Cause For Concern: 'Experimental' Patches Applied To Ohio Voting Machines Without Certification

from the seriously? dept

Update: Just as this post went out, the ruling was released—the judge has rejected the claims.

While we've covered e-voting issues for years, it really did seem like the issues with e-voting machines were less this year than in the past. Except... maybe not. ES&S, the largest vendor of e-voting machines, who has a long and scary history of problems with their machines, is embroiled in yet another controversy, in which Ohio's Secretary of State, Jon Husted, had the company install "experimental" software patches on ES&S vote counting machines (not the voting machines themselves, but the tabulators). The software is uncertified and likely violates the law.

Husted's office has not inspired confidence with its responses to these charges:
The Secretary of State’s office has been evasive and contradictory in response to questions about the minor seeming change that involved converting results from xml to csv format. Apparently, by calling the software “experimental,” Husted was attempting to avoid any approval, review or testing of the new software. But as the federal Elections Assistance Commission titled a memo back in February , “Software and Firmware modifications are not de minimis changes.”
In the meantime, a court is set to rule on the challenge to the software any time now, and a ruling against the software patches could make counting the votes tonight a more complicated process -- but considering the concerns, a reasonable solution. Today, the judge rejected the challenge to the software.

Oh, and while this story is making the rounds, we have no idea what to make of the video of an e-voting machine that votes for Romney if you click on Romney or Obama. There have been some questions as to whether the video was real, but reporters have confirmed that the machine (in Pennsylvania) has been "taken off line." The writeup on that one suggests it's not just a touch screen calibration issue, because the guy who filmed it said that if you touch other candidates, the same offset doesn't happen.


Reader Comments (rss)

(Flattened / Threaded)

  •  
    icon
    blaktron (profile), Nov 6th, 2012 @ 11:32am

    At least someone will look at these ones... what about the thousands of other voting machines across your country that will not be inspected? It really only takes 1 tabulator per swing state to potentially throw an election. The only really good way to ensure a high enough level of trust in the results is the time honored tradition of electoral volunteers counting votes.

     

    reply to this | link to this | view in chronology ]

  •  
    identicon
    John Doe, Nov 6th, 2012 @ 11:42am

    We need a better system

    In this age when elections are won and lost by the slimmest of margins we need a secure, accurate method of voting. But as Stalin said, he who casts the vote decides nothing, he who counts the vote decides everything.

     

    reply to this | link to this | view in chronology ]

    •  
      icon
      art guerrilla (profile), Nov 7th, 2012 @ 6:35am

      Re: We need a better system

      actually, we *do* have a system that is more reliable than computer-based voting systems, is cheaper, is actually auditable(!), and has worked for hundreds/thousands of years:

      Paper Ballots
      Hand Counted
      Locally Reported

      *Not* that this system is impossible to game, it is just infinitely more difficult to game *that* whole system, rather than having hidden, un-auditable, PROPRIETARY software/hardware which can be gamed with NO ONE the wiser...
      (based on a true story)

      which is exactly WHY we won't be instituting such a system: the two-headed korporate money party WANTS a system they can control/game...

      this tired old quote bears repeating until all the sheeple get it: if voting changed anything, it would be illegal...

      art guerrilla
      aka ann archy

      eof

       

      reply to this | link to this | view in chronology ]

  •  
    icon
    weneedhelp (profile), Nov 6th, 2012 @ 11:44am

    (not the voting machines themselves, but the tabulators)

     

    reply to this | link to this | view in chronology ]

  •  
    icon
    Chuck Norris' Enemy (deceased) (profile), Nov 6th, 2012 @ 11:52am

    we have no idea what to make of the video of an e-voting machine that votes for Romney if you click on Romney or Obama

    I've heard accounts of machines doing the opposite. Well, the process is a joke and only the government could blow wads of somebody else's money to give to their pals to make shoddy equipment.

     

    reply to this | link to this | view in chronology ]

    •  
      identicon
      Anonymous Coward, Nov 6th, 2012 @ 12:32pm

      Re:

      I will point out that it is the State governments that purchase these machines, not the Federal government. And therein lies the problem.

