Susan Pynchon: Diebold in Florida

There's been big questions from the 2000 and 2004 elections about whether the election system is rigged. In the 2004 elections a big sideshow formed around electronic voting machines, especially those from Diebold. The electronic voting systems (a.k.a. touchscreen voting) was supposed to fix the glaring problem with the 2000 election fiasco, which centered on the punch card system. But that's presuming touchscreen voting is the only alternative, which it is not.

"I Saw It Hacked": Diebold in Florida by Susan Pynchon relates a test performed in Leon County Florida of the Diebold voting system installed there. This test has become rather infamous as the "Harri Hursti Hack".

What she describes is a staged test. They ran a small mock election in which Harri Hursti demonstrated a vulnerability with the Diebold voting software.

Her article contains this very powerful paragraph:

And there, on the central tabulator screen, appeared the altered results: Seven "Yes" votes and one "No" vote, with absolutely no evidence that anything had been altered. It was a powerful moment and, I will admit, it had the unexpected result for me personally of causing me to break down and cry. Why did I cry? It was the last thing I thought I would do, but it happened for so many reasons. I cried because it was so clear that Diebold had been lying. I cried because there was proof, before my very eyes, that these machines were every bit as bad as we all had feared. I cried because we have been so unjustly attacked as "conspiracy theorists" and "technophobes" when Diebold knew full well that its voting system could alter election results. More than that, that Diebold planned to have a voting system that could alter results. And I cried because it suddenly hit me, like a Mack truck, that this was proof positive that our democracy is and has been, as we have all feared, truly at the mercy of unscrupulous vendors who are producing electronic voting machines that can change election results without detection.

Okay, so she managed to put together a powerful paragraph, but I don't see her report demonstrating what she claims. Nowhere in her report is this claim substantiated:

However, the Hursti hack is individually significant because the flaw it exposed is a planned vulnerability in the system, not something that is accidentally there. It had to be PUT there (programmed) on purpose.

I work with software and software quality in my job. I know very well that every piece of software has bugs in it. The existance of a bug doesn't constitute proof that the author purposely put that bug there.

She has not demonstrated that Hursti's hack is anything more than a bug in Diebold's software.

It's easy to point a finger at the Diebold corporation and claim they're evil. Their CEO was widely quoted before the 2004 election as boasting about how GW Bush would win the election. And of course it's easy to think, that might not have been bravado, but knowing that he can go in and twiddle the election results and ensure that GW Bush would win the election.

I agree with her theory -- it's very possible for Diebold or any other election hardware vendor to be selling machines which contain backdoors allowing elections to be rigged. For our democracy to succeed we have to ensure that's not the case, and that has to involve independant auditing of the voting machines. The secrecy surrounding the election hardware is troubling as it impedes the public from independantly verifying the voting machines are trustworthy. Unless the people can trust the voting machines, how can the people trust that our representatives were properly elected?

But that's just a theory until you can prove the assertion. In her story she brushes over the proof, jumping from describing the test to concluding that therefore Diebold purposely implanted the backdoor which Hursti walked through.

Search engines cooperating with the police

Microsoft Confirms Turning Over Search Data to Feds: This covers not just Microsoft but the other search engines as well. The story is there's an obscure court proceeding going on, under which the Department of Justice (DoJ) has subpoenad records from the search engines as to search terms. MSN, Yahoo and AOL have apparently cooperated with the request, while Google has refused to cooperate.

Let me bring into the conversation this: Re: Do Internet companies need to be regulated to ensure they respect free expression ? In that case some organization is organizing a move to require "Internet Companies" to impede cooperation with repressive regimes who want to surveil what their citizens are doing. But with this request from the DoJ, I wonder just how you want to define "repressive regime"?

And then we have Microsoft's side: Privacy and MSN Search posted by the MSN Web Search general manager.

As the eWeek article suggests, this is a very worrisome privacy issue. Suppose the government surveillance system were to know about every search query you were to make? It's easy to think you're just searching around the Internet, and the search results are very ephemeral and disappear very quickly. But when you're Googling or MSN'ing or Yahoo'ing, the search engine is able to make a record of your searches. The search engine might even remember searches you did before, the items you clicked on before, and helpfully rank the results based on what you searched for previously. This is information the search engines already collect.

