Slashdot Mirror


Ohio Study Confirms Voting Systems Vulnerabilities

bratgitarre writes "A comprehensive study of electronic voting systems (PDF) by vendors ES&S, Hart InterCivic and Premier (formerly Diebold) found that 'all of the studied systems possess critical security failures that render their technical controls insufficient to guarantee a trustworthy election'. In particular, they note all systems provide insufficiently protection against threats from election insiders, do not follow well-known security practices, and have 'deeply flawed software maintenance' practices." Some of these machines are the ones California testers found fault with last week.

21 of 91 comments (clear)

  1. With all due respect... this is news? by Slartibartfast · · Score: 3, Insightful

    I think we've seen sufficient evidence that Diebold has been inhaling deeply, if you will. And we, as a relatively technology-savvy audience, are acutely aware of the potential for disaster -- just imagine, if you will, a virus that infects just voting machines. Personally, while it pains me to say it, I think we should stick with the solution we use here in New Hampshire: good ol' SAT-like ballots. Darken the oval next to the candidate's name, and you're done. The Machine will either accept it, or reject it (in which case you do a new ballot, and the old one gets destroyed). Simple, easy, accountable. Yes, being able to use a computerized voting machine for tabulation is incredibly seductive, but voting is already something inherently prone to attempts at manipulation. Let's not introduce yet more potential, shall we?

    1. Re:With all due respect... this is news? by dkleinsc · · Score: 3, Interesting

      The other thing you have in NH (where I used to live and my mother used to practice law) is a highly respected and quite non-partisan Secretary of State, Bill Gardner, who has kept his office throughout both Republican and Democratic state administrations. He's demonstrated time and again that his number 1 goal as far as his duties as an election official are concerned is to get the correct results (meaning the results accurately reflecting the will of the people). He's about as far from Ohio or Florida Secretaries of State when the electronic voting was put in place (Katherine Harris and Ken Blackwell) as you can get.

      In other words, there's a reason why NH's system is so good. Heck, I love a state government where a man I'd gotten to know as an elevator operator was elected to the state House.

      --
      I am officially gone from /. Long live http://www.soylentnews.com/
  2. Wrong! by Tim+Ward · · Score: 5, Interesting

    Whilst I have no faith in electronic systems, I do know about pencil-and-paper elections, having taken part in several in the UK and been on UN election monitoring missions in Kosovo and Ukraine.

    It is perfectly possible to make pencil-and-paper elections secure against the malpractices you suggest, as well as many others that you haven't thought of but the election designers certainly have!

    Even if the entire system were corrupt, in terms of every single person involved in running the election being involved in a conspiracy, there's no way they could hide what they're doing from observers.

    Now, in civilised parts of the world people don't always make use of all their observation opportunities. For example, in the UK the candidate can watch the ballot box being sealed, make a note of the number on the seal, and check that the same seal is still on the box when it is opened later at the counting hall. But we don't bother - we trust the officials, and we've been working for something like 17 hours with another 4 or 5 to go so we take the opportunity to have something to eat whilst the ballot boxes are being shifted around. But, if there were any suspicion that the election officials tampered with the boxes in their cars, we could do this check.

    Oh, and as we all said goodbye to each other when leaving Kosovo the first time we were all calling out "bye, see you in Florida!", including the Americans.

    1. Re:Wrong! by rvw · · Score: 2, Insightful

      What would the impact be of a carbomb going off in one of the vehicles transporting the ballots? If a district were known to be heavily in favor of a certain candidate, wouldn't the destruction of those ballots negate their votes? Let's say there is an accident, not a bomb. The car catches fire, the votes are destroyed. How many votes are in this car? 500? 5.000? I suppose there won't be 50.000 votes in it. Let's say 5.000 votes are destroyed. I think that's a high number (but I may be wrong). You could simply calculate if this would change any of the results. Probably it won't matter if all those votes of this one accident went to candidate A or B. And not all those votes will be for one candidate alone. So if those votes couldn't change the results, the accident is no problem. But what if they could make a difference? The boxes are probably tagged with an id, so they could check which boxes are missing. Then they could have another vote for this district/voting office alone. But maybe the candidates agree not to do this.

