Voting Equipment and Ballots
Total Page:16
File Type:pdf, Size:1020Kb
Load more
Recommended publications
-
Electoral Systems, Direct Recording Electronic Voting Machines
Abstract This article explores the assemblage of voting: electoral systems, Direct Recording Electronic voting machines (DREs), ballots and ballot booths, and the central role of secrecy. Its aim is to argue that the contemporary political subjectivity of deliberation is intimately tied up with this assem- blage. Based on ethnographic research, this article shows how controversies around DREs can reveal the ways in which the very possibility for delibera- tion is tied to the structure and implementation of these machines. It argues for a new approach to deliberation that includes debate, participation and co-construction of the technical systems whereby we vote, as well as those where we express opinions. Towards an Anthropology of Deliberation Christopher M. Kelty 1 October 2008 1University of California, Los Angeles, Department of Information Studies and the Center for Society and Genetics) introduction A political scientist, a cognitive scientist, and a computer scientist walk into a room. What sounds like the beginning of a bad joke|something about the anxiety of requiring the word \science" in the job title|was actually a class that I participated in, in the Fall of 2006, called \Election Systems, Technologies and Administration" (see Fig 1). The class combined approaches from cognitive science, political science and computer science{but it wasn't necessarily an attempt to combine them into a coherent approach. Rather voting and elections were subjected to an array of approaches, as the course description made clear: \how individuals interact with technology," \how technologies are engineered to be secure and accurate" and \how the social aspects of voting fulfill democratic goals for elections." These approaches covered human factors engineering, human- computer interaction and cognitive models of information processing, com- puter security research, election outcomes analysis, voting behavior and so on. -
Black Box Voting Ballot Tampering in the 21St Century
This free internet version is available at www.BlackBoxVoting.org Black Box Voting — © 2004 Bev Harris Rights reserved to Talion Publishing/ Black Box Voting ISBN 1-890916-90-0. You can purchase copies of this book at www.Amazon.com. Black Box Voting Ballot Tampering in the 21st Century By Bev Harris Talion Publishing / Black Box Voting This free internet version is available at www.BlackBoxVoting.org Contents © 2004 by Bev Harris ISBN 1-890916-90-0 Jan. 2004 All rights reserved. No part of this book may be reproduced in any form whatsoever except as provided for by U.S. copyright law. For information on this book and the investigation into the voting machine industry, please go to: www.blackboxvoting.org Black Box Voting 330 SW 43rd St PMB K-547 • Renton, WA • 98055 Fax: 425-228-3965 • [email protected] • Tel. 425-228-7131 This free internet version is available at www.BlackBoxVoting.org Black Box Voting © 2004 Bev Harris • ISBN 1-890916-90-0 Dedication First of all, thank you Lord. I dedicate this work to my husband, Sonny, my rock and my mentor, who tolerated being ignored and bored and galled by this thing every day for a year, and without fail, stood fast with affection and support and encouragement. He must be nuts. And to my father, who fought and took a hit in Germany, who lived through Hitler and saw first-hand what can happen when a country gets suckered out of democracy. And to my sweet mother, whose an- cestors hosted a stop on the Underground Railroad, who gets that disapproving look on her face when people don’t do the right thing. -
Security of Voting Systems Ronald L
Security of Voting Systems Ronald L. Rivest MIT CSAIL Given at: GWU Computer Science Dept. November 9, 2009 Voting is Easy… ??? "What's one and one and one and one and one and one and one and one and one and one?" "I don't know," said Alice. "I lost count." “She can't do addition," said the Red Queen. There are three kinds of people working on elections: 1. those who can count 2. and those who can’t. ? Outline Voting technology survey What is being used now ? Voting Requirements Security Threats Security Strategies and Principles New voting systems proposals: “Twin” and “Scantegrity II” Voting Tech Survey Public voting Paper ballots Lever machines Punch cards Optical scan DRE (Touch-screen) DRE + VVPAT (paper audit trail) Vote by mail (absentee voting) Internet voting (?) New voting methods (“end-to-end”), involving invisible ink, multiple ballots, scratch-off, cryptography, and other innovations… Public Voting The County Election. Bingham. 