Participants in the DEF CON conference held in Las Vegas took less than 90 minutes to crack the used in the US machines for counting votes in elections, reports The Register. Hackers have demonstrated various vulnerabilities in devices of different manufacturers (Diebolds, Sequoia, WinVote, etc.. ), Which were purchased on eBay or state auctions.
For example, some devices could introduce malicious code through open physical ports or an unprotected Wi-Fi connection, a number of machines were running old software such as Windows XP and Windows CE, and also used vulnerable versions of the OpenSSL cryptographic library.
In particular, the specialist Karsten Schurmann managed to remotely access the WinVote device by exploiting a vulnerability in Windows XP. Another system could be remotely cracked using the CVSE-2011-4109 vulnerability in OpenSSL.