# Hackers elect Bender to DC School Board **URL:** \ **Category:** Miscellaneous and Personal Stuff I Must Share\ **Created:** [March 4, 2012, 6:04pm UTC](https://boards.straightdope.com/t/hackers-elect-bender-to-dc-school-board/614736 "2012-03-04T18:04:12Z")\ **Posts on this page:** 19\ **Page:** 1
**Author:** ![Tom\_Tildrum](https://avatars.discourse-cdn.com/v4/letter/t/e95f7d/32.png) [@Tom\_Tildrum](https://boards.straightdope.com/u/Tom_Tildrum)\ **Post date:** [March 4, 2012, 6:04pm UTC](https://boards.straightdope.com/t/hackers-elect-bender-to-dc-school-board/614736/1 "2012-03-04T18:04:12Z")
Back in 2010, when the DC School Board adopted new voting software for the upcoming election, they issued a public invitation for hackers to attack it, to test its security and find vulnerabilities. A computer science professor at the Univ. of Michigan and his students took up the challenge. According to a paper that the professor just released, they immediately circumvented the security system, found a file with authentication information for every DC voter, and set them all as votes for [Bender](http://img.tgdaily.com/sites/default/files/stock/article_images/scifi/20110521b_image.jpg) B. Rodriguez, _Futurama_’s “towering inferno of physical perfection.” They even set it up so that later-arriving votes would be changed to Bender, too. They then changed the goodbye screen from “Thank you for voting” to “Owned,” and set it to play the Michigan fight song. Their work went undiscovered by DC’s IT administrators for two days, until another hacker group reported (mistakenly) that the system was secure, but complained about the exit music. Also, while they were in there, the Michigan team noted that the school board’s computers were under attack from Iran, China, and India, and they blocked those incursions. Story [here](http://www.pcworld.com/article/251187/hackers_elect_futuramas_bender_to_the_washington_dc_school_board.html) and [here](http://gizmodo.com/5889838/hacked-dc-school-board-e+voting-elects-bender-president). ---
**Author:** ![Snowboarder\_Bo](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/snowboarder_bo/32/229_2.png) [@Snowboarder\_Bo](https://boards.straightdope.com/u/Snowboarder_Bo)\ **Post date:** [March 4, 2012, 7:36pm UTC](https://boards.straightdope.com/t/hackers-elect-bender-to-dc-school-board/614736/2 "2012-03-04T19:36:38Z")
That’s hilarious. It’s also a great illustration of why we should stick with regular old hardcopy paper ballots, at least for now. ---
**Author:** ![Skywatcher](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/skywatcher/32/254_2.png) [@Skywatcher](https://boards.straightdope.com/u/Skywatcher)\ **Post date:** [March 4, 2012, 7:54pm UTC](https://boards.straightdope.com/t/hackers-elect-bender-to-dc-school-board/614736/3 "2012-03-04T19:54:36Z")
> [@Snowboarder\_Bo](#): > > That’s hilarious. It’s also a great illustration of why we should stick with regular old hardcopy paper ballots, at least for now. I’m suprised you didn’t suggest going down to the quarry and throwing e-ballot systems in there. ---
**Author:** ![Jenaroph](https://avatars.discourse-cdn.com/v4/letter/j/e8c25b/32.png) [@Jenaroph](https://boards.straightdope.com/u/Jenaroph)\ **Post date:** [March 4, 2012, 7:57pm UTC](https://boards.straightdope.com/t/hackers-elect-bender-to-dc-school-board/614736/4 "2012-03-04T19:57:21Z")
Both hilarious and frightening; given that the UofM crowd took advantage of and even repaired some very obvious security mistakes and did them the favor of leaving giant digital graffiti all over the place and still it took two days for them to realize they’d been hacked, what if someone just wanted to quietly change a few hundred votes - enough to realistically swing an election? Think anyone would notice? ---
**Author:** ![booklover](https://avatars.discourse-cdn.com/v4/letter/b/85f322/32.png) [@booklover](https://boards.straightdope.com/u/booklover)\ **Post date:** [March 4, 2012, 8:06pm UTC](https://boards.straightdope.com/t/hackers-elect-bender-to-dc-school-board/614736/5 "2012-03-04T20:06:36Z")
This is hilarious—and being that we are talking about DC employees here, not at all shocking. ---