      What you're suggesting is what happens if many cars had accidents or were bombed. Then it could seriously influence the elections. But one car won't make much of a difference.
  3. Could learn from Venezuela by Homology · · Score: 2, Interesting
    From Venezuela is Not Florida

    But Venezuela is not Pakistan. In fact, it's not Florida or Ohio either. One reason that Chavez could be confident of the vote count is that Venezuela has a very secure voting system. This is very different from the United States, where millions of citizens cast electronic votes with no paper record. Venezuelan voters mark their choice on a touch-screen machine, which then records the vote and prints out a paper receipt for the voter. The voter then deposits the vote in a ballot box. An extremely large random sample - about 54 percent - of the paper ballots are counted and compared with the electronic tally.
    1. Re:Could learn from Venezuela by Homology · · Score: 2, Insightful

      I read the Newsweek article but is difficult to believe what "mainstream" media like Newsweek write. Too often they are very wrong and just spout out state propaganda justifying whatever upcoming war.

  4. Who cares? by hyades1 · · Score: 2, Insightful

    I don't see what all the fuss is about. When your only choice is between the Democrats and the Republicans, who gives a crap whether the machine you vote on is rigged? It's like being offered a choice of getting thrown in a shark tank or a piranha tank.

    --
    I've calculated my velocity with such exquisite precision that I have no idea where I am.
  5. Power Corrpution Apathy by djfake · · Score: 3, Insightful

    The fact that the US cannot come up with a definitive "voting tabulation method" tells you that the whole thing is crooked from the git-go. And even if we did, we'd still have (at least) fifty different electoral commissions for national elections. Why is it so difficult to comprehend a system that tabulates votes and leaves an audit trail? But what's even more reprehensible is that the majority of Americans don't even consider the integrity of our elections when voting - or do they? The US has one of the lowest turnouts in the Western world (http://en.wikipedia.org/wiki/Voter_turnout). Democracy at its best.

    --
    www.itjerk.com
    1. Re:Power Corrpution Apathy by jc42 · · Score: 2, Informative

      Why is it so difficult to comprehend a system that tabulates votes and leaves an audit trail?

      Actually, that's one of the major difficulties. With an election, an audit trail must have an important property that isn't required by a financial system's audit trail: The audit trail must not expose a voter's actual votes.

      With financial systems, there's no serious problem if the auditing system allows the bank employees to see the numbers in a customer's records. There are even situations where it's considered reasonable for a government agency to access an individual's financial records.

      But with voting, exposing an individual's vote to either election employees or government agencies immediately enables such things as vote buying and vote extortion, which would pretty much eliminate the very reason for having the election.

      The basic principal of auditing financial systems is to have everything stored redundantly in several different forms, with different people in charge of the different kinds of data, and a lot of cross-checking to spot inconsistencies. This does entail a minor problem of exposure of the data to the outside world, but that's not considered fatal, and can be mostly controlled by fining the people responsible for the exposure. With voting systems, none of this is true. Exposing the votes is a fatal flaw, and the people responsible are very rarely punished. All too often, they're the ones who end up running the government.

      It's sorta tricky to come up with an election auditing system that keeps votes secret, while verifying that those votes are accurately counted.

      --
      Those who do study history are doomed to stand helplessly by while everyone else repeats it.
  6. Don't Worry Guys! by DeeQ · · Score: 2, Funny

    Your vote counts! Just not necessarily who you wanted it to count for.

  7. Re:Right... "election insiders"... by Opportunist · · Score: 3, Insightful

    First of all, if you think the people managing the booth aren't trustworthy, offer to do it yourself. I honestly see no reason why you shouldn't be able to do it.

    And second, yes, a meteor striking or a truck crashing the voting site would certainly crush a voting booth. But since it's as likely as me getting abducted by aliens, I'm actually willing to take that risk.

    I'm honestly amazed how people keep using incredible horror scenarios as an excuse for something not working (or, in case of terrorism, being necessary), without even considering that it's so unlikely that it doesn't matter at all. There is a minuscle chance that you die in the shower from lightning or some other freak accident, does that mean you don't shower anymore now?

