Vulnerability Assessment Team (VAT) at the U.S. Dept. of Energy's Argonne National Laboratory in Illinois.
Man In the Middle Attack:
What makes this hack so troubling --- and different from those which have come before it --- is that it doesn't require any actual changes to, or even knowledge of, the voting system software or its memory card programming. It's not a cyberattack. It's a "Man-in-the-middle" attack where a tiny, $10.50 piece of electronics is inserted into the system between the voter and the main circuit board of the voting system allowing for complete control over the touch-screen system and the entire voting process along with it.Add an optional $15 radio frequency remote control device, and votes can be changed, without the knowledge of the voter, from up to half a mile away. Without the remote, the attack can be turned on and off at certain times, or by other triggers. The voter would have no idea that their votes have been changed after they've already approved them as "correct" on the various confirmation screens, and even on the so-called "paper-trail"
The inserted chip can later be removed after the election without there being any way to ever know that someone had completely manipulated the system. But since election officials rarely --- if ever --- examine the inside of their voting machines, it doesn't much matter, in truth.
"The level of sophistication it took to develop the circuit board" used in the attack "was that of basically an 8th grade science shop," says Argonne's John Warner. "Anybody with an electronics workbench could put this together."
The team, he says, had no knowledge of the voting machine's computer circuit diagram or owner's manual when they devised the attack. Moreover, VAT team leader Roger Johnston told me they believe they "can do similar things on pretty much every electronic voting machine." Indeed, in 2009, with little fanfare, they were able to carry out a similar manipulation of a Seqouia AVC Advantage e-voting system (as used across most of the state of New Jersey, for example).
Video Demo:
