This afternoon on my Pacifica Radio show on KPFK here in Los Angeles (and up and down the West Coast) I interviewed Dr. Roger Johnston of Argonne National Lab's Vulnerability Assessment Team on their $26 "Man-in-the-Middle" attack on a Diebold touch-screen voting system as I reported yesterday in my exclusive at Salon (and here at The BRAD BLOG.)

While yesterday's reports included information on the team's previous, similar-ish hack of a Sequoia touch-screen system, and the fact they feel they could do the same with most other e-voting systems, among the interesting new points raised during our discussion on KPFK today is that Johnston believes they could use a similar method to manipulate the vote count on a paper-ballot based optical-scan system as well!

So, in other words, the hack low-rent attack Argonne has demonstrated --- requiring no knowledge of the voting system software, $10 to $26 in off-the-shelf computer parts, and little more than an 8th grade computer lab education --- could also be implemented not just on touch-screen e-voting systems, with or without a so-called "paper trail," but also on the paper ballot op-scanners used to count the majority of votes that will be cast in the U.S. in next year's Presidential election.

(And if you're now wondering: "Well, what the hell should we be using to tabulate our elections?!" I'll refer you to this "Democracy's Gold Standard" special comment of mine, as taken from a recent Mike Malloy Show which I posted a few months ago.)

Here's my interview with Dr. Johnston today...

Download MP3 or listen online here [appx 28 mins]..

P.S. There's been a fair bit of follow-up coverage of my Salon article yesterday, here's a few of the better reports I've seen, at The Register, ComputerWorld, CNET and MSNBC.com.

Note: Of the media outlets listed above, only CNET got the ownership of Diebold voting equipment correct in their reports. Both The Register and ComputerWorld incorrectly report that ES&S now has ownership of what had been Diebold Election Systems, Inc. In fact, while ES&S, the world's largest e-voting company, did purchase the company (that some refer to as DESI, but I do not, for personal reasons) in late 2009, the DoJ ordered them to sell it off due to anti-trust concerns. It was then purchased by Canadian firm Dominion Voting, though ES&S was allowed to retain a fair number of the contracts from Diebold jurisdictions that preferred to stay with ES&S. So while Dominion officially owns what was Diebold's election division, ES&S still maintains and services many Diebold machines as well. Dominion also took over Sequoia --- and lied about it --- shortly thereafter.

[UPDATE 9/28/11: I interviewed Argonne National Lab's Roger Johnston on my Pacific Radio show on KPFK today. That interview, in which Johnston concedes the same type of hack described below could likely be carried out on paper-ballot based optical-scan systems as well as touch-screen systems, is now posted here. - BF]

The Vulnerability Assessment Team (VAT) at the U.S. Dept. of Energy's Argonne National Laboratory in Illinois has managed to hack a Diebold Accuvote touch-screen voting machine in what I describe at my exclusive today at Salon as perhaps "one of the most disturbing e-voting machine hacks to date."

As noted by the computer scientists and security experts at Argonne's VAT, largely all that's needed to accomplish this hack is about $26 and an 8th grade science education.

"This is a national security issue," VAT team leader Dr. Roger Johnston told me, echoing what I've been reporting other computer scientists and security experts telling me for years. "It should really be handled by the Department of Homeland Security."

Johnston should know. While the VAT folks have been dabbling in the security (or lack thereof) of e-voting systems in their spare time of late, most of the work they do is related to issues like nuclear safeguards and non-proliferation.

What makes this hack so troubling --- and different from those which have come before it --- is that it doesn't require any actual changes to, or even knowledge of, the voting system software or its memory card programming. It's not a cyberattack. It's a "Man-in-the-middle" attack where a tiny, $10.50 piece of electronics is inserted into the system between the voter and the main circuit board of the voting system allowing for complete control over the touch-screen system and the entire voting process along with it.

Add an optional $15 radio frequency remote control device, and votes can be changed, without the knowledge of the voter, from up to half a mile away. Without the remote, the attack can be turned on and off at certain times, or by other triggers. The voter would have no idea that their votes have been changed after they've already approved them as "correct" on the various confirmation screens, and even on the so-called "paper-trail" (on e-voting machines which offer them --- though VAT has learned how to manipulate those as well, see photo at right.)

