HAVA

Can Open Source Save Democracy? No, Says Bev Harris

Originally published at Blackboxvoting
Discussion: http://www.bbvforums.org/forums/messages/8/80688.html

By Bev Harris
Founder, Black Box Voting http://www.blackboxvoting.org

Quite a wave of PR pieces have come out in the past few days about a new open source voting system -- NOT from Alan Dechert's well known Open Voting Consortium, but instead from an upstart, loosely connected to the Electronic Frontier Foundation, and several cronies of the Holt-Bill-pushing verified voting fans.

So let's talk about this. I'm going to link you to Michael Hickens' piece, one of the many bloggers who jumped on this bandwagon. His article is headlined "Can Open Source Software Save Democracy?"

SHORT ANSWER: NO.

Before I get to that, and before outlining my concerns with the new "Open Source Digital Voting Foundation" concept, I'll point out that:

(1) THIS IS NOT ON THE IMMEDIATE HORIZON. The federal certification process takes two to three years

(2) Though not covered by U.S. antitrust laws, THIS IS STRUCTURED MUCH LIKE ANOTHER MONOPOLISTIC GRAB FOR U.S. ELECTION PROCESSES. This new group claims to have 26 states on board (though I doubt this) -- that would give a horizontal monopoly of over 50% of the USA; the "top to bottom" design also invokes vertical monopoly concerns, in that it wants to have the software control voter registration, ballot design, ballot counting, and even election auditing.

CAN OPEN SOURCE SOFTWARE SAVE DEMOCRACY?

Counting votes inside computers conceals the counting from the public. If key processes are concealed from the public, you no longer have public elections. If you don't have public elections, The People no longer hold sovereignty over the instruments of government they have created, and it ceases to be a democratic system.

The core issues are not "security" or "assuring the public" as the author of this blog assumes. The ultimate issues are public right to know, and public ability to understand their own election without need for special expertise, and public controls. You cannot achieve these simply by replacing proprietary software with open source software.

Open source software DOES achieve two worthwhile things, though it doesn't solve our current elections problems. It does enhance our ability to get freedom of information requests filled, by eliminating the proprietary exemption, and it should significantly reduce cost. But costs are also reduced significantly by public hand counts, which, when done correctly, actually do restore democracy.

Case in point: Marion County, Indiana is conducting its next election by public hand count. This is a large jurisdiction (Indianapolis). The ballot is a small one, just four ballot questions. This will provide an excellent pilot project example for expansion of hand counts, beginning with elections with only a modest number of ballot questions. Marion County estimates that all together, it will save $288,000. In fact, the cost of just delivering the voting machines (be they open or closed source) was estimated by Marion County to be $22,000!

The German high court recently banned its e-voting system because it conceals the counting from the public. Open source changes this not a whit. Instead, Germany is now counting in public, by hand.

TWO MORE HALLMARKS OF PUBLIC ELECTIONS:

(1) The less centralized, the better (the more people, the better, the "many eyes" safeguard);

(2) the public needs to be able to understand how the election works, and be able to authenticate it, without need for special expertise.

IS THIS WHAT THE SENATE HEARING ON THE ES&S MONOPOLY IS LEADING TO?

You've gotta wonder. The acquisition of Diebold's elections division by Election Systems & Software, giving it 75% of the horizontal market and a vertical monopoly as well, is being questioned by a U.S. Senate committee, but the committee chosen is a bit odd: The Rules Committee. One might expect to see this investigation taken up by the Judiciary Committee (after all, monopolies are illegal and are typically investigated by the U.S. Dept. of Justice); or perhaps the Commerce Committee ... but the Rules Committee?

On this Rules Committee are the two key Senate pushers of forced voting machine purchase, Help America Vote Act sponsors Chris Dodd and Mitch McConnell. If only they had Steny Hoyer, they'd have the trifecta. Chairing the committee is Charles Schumer, who is now pushing an unwise Internet Registration bill (and Internet registration happens to be one of the areas this nifty new Open Source Digital Voting Foundation claims to be developing).

At first, after looking at the makeup of the senate committee undertaking the antitrust examination, I thought maybe they'd be using this as an excuse to expand the powers of the EAC. Now I expect the real reason these particular senators grabbed this particular investigation was to push an open source agenda -- but not just any open source agenda.

One particular open source agenda. The specific well oiled machine produced by a bunch of the folks who had been associated with the Quixote Group, who also have been associated with pushing the Holt Bill; those folks chummy with the multi-million-dollar NSF-funded ACCURATE. Always covered by Kim Zetter at Wired News. Usually pipelined in to the New York Times Editorial Page.

