Election watchdogs keep wary eye on paperless e-voting systems
Voting systems that don't support a paper trail are hard to audit, Verified Voting says
Computerworld - As the clock winds down to what could turn out to be an extremely close presidential race, some election watchdogs are keeping a wary eye on paperless electronic voting machines that are scheduled to be used in several key states and jurisdictions around the country.
Paperless systems are basically Direct Recording Electronic systems (DREs) in which voters cast their ballots in a completely electronic fashion by using push buttons or touchscreens.
Some DREs allow voters to print out a paper copy of their ballots to verify that their vote was cast as intended. Election watchdog groups such as Verified Voting and Common Cause and academicians have insisted that such a voter verifiable paper audit trail (VVPAT) is vital to ensuring the integrity of the vote in jurisdictions that use DREs.
But a total of 16 states will, to varying extents, use DREs that do not support a paper trail as their standard polling place equipment, according to Verified Voting.
Of these, six states -- New Jersey, Delaware, Maryland, South Carolina, Georgia, and Louisiana -- will be completely paperless. All ballots that are cast in these states will be on DREs that support no paper trail whatsoever.
The remaining states, which include Texas, Colorado, Florida, Virginia and Pennsylvania, will use a mix of paper ballots and DRE voting systems that are paperless. But even here, the states of Virginia, Pennsylvania and Tennessee will be almost completely reliant on paperless electronic voting systems. In Tennessee for instance, all but two counties will use paperless DREs, while in Virginia all but seven of 134 countries will use paperless systems. Meanwhile, in a handful of states like Florida only voters with physical disabilities will use paperless DREs.
The extensive use of these systems in the upcoming elections is troubling, said Pamela Smith, the president of Verified Voting. Ideally, all jurisdictions around the country should be using voter-marked paper ballots and optical scanners for counting the votes, Smith said.
But if a DRE is being used, it should support a paper trail at the very minimum, she said. "There is a strong chance that a DRE system is working the way it should," she said. "The problem is there is no way to confirm that easily," she said.
Because there is no independent paper record of a vote, manual post election audits of paperless voting systems are impossible, she said. So if a paperless DRE system were to malfunction, record or count votes incorrectly, it would be very hard to verify the accuracy of the results, she said.
Election day mishaps involving DREs are not all that rare, according to a report earlier this year by Verified Voting.
In 2011, during the Democratic primary elections in New Jersey's Cumberland County, a paperless DRE system attributed votes to the wrong candidates and ended up declaring the actual losers as winners of the election. A new election was held later after the New Jersey attorney general acknowledged that the system had switched votes because it had been programmed incorrectly, the report said.
In 2004, a touchscreen DRE in North Carolina's Carteret County lost 4,500 votes due to a memory problem. Because there were no paper records, "it was impossible to determine how those lost votes should have been counted," the Verified Voting reported. Since then the state has moved to paper ballots, optical scanners and VVPAT-equipped DRE systems.
During primaries elections in May 2011, several voters in Pennsylvania's Venango County complained that their votes had been flipped from one party to another by the paperless DRE systems that were being used by the county. Similar complaints have been reported elsewhere. In some of the cases, election officials blamed the problem on screen calibration errors and programming errors.
- Step Out of the Bull's-Eye Learn about the evolution of targeted attacks, the latest in security intelligence, and strategic steps to keep your business safe.
- Do More With Less: How CARFAX Consolidated Their Security Solutions Through a consolidated F5 solution, CARFAX cut site downtime to zero, secures its data, and deployed a high-performance infrastructure to support its rapid...
- F5 Data Center Firewall Aces Performance Test F5's BIG-IP 10200v with Advanced Firewall Manager (AFM) can handle traffic at 80-Gbps rates while screening and protecting tens of millions of connections...
- Big Data, Big Mess: Sound Risk Intelligence Through Complete Context This paper examines the insecurity of the small businesses in the supply chain and offers tips to close those backdoors into the enterprise.
- Live Webcast Security Vulnerabilities Associated With Having Local Administrator Privileges Viewfinity will demonstrate how removing admin rights and granularly managing privileges at the application level reduces the attack surface.
- Keep Servers Up and Running and Attackers in the Dark An SSL/TLS handshake requires at least 10 times more processing power on a server than on the client. SSL renegotiation attacks can readily...
- Will the Real Endpoint Threat Detection and Response Please Stand Up? This webinar explores new technologies & process for protecting endpoints from advanced attackers as well as the innovations that are pushing the envelope... All Data Security White Papers | Webcasts
Our new bimonthly Internet of Things newsletter helps you keep pace with the rapidly evolving technologies, trends and developments related to the IoT. Subscribe now and stay up to date!