The inserted chip can later be removed after the election without there being any way to ever know that someone had completely manipulated the system. But since election officials rarely --- if ever --- examine the inside of their voting machines, it doesn't much matter, in truth.

"The level of sophistication it took to develop the circuit board" used in the attack "was that of basically an 8th grade science shop," says Argonne's John Warner. "Anybody with an electronics workbench could put this together."

The team, he says, had no knowledge of the voting machine's computer circuit diagram or owner's manual when they devised the attack. Moreover, VAT team leader Roger Johnston told me they believe they "can do similar things on pretty much every electronic voting machine." Indeed, in 2009, with little fanfare, they were able to carry out a similar manipulation of a Seqouia AVC Advantage e-voting system (as used across most of the state of New Jersey, for example). You can see that video demo here.

The team at Argonne has shared their demo video of the new Diebold Accuvote hack exclusively with The BRAD BLOG, as posted below. But please go check out the full details over at Salon (where we've embedded the video as well). The full details are chilling --- particularly as about 20% to 30% of U.S. voters are still set to use Diebold touch-screen systems, and others very similar to it, across the nation in the 2012 election cycle, no matter how many years The BRAD BLOG has been desperately trying to illustrate that these systems are simply antethetical to American democracy.

Among the states where voters will use these systems on Election Day in 2012, according to VerifiedVoting.org: Georgia, Maryland, Utah, Nevada, New Jersey, Pennsylvania, Indiana, Missouri, Texas and many more.

Almost five years ago to the day, I broke the story of Princeton's landmark Diebold Virus Hack in another exclusive for Salon. So while I'm delighted to break the news of this new type of hack over there today, it's somewhat frustrating that it's even necessary at this point, as we head into yet another Presidential election cycle having changed so little despite all that we've learned. Nonetheless, please go check out my story over there today.

Beyond that, the video demonstration itself from Argonne, of the remote hack of a Diebold Accuvote touch-screen system follows below...

Guest blogged by Ernest A. Canning

In an Aug. 29, 2011 letter, T. Christian Herren, Jr., Chief of the Obama DOJ's Civil Rights Division, not only demanded that South Carolina, within 60 days, provide additional information about its recently enacted polling place photo ID restriction law, but stated that if SC failed to provide a timely "response...the [U.S.] Attorney General may object to the proposed changes consistent with the burden of proof placed upon the submitting authority."

Herren noted that SC has the "burden of demonstrating" that the new polling place photo ID law was neither enacted "for a discriminatory purpose nor will have a retrogressive effect."

SC's Republican Attorney General, Alan Wilson, in an apparent recognition that pre-clearance is likely to be denied, told those in attendance at a GOP fundraiser that he had "no faith" that the DOJ "will do the right thing." He vowed to litigate the matter "up to the U.S. Supreme Court if necessary."

As The BRAD BLOG previously reported, on Aug. 5 the ACLU submitted a 15-page letter to the U.S. Department of Justice (DOJ) seeking a denial of pre-clearance under Section 5 of the Voting Rights Act of South Carolina’s polling place photo ID restriction law. The letter argues that proponents’ unsubstantiated claims of "voter fraud" were but a pretext for unlawful discrimination and that statistics suggest that the new law would operate as an illegal poll tax, especially for the disproportionate number of African Americans who live below the federal poverty level in the state.

Last Friday, SC's Senate Democrats weighed in as well, asking the DOJ to deny pre-clearance for what they contend is the nation's harshest polling place ID restrictions, which could potentially disenfranchise, for example, someone whose driver's license has been suspended.

While denial of pre-clearance due to the retrogressive effect of photo ID restrictions in SC would be a positive step, it will not serve to protect democracy and the sanctity of the vote in other jurisdictions not subject to pre-clearance under the Voting Rights Act of 1965.

As described by John Nichols in The Nation (see video below), and again by Ari Berman in Rolling Stone --- as we detailed yesterday --- state-after-state across the nation has come under a well-coordinated assault by the corporate-funded American Legislative Exchange Council (ALEC) and GOP legislators bent on rigging electoral outcome as part of their war on the middle class...

