Twitter | Search | |
matt blaze
Ahhh, I think I found the source of the claim going around that voting machines have online Internet connections. It stems from re-reporting coupled with confusion between voting machines and backend election management systems (which ARE, disturbingly, sometimes online).
Reply Retweet Like More
matt blaze Sep 10
Replying to @mattblaze
It seems to have started with this NBC report from January that says that researchers found and connected to 35 “voting systems” on the Internet. But this story is most a re-report of this Motherboard piece from last August:
Reply Retweet Like
matt blaze Sep 10
Replying to @mattblaze
If you read the NBC report, you might think that the researchers connected to 35 voting machines. But if you read the Motherboard piece, it’s clear that what they found and connected to were actually the county backend systems that receive the results from precincts. Now...
Reply Retweet Like
matt blaze Sep 10
Replying to @mattblaze
Having backend election systems on the Internet is a terrible idea, but it’s not terribly surprising (In fact, I first warned about this in my 2017 testimony here: ). That said...
Reply Retweet Like
matt blaze Sep 10
Replying to @mattblaze
The systems these researchers found were intended to allow polling places to upload unofficial results at the end of the day. This is, as I and others have repeatedly said, a terrible idea, and increases the attack surface of the voting system by quite a bit. But...
Reply Retweet Like
matt blaze Sep 10
Replying to @mattblaze
… it doesn’t mean that you can just connect directly to voting machines over the internet and load new firmware into them or something. There are other vulnerabilities in all these devices, but it’s more complicated than that. In any case, the real solution experts recommend…
Reply Retweet Like
matt blaze Sep 10
Replying to @mattblaze
.. is to do rigorous post-election audits (called “risk limiting audits”) on the paper ballots that were captured by the scanners. This way, you can assure the correct outcome is reported, even if the system was attacked (by modem or some other means). I talk about this ...
Reply Retweet Like
matt blaze Sep 10
Replying to @mattblaze
… in more detail in this thread: Good night.
Reply Retweet Like
matt blaze Sep 11
Replying to @mattblaze
This confusion between voting machines and election management systems is an example of why its important to find primary sources whenever possible, and not rely entirely on n-th hand reports of reports of research. Important details can get oversimplified, lost in translation.
Reply Retweet Like
Reynoan Sep 12
Replying to @mattblaze @jennycohn1
Follow if you don’t already. Then work together on getting the word out to the voting public before it’s too late.
Reply Retweet Like
matt blaze Sep 12
Replying to @Reynoan
Sorry, but I've grown weary of being repeatedly told what an awful, dishonest jerk I am every time I utter a word about my area of research. I already know what an awful, dishonest jerk I am, so there's no new information here.
Reply Retweet Like