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  8. Re:We have the technology to do this right.... by Opportunist · · Score: 4, Insightful

    I don't have to trust ATM machines. I have a full paper trail from the moment I get my money to the moment I get my statement. I punch in my desired amount, I get money. I can count that money and verify that it is as much as I wanted. I get a recept, stating the same. And a day later I can see on my account info that the amount was deducted from my account. And I can verify every single step thereof, and should there be the slightest discrepancy, I can immediately notice that.

    Now, how should I notice whether my vote has been counted correctly or whether it has been twisted around?

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  9. Re:Right... "election insiders"... by BadAnalogyGuy · · Score: 2, Insightful

    So if there is a miniscule chance of these horror scenarios occuring, then what's to say that your (meaning "security experts") horror stories regarding voting booth irregularities aren't just another bunch of horror stories to be tossed aside as statistical anomolies? If we are going to say that deliberate tampering is a big problem with electronic voting booths, then how can we overlook the deliberate tampering with non-electronic systems?

    We've been blessed with a populace who is generally honest enough that we aren't plagued by voter fraud that has any sort of significant influence on the outcome of elections. The reason for this is simple, anyone with enough ability to undertake a plan of that sort of enormity will eventually realize that the cheapest way to influence an election is physical removal of opponents.

    (p.s. Hi, NSA Guys!)

  10. Re:Computers just aren't ready by Opportunist · · Score: 2, Interesting

    If it is actually a two party system, it makes sense. You can pick the party that supports your ideals better. What the US suffers from, though, is having two parties that are almost indistinguishable from each other. And there I have to agree, it doesn't matter which one you pick.

    It reminds me of the old Hungarian joke from the times of Communism. Back then, Hungary brought up something stunningly progressive for elections: Two candidates. Sure, both from the communist party, but there were actually two candidates on the list. Yes, that was considered a huge leap forwards in terms of democracy.

    The joke runs like this: A man comes into a shop selling vases. There has always been one rather shabby red vase on display, now there are two shabby red vases on display. He asks for a vase and instead of getting a shabby red vase handed the salesperson proudly gestures to the two vases. "But they're identical! And identically crappy!" the customer exclaims. "Yes", says the shop owner, "But you have the free choice!"

    This is how I feel about US elections these days.

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  11. Various frauds ... by Tim+Ward · · Score: 3, Interesting

    Loss of car

    What would the impact be of a carbomb going off in one of the vehicles transporting the ballots? If a district were known to be heavily in favor of a certain candidate, wouldn't the destruction of those ballots negate their votes?

    Depends.

    Round here, in a local election there are three ballot boxes for my ward, and they are probably transported to the count in two cars. The loss of any one of those boxes would clearly invalidate the election. Whether the election would have be run again in the entire ward, or just in the area(s) for the lost box(es) I don't know, but I think "the entire ward" would be a good guess.

    For a parliamentary election, there are around forty ballot boxes for this constituency. If one box were lost, and that box held, say, 1,500 ballots, and the count of the remaining boxes gave someone a majority of, say, 4,000, then the result would be clear without that box. Otherwise I expect that again the entire election would be re-run.

    (A car transporting me to a polling station, of which I was in charge, in Kosovo broke down. I finished the journey sitting in the back of the van that our armed guard was driving. A novel experience for a Brit - most of us can go through life never seeing a real live gun, and having one a few way away from you is a bit weird.)

    Publicity for false election day

    Dunno about the American South, but round here that's something I'm pretty sure would go through the courts, with a re-run of the election a possible outcome.

    Company pressure

    There's no way you can have an "informant watching the polls" in a propery run election. Everybody in the polling station needs to have a good excuse ... and being the candidate's officially appointed observer is a good excuse, so each candidate can have someone watching inside each polling station for any bad goings-on. Your putative "informant" might be able to gain entry to the polling station but wouldn't be able to watch people marking their ballots, as there would be too many other people watching them in turn.

    Now, this sort of buying / forcing votes is possible with postal votes - your crooked employer could lean on his employees to request postal votes and then hand over the ballot papers. There isn't an answer to this, which is why we (my party) really don't like postal votes very much, other than for the traditional good reasons (housebound etc).