The Jones County, Mississippi, slogan is "A Great Place to Live." While this may or may not be true, and I've never been there, it's clearly not a great place to vote. At least if voting in a way that is verifiably accurate for the citizenry is something one might care about. A remarkable statement by the county's Circuit Clerk, and a unanimous decision in support of it by the County's Board of Supervisors this week, has made that as clear as can be.

You may recall that just last week, e-voting system failures --- such as e-voting machines that wouldn't start up at all and votes that were counted twice --- led to chaos and uncertain results in Mississippi's state primaries, leading one official to declare days afterward, as they were all struggling to sort out results of several close elections: "At this point there is no election...Everyone is baffled."

Against that backdrop then, behold what Jones County, MS, Circuit Clerk Bart Gavin is now calling for --- and receiving unanimous approval from the Jones County Board of Supervisors for(!) --- as irresponsibly reported without even a hint of fact-checking by Laurel Leader-Call reporter Charlotte Graham under the laughably misleading headline, "Improving the voting process" [emphasis added]...

The OC Weekly's Matt Coker picked up on my Monday report describing my experience over the weekend at the Orange County Registrar's booth at the Orange County Fair wherein my attempt to try out their 100% unverifiable Hart Intercivic electronic voting system, um, didn't work out too well.

Coker's amusing take on the apparent system failure that occurred while I was testing it out with assistance from employees of the OC Registrar's office is described as "akin to making an illegal U-turn in front of a motorcycle cop. ... or letting it slip to 'Woodstein' that Tricky Dick audio taped everything in the Oval Office."

His coverage is much briefer than mine. So if you've yet to read my account of what happened and want a more-to-the-point version, please see Coker's piece.

For the record, for those who've asked, no, I've yet to hear back from either OC Registrar of Voters Neal Kelley or from anyone at CA Sec. of State Debra Bowen's office about what happened on Sunday. I've contacted all them via email, with a link to my original article, seeking comment. If I hear back from any of them substantively, of course, I'll let you know.

Guest blogged by Ernest A. Canning

Yesterday, The Post & Courier of Charleston, South Carolina reported that a local "Council of Governments [COG] approved a resolution...asking for the state to audit how its voting machines are working."

The "machines" are the 100% unverifiable ES&S iVotronic touch-screen Direct Recording Electronic (DRE) voting systems.

The Post & Courier not only mentions the fact that state election officials insist that the "iVotronic machines reliably tally votes," but buys into the canard that "increased skepticism" is based upon [emphasis added] "human errors made during last year's elections." It adds that the COG resolution expressed "a concern [that the] voting machines...do not incorporate a 'paper trail' that could facilitate unequivocal confirmation of election results."

If there is any state in the nation that should realize that casting a vote on the ES&S iVotronic amounts to an exercise in blind-faith, with or without a so-called "Voter-Verifiable Paper Audit Trail" (VVPAT), it would be South Carolina...

So I forced myself to take a few hours off yesterday. As too often happens, it turned into a busman's holiday.

We took a trip out to closing day at the Orange County Fair in Costa Mesa, CA, had a great time in the bargain, and even shared a bunch of fun/snarky photo tweets throughout the day (see here, here, here, here, here, here, here, here, here, here, here, here, here, and here if you're interested, or are not otherwise already a Twitter follower of @TheBradBlog.)

It was all fun and games and sassy social observation until we had the good fortune to chance upon a booth being run by the Orange County Registrar of Voters Neal Kelley, where two delightful representatives of the office where on hand to help folks register to vote and to offer a demonstration of the country's 100% unverifiable Direct Recording Electronic (DRE) voting system.

As I would come to learn, the two delightful representatives of the office had no idea that their own e-voting system was actually 100% unverifiable until I explained to them how that was the case. Equally as troubling, as I was testing out one of the Hart Intercivic eSlate demo systems set up for voters to try and learn how to use them, it failed on me while I was running through the demo ballot created for fair goers...one of my selections disappeared entirely...or at least appeared to...

Guest blogged by Ernest A. Canning

Neither the recent claim made by anonymous hacker, Abhaxas, that he/she had hacked into Florida's e-voting database nor the efforts by FL election officials to minimize the breach of its system comes as a surprise to The BRAD BLOG.

