[4669] in Privacy_Forum
[ PRIVACY Forum ] Analysis of Estonia's e-voting system reveals -- a
daemon@ATHENA.MIT.EDU (PRIVACY Forum mailing list)
Mon May 12 19:53:45 2014
Date: Mon, 12 May 2014 16:22:05 -0700
To: privacy-list@vortex.com
Message-ID: <20140512232205.GE16845@vortex.com>
MIME-Version: 1.0
Content-Disposition: inline
From: PRIVACY Forum mailing list <privacy@vortex.com>
Reply-To: PRIVACY Forum mailing list <privacy@vortex.com>
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: privacy-bounces+privacy-forum=mit.edu@vortex.com
Content-Transfer-Encoding: 8bit
Analysis of Estonia's e-voting system reveals -- a mess
https://estoniaevoting.org/
"Estonia is the only country in the world that relies on Internet
voting in a significant way for legally-binding national elections
-- up to 25% of voters cast their ballots online. This makes the
security of the system of interest to technologists and voters the
world over. As international experts on e-voting security, we
decided to perform an independent evaluation of the system, based
on election observation, code review, and laboratory testing.
What we found alarmed us. There were staggering gaps in procedural
and operational security, and the architecture of the system
leaves it open to cyberattacks from foreign powers, such as
Russia. These attacks could alter votes or leave election outcomes
in dispute. We have confirmed these attacks in our lab -- they are
real threats. We urgently recommend that Estonia discontinue use
of the system."
- - -
What a non-surprise. But presumably Putin loves it.
--Lauren--
Lauren Weinstein (lauren@vortex.com): http://www.vortex.com/lauren
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- PRIVACY Forum: http://www.vortex.com/privacy-info
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://google.com/+LaurenWeinstein
Twitter: http://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com
_______________________________________________
privacy mailing list
http://lists.vortex.com/mailman/listinfo/privacy
