HOME Seprator ABOUT VeTA Seprator BOOK ON EVM Seprator EVM RESOURCES Seprator PRESS RELEASES Seprator SIGN RESOLUTION Seprator CONTACT US

“3 Idiots” determine Indian election results

Did you know before that India’s electoral democracy is hostage to three idiots? Lest you think that I am being irreverent to the three election commissioners holding constitutional office, let me inform right away that the three people that I am referring to are junior programmers in the EVM manufacturing companies who have written the EVM software or source code that drive all the functions of the EVMs.

This revelation was made by none other than Prof. P.V. Indiresan, chairman of the expert committee of the Election Commission of India at the Electronic Voting Technology (EVT) workshop in Washington, DC yesterday. He told a stunned audience comprising some of the best voting system security experts and computer scientists that the Election Commission of India believes that these junior programmers are honest and trustworthy as they have been told so by the EVM manufacturers namely, the BEL and ECIL. The Election Commission is told that each company has three chaps who have written the software and all of them are trustworthy.

He made these observations in a panel discussion on India’s Electronic Voting Machines at the workshop. I was also a member of the panel at the Workshop besides Dr. Alok Shukla, deputy election commissioner of India and Prof. J Alex. Halderman, University of Michigan, U.S.

Ironically, the EVM software has not been shared even with the Election Commission of India forcing its expert committee to do what is called “Black Box testing.” Is it that the ECIL / BEL do not trust the Election Commission of India – constitutional body vested with the holding of “free and fair” elections – or its experts like Prof. Indiresan but trust these three junior programmers. That sounds like a dangerous proposition.

Several experts at the EVT conference in Washington were horrified to hear that the software is in the hands of a few programmers. They all felt unanimously that this was a scary proposition with dangerous consequences for election results and not a security feature as the as the ECI seems to believe.

Prof. David Dill, Stanford University, one of the best known electronic voting security expert contested the ECI’s claims that it has administrative safeguards and checks and balances that make EVMs “fully tamper proof”. He said, “all voting systems that have been claimed to be secure have been proved to be insecure. And all systems that have been alleged to be insecure by critics have been proved to be insecure.”

“Security through obscurity”

As if relying on the “trust” of three programmers was not enough, the EVM manufacturers have “masked” the software on the microchips installed in the EVMs. This means that even if a “Trojan” (malicious software that can manipulate election results) has been inserted in the software either by the three programmers themselves or their bosses, there is no scope for people to detect it. While the whole world sees this as a security hazard, the ECI has so far claimed this to be a security feature. The EVM manufacturers are trying to claim what is referred to as  “security through obscurity.” In Prof. David Dill’s words, this obscurity is a matter of concern and  actually a cause for raising a red flag.

Can manufacturers of systems be actually manipulating them? Yes. Several experts at the EVT workshop told the Indian participants on the sidelines of the Workshop that there are several instances where the manufacturers of electronic systems are themselves perpetrating fraud. A case study of how electronic gaming companies that claimed  100% security of their systems were later detected to have been engaged in utterly fraudulent operations.

From the facts available in public domain so far, the record of the two public sector EVM manufacturers namely, ECIL and BEL does not appear to be above board. We at VeTA therefore demand that the ECIL/ BEL should come clean on the following immediately:

  1. Who are the programmers who have written the source code for the EVMs? Where are they now? What is their present job and income profile?

As some techies have been approaching politicians offering EVM fixing solutions, I want the ECI to find out the names of these programmers and investigate them thoroughly. The investigation must cover their antecedents and their involvement in any murky financial dealings to see if they have made any windfall gains from their “exclusive” insider knowledge.

  1. The ECIL/BEL must immediately come out with the facts and circumstances leading to the decision to make the EVM software unreadable. Who suggested this? Was this done to prevent detection of any fraud and such that the crime can never be established?
  1. The ECIL/ BEL must reveal why, when and at whose instance they have chosen to engage foreign multinational companies for fusing software in them.
  1. The ECIL/ BEL must reveal the names of its own employees, names of other companies and individuals who have been hired/ contracted as “authorized” technicians for “first level checking” before all elections so far and explain the modalities of their selection and make public the contract documents, letters of appointment etc.

These government owned companies have so far resisted scrutiny. They have to be held accountable and cannot escape scrutiny on flimsy grounds like commercial interests and non-existent patent rights.

We will do everything possible to force these two companies to reveal all the above information. How would we do it? For instance, we would move RTI applications on all these questions, raise these questions in the media and advocate members of Parliament to raise questions in Parliament over the issue.

If the companies still resist revealing information citing commercial considerations, there is just no way left but seek outright removal of the bosses of these companies. After all, the nation’s interests are supreme and these two companies have put Indian democracy at a huge risk of being hijacked by three junior programmers and their bosses.

I can be contacted at nrao@indianEVM.com

This entry was posted on Wednesday, August 11th, 2010 at 10:38 AM and is filed under EVM Vulnerabilities. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

9 Responses to ““3 Idiots” determine Indian election results”

  1. Raghavendra Says:

    Good work Mister Rao, we the people of India are with u in this endeavor to bring in transparency in our elections

    We need to go back to paper ballots so in case of doubt the votes can be recounted manually rather than electronically

  2. narendran Says:

    I suspect I feel the stink of the dead rat in ECIL and BEL wafting through my computer screen. Thank you very much for alerting me and the rest.