In fact, minimization of the vulnerability following the reported hack calls to mind what Roger G. Johnston, Ph.D of the Argonne National Laboratory describes as the Arrogance Maxim:

One would think that Abhaxas had Johnson's Arrogance Maxim in mind. As reported by Doug Chapin of the University of MN, the anonymous hacktivist responded to the official denials by hacking into the FL voting system a second time; posting "a directory listing of the Florida database with the (sarcastic) observation 'Glad you cleaned up, pretty secure now guys'."

As an encore, Abhaxas then hacked into Montana's government website, where he/she exposed 16 databases.

While Chapin acknowledges the vulnerability exposed by the hack, once again, as is his habit over the years, Chapin draws the entirely wrong lessons in pointing to the need for better training and security procedures...

On Tuesday, we highlighted some of the many failures of e-voting systems in the Jackson, Mississippi (Hinds County), metropolitan area during their statewide primary election that day. Apparently enough systems failed, touch-screen systems that simply malfunctioned and refused to allow votes to be cast, names missing from electronic "ballots," etc., that the Clarion-Ledger quoted a senior Democratic party official yesterday offering this remarkable statement:

What? Verify an election before announcing results?! Candidates refusing to concede before that's done?! And how exactly will they be able to "verify" those numbers from 100% unverifiable electronic voting systems? My goodness. It's anarchy in Mississippi!...

[Now UPDATED with tonight's audio archives below!...]

We're back guest hosting for two more nights on the nationally syndicated Mike Malloy Show as the Malloys' summer break continues!

Once again, we'll be BradCasting LIVE 9pm-Mid ET (6p-9p PT) tonight, coast-to-coast and around the globe from the studios of L.A.'s KTLK am1150 in beautiful downtown Burbank. Join us by tuning in, chatting in, Tweeting in and calling in! Our LIVE and lively chat room will be up and rolling right here at The BRAD BLOG, as usual, while we are on the air. Please stop by and join the fun while you're listening! (The Chat Room will open at the bottom of this item a few minutes before airtime, see down below, just above "Comments" section.)

Scheduled tonight (so far):

• TOMMY CHRISTOPHER, online journalist at Mediaite on being scammed by fictional sources in his "WeinerGate" reporting, and on his full-throated defense of Rightwing scam-artist Andrew Breitbart.
• RICHARD AVERETT, author of the new book ImaginePolitik, featuring a fictional character by the name of "Brad Friedman" who instructs a third-party "Independent Progressive Party" Presidential candidate who has just been named President-elect that his "victory" may likely have been due to electronic election fraud on touch-screen voting machines in the state of Georgia! Totally implausible, of course!
• PLUS: The many crimes, "Judicial Insider Trading" and increasingly apparent ethical bankruptcy of Justice Clarence Thomas, plus everything else of note today, including whatever is on your mind via calls to 877-520-1150 and tweets to @TheBradBlog!...

The Mike Malloy Show is nationally syndicated on air affiliates across the country and also on Sirius Ch. 146 & XM Ch. 167. You may also listen online to the free LIVE audio stream at affiliate GREEN 960 in San Francisco or via MikeMalloy.com.

POST-SHOW UPDATE: Tonight's archives follow below, both commercial-free audio and chat room. Enjoy!...

It took two tries, but Carolyn Goodman, candidate for Mayor of Las Vegas and wife of current Mayor Oscar Goodman, was finally able to vote for herself today on Nevada's illegally-certified, 100% unverifiable Sequoia AVC Edge touch-screen voting machines. At least she thinks she did. Whether her vote will actually be counted for her is something that nobody can ever know...

No, it ain't the fingernails, Carolyn. It's the machines.

As we revealed in our investigative exposé in the 2008 book Loser Take All: Election Fraud and the Subversion of Democracy, 2000-2008, and summarized in our article on the Reid/Angle election for U.S. Senator just before Election Day last year, Nevada's Sequoia touch-screen voting machines were illegally certified in 2004 by then NV Secretary of State, now recently-appointed (to take the place of disgraced Sen. John Ensign) NV Republican U.S. Senator, Dean Heller.