By the way, not all the "open source" code is being released.
And the only comment I can offer for that is:  Strange, but true.

Now, here's one of the blogs on this:

Information Week Government Blogs
Oct. 26, 2009, by Michael Hickens

http://www.informationweek.com/blog/main/archives/2009/10/can_open_sourc...

Can Open Source Software Save Democracy?


State Voting Machine Requirements Relative to Federal Testing and Certification

Source: Election Assistance Commission

State Requirements and the Federal Voting System Testing and Certification Program

Download Complete 50-State Report

How to Use This Guide

Introduction:
Section 311 of the Help America Vote Act of 2002 (HAVA) requires the U.S. Election Assistance Commission (EAC) to periodically adopt standards for voting systems in the form of Voluntary Voting System Guidelines (VVSG). Section 231 of HAVA further requires the EAC to provide for the testing, certification, decertification, and recertification of voting system hardware and software to these Federal standards.

To accomplish this goal, HAVA requires the EAC to develop a program to provide accreditation and revocation of accreditation of independent, non-federal laboratories to test voting systems. In this way, the EAC’s Certification Program provides (1) Voluntary Voting System Standards, (2) voting system testing by accredited laboratories, and (3) voting system certification.

Participation in these EAC programs is strictly voluntary. However, some states have, through legislation or administrative rules, mandated participation in EAC’s Testing and Certification Program in varying degrees. Currently, 35 states mandate some element of EAC’s Testing and Certification Program.

This document consists of a summary table, a fact sheet for each state, territory, and the District of Columbia, and an appendix of state statutes and administrative rules.

Methodology:
The purpose of this document is to provide a broad overview of the degree to which states have (though statutes or administrative rules) mandated the use of EAC’s Certification Program. In looking at state requirements in this area, it was apparent that states took varying approaches in what they required and the language used to require it.

Because of the diversity of approaches taken by the states, it was difficult to develop a document that could serve as a useful tool in understanding the big picture. To address this issue, EAC staff classified each state’s requirements into four groups:

(1) No Federal Requirements
(2) Requires Testing to Federal Standards
(3) Requires Testing by a Federally Accredited Laboratory
(4) Requires Federal Certification.

These classifications required staff to review each statute and make a determination based upon its plain language. In each case, the language of the reviewed statutes and regulations is provided so that readers can make their own determination about the effect of the jurisdiction’s statutes and/or regulations.

Please note that this document is meant to provide a general understanding regarding relationship between state and Federal certification. It is not meant to provide a definitive interpretation of state law. The EAC recognizes that such interpretation is not the purview of the Federal government. This document is not intended to provide an authoritative interpretation of state law.

In viewing each category, it is important to note that the classification only reflects state statutes and regulations. It does not address policy or practice. The fact that a state has not statutorily mandated the use of EAC’s Certification program does not mean that they do not utilize the program. For example, we noted that some small states, which have historically relied on national certification, are not required to do so by their jurisdiction’s statutes or regulations.

It is also important to remember that classification is based upon a narrow interpretation of the state requirement, not necessarily on intent. For example, when a state required voting systems to be certified by an accredited laboratory (as opposed to the EAC), staff read this requirement only as requiring testing by Federal laboratories and not requiring Federal Certification. Description of Categories: EAC staff reviewed statutes and administrative regulations for all states, territories, and the District of Columbia to determine what level of participation each may require regarding EAC’s Testing and Certification Program.

The following is a description of each category:

1. No Federal Requirements:
Relevant state statutes and/or rules make no mention of any federal agency, certification program, laboratory, or standard.

2. Requires Testing to Federal Standards:
Relevant state statutes and/or rules require testing to Federal voting system standards (states reference standards drafted by the Federal Election Commission (FEC), National Institute of Standards and Technology, and the EAC).

3. Requires Testing by a Federally Accredited Laboratory:
Relevant state statutes and/or rules require testing by a federally or nationally accredited laboratory.

4. Requires Federal Certification:
Relevant state statutes and/or rules require that voting systems be certified by a federal agency.

U.S. Election Assistance Commission Categories of State Participation in Federal Voting Standards

1. No Federal Requirements  -- 20 States
AK   AS   AR   FL   GU   HI   KS    ME   MS   MT   NE   NH   NJ   OK   PR   TN   VT   VI   WV   WY

2. Requires Testing to Federal Standards -- 10 States
CT   DC   IN   KY   MN   NV   NY   OR   TX   VA

3. Requires Testing by a Federally Accredited Laboratory -- 15 States
AL  AZ   IL   IA   LA*   MD*   MA   MI*   MO   NM   OH   PA   RI*   UT*   WI*   WA

4. Requires Federal Certification -- 10 States
CA   CO    DE    GA    ID **    NC**   ND    SC    SD               

* Statutes/rules require testing by an independent testing authority (ITA)  or NASED accredited laboratory
according to standards adopted by the FEC or EAC.

