list provided by Washington's Secretary of State.

No problems were found.

"This is to ensure that no rogue software is launched," Snohomish County Auditor Bob Terwilliger said.

http://www.heraldnet.com/stories/04/09/14/loc_primary001.cfm

[bearfan454]

1. The fraud takes place in the GEMS counting program

where the results are sent. The touch screen machine totals are sent to the GEMS counting program where the vote totals are changed.

[harmonyguy]

2. You're right, but that's just one......

...of the questionable areas. If I'm not mistaken, the touchscreen units themselves can be monkied with as well. Anything from 'select A - get B' to 'your vote will be recorded THIS way'

The thing I was questioning was the apparent use of a mini-disk, and comparison of the codes on it with a master list.

I'm not aware that the machine in question even USES a mini-disk, and if it did, I infer from the article that they compared something like a version number written on the disk with a version number written on a list, which validates absolutely nothing.

It's kinda like comparing the color of an apple with the color of a fire engine, and being satisfied that since both are red, they are therefore identical. Without anyone around who knows how to inspect and audit the result, the conclusion is about as valid and useful as "we have information that indicates there are WMDs in Iraq"

Either those providing the information don't know what to look for, or those interpreting the information don't know what they're looking at. Alternately those who present the information put it out for public consumption and just hope that the public is dumber than THEY are.

HG

[Boredtodeath]

3. Bad reporting is all

OK, so the reporter is calling a PCMCIA card a mini disk. Yeah, that sucks, and the reporter should know better, but that's not what you should be concerned about.

What they are saying is they have a list of files which are supposed to be on the disk. All well and good, but I can replace a DLL file at the last minute that still has the same file name but performs a specifically different function than has been certified.

The possibilities for changing the actual file (program) contents are endless and this little dog and pony show does nothing to stop it.

[harmonyguy]

4. Thanks! My point exactly.

the difference being that you stated it in much more concise terms. Thank you !
(I sometimes get long-winded when I get ticked-off)
HG ;-)

[Boredtodeath]

5. :-)

Glad I could help.

Good catch on the original story.