**Author:** ![Ravenman](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ravenman/32/2929_2.png) [@Ravenman](https://boards.straightdope.com/u/Ravenman)\ **Post date:** [March 4, 2012, 8:19pm UTC](https://boards.straightdope.com/t/hackers-elect-bender-to-dc-school-board/614736/6 "2012-03-04T20:19:29Z")
I _actually_ voted for Bender for school board in that election, and now I know that the election has been _stolen!!!_ I also voted for Ralph Furley for my neighborhood advisory council, Ernie Bilko for at-large city council, and, as is my custom, Gladys Crabtree for mayor. ---
**Author:** ![Caffeine.addict](https://avatars.discourse-cdn.com/v4/letter/c/f475e1/32.png) [@Caffeine.addict](https://boards.straightdope.com/u/Caffeine.addict)\ **Post date:** [March 5, 2012, 2:04am UTC](https://boards.straightdope.com/t/hackers-elect-bender-to-dc-school-board/614736/7 "2012-03-05T02:04:44Z")
Was this just for school board? Does this mean that neither Fenty nor Gray won the election but that Bender B. Rodriguez is the current Mayor of the District of Columbia? ---
**Author:** ![rowrrbazzle](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/rowrrbazzle/32/414_2.png) [@rowrrbazzle](https://boards.straightdope.com/u/rowrrbazzle)\ **Post date:** [March 5, 2012, 7:32am UTC](https://boards.straightdope.com/t/hackers-elect-bender-to-dc-school-board/614736/8 "2012-03-05T07:32:59Z")
> [@](#): > > The team realized the Iran-based hackers were getting in using one of the default admin logins (user: admin, password: admin). Default passwords. Who were the geniuses who did that? The Michigan team should’ve elected Homer Simpson instead, the true role model of the DC “security” team. But the story isn’t quite right. The paper states the hackers had NOT checked for the default password yet. It’s on page 10. [https://jhalderm.com/pub/papers/dcvoting-fc12.pdf](https://jhalderm.com/pub/papers/dcvoting-fc12.pdf) BTW I had a real hard time getting that pdf. The server must’ve been overloaded. ---
**Author:** ![Little\_Nemo](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/little_nemo/32/3120_2.png) [@Little\_Nemo](https://boards.straightdope.com/u/Little_Nemo)\ **Post date:** [March 5, 2012, 8:05am UTC](https://boards.straightdope.com/t/hackers-elect-bender-to-dc-school-board/614736/9 "2012-03-05T08:05:59Z")
> [@Tom\_Tildrum](#): > > Back in 2010, when the DC School Board adopted new voting software for the upcoming election, they issued a public invitation for hackers to attack it, to test its security and find vulnerabilities. Hard to imagine any way in which that could go wrong. ---
**Author:** ![FairyChatMom](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/fairychatmom/32/22080_2.png) [@FairyChatMom](https://boards.straightdope.com/u/FairyChatMom)\ **Post date:** [March 5, 2012, 11:33am UTC](https://boards.straightdope.com/t/hackers-elect-bender-to-dc-school-board/614736/10 "2012-03-05T11:33:08Z")
Is there such a thing as a company you can hire to try to hack your security before you go online? That strikes me as a business opportunity just dying to be launched. ---
**Author:** ![shijinn](https://avatars.discourse-cdn.com/v4/letter/s/cc9497/32.png) [@shijinn](https://boards.straightdope.com/u/shijinn)\ **Post date:** [March 5, 2012, 11:44am UTC](https://boards.straightdope.com/t/hackers-elect-bender-to-dc-school-board/614736/11 "2012-03-05T11:44:26Z")
isn’t that part of the job of the company that runs your security? ---
**Author:** ![GuanoLad](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/guanolad/32/42_2.png) [@GuanoLad](https://boards.straightdope.com/u/GuanoLad)\ **Post date:** [March 5, 2012, 12:09pm UTC](https://boards.straightdope.com/t/hackers-elect-bender-to-dc-school-board/614736/12 "2012-03-05T12:09:28Z")
> [@FairyChatMom](#): > > Is there such a thing as a company you can hire to try to hack your security before you go online? That strikes me as a business opportunity just dying to be launched. And it’d be a great idea for a movie! You could have Christian Slater in it, and maybe Denzel Washington, and one of the cast of _Ghostbusters_! You could call it “_Snoopers_” and it’d be unlike any movie ever made! ---
**Author:** ![FairyChatMom](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/fairychatmom/32/22080_2.png) [@FairyChatMom](https://boards.straightdope.com/u/FairyChatMom)\ **Post date:** [March 5, 2012, 12:38pm UTC](https://boards.straightdope.com/t/hackers-elect-bender-to-dc-school-board/614736/13 "2012-03-05T12:38:23Z")
Cut me some slack - I’m an engineer - what do I know of computer security?? 😛 ---