**Statute allows for NASED or EAC certification.

================================
Download Complete 50-State Report

NY Sequoia "ImageCast" Machines Have 50% Failure Rate

Original source: http://blog.wired.com/27bstroke6/2008/07/ny-50-percent-o.html

NY: 50 Percent of Sequoia Voting Machines Flawed

By Kim Zetter | Threat Level | Wired Magazine | July 14, 2008

New York state is in the process of replacing its lever voting machines with new voting equipment, but the state revealed recently that it has found problems with 50 percent of the roughly 1,500 ImageCast optical-scan machines (shown in the video above) that Sequoia Voting Systems has delivered to the state so far -- machines that are slated to be used by dozens of counties in the state's September 9 primary and November 4 presidential election.

Douglas Kellner, co-chair of the New York State Board of Elections, expressed frustration with the vendor, saying it appeared that Sequoia was using the state's acceptance testing process to find problems with its machines in lieu of a sound quality-control process.

"There's no way the vendor could be adequately reviewing the machines and having so many problems," he told Threat Level. "What it tells us is that the vendor just throws this stuff over the transom and does not do any alpha- or beta-testing of their own before they apply for certification testing. Then they expect that we'll identify technical glitches and then they'll correct those glitches. But correction of those glitches is an extraordinarily time-consuming process. And its very disappointing that this equipment is not ready for prime time."

One main problem with the machines has been the printers. The ImageCast machines are special optical-scan machines that include an LCD screen, a printer and a ballot-marking device that allows disabled voters to use them. Disabled voters view the ballot on screen or hear it read to them through headphones, then make their selection using special attachments (a device with buttons or a sipping straw), after which the machine prints out a paper ballot that gets read by the optical scanner component.

Multiple Operational Flaws Render Machines 'Unusable'

The printer, Kellner noted, is a core component of the machine. But they malfunction "if you don't feed the paper exactly right or if the buttons aren't pushed just right," he said. They also have trouble handling write-in candidates. If a voter's writing exceeds a certain width, Kellner said the printer shuts down without indicating why it's shutting down. "These are serious glitches that should have been picked up in the vendor's own quality-control process," he said.

But Sequoia isn't the only problem, according to counties who have reported receiving problematic machines from the state Board of Elections after the board was supposed to have tested and certified the machines. The Board of Elections is examining all of the new machines before sending them out to counties.

In Nassau County alone, the largest voting district outside of New York City, officials found problems with 85 percent of the 240 ImageCast machines it received so far -- problems that the county characterized in a letter as "substantial operational flaws that render them unusable or that require major repairs."

The problems include printers jamming, broken monitors and wheels, machines that wouldn't boot up, and misaligned printer covers that prevented the covers from closing completely, creating security concerns. The county rejected 48 machines right at delivery, due to physical damage. Another 58 machines exhibited problems during testing, according to William Biamonte, the Democratic elections commissioner for Nassau County. [New York counties have two election directors -- one each from the Democratic and Republican parties -- to avoid charges of unfair elections.]

Some of the latter machines, he said, shook dramatically when they were running and workers either had to shut them down or the machines shut themselves down from the vibration. Other machines had dead batteries or batteries that wouldn't hold a two-hour charge, as they were required to do.

Another 112 machines produced a "printer failure" error message. Biamonte says this was the result of a change Sequoia made to its firmware. He said that when he received his first batch of machines about a month ago, the machines had "horrific paper jams." To fix the problem, Sequoia loaded new firmware on the systems to speed up the printer, but in doing so disabled the USB port on machines, resulting in the "printer failure" error messages.

Biamonte, who blames the Board of Elections in part for not noticing the problems before forwarding the machines to counties, said a state worker told him he should instruct election workers to just ignore the error message. "How is that acceptable?" Biamonte asked.

"Say you buy a brand new car and it works good but the oil gauge isn't working. They tell you, Just drive it anyway. These are brand new machines. $12,000 each. We cannot in confidence send (them) out to a polling place knowing they have this printer error. How do we know if we really do have a printer failure?"

Nassau County, which has nearly 900,000 registered voters, is slated to receive 450 machines total, but has refused delivery on the remaining machines and has asked a federal court to order Sequoia to repair the machines. It also requested a review of the state Board of Elections' acceptance and testing procedures. That review was completed Thursday by a quality-control firm hired by the Board of Elections.