It's important to note that the search engines are unable to identify YOU. Instead they know specific IP addresses, and are able to track which IP address did what. Or, in some cases the search engine installs a long-lived cookie, and with data in the cookie is able to correlate activity you do from day to day even if your ISP gives you a different IP address each day.

The MSN general manager says all they turned over was IP addresses and search queries. No personal identifying data.

It would be up to the government surveillance system to correlate IP addresses with people. This isn't easy, but is doable. For example my ISP assigns me a fixed IP address, and therefore the governmnet surveillance system might have an arrangement to query my ISP to retrieve the identity of people to which specific IP addresses are assigned.

Police store DNA records of 24,000 innocent kids

Police store DNA records of 24,000 innocent kids provides an alarming overview of police surveillance activity in the UK. As the article says "Britain already has the largest network of CCTV cameras in the world", and they intend to go further. The main issue in the article is DNA profiling, where it's known the police have DNA records of 24,000 young people who have never been even accused of anything. Where there's great room for concern, the article claims "most people are already resigned to the whole population having its DNA held in police and government databases". SIGH

The article details several projects which, taken together, amount to the same end goal as the Total Information Awareness System (TIA). Since that's in the UK, this would be the British equivalent to TIA. And perhaps since some aspects of British and American government are joined at the hip, maybe MI5/6 and the NSA/CIA/DOD are working together to implement TIA?

You, the reader, may have believed the TIA project was shut down. What happened is that one of the sub-projects in TIA (it was either FutureMap or Wargaming the Asymmetric Environment) was unveiled to the public, and it offended officialdom, and enough of them went on a harumphing storm that the DoD made a show of shutting down TIA. But it's obvious that most of the subprojects to TIA continued on being funded, as they would be very useful to a surveillance system.

Now, let's go through the projects reported by The Register and align them with the TIA projects which I recorded back in 2002.

DNA Profiling: There isn't a direct analogue to a TIA project. One problem with DNA profiling, however, is the expense of doing DNA testing. Doing a full sequencing of the DNA in a tissue sample currently costs many thousands of dollars. Perhaps forensic DNA testing doesn't do full sequencing, but it still isn't going to be cheap. Be aware, though, that the government is funding research to decrease the cost of DNA testing.

The currently understood methods of DNA testing involve tissue culturing steps. For example, they take a tissue sample, grow a tissue culture in a laboratory, then kill the tissue sample, and study it under microscopes. That means identifying someone from DNA in a tissue sample will take several days.

The Bio-Surveillance project in TIA is very different from any DNA profiling system.

CCTV cameras on the roads and streets: Associated with this is number plate recognition, and face recognition. This is clearly associated with Human ID at a Distance with the addition of number plate recognition.

Implementation involves installing closed-circuit TV cameras (CCTV) in desired areas. The more cameras, the more intrusive and comprehensive is the monitoring system. You might think "oh, monitoring TV is manual, there's going to be a human looking at every video feed". No, if you have a city full of video cameras, there's no way a staff of humans can effectively scan them all. The cameras might be ignored most of the time, and only used when a call arives in the neighborhood of a given camera.

But what's possible is for the video feeds from these cameras to be analyzed by computers. That's what the Human ID at a Distance project is intended to be doing. And face recognition systems have been under test for several years. For example a public test was performed at a Super Bowl game a couple years ago, but apparently the test results were very disappointing.

The technique is to use image analysis to look for patterns that let the computer software zero in on the information of interest. The problem is computers are rather dumb. Human bodies have zillions of years of evolution to our image recognition hardware, and we recognize such things very readily. But computers have only 60 years of development (or so) behind them, and all they can deal with are numbers. It may look like they deal with words, and pictures, and sounds, and movies, and whatnot, but the software developers have to invent ways to turn all that into streams of numbers, because computers only know how to deal with numbers. This makes image analysis tricky.

Take face recognition. There's probably some pattern of pixels that usually indicate a human face. There's a small range of skin pigmentations, and then the shape of a face is generally the same with two eyes, nose, mouth, etc. It's made tricky because faces have a lot of variability, even when there's a lot of similarity. Recognizing license plates (number plates, as the British call them) would be simpler. There's a fairly well known set of colors to look for, and you know ahead of time what shape the license plate will have, and its location on a car.

Once you've got software that can reliably recognize what you're looking for ... car license plates ... you connect a fleet of computers to the CCTV cameras. They'd constantly be looking for motion, when they see motion the software looks for a license plate, and records whatever it sees. Assuming reliable software the computers can register all cars that pass by a CCTV camera.