       

      reply to this | link to this | view in chronology ]

    •  
      identicon
      MAC, Nov 6th, 2012 @ 12:33pm

      Re:

      No, to rig the election.

      Think about it. Romney has pissed off 47% of the American people. That, coupled with the other groups that don't like him should give Obama a landslide. If it does not, something smells and smells really bad...

       

      reply to this | link to this | view in chronology ]

      •  
        icon
        Christopher Best (profile), Nov 6th, 2012 @ 12:50pm

        Re: Re:

        No, to rig the election.


        Except that there have been several reports, as the parent said, of voting machines doing the same thing. It is possible that this was a case of fraud, but (speaking as a software developer and as a realist) it's infinitely more likely this is just an example of incompetence, ie: a software error.

        If someone wanted to commit fraud on an e-voting machine, they wouldn't make it display a different candidate than the one you selected. They would just change the ballot when it was stored to disk and not tell you!

        Think about it. Romney has pissed off 47% of the American people. That, coupled with the other groups that don't like him should give Obama a landslide. If it does not, something smells and smells really bad...


        Except that 47% of the American people doesn't represent a landslide by any sane definition of the world. Except that of those 47% he supposedly pissed off with his comment, the majority of them never even heard the comment, or care about it, and over half of them won't even vote. So, no. There are plenty of things that smell bad about this entire election, but a Romney win is not such an impossibility as to immediately assume something nefarious is going on. Or at least anything nefarious and out of the ordinary.

         

        reply to this | link to this | view in chronology ]

        •  
          icon
          Christopher Best (profile), Nov 6th, 2012 @ 1:08pm

          Error

          Obviously I meant to say "several reports of machines doing the OPPOSITE thing".

           

          reply to this | link to this | view in chronology ]

          •  
            icon
            Jay (profile), Nov 6th, 2012 @ 1:59pm

            Re: Error

            Here's the problem. Since 2000, voting machines have had a hasn't red shift. That should not happen. Neither should it be possible to privatize the vote, which is what the judge has done.

            No matter the technology, your vote should count. Now it's too easy to change the vote totals from Jon Husted's office into a Romney victory.

            This is just the same as Bush v Gore... Get the vote totals close enough them take the election for themselves.

             

            reply to this | link to this | view in chronology ]

    •  
      identicon
      DogBreath, Nov 6th, 2012 @ 12:49pm

      Re:

      The machine is working as designed, just like in Florida during Bush vs. Kerry.

       

      reply to this | link to this | view in chronology ]

  •  
    identicon
    Dave Xanatos, Nov 6th, 2012 @ 11:58am

    If it's a hack it's a horrible one. A good (yet evil?) hack would check mark the candidate you selected but record the other one.

     

    reply to this | link to this | view in chronology ]

    •  
      icon
      Josh in CharlotteNC (profile), Nov 6th, 2012 @ 12:17pm

      Re:

      Actually, that's not particularly effective, either, as it would quickly be discovered if anyone looked at the records (not that many do).

      Dice that always come up 7 are quickly noticed. Dice that come up 7 only slightly more than they should aren't found out so easily.

       

      reply to this | link to this | view in chronology ]

      •  
        identicon
        MAC, Nov 6th, 2012 @ 12:40pm

        Re: Re:

        How do you know it would be discovered?

        Are you a software engineer? Did you write the code?

        If you are neither then you have no idea what you are talking about.

        Machines can be made to lie. It happens in the corporate world all the time. And, since it's all electrons; unless you have some very stringent audit requirements, no one knows the difference.

        And, even the auditing can be defeated by a good programmer. And bosses can give a programmer plenty of incentives (good and bad) to comply with their wishes.

        Don't be naive; if it can happen it will happen. Except in this case, there are no boxes full of ballots hidden under the pews. There is nothing. The perfect fraud.

         

        reply to this | link to this | view in chronology ]

        •  
          icon
          Josh in CharlotteNC (profile), Nov 6th, 2012 @ 1:04pm

          Re: Re: Re:

          The personal attacks are completely uncalled for.

          I think I was pretty clear that even though it would be easy to notice, that few bother to look.

