Slashdot Mirror
San Diego Diebold Poll Worker's Report Posted
James Renken writes "I was a poll worker in San Diego for this year's primary election. It was the county's first using Diebold voting machines, and as you may have heard, we ran into some problems! My full report of the goings-on can be found at Live from the Nuke Free Zone. Enjoy!"
Uncle Diebold's Clubhouse
On March 2nd, I was a poll worker for this year's California primary election. More specifically, I was a Systems Inspector in San Diego county, whose problems with voting machines and procedures received some coverage in the national media.
First, a summary of my personal opinion: I think that current electronic voting systems are better than the traditional systems in terms of security, and also in terms of usability for most people. However, I share the opinion of many bloggers that major security issues remain in the new machines and implementations, and that these issues should already have been fixed.
More details below...
This was San Diego's first election using electronic voting machines - specifically, Diebold AccuVote-TSx stations. Previous elections in the county used punch cards. The county failed to make the mandated upgrade prior to the last election, and a federal court ordered that it be done for this primary.
Previously, precinct boards in the county were made up of an Inspector, an Assistant Inspector, and clerks. As of this election, a Systems Inspector and an Assistant Systems Inspector have been added at each precinct. According to the Registrar of Voters, this is because a four-hour training session would have been required in order for Inspectors to learn both the general procedures and how to operate the machines. Instead, most of the technical details are left to the Systems Inspectors.
I was contacted and assigned as a Standby Systems Inspector, meaning that if necessary, I would stand in for a missing Systems Inspector or Assistant Systems Inspector in my part of the county. The standby system is apparently not used very much; they forgot to handle some details, like sending me a copy of the poll worker's manual, or notifying me that the location for the mandatory training had changed. Fortunately, I'm fairly resourceful, and the classes were running late anyway.
In the class, we were introduced to how the system works. Along with the usual paperwork and supplies, each precinct has:
* A Precinct Control Model (PCM).
* A number of voting stations (either four, six, or eight).
* Two Voter Access Cards (VACs) per station, plus one or two extras.
* Two Supervisor Cards.
A poll worker (usually the Systems Inspector) sits in front of the PCM. One poll worker has each voter sign the roster, while another checks the voter's address on another list. That second worker points to the appropriate line on the address list, and the PCM operator sees which party to program a ballot for - with the party name never said aloud.
The PCM operator then selects the party on the PCM's touchscreen, and inserts any one of the Voter Access Cards (VACs) for programming. The VAC is then given to the voter, who inserts the VAC into any one of the stations, and is then presented with the ballot for their party. After casting their ballot, the voter's VAC is ejected, and the voter is instructed to give it back to the poll staff. The VAC itself is not a ballot at all - it just authorizes a voting station to bring one up, and tells it which party's ballot to display. After a ballot has been cast using a VAC, it must be reprogrammed on the PCM prior to being used again.
We were warned that some voters might try to cheat by claiming that they received the wrong party's ballot. We were advised that, should this happen, we should insert the card in a station to make sure that it had not been used to cast a ballot already; then, add one to the tally sheet of programmed but uncast ballots, and reprogram the VAC after checking the voter's registered party on the street address list.
That was about it. We were shown the startup and shutdown procedures for the machines, and cast a few sample ballots with them. The regular poll workers were noted on a list, and some paperwork or other was handled. I asked about getting ahold of a poll worker's manual, and was promptly given one from a large box that was sit
"I think that current electronic voting systems are better than the traditional systems in terms of security, and also in terms of usability for most people."
But how are those Diebold machines at allowing a recount? Do they finally create a paper trail, or is it still "faith-based voting"?
Wouldn't the loser be more likely to complain?
It seems like these Diebold systems have all sorts of features like smart cards and locks that make them look secure, but when you actually kick the tires you realize things are not as secure as they should be.
We'd be much better off with a system that produces prints a human readable and machine readable piece of paper, and then put those pieces of paper into a ballot box. At least, when the security of a box in plain sight gets compromised we know that something happened... the worst case here is swearing in a losing candidate.