The next step is to install multiple cameras throughout the city. Each camera gets connected to the computers. The computers register each car that passes by each camera. Or, if reliable face recognition software exists, the computers can also register each pedestrian as they pass by each camera. Hence, these computers could easily track the movement of every car or every pedestrian where-ever they (we) go in the city.

Cool Tool: 1491

Cool Tool: 1491 -- What happened to the native peoples of this land after Europeans arrived can only be described as genocide and ethnic cleansing. There were advanced civilizations, cities, culture, everything. All wiped out because of the arrival of Europeans. Some of it was accidental, due to diseases the Europeans carried for which the native peoples did not have biological immunity. But in many cases it was ruthless cold-blooded murder.

1491 : New Revelations of the Americas Before Columbus

Amazon.com

1491 is not so much the story of a year, as of what that year stands for: the long-debated (and often-dismissed) question of what human civilization in the Americas was like before the Europeans crashed the party. The history books most Americans were (and still are) raised on describe the continents before Columbus as a vast, underused territory, sparsely populated by primitives whose cultures would inevitably bow before the advanced technologies of the Europeans. For decades, though, among the archaeologists, anthropologists, paleolinguists, and others whose discoveries Charles C. Mann brings together in 1491, different stories have been emerging. Among the revelations: the first Americans may not have come over the Bering land bridge around 12,000 B.C. but by boat along the Pacific coast 10 or even 20 thousand years earlier; the Americas were a far more urban, more populated, and more technologically advanced region than generally assumed; and the Indians, rather than living in static harmony with nature, radically engineered the landscape across the continents, to the point that even "timeless" natural features like the Amazon rainforest can be seen as products of human intervention.

Mann is well aware that much of the history he relates is necessarily speculative, the product of pot-shard interpretation and precise scientific measurements that often end up being radically revised in later decades. But the most compelling of his eye-opening revisionist stories are among the best-founded: the stories of early American-European contact. To many of those who were there, the earliest encounters felt more like a meeting of equals than one of natural domination. And those who came later and found an emptied landscape that seemed ripe for the taking, Mann argues convincingly, encountered not the natural and unchanging state of the native American, but the evidence of a sudden calamity: the ravages of what was likely the greatest epidemic in human history, the smallpox and other diseases introduced inadvertently by Europeans to a population without immunity, which swept through the Americas faster than the explorers who brought it, and left behind for their discovery a land that held only a shadow of the thriving cultures that it had sustained for centuries before. --Tom Nissley

A 1491 Timeline

Europe and Asia	Dates	The Americas
	25000-35000 B.C.	Time of paleo-Indian migration to Americas from Siberia, according to genetic evidence. Groups likely traveled across the Pacific in boats.
Wheat and barley grown from wild ancestors in Sumer.	6000
	5000	In what many scientists regard as humankind's first and greatest feat of genetic engineering, Indians in southern Mexico systematically breed maize (corn) from dissimilar ancestor species.
First cities established in Sumer.	4000
	3000	The Americas' first urban complex, in coastal Peru, of at least 30 closely packed cities, each centered around large pyramid-like structures
Great Pyramid at Giza	2650
	32	First clear evidence of Olmec use of zero--an invention, widely described as the most important mathematical discovery ever made, which did not occur in Eurasia until about 600 A.D., in India (zero was not introduced to Europe until the 1200s and not widely used until the 1700s)
	800-840 A.D.	Sudden collapse of most central Maya cities in the face of severe drought and lengthy war
Vikings briefly establish first European settlements in North America.	1000	Reconstruction of Cahokia, c. 1250 A.D.* Abrupt rise of Cahokia, near modern St. Louis, the largest city north of the Rio Grande. Population estimates vary from at least 15,000 to 100,000.
Black Death devastates Europe.	1347-1351
	1398	Birth of Tlacaélel, the brilliant Mexican strategist behind the Triple Alliance (also known as the Aztec empire), which within decades controls central Mexico, then the most densely settled place on Earth.
The Encounter: Columbus sails from Europe to the Caribbean.	1492	The Encounter: Columbus sails from Europe to the Caribbean.
Syphilis apparently brought to Europe by Columbus's returning crew.	1493
Ferdinand Magellan departs from Spain on around-the-world voyage.	1519	Sixteenth-century Mexica drawing of the effects of smallpox** Cortes driven from Tenochtitlán, capital of the Triple Alliance, and then gains victory as smallpox, a European disease never before seen in the Americas, kills at least one of three in the empire.
	1525-1533	The smallpox epidemic sweeps into Peru, killing as much as half the population of the Inka empire and opening the door to conquest by Spanish forces led by Pizarro.
	1617	Huge areas of New England nearly depopulated by epidemic brought by shipwrecked French sailors.
English Pilgrims arrive at Patuxet, an Indian village emptied by disease, and survive on stored Indian food, renaming the village Plymouth.	1620

