Yeah, I know this subject is old news - but the Ohio Secretary of State's 334 page report (pdf warning) remains a scary thing. Here are the highlights:
The EVEREST report was released Dec. 7 and (Larry Dignan) found it via Slashdot. Overall, the report really raises questions about election systems. Buffer overflows, leaky encryption, audit problems and firmware issues abound. One machine, the M100, from ES&S accepts counterfeit ballots. The Premier AV-TSX allows an unauthenticated user to read or tamper with its memory. The Hart EMS has audit logs that can be erased.
Source: ZDNet, Larry Dignan's blog: 2008: The year of hack the vote?
Of course, 2000, 2002 and 2004 were probably the real "hack the vote" years - but this is scary stuff. The most frightening thing, of course is that the various state and local government put these things into use without the most elementary security testing. I guess they figured on never losing another election...