Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×
United States Politics

The 'Vast Majority' of America's Voting Machines Use Windows 7 or Older Systems (apnews.com) 152

Many of America's voting machines are depending on an outdated Microsoft operating system, reports the Associated Press. "The vast majority of 10,000 election jurisdictions nationwide use Windows 7 or an older operating system to create ballots, program voting machines, tally votes and report counts." That's significant because Windows 7 reaches its "end of life" on Jan. 14, meaning Microsoft stops providing technical support and producing "patches" to fix software vulnerabilities, which hackers can exploit. In a statement to the AP, Microsoft said Friday it would offer continued Windows 7 security updates for a fee through 2023.

Critics say the situation is an example of what happens when private companies ultimately determine the security level of election systems with a lack of federal requirements or oversight....

It's unclear whether the often hefty expense of security updates would be paid by vendors operating on razor-thin profit margins or cash-strapped jurisdictions. It's also uncertain if a version running on Windows 10, which has more security features, can be certified and rolled out in time for primaries.

The Associated Press contacted the Coalition for Good Governance, an election integrity advocacy organization, and received this comment from the group's the executive director.

"Is this a bad joke?"
This discussion has been archived. No new comments can be posted.

The 'Vast Majority' of America's Voting Machines Use Windows 7 or Older Systems

Comments Filter:
  • by xack ( 5304745 ) on Saturday July 13, 2019 @02:43PM (#58920518)
    Until Microsoft allows people to disable both in Windows 10 without third party hacks organizations who need to do serious work will stick with Windows 7 or earlier. Microsoft has a large timebomb on their hand with Windows 7, and it's going go to blow up in their faces. Unfortunately organizations have had over two decades to take the Linux pill and they failed.
    • by Anonymous Coward

      this!

      Once my windows 7 "expires" next year it's all linux all the way. The machines, hardwarewise, are totally fine so no need to replace much for next 5-10 years. Already dual boot on all of them. I wish I could put the Windows in a VM though for programs that require Windows. No touchy touchy anything above Windows 7 for me. Even Windows 7 is locked down heavily and only security patches applied. Even after the security patches I have to constantly go over and remove a few things that get "bundled" with n

      • by dwywit ( 1109409 )

        I'm curious - Win7 won't stop working, it just won't get regular patches - unless something really serious turns up, then MS will issue a patch like they recently did for XP/Vista.

        If you're talking about flaws that aren't unearthed and/or exploited until after the cutoff, those flaws are there now - you're operating with those flaws.

        Yes, someone might find a way to exploit them after the cutoff, but still.

        Now, as to election machines - are they running vanilla Win7, or embedded, or a special cut-down versio

    • by jonadab ( 583620 )
      It's more than just that. Seven is a mature product, with a lineage going back all the way to NT3.5. Most of the really serious bugs have long since been ironed out. Ten is based on the much more recent Windows Phone, which absolutely nobody used, and its successor Eight, which barely anyone used either. A lot of people are using Ten now, so it is _starting_ to get the kind of widespread testing NT had back in the Windows 2000 era. But it is not a mature product yet. It's certainly not something I'd b
    • There's a version of windows 10 that reportedly has everything stripped out, because it actually violates a lot of security regs. However it's really hard to get a hold of. You have to register as a corporation or something. It's very hard for an individual to get it and it's still not 100% clear if it really gives total control.

      However, ANY operating system should be sufficient as long as it's properly isolated. Basically, your OS is *ALWAYS* insecure so it should be isolated as such. It's not possible
  • And let's not forget (Score:5, Informative)

    by rsilvergun ( 571051 ) on Saturday July 13, 2019 @02:46PM (#58920538)
    the head of the GOP lead Senate, Mitch McConnell, has blocked all attempts to improve voter security [youtube.com].

    I know folks don't like partisanship, but, well, there are just some issues that are partisan, and this here is one of 'em.
    • Re: (Score:2, Troll)

      the head of the GOP lead Senate, Mitch McConnell, has blocked all attempts to improve voter security [youtube.com].

