Estonia’s online voting system could easily be hacked by attackers working on behalf of an outside government, researchers have discovered. That’s alarming news considering how much faith Estonia has shown in its e-voting system; it’s the only country that uses web-based voting “in a significant way” for national elections, researchers said in a report published Monday. Other countries including the US have steered clear of web-based voting out of security concerns. And Estonia is a good example of why they’re reluctant to make the jump. After putting together a replica of the Estonian voting setup, a research team found that they were able to infiltrate the voting technology and change the result of an entire election — without leaving any real trace of the digital break-in.
“The Estonian system uses a security architecture that may have been adequate when the system was introduced a decade ago, but it is now dangerously out of date,” said the report authored by J. Alex Halderman, assistant professor of computer science and engineering at University of Michigan, along with several security experts and Ph.D. students. “Estonia’s system places extreme trust in election servers and voters’ computers — all easy targets for a foreign power.”
One method of sneaking in involves planting malware on the home or work PCs used by voters. Malware could allow perpetrators to capture the information stored on individual ID cards and use that information to cast a replacement vote. “This attack could be replicated across tens of thousands of computers, the report warns. At the very least, the findings are enough to cast serious doubt on future elections in the country until security measures around online voting are tightened.
Full Article: Estonia’s online voting system could easily be rigged by hackers | The Verge.