1846. Paper Ballots Lincoln ballot, 1860, San Francisco “Australian ballot”, 1893, Iowa city Lever Machines Invented in 1892. Production ceased in 1982. See “Behind the Freedom Curtain” (1957) Punch card voting Invented 1960’s, based on computerized punch card. Now illegal, by HAVA (Help America Vote Act) of 2002. The famous “butterfly ballot” A “dimpled chad” ??? Optical scan (“opscan”) First used in 1962 DRE (“Touchscreen”) Direct Recording by Electronics First used in 1970’s Essentially, a stand-alone computer DRE + VVPAT DRE+Voter-Verified Paper Audit Trail. First used in 2003. Vote By Mail Often used for absentee voting, but some states use it as default. -
VVSG Comments
Before the U.S. ELECTION ASSISTANCE COMMISSION In the Matter of ) COMMENTS SUBMISSION ) VOLUNTARY VOTING SYSTEM ) Pursuant to 84 FR 6775, Doc. No.: 2019-03453 ) GUIDELINES VERSION 2.0 ) Wednesday, May 29th, 2019 ) DEVELOPMENT ) EAC Offices, Silver Spring, MD PUBLIC COMMENTS SUBMISSION OSET INSTITUTE COMMENTS LED BY GLOBAL DIRECTOR OF TECHNOLOGY EDWARD P. PEREZ REGARDING THE VOLUNTARY VOTING SYSTEM GUIDELINES VERSION 2.0 PRINCIPLES AND GUIDELINES Comment #1 Issue: Principles and Guidelines vs. Functional Requirements Reference: Overall VVSG 2.0 Structure The OSET Institute applauds the U.S. Election Assistance Commission (hereinafter, “EAC”) for making efforts to ensure that the future Voluntary Voting System Guidelines (VVSG) certification program is more flexible and agile than it has been in the past. With increasingly faster advances of technology matched by newly emerging cyber-security threats, it is essential for the VVSG to support regular adaptation and modification. Toward that end, VVSG 2.0's initial distinction between "Principles and Guidelines" versus "Functional Requirements" is well placed and laudable. In order to deliver on the promise of such a distinction, the OSET Institute believes that the following programmatic requirements must be adhered to: • “Principles and Guidelines" reflect policy statements, and any modifications to the Principles and Guidelines should require approval of EAC Commissioners. • Functional Requirements (and VSTL test assertions) do not represent policy statements, and their modification should not require approval of EAC Commissioners. Functional Requirements are simply the technical means to operationalize or implement the achievement of policy goals represented in the Principles and Guidelines. • Functional Requirements must support the policy goals represented in the Principles and Guidelines. -
How Electronic Voting Companies' Proprietary Code Ruins Elections Andrew Massey
Hastings Communications and Entertainment Law Journal Volume 27 | Number 1 Article 6 1-1-2004 But We Have to Protect Our Source: How Electronic Voting Companies' Proprietary Code Ruins Elections Andrew Massey Follow this and additional works at: https://repository.uchastings.edu/ hastings_comm_ent_law_journal Part of the Communications Law Commons, Entertainment, Arts, and Sports Law Commons, and the Intellectual Property Law Commons Recommended Citation Andrew Massey, But We Have to Protect Our Source: How Electronic Voting Companies' Proprietary Code Ruins Elections, 27 Hastings Comm. & Ent. L.J. 233 (2004). Available at: https://repository.uchastings.edu/hastings_comm_ent_law_journal/vol27/iss1/6 This Note is brought to you for free and open access by the Law Journals at UC Hastings Scholarship Repository. It has been accepted for inclusion in Hastings Communications and Entertainment Law Journal by an authorized editor of UC Hastings Scholarship Repository. For more information, please contact [email protected]. "But we have to protect our source!": How Electronic Voting Companies' Proprietary Code Ruins Elections by ANDREW MASSEY* I. Introduction .................................................................................. 234 II. Voting Systems and Open Source Code .................................... 236 A . V oting System s ............................................................................. 236 B . O pen Source C ode ....................................................................... 238 III. Proprietary -
Chapter 08-Talion
