Bush and Kerry sites 'not secure'
Both sites have left themselves open to online "vandalism" because of errors in their scripting codes, Richard Smith says on his site.
Mr Smith says Bush's site uses a third party company to track user habits on the campaign site through web bugs.
Although both sites have good privacy policies, an explanation of why the Bush site makes use of a third party to do this is not made very clear in the statement, claims Mr Smith.
"Both banner ad schemes allow the campaigns to track visitors to web pages where the banner ads appear," explains Mr Smith.
"In addition, the Bush JavaScript scheme allows the Bush web server to run any script code inside of other people's web pages.
"This scheme doesn't strike me as a very good idea from a security standpoint," he says.