**Author:** ![Moonlitherial](https://avatars.discourse-cdn.com/v4/letter/m/4bbf92/32.png) [@Moonlitherial](https://boards.straightdope.com/u/Moonlitherial)\ **Post date:** [March 5, 2012, 2:43pm UTC](https://boards.straightdope.com/t/hackers-elect-bender-to-dc-school-board/614736/14 "2012-03-05T14:43:59Z")
> [@FairyChatMom](#): > > Is there such a thing as a company you can hire to try to hack your security before you go online? That strikes me as a business opportunity just dying to be launched. This is what my husband does. Apparently it’s not as fun as it sounds. ---
**Author:** ![TriPolar](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/tripolar/32/3008_2.png) [@TriPolar](https://boards.straightdope.com/u/TriPolar)\ **Post date:** [March 5, 2012, 2:56pm UTC](https://boards.straightdope.com/t/hackers-elect-bender-to-dc-school-board/614736/15 "2012-03-05T14:56:36Z")
Bender is great. They are so lucky to have him. ---
**Author:** ![Eve](https://avatars.discourse-cdn.com/v4/letter/e/9e8a1a/32.png) [@Eve](https://boards.straightdope.com/u/Eve)\ **Post date:** [March 5, 2012, 4:31pm UTC](https://boards.straightdope.com/t/hackers-elect-bender-to-dc-school-board/614736/16 "2012-03-05T16:31:06Z")
> [@Caffeine.addict](#): > > Was this just for school board? Does this mean that neither Fenty nor Gray won the election but that Bender B. Rodriguez is the current Mayor of the District of Columbia? That would explain the recent “Kill All Humans” bill getting passed. ---
**Author:** ![installLSC](https://avatars.discourse-cdn.com/v4/letter/i/54ee81/32.png) [@installLSC](https://boards.straightdope.com/u/installLSC)\ **Post date:** [March 5, 2012, 5:11pm UTC](https://boards.straightdope.com/t/hackers-elect-bender-to-dc-school-board/614736/17 "2012-03-05T17:11:59Z")
> [@Ravenman](#): > > I also voted for Ralph Furley for my neighborhood advisory council This is an obvious case of voters not paying attention. Stanley Roper has by far the better record! ---
**Author:** ![robert\_columbia](https://avatars.discourse-cdn.com/v4/letter/r/e79b87/32.png) [@robert\_columbia](https://boards.straightdope.com/u/robert_columbia)\ **Post date:** [March 5, 2012, 5:12pm UTC](https://boards.straightdope.com/t/hackers-elect-bender-to-dc-school-board/614736/18 "2012-03-05T17:12:05Z")
This just in - “School Children Bite School Board Member’s Shiny Metal Ass. Film at 11.” ---
**Author:** ![Patty\_O\_Furniture](https://avatars.discourse-cdn.com/v4/letter/p/96bed5/32.png) [@Patty\_O\_Furniture](https://boards.straightdope.com/u/Patty_O_Furniture)\ **Post date:** [March 6, 2012, 4:27am UTC](https://boards.straightdope.com/t/hackers-elect-bender-to-dc-school-board/614736/19 "2012-03-06T04:27:25Z")
This would be hilarious if it wasn’t so sad. I worked for the [District’s Centralized IT Agency](http://octo.dc.gov/DC/OCTO/) (OCTO) as the District’s Change Manager until just a few months ago and I never got wind of this. OCTO tried in vain to merge the IT environments of many agencies onto the District’s data center, but failed in most cases. After a while it became clear that there were no real teeth in Fenty’s IT Centralization Mandate. I was OCTO’s program manager for Citywide IT Service Management (providing service desk, change management and asset management platforms to all agencies under the Mayor) as well as the District’s Change Manager for three years and never heard about this voting software implementation. It was like pulling teeth trying to get agencies to bring their service management systems into OCTO’s enterprise platform. Many agencies continued to retain large IT budgets and employ sizable IT staff. MPD, DDOT and DCPS are three good examples. Even after the merger of DCPS OIT into OCTO, schools continued to operate their own IT environment (with the exception of the network and data center, which was OCTO-managed by late 2009. By the way, I’m not sure how PCW arrived at their article headline. I read the UofM’s PDF and didn’t see anything in there about Schools. Perhaps they mistook BOEE as board of ed, or something. I do recognize the people in the data center security cam snapshots though.