Colorado Decertifies E-voting Machines

mamer-retrogamer writes "On December 17, Colorado Secretary of State Mike Coffman decertified election equipment used by 64 Colorado counties, including machines made by Premier Election Solutions, formerly known as Diebold Election Systems. A report issued by the Secretary of State's office details a myriad of problems such as lack of password protection on the systems, controls that could give voters unauthorized access, and the absence of any way to track or detect security violations. Manufacturers have 30 days to appeal the decertification."

Comments

Premier/Diebold decertified or not?

[N7DR]

I couldn't find a confirmation in TFA as to which companies really had machines decertified. Our local (Boulder) paper reported this morning that of the four companies involved, only Premier/Diebold had *no* certification revoked. So that's rather at odds with the summary. Seeing that I couldn't see any confirmation of the summary's statement in TFA, I suspect that the local paper got it right.

Re:Premier/Diebold decertified or not?

[Odin's Raven]

I couldn't find a confirmation in TFA as to which companies really had machines decertified. Our local (Boulder) paper reported this morning that of the four companies involved, only Premier/Diebold had *no* certification revoked. So that's rather at odds with the summary. Seeing that I couldn't see any confirmation of the summary's statement in TFA, I suspect that the local paper got it right.

Looks like your local paper got it right - according to this News Release from the Colorado Secretary of State, the results were:

Premier (formally known as Diebold) All voting equipment submitted for recertification passed.

Sequoia The optical scan devices, Insight and 400-C, used to count paper ballots both passed, but the electronic voting machines, the Edge II and the Edge II Plus, both failed due to a variety of security risk factors, including that the system is not password protected, has exposed controls potentially giving voters unauthorized access, and lacks an audit trail to detect security violations.

Hart The optical scan devices, eScan and BallotNow, both failed because test results showed that they could not accurately count ballots. The electronic voting machine, eSlate, passed.

ES&S The optical scan devices (M 100 and the M650) both failed because of an inability to determine if the devices work correctly and an inability to complete the testing threshold of 10,000 ballots due to vendor programming errors. The electronic voting machine (iVotronic) failed because it is easily disabled by voters activating the device interface, and the system lacks an audit trail to detect security violations.

Maybe the Colorado Sec of State should go read yesterday's 1,000 pages of bad news: Ohio e-voting report released article over on Ars Technica, then chat with the Ohio Sec of State about the EVEREST Testing Reports, which document high-risk issues with equipment from all the vendors that were tested (including Premier/Diebold).

Diary is incorrect

[Phoenix Rising]

Premier systems are the only ones NOT decertified. This is contradictory to every other decertification and audit performed in other states and brings into question the validity of the testing in Colorado.

Re:Obligatory replacement criteria

[Chris Mattern]

(2) Pen and paper voting systems that suffer from numerous problems, such as lack of accountability. No way to tell if the guys collecting and tabulating the ballots were paid to alter the results.

Unless, of course, you have representatives of all the candidates present at all times while the votes are handled. You know, *the way every proper pen-and-paper balloting system works.*

Chris Mattern

Re:I love it.

[jackpot777]

Wonder how often this happens in other industries related to government contracting.

Dig around on SourceWatch. Here's what I found:

BearingPoint was formerly KPMG Consulting Inc., the consulting division of the huge accounting firm KPMG LLP that was brought down in the Enron/Arthur Anderson scandal of 2002. In July of 2003, BearingPoint was awarded a contract by USAID worth $79.5 million to facilitate Iraq's economic recovery with a two-year option worth a total of $240,162,688

Amoco got rid of its company name when it merged with British Petroleum, greenwashing their hands of the Amoco Cadiz oil spill.

Just for the sheer cheek of it all, the Astroturf page gives you cause to ponder at just how amoral businesses can be.

Re:Voting Made Easy, Secure

[richkh]

Canadian Federal election, 2004. Paper ballots. 13.5 million votes. Less than 24 hours for results. It's not that hard.

Re:Try reading it

[baffled]

Ah, you're correct. The AP story is slightly more specific. It appears now that only Diebold machines are allowed, unless the other companies apply some patches. Well now, isn't that interesting. Only Diebold machines allowed.

BearingPoint != Arthur Andersen - you're confused

[Steve Hamlin]

Bearing Point: I realize you're just quoting from SourceWatch, but both they and you have it wrong, and you're removing the limited context that they had.

the huge accounting firm KPMG LLP that was brought down in the Enron/Arthur Anderson scandal of 2002

No, ARTHUR ANDERSEN was the huge accounting firm that failed due to Enron. KMPG Consulting just bought a piece of the corpse: mostly the U.S./Western Europe operations of the business consulting unit of Arthur Andersen (AABC).

More detail:

The consulting division of KPMG-U.S. was spun of as a separate U.S. public company in early 2001. They then started acquiring other consulting companies (some of them from KPMG-Brazil, KPMG-Japan, etc - all separate accounting partnerships that really are not the same company as KPMG-US.)

In addition, they would also buy smaller (non-KPMG branded) consulting firms.

Arthur Andersen LLP had spun off Andersen Consulting in 1989. Again, two separate companies. After that split (and subsequent protracted litigation between Arthur Andersen and Andersen Consulting to the tune of $billions), Arthur Andersen started a consulting divison again, called AABC.

After Arthur Andersen fell apart as a result of Enron, different companies started buying up different pieces of Arthur Andersen - by country and by business unit. In the U.S., AABC that was part of Arthur Andersen-U.S. was purchased by KPMG Consulting, Inc. (the relatively new separate public company).

By this point, KPMG Consulting had acquired tons of firms, people, accounts, etc, and re-branded themselves as Bearing Point.

KMPG != Arthur Andersen

Ample fair warning

[tcgroat]

Here's the regulations (469K pdf) governing the recertification. Neither the recertification nor the requirements is a surprise. This notice is nine months old and resulted from a Denver District Court order issued September 22, 2006 (Conroy v. Dennis, No. 06CV6072, Denver Dist. Ct.). With so much advance warning, no supplier has an excuse for failing certification. The fall-back position? According to the Coloradoan, "...[Larimer County Clerk Scott] Doyle said legislators might mandate a statewide mail-in election next year if problems with electronic voting machines cannot be fixed soon."

Re:Obligatory replacement criteria

[Anonymous Coward]

International election observers have never, so far as I'm aware, in countries such as Canada, which use a standardized pen-and-paper ballot for all national elections. That sentence no verb.