So much for progress through IT!
Like Bill Maher said: "Voting with computers used to sound cool and futuristic, back in 1969. Today we know that computers are just big fuck-up machines."
Wouldn't it be your fingers working faster than your brain?
"Ask not for whom the bone bones. It bones for thee." --Bender
Videos and photos of one of Diebold's ATM machines at Carnegie Mellon playing Beethoven today might amuse you.
So, I'm going to argue against the seemingly overwhelming majority of people out there about voting machines.
:)
Yes, there are issues. Are the issues any worse than what can/has been done in the past with non-electronic voting? Probably not. I think that Florida proved that you can tamper with the old system just as well as an electronic one.
Eventually what voting comes down to is trusting that the people who run the system are honest. If you have dishonest people anywhere in the chain; you're going to get bogus results. The only solution that I can see to this issue is that the process must become more open.
1) Diebold needs to modify the machines to produce a printed slip that shows the party X voted for. X is then responsible for ensuring that the slip makes it into the collection basket. Bar codes can be used to correlate votes in the machine and votes on paper, and verify that they match. Because the electronic vote must match the paper vote, and because the user can verify the paper vote themselves, it becomes harder to cheat.
2) Make the vote counting process open. If anyone wants to, let them watch votes being counted. Canada does this, why not? Votes are counted to verify election results. In the event of a discrepancy, the paper votes would be used. The electronic tallies would be used for "quick" results.
Well, it's an idea, anyways
What, me worry?
I just ran into my Assembly Rep., Marc Pocan, who informs me his bill to require a paper trail on electronic voting machines passed the Assembly unanimously. No word on whether it will be taken up in the Senate, as the session is about to wind up. Sorry, no links yet.
We're already safe for this November, as the State Elections Board has not certified Diebold machines, or their competitors.
Ben Masel: 51,282 votes for US Senate in the Wisconsin Democratic Primary
Here are some photos of a crashed Diebold ATM from National City bank. Yep, that's the windows desktop and the college kids who took the photos were controling the machine. Be afraid.
Remember, Americans: Bring your voter registration card, and a sledgehammer for Diebold. They are stealing our freedom to vote, the very democracy over which so much blood has been spilled, and the corrupted political process is encouraging it via awarded contracts and almost silent acquiescence.
This crosses political affiliations and affects all Americans. I strongly believe that this must be stopped it by all means necessary or we will lose the ability to collectively affect the policies of our country, no matter how small your individual voice might be. This is zealous, without a doubt, but not all zealotry is bad. "Extremism in the defense of liberty is no vice."
Live free or die.Does the Diebold do anything to to correct the traditionally crappy choice in candidates? Maybe if it let you create your own cadidate, position by position. Two parts "Simone", a dash of Hal, hmmmm....
Clitmap.com: A better adult search engine
And then you'll have a paper trail
Indefinitely Detained US Citizen
I may be paranoid here of just ignorant of how the final process works, but my biggest fear from these things involves the transfer of the data from the precinct machines back to its central point.
After the machines are dropped off and loaded into the "rented truck" some tech has to extract and accumlate the count data. How easy would it be to alter the counts before the data is transmitted to the central site? Suppose a non tech centric deputy was to oversee the final tally. It might be possible for the tech to alter the counts in plain sight of the deputy without him knowing specifically what's going on.
It's really hard for me to believe with the amount of tin foil programming/tech talent available that these systems have gone into use without something as simple as a printed ballot. There too much black box magic going on in these things for me to trust them...
This never seems to be addressed, but cost.
If these machines are more difficult to operate and more expensive to maintain, and require the hiring of additional personnel to administer, why are they being used?
Paper ballots seem exponentially cheaper in all respects, and I haven't seen a piece of oaktag crash in many years.
I was pissed off to have to use the new machines. I was considering voting absentee on election day (as I read that this would involve a paper ballot), or else making a stink at the voting booth and demanding a paper ballot, but I was really busy, and knew that my votes weren't likely to be critical in this election, so I let it slide.