      Sorry, Jeremy, but if that proposition were nearly that clear-cut you'd be able to present something other than an 18-minute YT video in support (and no, I'm not going to watch through it to try to guess what you think is significant about it).

      [Speaking of unsupported bombast, I'm still eagerly waiting for your response on what exact words are in Comcast's SEC filings that allegedly admits that broadband only costs them $9 a month to provide. It's been around two years with several reminders, so any time n

      • right here [nytimes.com].
        • Couldn't read much in private mode, but it appears you've shifted the goalposts from "all attempts to improve voter security" to "some recent Democratic showboating to try to keep the Mueller flame alive."

          And I think you must have forgotten to paste in the Comcast materials.

          • just in article format. But since you're too lazy to google here you go. [truthout.org].

            Also, how the hell did you get to your allotment of free NY Times articles in a month? Guys like you don't usually stray too far from your usual media outlets.
            • Also, how the hell did you get to your allotment of free NY Times articles in a month?

              You're several months behind. In private mode (as I clearly said), the "allotment" is now zero.

              Guys like you don't usually stray too far from your usual media outlets.

              LOL -- you know nothing about me, Jeremy. Be seeing you....

    • Re: (Score:2, Interesting)

      by Anonymous Coward

      the head of the GOP lead Senate, Mitch McConnell, has blocked all attempts to improve voter security [youtube.com].

      I know folks don't like partisanship, but, well, there are just some issues that are partisan, and this here is one of 'em.

      The Republicans have turned "partisanship" into this derogatory term while being the worst offenders. The FACT is that the Republicans put the party's interests above the country ALL the time.
      If the Republicans TRULY cared about the country, the Constitution, the law and Free Market Capitalism, they'd be impeaching and then doing what's necessary to remove Trump from office.

      The Republicans have proven themselves to be corrupt, liars and traitors to this country.
      Mitch McConnell being on the payroll of Coal

    • by Anonymous Coward
      Mostly related to McConnell and Voting Machine Lobbyists according to: https://readsludge.com/2019/06... [readsludge.com]

      Several Democratic and Republican members of Congress have submitted legislation to shore up election security. Proposals from Sen. Ron Wyden (D-Ore.), Sen. James Lankford (R-Okla.) and Rep. John Sarbanes (D-Md.) include replacing paperless electronic voting machines with hand-marked paper ballots and optical scanners, subjecting voting equipment vendors to rigorous cybersecurity standards, and requiring vendors to report cybersecurity incidents.

      But all the bills have hit a roadblock. Senate Majority Leader Mitch McConnell (R-Ky.) has reportedly told his colleagues that he will not allow the Senate to vote on election security legislation this session.

      ...

      Several of the lobbyists working for ES&S and Dominion Voting Systems have recently made contributions to McConnell’s campaign and joint fundraising committee.

  • What if we... (Score:5, Insightful)

    by rnturn ( 11092 ) on Saturday July 13, 2019 @02:55PM (#58920592)

    ... got over our "need" for immediate election results and just went back to paper ballots. They're easy to create. There's little need for there to be long lines for voters waiting to use a limited number of voting machines---just set up another table. They don't break down in the middle of an election. They don't require electricity. They don't have any backdoors to hack into. They don't cost big bucks to store and keep upgraded. Voting machines have allAh... I forgot. This is /. and it's suppoed to be all-technology-all-the-time and we're a nation of whiny Veruca "I Want It NOW!" Salts that need that instant gratification of having the election results in hand by the time the 10PM newscast airs.

    • by Anonymous Coward

      ... got over our "need" for immediate election results and just went back to paper ballots. They're easy to create. There's little need for there to be long lines for voters waiting to use a limited number of voting machines---just set up another table. They don't break down in the middle of an election. They don't require electricity. They don't have any backdoors to hack into. They don't cost big bucks to store and keep upgraded. Voting machines have allAh... I forgot. This is /. and it's suppoed to be all-technology-all-the-time and we're a nation of whiny Veruca "I Want It NOW!" Salts that need that instant gratification of having the election results in hand by the time the 10PM newscast airs.