          I happen to work in information security at one of the largest banks in the country, so yes, I have an idea what I'm talking about, and I'm not naive.

          Of course machines can be programmed to lie. My point was that it is exceedingly stupid to change all the votes to go your way, or do it in an obvious manner, unless you want to have a long stay in a federal prison.

          You don't go into a casino with a set of loaded dice that always come up 7 and expect to sit at the craps table and win millions. A pair of fair dice will sum to 7 on average 1/6th of the time (6 out of 36 possibilities). But if you go in with a set that comes up 8/36, it will take much longer for the casino to wise up.

          If you want to get away with election fraud, there are "better" ways to go about it than what was stated. If you can hack or re-program the machines, you can tip an election in a much more subtle manner. If the election is close, you only need a few machines, in areas your opponent is strong in, and you only change a small percentage of votes.

           

          reply to this | link to this | view in chronology ]

        •  
          identicon
          PRMan, Nov 6th, 2012 @ 1:19pm

          Re: Re: Re:

          He's saying that if 100% of a district votes for Romney, it will be very suspicious. But if 51% vote for Romney when it should have been 49%, it won't be noticed easily, but still has the same effect.

           

          reply to this | link to this | view in chronology ]

    •  
      identicon
      Goliath, Nov 6th, 2012 @ 12:19pm

      Re:

      Nice try Xanatos, we're not falling for your tricks to rig the elections this time!

       

      reply to this | link to this | view in chronology ]

  •  
    identicon
    Anonymous Coward, Nov 6th, 2012 @ 12:10pm

    My not-so-smart phone its probably more accurate than their purpose built machines.

     

    reply to this | link to this | view in chronology ]

  •  
    icon
    Mesonoxian Eve (profile), Nov 6th, 2012 @ 12:15pm

    We can design an electronic device to manage our daily lives with schedules, bells and whistles, and even include communication services, but to build a device which can simply count "yes" and "no" seems to be impossible.

    The rest of the world should be laughing at this stupidity.

     

    reply to this | link to this | view in chronology ]

    •  
      identicon
      MAC, Nov 6th, 2012 @ 12:25pm

      Re:

      We had one; it was called a 'paper' ballot.

       

      reply to this | link to this | view in chronology ]

      •  
        icon
        Josh in CharlotteNC (profile), Nov 6th, 2012 @ 12:35pm

        Re: Re:

        Remember hanging chads? Ballot box stuffing?

         

        reply to this | link to this | view in chronology ]

        •  
          identicon
          MAC, Nov 6th, 2012 @ 12:44pm

          Re: Re: Re:

          At least there is something to find with paper. With electrons there is nothing and I do mean nothing to find. No permanent record. And don't tell me about backups and mirroring and all the other tech stuff. I work in the industry and I know what I'm talking about. One of the easiest things to do is make a computer lie.

           

          reply to this | link to this | view in chronology ]

          •  
            icon
            minijedimaster (profile), Nov 6th, 2012 @ 1:59pm

            Re: Re: Re: Re:

            Well, if the computer prints out a paper copy of your ballot showing your votes, I guess there would be a backup paper trail of said votes to fall back on if the machines are suspected of being tampered with or not working properly. I'm pretty sure some of the voting machines out there do have this functionality today. They all need it though.

             

            reply to this | link to this | view in chronology ]

    •  
      icon
      Sneeje (profile), Nov 6th, 2012 @ 12:31pm

      Re:

      Yes, because the rest of the world doesn't actually bother "counting" their votes--the outcome is determined via other closed-door means.

       

      reply to this | link to this | view in chronology ]

    •  
      icon
      Josh in CharlotteNC (profile), Nov 6th, 2012 @ 12:34pm

      Re:

      Most of the rest of the world is just as bad as we are.

