ESPN College GameDay Contest Halted After Massive Ballot Box Stuffing

ESPN's contest to pick a campus to promote in commercial for "College GameDay" hit a major snag. (Photo by Kevin C. Cox/Getty Images)

Voting in ESPN's College GameDay Campus Commercial Contest was halted Tuesday after a inauspicious first day of voting. Voting was fast and furious in the early stages, and the numbers were staggering. By 11:00 pm Monday night, North Carolina State and Texas A&M were well out in the lead with over 400,000 votes each. For comparison, Nebraska only had 56,771 votes at that point. Was that a sign of the fervor of Wolfpack or Aggie fans? Hardly.

It was a sign of just how badly ESPN implemented this contest. It was just begging to be hacked, and that's just what a few N.C. State and Texas A&M fans did. Within a few hours, ESPN began restricting voting, but the damage was done. Tuesday morning, ESPN completely stopped the voting, posting the following message:

We've Been Overwhelmed With The Fan Response! We're Taking a Time Out to Ensure the Integrity of the Vote. Check Back for Updates.

And voting is still halted at this time. What went wrong?

Simply put, ESPN's web site had bigger holes than Nebraska's defensive line in the 2007 game against Southern Cal. Voting was easy... too easy. Even Chicago election commissioners thought it was a flawed process. You could vote in one of two ways: you could use your Facebook login or provide an e-mail address. Note I said that all you had to do was provide an e-mail address. You didn't have to prove it was your e-mail address - or even prove that it was a real e-mail address. Just give ESPN something that looks kind of like an e-mail address. See the problem?

Gamedayvotes_jpg_medium

So some enterprising script hackers wrote some quick scripts, and fired at will at ESPN's contest. All you had to do was enter an e-mail address and select your school. Easy as pie. All you had to do was change the e-mail address each time you voted. So the first vote was from, oh, bevo1@mackbrown-texasfootball.com. The next vote was from, bevo2@mackbrown-texasfootball.com. And, of course...the vote was for Texas A&M. Start the script, and grab a beverage. Send it to some friends, and let them join in the fun.

In a matter of hours, ESPN shut down the e-mail voting option, but the damage was done. ESPN probably has been spending the last two days trying to do two things: (1) determine which, if any, votes can be salvaged and (2) plugging the hole. The first is probably more difficult, depending on whether ESPN actually bothered to keep any logs of the voting. If ESPN bothered to track which computers generated each vote, it might be fairly easy to filter out all of the bogus votes that each computer generated. If not, it may be impossible to salvage.

Fixing the problem with e-mail is fairly simple. When someone votes with their e-mail address, you simply send an e-mail back to confirm the vote. The e-mail message contains a link, and the voter must click on the link to confirm the vote. That ensures the e-mail address is valid, and it's the voters e-mail address. Is that foolproof? Nope, but it's a start. People can have multiple e-mail addresses, so you have to track voting patterns to identify people with multiple e-mail addresses. You also have to keep an eye out for services that allow you to create temporary e-mail accounts, and have a plan to deal with those.

What's surprising to me is that an organization like ESPN allowed a contest like this to start in the first place. It's likely that the people who set this up had never participated in, let alone actually helped develop, an online contest like this. That lack of experience is another hurdle that must be cleared even before the problems with the contest can be corrected. When the backstory about this contest finally emerges, it's sure to be remembered on future lists of epic failures.

X
Log In Sign Up

forgot?
Log In Sign Up

Please choose a new SB Nation username and password

As part of the new SB Nation launch, prior users will need to choose a permanent username, along with a new password.

Your username will be used to login to SB Nation going forward.

I already have a Vox Media account!

Verify Vox Media account

Please login to your Vox Media account. This account will be linked to your previously existing Eater account.

Please choose a new SB Nation username and password

As part of the new SB Nation launch, prior MT authors will need to choose a new username and password.

Your username will be used to login to SB Nation going forward.

Forgot password?

We'll email you a reset link.

If you signed up using a 3rd party account like Facebook or Twitter, please login with it instead.

Forgot password?

Try another email?

Almost done,

By becoming a registered user, you are also agreeing to our Terms and confirming that you have read our Privacy Policy.

Join Corn Nation

You must be a member of Corn Nation to participate.

We have our own Community Guidelines at Corn Nation. You should read them.

Join Corn Nation

You must be a member of Corn Nation to participate.

We have our own Community Guidelines at Corn Nation. You should read them.

Spinner.vc97ec6e

Authenticating

Great!

Choose an available username to complete sign up.

In order to provide our users with a better overall experience, we ask for more information from Facebook when using it to login so that we can learn more about our audience and provide you with the best possible experience. We do not store specific user data and the sharing of it is not required to login with Facebook.

tracking_pixel_9341_tracker