In a word, the system sucks. From a voter's perspective, here is what happens:
1) Walk in, they ask you for your address and name. No ID requested.
2) Sign your name IN PENCIL.
3) They ask for your party affiliation ("Green" oh that's cute!)
4) They hand you a smartcard.
5) Go to the machine, insert the card, and use the touch-screen to vote.
6) The interface is terrible: Looks like a demo I that someone wrote on the plane ride over to California. Fonts are hard to read, the layout is busy, etc. etc. Other interface bugs I noticed: If you hit the "Next page" button twice, it would blink the button twice, even though only one page was turned. Just crappy UI overall.
7) I was VERY tempted to write in my own name on the "Write in" section for one of the offices. My thinking was that write-in candidates must be public info, right? So I could use this as a sort-of checksum to make sure my ballot was really cast. Make up a fake write-in candidate for an office that I didn't care about, then check the election results later. But I chickened out.
8) The end of the process is the worst: You eject your card from the machine, take it back to the poll worker, who then throws it into the pile of used cards. I was struck by this: was my vote on the card that he had just threw back into the stack? Upon further reflection, I realized my vote was on the voting machine, but the appearance was that my vote had just been thrown away.
Now to be fair, steps (1) and (2) have always been that way. No ID required (for good reason), but why sign your name in pencil?
But the rest of the system did not inspire confidence. It felt very, very sketchy.
I did a search on Money in Politics Database and found 27 records of DIEBOLD employees donating to political campaigns, and 16 of which to the Bush-Cheny 04 Campaign.
Indefinitely Detained US Citizen
As other people have posted here are pictures of a Diebold ATM crashed here on campus that dropped to the Windows XP display. We poked around at it for a while because the monitor was a touch screen (and a very, very crappy one that that). Interesting things:
- Windows media player was installed (as seen in the pictures)
- It's a P4 2GHz with 512mb of ram (wtf?! why on earth does it need that)
- There's a CD-RW installed
- There are two partitions and C: can't be accessed
- There's the standard crap that comes in My Documents (like the Beethoven playing)
- The printer is an Epson USB printer
- There was a device listed for ATM Driver or something, I presume what actually feeds cash.
- We never were able to get the network up, but there's an Intel network card in there.
- For some reason there are speakers so we could hear the Beethoven.
- It's running XP Embedded, didn't catch what version or what patches it had.
- There was some sort of Text-to-Speech (or maybe S-to-T) program
- As you can see Acrobat is installed
- Remote Desktop was enabled! (might have been turned on by one of us though)
That's what I remember from the 5 minutes before running to class.
I was an assitant systems inspector. We had problems as well, but they were not as bad as the article describes. Our PCM didn't boot into the software, but it was an easy fix -- someone else fixed it before I showed up. I actually ended up driving over to the next precinct over to rescue them -- they didn't have any teenagers working there so no one knew how to use a computer. I started poking around the root filesystem looking for a link to the executable. I noticed a directory called "autoexec" so I checked it out only to find that it contained neither the executable nor a link thereto. I finally found the actual location of the executable--it seemed to be on a datacard of some sort--and started it for them. We had one voting maching give a blank page to someone when it was in large print high contrast mode, but we just hit next and it was fine. The worst problem we had was this: At the end of the day we log into the machines with the admin access card and print a report of the vote totals. One of our machines failed to print -- it just cut off in the middle and wouldn't reprint (some paper trail, eh?). In fact, during the training session, I saw one machine print a line of gibberish when instructed to print. Maybe there's a buffer overflow in the print system somewhere. The worst part was that the voting stations give a total number of votes cast onscreen and a total on the printed tape, and on all of our machines but one, these did not match. They were all off by one vote. I got reports of the same behavior from other poll workers at different precincts. I cancelled one ballot that day, so that might explain the one machine with matching totals. Perhaps the total shown onscreen counts the admin login as a vote. At any rate, it's a stupid error. So, that's my story. Now I just gotta wait for the government to send my check...