      One answer: "Hanging chads". Google it.

      • by kenh ( 9056 )

        One answer: "Hanging chads". Google it.

        That's how we got electronic voting machines.

      • by Solandri ( 704621 ) on Saturday July 13, 2019 @06:26PM (#58921404)

        One answer: "Hanging chads". Google it.

        That's an example of a mistaken obsession with getting "perfect" voting results. You can never make anything infallible. This includes voting. Statistically, a small percentage of people will vote for the wrong candidate (i.e. not the one they intended to vote for). Either they'll mis-read the ballot (google "butterfly ballot"), or they'll mistakenly punch / check / fill in the wrong box. People are human and make mistakes. Even with something as simple as reading numbers from a gauge [hawaii.edu], people will err around 0.5% of the time.

        Once you understand that there will always be a small percentage of voters who make mistakes, that becomes your minimum margin of error. You can never get election results which are more accurate than that no matter how perfect the rest of the voting system is. If you go with the 0.5% failure rate above, that means that the result of any election which is closer than 0.5% will be a coin flip. If you went back in time and held the same election multiple times and everyone (thought they) voted for the same candidate each time, sometimes one candidate would win, sometimes the other candidate would win. Simply because of people misreading or mis-marking the ballots.

        Once you accept that this uncertainty will always be present no matter how well you design your voting system, the obsession with minor errors like hanging chads and unreadable ballots vanishes. If their incident rate is less than the human error rate (which is fairly large), then those errors will not change the election results appreciably. The drive to invest hundreds of millions of dollars into "better" voting machines vanishes. KISS.

        This is why car companies are researching self-driving cars, even though it would mean liability for accidents shifts from the owner/driver to the automaker. Because the human error rate while driving is so high that it kills about 30,000 people a year in the U.S. alone (more than 1 million/yr worldwide). Your automated driving system doesn't need to be perfect. It just needs to be better than people (a fairly low bar) in order to reduce the fatality rate.

    • Ah... I forgot. This is /. and it's suppoed to be all-technology-all-the-time

      Actually, Slashdot has been fairly consistently against electronic voting (this very article being a case in point). If you look, most computer nerds have been, because they're so aware of all the things that can go horribly wrong.

    • Paper ballots need not delay results. Here in Canada we get quick results from paper ballots. How? Massive parallelism. We have a lot of polling places staffed by lots of volunteers.
      • by ahodgson ( 74077 )

        We also only vote on one thing at a time. Americans vote for like 50 things at election time. Sheriffs, district attorneys, county offices, state and federal offices, multiple ballot initiatives. It's awesome but kinda crazy.

        • You write 1, 2, 3; not just X. Avoids vote splitting issues, although it does assume that the population is capable of counting.

          Polling closes 6pm (on a Saturday, not work day) and all votes are counted by hand by about 7pm. And that done in front of scrutineers that check the tally as it is happening.

          We may not have the best politicians, but at least we know they were voted in.

  • offtopic request (Score:5, Interesting)

    by HiThere ( 15173 ) <[ten.knilhtrae] [ta] [nsxihselrahc]> on Saturday July 13, 2019 @03:16PM (#58920666)

    Could there be added a way to hide posts based on a regex of their title? Certain posters have been extremely annoying, but I don't want to stop browsing at -1, because that's where the most interesting posts are.

    Sorry to post off-topic, but I don't know of any other way to make this request.

    • Could there be added a way to hide posts based on a regex of their title? Certain posters have been extremely annoying, but I don't want to stop browsing at -1, because that's where the most interesting posts are.

