Update: E-voting vendor's Web site hacked

Top Stories

Related

• Clues point to Jan. 13 release of Windows 7 beta
• Microsoft releases Vista SP2 beta
• Obama's DHS pick may find support for raising H-1B cap at confirmation hearing
• IBM wants info from Apple execs in Papermaster case
• License server glitch exposes SonicWall users to e-mail security threats
• Report: Former AOL chief exec tries to raise funds to buy Yahoo

• Election Day: What could possibly go wrong?
• As Minnesota waits recount, e-voting is ruled out as issue in tight U.S Senate race
• E-voting backers, watchdogs hope to smooth out bumps next time
• E-voting: What will it take for a smoother election next time?
• Did somebody say, "election"?

Zone

The Security Zone With the mobility of employees and the ease with which external devices can be brought in and out of a network, continuing to build your security plan for network servers and clients is a must. Fortunately, there is much that organizations can do to protect themselves from attacks - internal and external. Having the right policies, procedures and server configurations is critical... Learn more in The Security Zone See All Zones

March 20, 2008 (IDG News Service) A company whose e-voting machines have come under fire from election officials in New Jersey confirmed today that its Web site had been hacked.

A section of Sequoia Voting Systems Inc.'s Web site was hacked overnight, and when the company realized what had happened, it took the site down and removed the "intrusive content," Sequoia spokeswoman Michelle Shafer said via e-mail.

Sequoia made "security enhancements" to protect the site from further hacking, and it was back online this afternoon, Shafer said. The company is investigating the origin of the attack.

The hack was noticed Thursday morning by Ed Felten, a computer scientist who has been asked to investigate voting-machine discrepancies in the state's primary election.

The "Ballot Blog" page of Sequoia's Web site had no content earlier this afternoon, and earlier in the day, there were messages on the page announcing that it had been hacked, Felten told IDG News Service via e-mail.

Felten, a Princeton University computer science professor and a critic of e-voting systems, had been asked by a group representing New Jersey county clerks to examine Sequoia machines used in a Feb. 5 New Jersey presidential primary election.

In his e-mail, Felten said that at around 6:30 a.m. Eastern Time, the Ballot Blog, in which Sequoia gave an in-depth explanation of what had gone wrong in New Jersey, had been replaced with a message saying the page had been hacked. He said the message named the alleged perpetrator of the hack, but he could not remember what that name was other than "it was a mixture of lower-case letters and numbers."

By midmorning, the site had been taken offline by its Web-hosting provider and redirected to a hosting-provider page that said the page had been suspended temporarily for maintenance.

Sequoia has come under scrutiny for discrepancies in the voting tallies generated by approximately 60 of the state's Sequoia Voting Systems AVC Advantage e-voting machines during last month's election. On Wednesday, a group representing clerks from a half-dozen New Jersey counties wrote to State Attorney General Anne Milgram asking her to investigate the problems.

In most cases, the discrepancy involved a one- or two-vote difference between the paper tape logged by the machine and the number of votes stored in the machine's memory cartridges. Sequoia blamed the discrepancy on poll-worker error and said the problem could be fixed with a software update, but state clerks requested a third-party investigation.

Last Tuesday, the clerks group asked Felten to examine the Sequoia machines. However, Sequoia threatened legal action against Felten, saying that such a review would violate the company's licensing agreement, so he did not carry out his investigation.

Robert McMillan in San Francisco contributed to this article.

Reprinted with permission from

IDG.net
Story copyright 2008 International Data Group. All rights reserved.