      Designing a system for elections is surprisingly complicated when trying to meet many goals:
      1) Fair and accurate
      2) Secure from voter tampering
      3) Accessible for all voters (the blind, for example)
      4) Protects the secret ballot...
      5) ...while not allowing multiple voting
      6) Able to be approved and purchased by the large number of local counties following their own rules and the laws in 50 different states
      7) Able to be run by the poll workers in above counties/states
      8) Secure from poll worker/observer/consultant tampering

      My own voting today was quick (~20 minutes to wait in line, 5 minutes to vote) and painless. The machine appeared to work correctly. The voter-verified-paper-trail recorded my votes correctly. Technologically I saw no problems at my precinct on the machine I used. What I can't verify is if the other machines behaved the same, or even the same one for other voters. I can't verify the paper record will ever be seen if there's a question on the results. I can't verify the poll workers didn't add some votes when no one was around.

       

      reply to this | link to this | view in chronology ]

      •  
        identicon
        MAC, Nov 6th, 2012 @ 12:47pm

        Re: Re:

        Don't forget requirement #9:
        Able to rig and un-rig at a moments notice during balloting.
        Probably via cell phone.

         

        reply to this | link to this | view in chronology ]

  •  
    icon
    Fickelbra (profile), Nov 6th, 2012 @ 12:23pm

    This drives me insane

    Truthfully, I want to see this type of thing investigated to the fullest extent, regardless of who wins the race. This is not an excuse to whine about a candidate winning that I don't like, this is an obvious red flag and we need to start bringing the people who try to do this kind of bs to justice.

     

    reply to this | link to this | view in chronology ]

    •  
      identicon
      MAC, Nov 6th, 2012 @ 12:27pm

      Re: This drives me insane

      That's why I like paper; it's easy to use and it's PERMANENT.

      I would also like to see a receipt on paper of who you voted for. That way if there is a dispute as to whether or not the machine is rigged then at least there is a 'real' record of the event.

      I do not trust electronic ballot machines. Period.
      Neither should you.

       

      reply to this | link to this | view in chronology ]

      •  
        identicon
        Mr. Applegate, Nov 6th, 2012 @ 1:29pm

        Re: Re: This drives me insane

        "I would also like to see a receipt on paper of who you voted for. That way if there is a dispute as to whether or not the machine is rigged then at least there is a 'real' record of the event."

        Except with that receipt I walk out the door, show it to this guy on the corner and he hands me a $100 or ???. Or worse yet, some guy at work says show me you voted as I told you or I break your legs. (And yes I have been threatened like that, though it was a union election, many, many years ago)

        So it would be a bad idea to allow people to have proof of how they voted. Proof that they voted would be fine.

         

        reply to this | link to this | view in chronology ]

        •  
          icon
          John Fenderson (profile), Nov 6th, 2012 @ 3:35pm

          Re: Re: Re: This drives me insane

          The "receipt" would not be given to the voter. It would be stored in the polling place, just like with paper ballots.

          Personally, I strongly feel that we need to eliminate the middleman and go with paper voting in the first place.

           

          reply to this | link to this | view in chronology ]

          •  
            identicon
            Mr. Applegate, Nov 7th, 2012 @ 4:16am

            Re: Re: Re: Re: This drives me insane

            Then it is not what I would call a 'receipt', it is a printed record of a transaction, but I don't want to get into semantics here.

            Of course there is a problem with paper ballots too. Remember hanging chads? For the optical scan ballots, there are always problems with improperly filled in circles which raise questions. For written ballots, the problem is legibility, spelling...

            So, I assume what we are talking about is the "Voter Verified Paper Audit Trail (VVPAT)" system. Some information on that type of system, and some concerns about it can be found here: http://en.wikipedia.org/wiki/Voter-verified_paper_audit_trail#Challenges_and_concerns_with_VVPAT

            While it sounds like a good system on the surface, due to some of the concerns raised in the provided link and my observations of people over my life, I am not sure it would actually be any better than other voting systems in place.

            In any system there is ALWAYS a way to beat, or at least game, the system. So at some point there is, inevitably, a diminishing return on the effort put into preventing fraud.

            Not saying I have the answer, and honestly I think the VVPAT would solve several of the issues, but it would also raise others.

             

            reply to this | link to this | view in chronology ]

  •  
    identicon
    Anonymous Coward, Nov 6th, 2012 @ 12:55pm

    And Pennsylvanians were concerned about voter ID preventing fraud!

