Tue, 29 Jun 2004

IT experts warn of possible hacker on KPU website

Tiarma Siboro, Jakarta

Despite the General Elections Commission's (KPU) claim that vote- counting for the presidential election will be quick, accurate and secure, experts on information technology warn that the KPU website remains vulnerable to hackers.

Onno W. Purbo of the Bandung Institute of Technology and Roy Suryo of the Yogyakarta's Gadjah Mada University even doubted that the KPU could meet its deadline to tally the results, saying "more people will be tempted to hack into the KPU website."

They were referring to the high-profile cyber crime case allegedly committed by Dani Firmansyah and Fuad Nurdin, just days after the general election on April 5.

"The KPU claims that it will complete vote-counting within four days. But, with possible rampant hacking activities, as well as the lack of legal infrastructure on cyber crime, I don't think the KPU can meet the deadline," Onno told a seminar on cybernetics in the general election, held at Paramadina University in South Jakarta.

Roy said hackers may use certain methods to avoid legal repercussions, although they "may not harbor intentions to disrupt the counting process ... (Their motive) may just be to show the public that the expensive cyber project is not secure."

He was referring to the KPU's Rp 152 billion (US$16.5 million) state-of-the-art project, which was introduced ahead of the general election.

Roy said that hackers would likely continue to interfere with the KPU's website until the possible runoff of the election in September -- which would be contested by the top two of the five pairs, if no candidate wins more than 50 percent of some 153 million votes on July 5.

Dani and Fuad claimed to have had hacked into the website on their own initiative and had worked alone, denying any political motive.

"The clever boys simply felt challenged to test their abilities," the police said, even though they eventually charged them with violating Article 22 of Law No. 39/1999 on telecommunications.

The article stipulates that individuals are prohibited from manipulating a telecommunications network, telecommunications service or any special telecommunications network.

If found guilty, suspected hackers could face a maximum sentence of six years in prison and/or a Rp 600 million (US$65,217) fine.