Diebolds voting technology was actually put to the test by some security experts this year who found that:
- It was an "easy matter," they reported, to reprogram the access cards used by voters and vote multiple times.
- They were able to attach a keyboard to a voting terminal and change its vote count.
- And by exploiting a software flaw and using a modem, they were able to change votes from a remote location.
"Diebold, the machines' manufacturer, rushed to issue a self-congratulatory press release with the headline "Maryland Security Study Validates Diebold Election Systems Equipment for March Primary." The study's authors were shocked to see their findings spun so positively."
The central problem with electronic voting lies not with bugs, hardware failures, or security, but rather than with our modern concept of democracy and where we see ourselves going as citizens of a common nation.
It is clear that present electronic voting efforts are the first step in a general program of transforming voting as we know it into an online, decentralized process, with the final goal being a system where voting is an activity as simple and hassle-free as ordering a pizza or sufing to a website.
Therein lies the problem. As citizens of a common nation, our involvement in the democratic process should be something that brings us together, together with people we would not ordinarily encounter, for what can only be called our sacred ritual of casting votes. A ballot should not be a screen with virtual buttons floating in hyperspace, it should be a hefty card, symbolizing the hefty decision that lies with each voter, it shows our seriousness that decision needs is embodied in the real physical ballots that are carefully tallied and counted and not simply disseminated into electronic bits.
The process of voting should be a little inconveniencing, with voters having to drive to the polling station, stand in line, and punch a ballot. It reinforces our sense of civic pride to have to make a bit of an effort to vote. It demeans the democratic system for the voting process to be allowed to atrophy into a simple matter of point-and-click, no need to get out of your chair. Choosing the laws and leadership of a nation should be an act more involved than switching channels.
When the once-proud rituals of democracy are reduced to a set of simple gestures, once the paricipants in the voting process are reduced to a mass of isolated individuals typing on keyboards or pushing buttons on PDAs, a sense of togetherness is lost. The insiduous decentralization of the voting system that is the end result of electronic voting can only lead to the erosion of our sense of citizenship, of being equal paricipants in something larger than ourselves. Could the erosion of democracy itself be far behind? It seems the dystopian corporate-run societies of so-called "cyberpunk" "fiction" more than just sci-fi.
Does anyone else find it weird that the maker of the horribly insecure "paperless" Diebold voting machines is a massive Bush Campaign contributor?
In Ohio [he] told Republicans in a recent fund-raising letter that he is "committed to helping Ohio deliver its electoral votes to the president next year."
The Aug. 14 letter from Walden O'Dell, chief executive of Diebold Inc. - who has become active in the re-election effort of President Bush - prompted Democrats this week to question the propriety of allowing O'Dell's company to calculate votes in the 2004 presidential election.
O'Dell attended a strategy pow-wow with wealthy Bush benefactors - known as Rangers and Pioneers - at the president's Crawford, Texas, ranch earlier this month. The next week, he penned invitations to a $1,000-a-plate fund-raiser to benefit the Ohio Republican Party's federal campaign fund - partially benefiting Bush - at his mansion in the Columbus suburb of Upper Arlington.
The letter went out the day before Ohio Secretary of State Ken Blackwell, also a Republican, was set to qualify Diebold as one of three firms eligible to sell upgraded electronic voting machines to Ohio counties in time for the 2004 election.
[Link to the story quoted above]
A Q/A transcribed (by me) from the scanned manuals distributed to poll workers:
"what about the issue of Open Source Code?"
Diebold's ballot tabulation source code is checked extensively by an independent testing authority which tests according to voting software standards developed by the Federal Election Commission. Once this test process is successfully completed, the source code is placed in an escrow facility.
Source Code is not open to the public to protect not only the companies intellectual property, but also to prevent the possibility of tampering or other fraudulent manipulation of the tabulation program.
in Georgia, the Secretary of State challenged a citizen to try to tamper with the ballot tabulation program after this citizen made claims about the program's vulnerability. When the citizen learned the source code was not available, she abandoned the effort to tamper with the program.
Enable 3D printed prosthetics!