    (This sort of employer pressure was thought to be widespread in the Ukraine election that was re-run because of the various complaints. I went to the Boxing Day re-run (a novel way to spend Christmas away from my family) and we were told that the employers hadn't applied any pressure the second time round, basically everybody involved had decided to stop trying to cheat and to hold a clean election.)

    if we can't actually verify that each vote is registered

    Do you mean voters who don't make it onto the electoral register? Yes, that's part of the wider system rather than polling day security. There's two theories about natural safeguards here:

    (a) candidates will make efforts to get everybody onto the register
    (b) actually it probably doesn't matter that much, as someone who can't be bothered to get onto the register is quite likely also somebody who can't be bothered to vote, so who cares.

    And there are plenty more ways of gaming elections you haven't thought up yet ... and the system has thought them up, and has safeguards in place ...

  12. Re:Right... "election insiders"... by Goaway · · Score: 3, Insightful

    Whether you set up the process with electronic voting or you use old fashioned paper slips, someone somewhere can either cause votes to disappear or have extra votes sent to a certain candidate. It doesn't matter what system is in place. Yes, it does matter what system is in place. Namely, the system where elections are handled by volunteers, and you never leave any part of the process in the hand of a single person, nor do you let people pick their own tasks. You just make sure that chances are that there is always one honest person in place at each step.

    And you have routines in place for dealing with what happens if votes are lost in an accident, such as re-doing the election.

    This isn't difficult stuff, it's been worked out centuries ago.
  13. Re:We have the technology to do this right.... by dupup · · Score: 3, Insightful
    ...or do you not trust ATM machines?

    When you undertake a transaction with an ATM machine, the machine is just the conduit to the bank. You're trusting in the bank's paranoia about money to keep everything square. And the bank provides sufficient paperwork and even a dispute resolution process in case of a discrepancy. The ATM does not balance your account nor even decide if you have enough money to withdraw, the bank does. Before Diebold set about fixing^H^H^H^Hmaking voting machines, they made ATMs.

    With electronic voting machines, though, there isn't the equivalent of the backing bank in which you can trust. The intelligence, if you will, is in the ATM machine alone, something the bank would never allow. It's like assuming that the pen with which you sign a contract somehow guarantees your rights in the deal. It's not the pen, it's the court system behind the pen.

  14. re:power corruption apathy by ed.han · · Score: 3, Insightful

    why is it so very gorrammed hard to follow the method used in india (http://techaos.blogspot.com/2004/05/indian-evm-compared-with-diebold.html)? is that so very difficult?

    i think it's pretty clear that american manufacturers of e-voting devices are either unforgiveably incompetent or deliberately introducing devices with obvious non-security. i'm not sure which prospect i find more troubling, but to be honest, what i find even more troubling is the fact that the media largely appears to be ignoring the matter.

    ed

  15. Re:Computers just aren't ready by Smidge204 · · Score: 3, Interesting

    Instant Runoff Elections solve this problem.

    Vote for your third party candidate as #1 then you can avoid "wasting" your vote by ranking the others. If your #1 choice doesn't make it, then at least you still have a say in the remaining candidates.

    Most importantly, everyone can see how many people voted for your third party, since nobody will vote for a more popular party as #1 thinking it would be wasted.
    =Smidge=

  16. Buckeyes are so dumb anyway by xjlm · · Score: 2, Funny

    I can't really see where this matters. Two groups of lying thieves, take your pick. It's kind of like George Carlin says, "It's their club, and you ain't in it. It's the same club they beat you over the head with."

    --
    The Tea Party is just the GOP with a bag over its head.
  17. Re:Voting is a joke on basic principles! by Attila+Dimedici · · Score: 2, Informative

    Sorry, you obviously are a product of the modern educational system. The Founding Fathers actually thought this through, that is why the Constitution is written the way it is, with the various provisions and the Bill of Rights. Or as Winston Churchill once said, "Democracy is the worst form of government, except for all the other ways that have been tried."

    --
    The truth is that all men having power ought to be mistrusted. James Madison