     

    reply to this | link to this | view in chronology ]

  •  
    identicon
    Anonymous Coward, Nov 6th, 2012 @ 1:00pm

    Ohio's SOS would have ground to stand on if he hadn't been involved in several lawsuits earlier this year where he blatantly tried to favor his own political party in voting. Such as only allowing early voting for members of the military, who tend to vote for his own party much more heavily then the other party.

    Maybe this will finally wake people up to the dangers of electronic voting with no paper trails.

     

    reply to this | link to this | view in chronology ]

  •  
    identicon
    Anonymous Coward, Nov 6th, 2012 @ 1:04pm

    Lol auto votes Romney.

     

    reply to this | link to this | view in chronology ]

  •  
    identicon
    Miles Kehoe, Nov 6th, 2012 @ 1:07pm

    The scariest thing in that photo..

    Is that her ein 2012, some states still allow you to touch a single button and vote an entire demo or repub platform without giving it any thought at all. I thought that was awful in Louisiana in the 702; but who would imagine that is still allowed?

     

    reply to this | link to this | view in chronology ]

  •  
    icon
    Divide by Zero (profile), Nov 6th, 2012 @ 1:16pm

    At the risk of being ridiculed, wtf is a voting machine exactly? Is it like that touch screen in the video? Only ask because here we still use good old pen & paper, then count the votes afterwards.Don't seem to have had too many problems, that I recall, after working a few elections.

     

    reply to this | link to this | view in chronology ]

    •  
      icon
      The eejit (profile), Nov 6th, 2012 @ 1:42pm

      Re:

      IT's a machine that records votes.

      Over here, in the upcoming elections, the system will be something like:

      1) Person assigned reference;
      2) Person takes reference to polling booth;
      3) Vote;
      4) Votes tallied;
      5) IF discrepancy, then confirm votes;
      6) Shred the database Key matching voter to vote reference once tallies concluded.

      95% of the issues go away.

      The Diebold (csorry, Premier Election Solutions) machines were hackable by USB drive. Think about that. A USB drive rigging an election.

       

      reply to this | link to this | view in chronology ]

  •  
    identicon
    Anonymous Coward, Nov 6th, 2012 @ 1:55pm

    See, they don't care if the popular vote is rigged. It doesn't mean much anyway. Gotta love the illusion of influencing the government.

     

    reply to this | link to this | view in chronology ]

  •  
    icon
    Wally (profile), Nov 6th, 2012 @ 2:25pm

    Voting Machine

    Oh I was wondering about the interface change that prompted that kind person on how to properly boot in my ballot. The State of Ohio Board of elections applied the patch without Federal Approval because the Feds screwed it up. I voted today and I'm from Ohio. I even saw my name on the ballot printout this year verifying that it was in fact me.

    The ballot sheets printed out are not taken from the machines until they need counted by a QR scanner.

    There is nothing wrong with them this year.

     

    reply to this | link to this | view in chronology ]

  •  
    identicon
    Anonymous Coward, Nov 6th, 2012 @ 5:20pm

    Oh crap! According to the machine, I just voted for Pat Robertson!

     

    reply to this | link to this | view in chronology ]

  •  
    identicon
    Eleanor Hare, Nov 27th, 2012 @ 3:25pm

    Stop partisan control of federal elections

    Sign a petition to require that management of federal elections be non-partisan.

    http://signon.org/sign/federal-elections-need?source=s.icn.em.cr&r_by=31219& ;mailing_id=7170

     

    reply to this | link to this | view in chronology ]


Add Your Comment

Have a Techdirt Account? Sign in now. Want one? Register here
Get Techdirt’s Daily Email
Save me a cookie
  • Note: A CRLF will be replaced by a break tag (<br>), all other allowable HTML will remain intact
  • Allowed HTML Tags: <b> <i> <a> <em> <br> <strong> <blockquote> <hr> <tt>
Follow Techdirt
A word from our sponsors...
Essential Reading
Techdirt Reading List
Techdirt Insider Chat
A word from our sponsors...
Recent Stories
A word from our sponsors...

Close

Email This