Study rips US e-voting machines as easily hackable

Report from Princeton and other groups says e-voting machines used in the US can be 'easily hacked' by anyone with basic computer knowledge

With eight days to go before the US presidential election, a report has been released by Princeton University and other groups that sharply criticizes the e-voting machines used in New Jersey and elsewhere as unreliable and potentially prone to hacking.

The 158-page report, which was ordered by a New Jersey judge as part of an ongoing four-year legal fight over the machines, says the e-voting machines can be "easily hacked" in about seven minutes by anyone with basic computer knowledge. Such hacking activity could enable fraudulent firmware to steal votes from one candidate and give them to another, the report said.

The controversy involves the Sequoia AVC Advantage 9.00H direct-recording electronic (DRE) touch-screen voting machines made by US-based Sequoia Voting Systems.

The report comes amid news stories in at least three US states -- West Virginia, Texas and Tennessee -- where voters have told local election officials that they believe the e-voting machines they used tried to "flip" their votes to other candidates.

The AVC machines can be hacked by installing fraudulent software contained in a replacement chip that can be installed on the main circuit board, according to the report. Such a part replacement is very difficult to detect, it noted.

Andrew Appel, a Princeton University computer science professor who is one of the authors of the report, said that such security vulnerabilities cause doubts about the accuracy and reliability of the machines.

The plaintiffs, a group of public interest organizations, argue in their lawsuit against the state of New Jersey that the machines should be discarded because they can't meet state election law requirements for security and accuracy. State officials who back the machines argue that the machines are adequate for the job.

The lawsuit is expected to go to trial in January, but in the meantime, the court allowed the Princeton report to be released to the public.

The report gives details on how the machines could be manipulated by someone who wanted to change the results of the election, and it strongly criticizes the designs and security of the devices.

At the same time, Appel said that while such a scenario is possible, "it doesn't mean that somebody is dishonest enough to do it."

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags e-voting

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Todd R. Weiss

Computerworld (US)
Show Comments

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Tom Pope

Dynabook Portégé X30L-G

Ultimately this laptop has achieved everything I would hope for in a laptop for work, while fitting that into a form factor and weight that is remarkable.

Tom Sellers

MSI P65

This smart laptop was enjoyable to use and great to work on – creating content was super simple.

Lolita Wang

MSI GT76

It really doesn’t get more “gaming laptop” than this.

Jack Jeffries

MSI GS75

As the Maserati or BMW of laptops, it would fit perfectly in the hands of a professional needing firepower under the hood, sophistication and class on the surface, and gaming prowess (sports mode if you will) in between.

Taylor Carr

MSI PS63

The MSI PS63 is an amazing laptop and I would definitely consider buying one in the future.

Christopher Low

Brother RJ-4230B

This small mobile printer is exactly what I need for invoicing and other jobs such as sending fellow tradesman details or step-by-step instructions that I can easily print off from my phone or the Web.

Featured Content

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?