Haha, I was contemplating posting this myself to HN, but since I don't have a blog where I could do a writeup and collect some links, I decided not to.<p>For those that are confused, Sweden does not have electronic voting, and you can vote for anything, not just registered political parties. There's no list of parties where you are supposed to mark one, instead you get an envelope, and put in a ballot paper that contains the name of the party you are voting for. Normally you get a pre-printed one from the party you want to vote for, but you can also take a blank one and write whatever you want on it.<p>Any ballot with something written on it is a valid vote which has to be counted and becomes part of the official election result. Since a few years back they started publishing these results on the website of the election authority, you can see the 2006 results here: <a href="http://www.val.se/val/val2006/slutlig/R/rike/roster.html" rel="nofollow">http://www.val.se/val/val2006/slutlig/R/rike/roster.html</a><p>The list of votes for registered parties that did not gain any seats are here: <a href="http://www.val.se/val/val2006/slutlig/R/rike/ovriga.html" rel="nofollow">http://www.val.se/val/val2006/slutlig/R/rike/ovriga.html</a><p>And finally, the list of write-in votes for non-registered parties is here: <a href="http://www.val.se/val/val2006/slutlig_ovrigt/handskrivet/R/index.html" rel="nofollow">http://www.val.se/val/val2006/slutlig_ovrigt/handskrivet/R/i...</a><p>So given this, it was just a matter of time before someone would use their vote to see if they could do a pen and paper scripting attack. :-)
I didn't get it. I'm assuming the majority of the people voted electronically. So, are these votes the traditional ones? If so, why do they allow a text area on it? Is the person supposed tho write the name of the candidate instead of selecting it from the options available?
What's with the XKCD reference? SQL injection and XSS existed long before Munroe made a half-decent joke about it. I see no reason why we should assume the author reads XKCD.<p>Edit: Sorry, I meant author of the blog post. I know the HN title style guide.