*Courtesy Cahokia Mounds State Historic Site, Collinsville, Ill., painting by Michael Hampshire. **Courtesy Museum of Indian Arts and Culture, Santa Fe, N.M. (Bernardino de Sahagún, Historia General de las Cosas de Nueva España, 1547-77).

Less waiting, fingerprint check coming to your bank - Yahoo! News

The hook to get us to give up privacy is through dangling convenience in front of us. The common wisdom is it's easier to get someone to do something via bribery than intimidation. It's the old carrot-or-stick approach.

Less waiting, fingerprint check coming to your bank (Jan 19, 2006, Reuters via Yahoo!News!) and via cio.com

The plan is to have RFID chips in some kind of identity card associated with the bank. e.g. embedded in your ATM card. The bank will have RFID readers in the doorway into the bank, and they'll be able to instantly identify which of the people entering the building have accounts with the bank, instantly identify who they are, etc. This will be done simply by reading the RFID chip in the ATM card, running a check in the computers, etc.

The movie Minority Report gives an interesting approximation of how it will work. Except it won't involve retinal scans. Well, not initially. If you remember from the movie, there are several scenes where people are entering a store or other public place, and everybody stops for a moment, looks up, has their eyes scanned, and then a computerized welcoming voice says something like "So nice to see you again Harry" and they enter the store to go about their business.

Radio frequency identification (RFID) is a technology being developed by retailers that should migrate to banks. Customers would be automatically identified by the RFID-encrypted card in their wallet as they pass through the door, prompting a personalised welcome to flash up on a computer screen.

By the time the customer reaches the counter all his or her details are on the screen of the teller, who can discuss specific requirements without asking a lot of redundant questions.

"The bank wants to be able to identify the customer the minute they walk in and understand why they are there," said Mike Redding, head of development for Accenture Technology Labs.

"The most innovative banks will then combine the data they already have and the new information they get and simplify it and make it usable."

RFID is also likely to feature in bank cards, key rings or mobile phones as a payment option. The process is already under way in many countries and oil major Exxon Mobil has issued 6 million SpeedPasses to allow users to pay for gasoline easily at the pump, Redding said.

This will be interesting to see how it plays out.

A couple years ago certain retailers began to put RFID chips in clothing etc. That caused a huge uproar, and so the chips were taken back out. But that hasn't stopped the retailers and others from moving forward with RFID plans. They're just taking this as requiring some finesse to get the public to accept the chips.

For example my employee badge with Sun has an RFID chip in it. The badge gets waved over a reader, and it proactively checks with a computer who I am etc. It's a very short range RFID reader (about 2 inches) but RFID chips can be read at long distances given enough power.

Here's a thought which may be scary. Suppose government issued ID cards (driver licenses, etc) had an RFID chip in them, and they were to install RFID readers in sidewalks, in streetlight poles, etc. If the RFID reader had enough range to read the chip as you drive by, you could be tracked "everywhere". Certainly it would be easy to track pedestrians as they walk around on sidewalks with embedded readers.

There's a whole literature of books and movies about Big Brother (e.g. 1984: book, DVD, Audio CD; Brave New World; Fahrenheit 451) ... these books, and their kin, and the long term popularity of them indicates a serious concern among the people about overly intrusive governments. We value our freedom.

Is this the future we want?

Re: The price of gasoline could get ugly in 2006

The "Hybrid Cars Blog" suggests that in 2006, the price of gasoline could get ugly. That is, the high gas prices seen in the U.S. last year could be as bad, or worse. See: The price of gasoline could get ugly in 2006

The story seems to be that the cause for last years oil price surge can be found in the gap between China having increasing oil use and weather related outages in oil delivery. This year China's surging oil demand is still there, plus we have several possible outages in oil delivery such as "rebels" in Nigeria attacking oil platforms, and the situation in Iran from which there could be several ways oil delivery could be blocked.