  3. HVP Urs Says:

    It is highly irresponsible to make loose statements, without knowing the design background.

    Employees Public Sector Undertakings & their technicians – were a “huge potential source of fraud” – Making such derogatory remarks at a public gathering in Washington, USA (reorted on August 18, 2010)calls for stringent action.

    LET SUCH STATEMENTS ARE BETTER NOT REPEATED.

  4. Narasimha Rao Says:

    Hello hvpurs@bel-india.com

    I would be happy to engage in a dialogue with you if you care to identify yourself. That you are with the BEL is evident from your mail id, but would be nicer if we know who you are, what you do, what you find so objectionable about and what do you mean by this BOLD LETTER THREAT that “such statements are better NOT repeated”. My statements are tempered and carefully drafted. Do you want us to believe that you are a team of angels working on the EVM project and not prone to any temptations and not given to manipulations? We have personal accounts of people claiming to represent EVM manufacturers striking deals for fixing elections.

    You seem to know a lot about the design background that we are unaware of. Do share these details if you think you can convince us. That will mean a healthy debate. Stop throwing SILLY tantrums. YOU WILL NOT SUCCEED.

  5. HVP Urs Says:

    Employees Public Sector Undertakings & their technicians – were a “huge potential source of fraud” was from the following link

    http://www.thehindu.com/news/international/article562910.ece

    “My statements are tempered and carefully drafted. Do you want us to believe that you are a team of angels working on the EVM project and not prone to any temptations and not given to manipulations?”

    YES. We believe in proffessional etics.

    Repeated attempts were made in several courts to eliminate the use of EVMs & failed miserably.

    EVMs are protected by Election Commission & no one can lay hands on it for manipulation.

    “The “Ugly face” of the ECI: Arrest of Hari Prasad for “sting demonstration” “,- When one attempts to get hold of an EVM & manipulate its working to prove that it can be manipulated, outside EC’s domain 7 away from LAW, we get into such problems.

    I am not the designer of EVM.

    “We have personal accounts of people claiming to represent EVM manufacturers striking deals for fixing elections.” – Such staments cannot win TRUST of any LAW abiding citizen.

    JAI HIND

  6. Shan Kumar Says:

    Hi Folks

    I don’t think emotional reactions would give best of the results. Professional people should react professionally to questions raised.

    In an ideal situation, ECI should have come out with a full fledged transparent evaluation of the product. All the loop holes pointed out during such a session should have been fixed and then the machine should have been implemented.

    If the Netherlands and a number of other countries have withdrawn the equipment, it is only right to study why they were withdrawn and if India can do a machine that is tamper proof which others cannot do, then why is it that ECIL or BEL are not having patents for those unique products. You will make huge money across the world. Every one needs such a machine.

    If only you could prove that your machines are different and tamper proof.

    A honest and open study should be carried out. By being opaque, the ECI will only bring in legal intervention. The same is valid for the manufacturers too!

  7. HVP Urs Says:

    http://www.indianevm.com/blogs/?p=387
    In the website, it says
    “Mail (will not be published)”.
    Exactly the opposite is done by GVLN Rao in his reply. (http://www.indianevm.com/)

    Dear Folks – No emotions.

    Real hard facts.

    Ethics.

    Truthful reporting.

    Values…

    ALL THE ABOVE ARE ESSENTIAL

    EVMs have been evaluated thoroughly & nobody could prove a thing all these years.

    Several Elections have been conducted with the entire world watching the process. No one can stuff votes into EVMs, as there are Agents from all the Major Political Parties at all the Voting Booths. Once voting time is over, the EVMs are sealed & guarded till the beginning of counting of Votes.

    There is also recording in the registers the number of votes polled at each polling station.

    Two Manufacturers are involved & they physically look alike from outside.

    No one will know which these machines would be used.

    WHO WOULD BE ABLE TO REPLACE EITHER THE HARDWARE OR EMBEDDED SOFTWARE WHEN THE VOTING MACHINES ARE STORED IN SECURE PLACES?

    Let us be reasonable & honest to ourselves.

  8. lenin Says:

    Dear HVP don’t act as cheer leder or brand ambassador to black box model EVMs.EVMs are not only vulnerable to undetectble fraud they are also dangerous to democracy.Voting process is not for providing emplooyment to PSU like ECIL and BEL which selfdeacare that they are manufacturing worldbest tamperproof machines.WE are all have known they ground realties of voting fraud by doing filed level enquiry.Truth cant be suppressed for ever

  9. EVMs and half-truths – rejoinder to indiresan’s article in hindu | Senthilraja’s blog Says:

    [...] assembly code used in the control chip.  The ECI had said, that the software is written just by 3 professionals and no one else knows the software.  Even ECI do not have the code.  Again, the ECI had conveyed, [...]

Leave a Reply