DEF CON Last year, the hackers at DEF CON showed how shockingly easy it was to crack into voting machine software and hardware. Next week, the 2018 conference’s Vote Hacking Village will let kids have a shot at subverting democracy. Beginning on Friday, August 10, teams in three age ranges, 8-11, 12-14 and 15-16, will be let loose on replica American government websites that report election results. In elections in the Ukraine and Ghana, these were hacked to spread confusion about the voting process and its results – and the village’s organizers hope the youngsters can do the same with US-style tech. “It’s just so easy to hack these websites we thought the grown-up hackers in the vote hacking village wouldn’t find it interesting,” Jake Braun, cofounder of the Vote Hacking Village and executive director of the University of Chicago Cyber Policy Initiative, told The Register. “When I was discussing it with a colleague, they noted ‘it would be child’s play’ and I said ‘good f**king point!’ and started planning the event with the Capture the Packet crew and the r00tz Asylum group, which trains young hackers.”
The websites were built by Brian Markus, one of the best ethical hackers in the US who, when not who running DEF CON’s Capture The Packet competition, runs a security consultancy, has served on the President’s National Security Telecommunications Advisory Committee and develops hacking training materials for the US and Australian military.
“We’re pretty confident that anything he’s going to make is going to be a good replica of the government election results websites,” Braun said of Markus’ work. “He’s certainly at least as good at locking down websites as anything whoever is running the state’s election security can put out.”
In two three-hour contests held on Friday and Saturday the kids will compete to best derail and meddle with the reporting of election results in 13 key US battleground states, which would, in real life, spread confusion and doubt. Prizes will be awarded to the first to exploit a security hole, whoever comes up with the most innovative and best social-engineering exploits, and the youngest to exploit a vulnerability.
“We think kids will come up with creative ways to socially engineer chaos on the results,” Braun said. “We’re hoping to get some ideas from these fresh eyes that are different from the stuff that we’ve been looking at the last two years.”
Full Article: DEF CON plans to show US election hacking is so easy kids can do it • The Register.