Hackers find flaws in German election vote-counting softwareA trio of hackers has warned that Germany’s vote-counting software is extremely vulnerable to multiple attacks three weeks before the federal election. But fears of Russian intervention appear to be exaggerated.

HACKING THE GERMAN ELECTION


A laptop screen with a jumble of green text (picture-alliance/dpa/H. Fohringer)

Germans got one more reason to be paranoid about potentialRussian intervention in the upcoming electionon Thursday, when a report was published that exposed massive security gaps in the software used to tally the vote counts across the country’s 299 voting districts.

IT specialists Thorsten Schröder, Linus Neumann and Martin Tschirsich analyzed the software PC-Wahl created by vote iT, a German company that claims the organizational software is used in “all the large German states for local district elections, state elections, Bundestag elections, European elections, and referendums.”

The alarming analysis finding a variety of weaknesses was independently corroborated by the hacker organization Chaos Computer Club, which also discovered more flaws.

Creating chaos

The trio of analysts came to the conclusion that while the final election results could not be changed – since they are checked by hand – the on-the-night preliminary results that politicians first react to and are used in the media could easily be altered, potentially creating massive uncertainty in the country.

Russian hackers cartoon

German security forces have warned against Russian hackers affecting the election

“Let’s say we give the AfD [right-wing Alternative for Germany] 20 percent, and all their supporters are celebrating, and then two days later all the people who helped with the election stand up and say, ‘Wait a moment, this is not the result that I counted,'” speculated Neumann. “The officials would have to declare the official result as invalid, and there would have to be another election. We’d probably have people with pitchforks in the streets. Think of the damage that would be done to general trust in democracy.”

Germany’s elections are fairly transparent and analog – voters are only allowed to vote with pen on paper, not with digital voting machines, all counting takes place by hand in the 70,000 or so voting locations, and counting is open to the public.

But when local voting districts pass on their results to the state election administrator, each state has its own rules about how those results are transmitted – either by phone, fax or with computers. They are eventually passed on to federal election administrator Dieter Sarreither.

Spare time hacking

Neumann underlined how easy it had been for him and his friends to hack the software, and added that hackers would only need to begin infecting the relevant computers a few days before the election. According to a report in Die Zeit newspaper, some of the software code was so old that one of the analysts found passwords to parts of it on the internet.

“We did this in our spare time,” he said. “Everybody’s worried about state sponsors and professional hackers – if we can do this in a couple of evenings of sitting around in our apartments, you can imagine how easily this could be accomplished by a state actor.”

The company vote iT did not respond to a DW request for comment, but told Der Spiegel that there were “no security-relevant weaknesses in the software.” Nevertheless, Neumann pointed out that his team had informed the company of its findings — and had noticed that it had since begun to fix them.

Vladimir Putin (Reuters/S. Karpukhin)

Analysts wonder what Putin would have to gain by hacking the German election

“When they now say they are not aware of any vulnerabilities, that is a very questionable statement,” he said.

But what’s the point?

For his part, federal election administrator Sarreither said a Russian attack on the German voting system remained “very unlikely.” That view is backed up by a report in the Süddeutsche Zeitung from late August, which cited internal government analyses saying that a string of public warnings and the ensuing media interest in the issue had “scared the Russians off.”

Mark Galeotti, head of the Prague-based Center for European Security, had a similar take – suggesting that Russia had learned a lesson from theleaks that failed to derail Emmanuel Macron’s presidential election victory in France in the spring.

“I am perfectly willing to believe the Russians have that capability, but it’s harder to see why they might have the intent,” Galeotti told DW. “There is little to be gained and much to be lost by such an adventure. There would be no lasting impact on the outcome, and no obviously Putin-friendly candidate they might hope to elect. Moscow would likely only further harden German attitudes by such a move.”

DW RECOMMENDS

German intelligence services ‘alarmed’ about potential Russian interference in elections

Ahead of 2017’s federal election, the head of Germany’s intelligence agency has raised concerns about Russia intervening in campaigns. Moscow has already been accused of “interfering” in the US and French elections. (16.11.2016)

FIFA condemns Russian hackers after leak of drugs database

Hackers Fancy Bears have released a list of failed drug tests by footballers from 2015 and 2016. They have also leaked the names of 25 players who received legal TUEs before the 2010 World Cup, including four Germans. (23.08.2017)

US lawmakers: Russia trying to ‘influence the US election’ through cyberattacks

Top Democrat lawmakers have accused Russia of trying to influence the US election through cyberattacks. The two House and Senate intelligence committee members have called on Russian President Putin to halt the hacks. (23.09.2016)

German intelligence ‘finds no evidence of Putin disinformation campaign’

Germany’s secret services have found little evidence that the Kremlin is directly trying to manipulate the country’s public opinion. But the leaked government report suggests that indirect methods may be at work. (07.02.2017)

So why did the #MacronLeaks hack fall flat in France?

Cyberattackers appear to have tried to disrupt Emmanuel Macron’s presidential bid by leaking a trove of emails. But the hackers were hamstrung by strong cyberdefenses and French voters’ disdain for foreign meddling. (09.05.2017)

Vladimir Putin’s ‘freelance artist’ hackers

Hardly a day goes by without hearing about Russian hackers. After sparking controversy during the US election, they have been implicated in the Qatar crisis. An IT expert tells DW how Russia became a hacking superpower.

RELATED CONTENT


Why Germany’s culture scene is calling for its own government ministry 31.08.2017

Deutschland Angela Merkel im Barberini Museum

As Germany heads to the polls on September 24, the country’s leading cultural organization is appealing for its own chair at the table – and a swift conclusion to Berlin’s controversial Humboldt Forum museum project.


Angela Merkel’s challenger Martin Schulz unveils plan for ‘modern Germany’ 16.07.2017

Berlin SPD-Kanzlerkandidat Schulz präsentiert Zukunftsplan

SPD leader Martin Schulz has called for Germany to use its budget surplus for domestic and EU-wide investment. The pitch is an attempt to revive the SPD’s chances against Chancellor Merkel in September’s election. 


German intelligence services ‘alarmed’ about potential Russian interference in elections 16.11.2016

Symbolbild Cyberattacke Bundestag

Ahead of 2017’s federal election, the head of Germany’s intelligence agency has raised concerns about Russia intervening in campaigns. Moscow has already been accused of “interfering” in the US and French elections.

Advertisements

About Sylvester

The world will always give you the opportunity to quit. In trying times, too many people quit trying. One of the most powerful success principles ever preach is: Never Give Up!
This entry was posted in BREAKING NEWS AROUND THE WORLD, Naija Info World!, Political News, TECH WORLD and tagged , . Bookmark the permalink.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s