The firm's report found that the Board of Elections' procedures for accepting and testing the machines were adequate, but acknowledged that some problems may have occurred due to a lack of communication between state election officials and county officials. [Read more info about this report after the jump.]

Biamonte, who respects Kellner and thinks he feels as frustrated by Sequoia as he does, nonetheless called the report "ridiculous" and "disingenuous," saying that cracked screens and jammed printers weren't the result of communication problems.

The ImageCast machines are not actually made by Sequoia but by a Canadian subcontractor named Dominion, which is based in Toronto, and a sub-subcontractor named Jaco Electronics, based in New York. A press release on Sequoia's site noted that Jaco won the contract to produce 4,500 optical-scan machines for Sequoia/Dominion only in April of this year and needed to add 40 to 50 people to its workforce to fulfill the contract.

Nassau County began receiving its machines from the state in June, which suggests that the machines may have been rushed through production too quickly. A Sequoia spokeswoman would say only that the company is working with state officials "to identify and resolve any voting equipment concerns they may have."

The Sequoia ImageCast machines were designed exclusively for New York and are not currently being used in any other state. The machines have not yet been federally certified, though Kellner says Sequoia assured the state last January that federal testing and certification would be completed on the system by April or May, before the state began its own testing and certification of the equipment.

New York Under Federal Justice Department Order

New York doesn't have a choice about using the machines this year. The state was sued by the Department of Justice for failing to meet a federal deadline for having accessible voting machines in place. The Help America Vote Act passed in 2002 requires every voting precinct to provide at least one accessible voting machine for disabled voters by 2006. New York is just now getting the machines in place.

Because the ImageCast machines are still undergoing certification testing by the state, only the ballot marking device -- and not the scanning portion of the machine -- will be used in New York this year. The counties will continue to use lever machines for non-disabled voters until 2009. The printed paper ballots produced by the ballot-marking portion of the machine will be read by hand, rather than scanned.

Broken Security Seals

One interesting tidbit turned up in the quality-control report that examined the state board of elections acceptance and testing process. The report reveals that a voting machine vendor is the first to examine the machines when they arrive to the state's voting machine warehouse from the manufacturer. The vendor representative is supposed to examine the machines for missing or damaged parts. Once the vendor representative has signed off on the equipment, it goes to temporary workers that the state has hired to test the machines. Biamonte says the temp workers are college students, who work under the supervision of board of election employees.

After the testing is completed, a tamper-evident seal is placed on the machines and they're passed back to the vendor representative who is responsible for shipping off the machines to counties. This creates chain-of-custody concerns that Biamonte says are exacerbated by the fact that when he received his machines in Nassau County, a number of the tamper-evident seals on them were cracked. "How do we know this wasn't tampered with?" he said

New York Voter Registration Information

New York Voter Registration Database Report:

State Regulations and Procedures Implementing HAVA Voter Registration Requirements

Attached is the New York Voter Registration Information as set forth in Making the List, Database Matching and Verification Processes for Voter Registration as published by the Brennan Center for Justice at New York University on March 24, 2006. This document contains available information about voter regtistration current as of the date of publication.

Federal law now requires, as of January 1, 2006, that states create and maintain statewide databases to serve as the central source of voter registration information. Citizens’ ability to get on the rolls (and thus their ability to vote and have their votes counted) will now depend on the policies and procedures governing the use of these databases in the voter registration process.

Evidence demonstrates that poor policy and procedure choices could result in the unwarranted disenfranchisement of millions of eligible citizens attempting to register to vote. The new statewide databases, and their role in the voter registration process, are poorly understood, but extremely consequential.

The Making the List report, issued just as the state databases begin to come online, presents the first comprehensive catalog of the widely varying state database practices governing how (and in some cases, whether) individuals seeking to register will be placed on the voter rolls.

The report covers the state’s voter registration process, from the application form up through Election Day -- including the intake of registration forms, the manner in which information from the forms may be matched to other government lists, the consequences of the match process, and any opportunity to correct errors. Each variation at each step of the process has tangible consequences for voters seeking to register and vote in 2006 and beyond.

IMPORTANT:
Because of the possibility that voter information may differ from database to database (abbreviations, street designations, etc.) or because of data entry errors, valid voter registration data may be rejected.

Individual voters are urged to contact their county clerk or local election board to determine that they are properly registered. Many such election authorities maintain online services for this purpose, but others will require a telephone call or perhaps a written inquiry to determine the voter's eligibility.

As an addendum to this state report, a fill-in form for voter registration is presented which can be completed, printed, and sent to the appropriate registratrar of voters (generally the county Clerk or local election board). The proper form of submission and location is included on the registration form

Syndicate content