While that story is very true, it is also an example of short term thinking.

In the long term picture the price for oil can only go up. In the short term there will be fluctuations, but long term is a different story. Why? It's because the demand continues to go up in an unabated curve, and the Peak Oil scenario is looming out there.

The Peak Oil scenario is a model developed by oil company scientists that describes production capacity over time. The model shows that the world oil production capability will peak. Already discoveries of new oil fields has dried up with discoveries not at all meeting the growth in demand for oil.

UPDATE in December 2006 ... the price for oil and gasoline did get very high up until September. Then it curiously dropped just before the election, and then has curiously risen a little since the election. Makes one wonder if some kind of price manipulation was being tried by the oil industry to prop up the Republicans? If so, it didn't work.

Public meeting on Iraq, Iraq policy, Rep. Murtha, and the possibilities to impeach the President

I just watched a 2 1/2 hour long meeeting recorded from C-SPAN, which I learned about from here: American Foreign Policy, Part Deux. It was an opportunity for Representative Murtha to explain and discuss a proposal he's made to withdraw from Iraq. The Republicans and Neocons have been jumping all over him, calling him a coward, unpatriotic, etc (note: he served in two wars, in the Marines, and has a ream of medals to show for his service). The action towards Rep. Murtha is just following the prior pattern when anybody dares to say the slightest thing against the Administration, that out of the woodwork comes various kinds of attacks and most especially to question the patriotism of the person who made the criticism.

Are so insecure that they can't stand a little scrutiny and criticism ...??

Anyway, here is what Karen Kwiatkowski has to say about the C-SPAN show:

A lot of Americans are waking up to this Part One, as the recent standing room only town meeting co-hosted by Virginia Democrat Jim Moran and Pennsylvania Republican Jack Murtha. Watch the video. It is shock television at its best, courtesy C-span. Murtha and Moran say they want troops out soonest, and both insist we are not building permanent military bases in Iraq. Like I say, it's shock TV - see for yourself!

(The video is linked above -- you will need the Real Video player to view it)

They held a "town hall" meeting that was jam-packed, where they turned away more people than could actually attend the event, etc. It was a very spirited event from what I can tell via the recording.

Rep. Murtha's suggestion is that we should withdraw U.S. troops from Iraq NOW. That we should let the Iraq government take over. That we should keep U.S. troops in the vicinity (e.g. Kuwait), I suppose so that troops are easily redeployed if the situation were to flare up.

I'm not so sure that's a good idea. Much as I am angry over the war in the first place, at how unnecessary it is, how it is a distraction from the real problem, how the administration lied to the world and the American people in order to launch the war, that withdrawing would leave a power vacuum that would simply result in a civil war as the different factions compete with each other to grab all the power. At least, that's what I am afraid of. Which just leaves me highly conflicted because we have no ethical, legal, or moral right to be in Iraq doing what we are doing.

Rep. Murtha also talked at length on the corruption (e.g. "no-bid" contracts which simply means the U.S. is being ripped off by defense contractors) and the horribly underfunded Veterans Administration (paid for by the tax cuts).

Many times the questions were "When are we going to Impeach the President". It was enlightening to hear both Rep. Murtha and Morin basically agree with the sentiment. It's basically been proved that the President and all the Presidents People lied us into this war, that it was premeditated back to 1992 (at least), that it has been horribly mismanaged, that the insurgency that is killing so many U.S. and Iraq people is directly attributable to the mismanagement, that the administration is criminally culpable in this, and that it is a reprehensible situation. Both of the Representatives basically agreed with this, but they kept saying how Impeachment was basically impossible.

They pointed to an investigatory hearing held by Rep. Conyers meant to explore the same issue. He just barely got approval to hold that hearing, in the first place, and the space he was given to hold it was in the basement. Relegated to the basement. See, the practical fact is that the Administrations party controls the Congress, and so long as the leadership is as it is, there is practically zero chance of Impeachment.

What Rep. Morin kept returning to is that we, the people, the ones for whom this most perfect union of a government exists, it is we who need to organize. The solution is in the ballot box, and it is in organizing the democracy for which we stand to stand up and take back the reins of government.