Indian EVMs can be hacked by sending an SMS
Professor#-Link-Snipped-#, Assistant professor of electrical engineering and computer science at the University of Michigan led a project that involved connecting a home-made electronic device to the EVM and then altering the results simply by sending an SMS to the electronic device.
The team comprising of J. Alex Halderman, Hari K. Prasad, Rop Gonggrijp from USA, India & Netherlands respectively got access to the EVM through a source who remained anonymous. The team found out that an attacker with brief access to the EVM can tamer the machine and change the outcome of the elections.
#-Link-Snipped-#
Credit: www.indiaevm.org
Abstract of the technical paper presented by the team is as follows -
Elections in India are conducted almost exclusively using electronic voting machines developed over the past two decades by a pair of government-owned companies. These devices, known in India as EVMs, have been praised for their simple design, ease of use, and reliability, but recently they have also been criticized because of widespread reports of election irregularities. Despite this criticism, many details of the machines' design have never been publicly disclosed, and they have not been subjected to a rigorous, independent security evaluation. In this paper, we present a security analysis of a real Indian EVM obtained from an anonymous source. We describe the machine's design and operation in detail, and we evaluate its security, in light of relevant election procedures. We conclude that in spite of the machine's simplicity and minimal trusted computing base, it is vulnerable to serious attacks that can alter election results and violate the secrecy of the ballot. We demonstrate two attacks, implemented using custom hardware, which could be carried out by dishonest election insiders or other criminals with only brief physical access to the machines. This case study contains important lessons for Indian elections and for electronic voting security more generally.
Full Technical Paper is available here: <a href="https://indiaevm.org/evm_tr2010.pdf" target="_blank" rel="noopener noreferrer">PDF</a>
For full demonstration, have a look at following video:
<object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" width="640" height="505" codebase="https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,40,0"><param name="allowFullScreen" value="true" /><param name="allowscriptaccess" value="always" /><param name="src" value="https://www.youtube.com/v/ZlCOj1dElDY&hl=en_US&fs=1&" /><param name="allowfullscreen" value="true" /><embed type="application/x-shockwave-flash" width="640" height="505" src="https://www.youtube.com/v/ZlCOj1dElDY&hl=en_US&fs=1&" allowscriptaccess="always" allowfullscreen="true"></embed></object>