Virginia Regulatory Town Hall
Agency
Department of Elections
 
Board
State Board of Elections
 
chapter
Election Administration [1 VAC 20 ‑ 60]
Previous Comment     Next Comment     Back to List of Comments
4/8/15  12:12 pm
Commenter: Arun Raj

WinVote Machines
 

I have seen and used the machines and set them up as an officer of the elections.  The platform worked with great reliability and was easy to explain to voters. 

According to the AP press report 0f 4/2/15, electoral board's hired testing lab reported, "the WinVote system’s wireless capability makes it susceptible to a security breach. The investigator who was given access to a WinVote machine that was not used in a Spotsylvania County precinct was able to use his smartphone to connect to the wireless network hosted by the machine, according to the report."   My questions are,

  1. Why was the WinVote system broadcasting its wireless ID in the first place for hackers to connect to it?
  2. Why was the investigator "given" access so he could breach the system?  Was he also "given" Login information (user/pass) etc?
  3. Why was the system broadcasting its ID so hackers can see and connect to?  Seeing a network is not sufficient for successful hacking. A hacker will also use sniffing tools.

In any event a lot of this can be mitigated by some some IT security controls.  Platform change is a rather drastic step.

Regards

CommentID: 39866