The failure that Goodman experienced, and noticed, made her just the latest in a string of celebs and candidates who have had similar problems with 100% unverifiable voting machines --- as still used by some 20 to 30% of voters in the U.S. --- either flipping their votes, or not allowing them to vote at all.

Most famously, perhaps, was Oprah Winfrey, who, during early voting in the 2008 Presidential election, noticed that the computer (also a touch-screen made by Sequoia) had dropped her vote for President all together.

Earlier that same year, during February's "Super Tuesday" primary, then NJ Gov. John Corzine (D) was unable to vote for 45 minutes when Sequoia's AVC Advantage touch-screen systems failed to boot up at all when the polls opened.

During early voting in the 2008 general election, election integrity filmmaker Patricia Earnhardt, executive producer of the award-winning 2006 documentary Uncounted: The New Math of American Elections, which deals, in no small part, with the problems and perils of 100% unverifiable e-voting, saw her own vote flipped on an ES&S iVotronic touch-screen machine in Nashville (Davidson County), TN.

The BRAD BLOG has reported on countless such incidents over the past eight years with little or nothing being done, in most cases, to keep the same failures from occurring again in future elections. Indeed, we wrote an entire chapter about similar widespread failures during the 2008 election cycle alone for Project Censored's Censored 2010: The Top 25 Censored Stories of 2008-09.

One of "favorite" occurrences is what happened to poor Randy Wooten, mayoral candidate of Waldenburg, Arkansas in 2006...

It is now officially impossible to know whether thousands of paper ballots being counted in the state of Wisconsin's Supreme Court election "recount" are the same ones actually cast on Election Day. It didn't have to be that way, unlike in Kentucky, where the voters never had a chance, and where high-ranking election officials have now been sentenced to more than 150 years in federal jail following "decades" of manipulated elections.

Thanks to serious chain of custody violations in Wisconsin --- such as ballot bags discovered to have been left "wide open" and unsealed in Waukesha County, and ballots left completely unsecured for weeks in the office of the Verona City Clerk in Dane County --- that now make it quite likely the real winner of the April 5th election for a 10-year term on the bench of that state's highest court will never be known for certain. That, even though thousands of votes have now been verified as having been miscounted during the state's partial hand-count, and even as the hotly-contested seat in question will determine the ideological balance of the court during one of the most contentious moments in Badger State history.

The majority of voters in Wisconsin cast their votes on hand-marked paper ballots. However, due to a failure to count those ballots publicly on Election Night, at the precinct, in front of the public (as per "Democracy's Gold Standard"), citizens are left guessing and forced to place misguided trust in partisan election officials like GOP activist and Waukesha County Clerk Kathy Nickolaus and her unsecure chain of custody and election reporting procedures.

With results that will never be known for certain, the razor-thin contest has now become a fully "faith-based election," in contradiction to the checks and balances necessary for true self-governance.

But where Wisconsin could have had an overseeable and fully verifiable election in which voters might have had confidence, voters in Kentucky, for years, never even had a chance as they were forced to vote on 100% unverifiable touch-screen voting machines.

The good-ish news? That is changing, as much of the Bluegrass State is finally turning to the use of hand-marked paper ballots, though they plan on tallying them similarly to Wisconsin, via oft-failed, easily-manipulated optical-scan systems manufactured by private vendors, rather than counting them transparently in front of the public.

Given Kentucky's recent history, that's a particularly troubling prospect, as underscored by several developments in two different counties in the state of late.

In 2009, a spate of high-ranking election officials in Clay County, KY --- including the County Clerk, a Circuit Court Judge, the School Superintendent, a former Magistrate, and several polling place officials --- were arrested in a massive vote buying/selling and electronic vote-machine rigging conspiracy which netted the criminals millions of dollars over the past decade. The federal charges included the County Clerk and other members of the Board of Elections having intentionally falsified election reports to include inaccurate voting results when submitted to the state.

One Republican election official pleaded guilty after the arrest two years ago, and the other eight were found guilty and convicted last year in federal court. They were sentenced this past March to a total of more than 1,871 months in federal prison.

And last week, in a separate, newly developing case, state officials impounded electronic voting machines in Perry County, KY, after Republican candidates in last November's election complained of "vote rigging" on the county's 100% unverifiable electronic voting machines...