      Sorry to post off-topic, but I don't know of any other way to make this request.

      get in touch with user rsilvergun. he may develop an addon for mozilla that does that

  • Some perspective: (Score:5, Insightful)

    by xlsior ( 524145 ) on Saturday July 13, 2019 @03:26PM (#58920706)
    While elections equipment and procedures should obviously designed with security in mind, there are a couple of mitigating circumstances in play:

    1) For now (this year) Windows 7 is still actively supported by MS and receiving security updates
    2) Extended support (for a fee) is available for a few additional years after windows 7's EOL
    3) Vote tabulation & ballot creation is typically done on air-gapped equipment in physically secured locations
  • Hackable (Score:3, Interesting)

    by Tough Love ( 215404 ) on Saturday July 13, 2019 @03:32PM (#58920726)

    So, easily and conveniently hackable. Republicans and their despotic friends like it that way.

    • so are paper ballot elections, been ongoing art for over a century. I'm amused at the romantic notions those here have about their "security"

      • Windows on voting machines is roughly akin to leaving your front door unlocked and open at night in downtown Baltimore.

  • Junk the machines and bring back paper and a permanent ink marker.

    It also has the advantage of being the cheapest and quickest solution.

  • Yes, let's focus on this rather than the fact that the votes themselves have no worth in the sense that the representatives represent the interests of big business rather than their constituents.

  • not outdated yet (Score:5, Insightful)

    by iggymanz ( 596061 ) on Saturday July 13, 2019 @04:02PM (#58920870)

    Windows 7 is a current patched OS. Disingenuous to claim it's "outdated". Those who pay can have patches for 4.5 more years.

    • by ebvwfbw ( 864834 )

      Get over it man. Once it's beyond support they don't *Really* support it any more. It's a wink wink... just so we can say we have support type deal. Only if there's a big gaping hole that is discovered, then they - MAY - patch it. Face it, it's a business. It doesn't make economical sense to spend money on it any more.

      Even so, have you seen those contracts? The cost is designed to drive you towards updating.

      It was a huge mistake to go with windows in the first place.

      Should all be FOSS. Base it off of Fedora

      • you're funny, corporations don't pick their software on the bases of "OH MUH OPEN SOURCE RELIGION".

        They have job needing done, application that does that job, and whatever OS will support that they will buy support. The open source world doesn't have a solution for two-thirds of what the business world needs. The money for software support is very tiny compared to the salaries of people needing tools, they don't care.

        • by ebvwfbw ( 864834 )

          ... The open source world doesn't have a solution for two-thirds of what the business world needs.

          It's amazing that I still hear this today. Walmart runs most of their business on Linux. So does wall street. I got into investing and windows is persona non grata. They don't even make software for Windows for a lot of that stuff.

          It was probably stupid managers that decided on winders. Lots of stupid people run winders. Safeway until recently was still running win 95, connected to wifi. Very easy to hack.

          Got a job to get done? Don't use microsoft. If it's worth doing, do it right. I've made lots of money

          • You are ignorant of how the real world works.

            Walmart runs most their business on Linux, except what they run on Windows. The big fortune 1000 run a mix of Unix, Linux, Mainframe, Windows and Office 365 cloud....

            Need to get a job done? Pick the right tool, which may not exist at all on Linux. That's how the real world works. Linux will never run everything, it can't.

  • This can be a big problem if people get into the voting booth and start playing Minesweeper.
  • Free, secure and stable. Upgrades don't break anything.

    • OpenBSD from the time Windows 7 was released was OpenBSD 4.5, which had its support end-of-life on May 19, 2010, and last OpenBSD 4.x ended support on May 1, 2012. So, how exactly it would have been better? Before you think "just upgrade to the latest", for all its flaws, nothing beats Windows as far as backwards compatibility - Windows 10 can still run programs written for MS-DOS!

      • by Bert64 ( 520050 )

        OpenBSD can still run programs written for MS-DOS, in the same way that windows 10 does - through emulation. The difference is that the emulation is an optional extra that's not forced upon every installation because the vast majority of users have no need for it.

Think of it! With VLSI we can pack 100 ENIACs in 1 sq. cm.!

Working...