Company Information 63 This free internet version is available at www.BlackBoxVoting.org Black Box Voting — © 2004 Bev Harris Rights reserved. ISBN 1-890916-90-0. Paperback version can be purchased at www.Amazon.com 8 Company Information (What you won’t find on the company Web sites) If anything should remain part of the public commons, it is voting. Yet as we have progressed through a series of new voting methods, control of our voting systems, and even our understanding of how they work, has come under new ownership. “It’s a shell game, with money, companies and corporate brands switching in a blur of buy-outs and bogus fronts. It’s a sink- hole, where mobbed-up operators, paid-off public servants, crazed Christian fascists, CIA shadow-jobbers, war-pimping arms dealers — and presidential family members — lie down together in the slime. It’s a hacker’s dream, with pork-funded, half-finished, secretly-programmed computer systems installed without basic security standards by politically-partisan private firms, and pro- tected by law from public scrutiny.” 1 The previous quote, printed in a Russian publication, leads an article which mixes inaccuracies with disturbing truths. Should we assume crooks are in control? Is it a shell game? Whatever it is, it has certainly deviated from community-based counting of votes by the local citizenry. We began buying voting machines in the 1890s, choosing clunky mechanical-lever machines, in part to reduce the shenanigans going This free internet version is available at www.BlackBoxVoting.org 64 Black Box Voting on with manipulating paper-ballot counts. -
Black Box Voting Report
330 SW 43rd St Suite K PMB-547 Renton WA 98055 425-793-1030 – [email protected] http://www.blackboxvoting.org The Black Box Report SECURITY ALERT: July 4, 2005 Critical Security Issues with Diebold Optical Scan Design Prepared by: Harri Hursti [email protected] Special thanks to Kalle Kaukonen for pre-publication review On behalf of Black Box Voting, Inc. A nonprofit, nonpartisan, 501c(3) consumer protection group for elections Executive Summary The findings of this study indicate that the architecture of the Diebold Precinct-Based Optical Scan 1.94w voting system inherently supports the alteration of its basic functionality, and thus the alteration of the produced results each time an election is prepared. The fundamental design of the Diebold Precinct-Based Optical Scan 1.94w system (AV OS) includes the optical scan machine, with an embedded system containing firmware, and the removable media (memory card), which should contain only the ballot box, the ballot design and the race definitions, but also contains a living thing – an executable program which acts on the vote data. Changing this executable program on the memory card can change the way the optical scan machine functions and the way the votes are reported. The system won’t work without this program on the memory card. Whereas we would expect to see vote data in a sealed, passive environment, this system places votes into an open active environment. With this architecture, every time an election is conducted it is necessary to reinstall part of the functionality into the Optical Scan system via memory card, making it possible to introduce program functions (either authorized or unauthorized), either wholesale or in a targeted manner, with no way to verify that the certified or even standard functionality is maintained from one voting machine to the next. -
A Secure, Transparent, Auditable, and Reliable Voting System
USENIX Journal of Election Technology and Systems (JETS) Volume 1, Number 1 • August 2013 STAR-Vote: A Secure, Transparent, Auditable, and Reliable Voting System Susan Bell, Office of the Travis County Clerk Josh Benaloh, Microsoft Research Michael D. Byrne, Rice University Dana DeBeauvoir, Office of the Travis County Clerk Bryce Eakin, independent researcher Gail Fisher, Office of the Travis County Clerk Philip Kortum, Rice University Neal McBurnett, ElectionAudits Julian Montoya, Office of the Travis County Clerk Michelle Parker, Office of the Travis County Clerk Olivier Pereira, Universite´ catholique de Louvain Philip B. Stark, University of California, Berkeley Dan S. Wallach, Rice University Michael Winn, Office of the Travis County Clerk STAR-Vote is a collaboration between a number of academics and the Travis County (Austin), Texas elections office, which currently uses a DRE voting system and previously used an optical scan voting system. STAR-Vote represents a rare oppor- tunity for a variety of sophisticated technologies, such as end-to-end cryptography and risk limiting audits, to be designed into a new voting system, from scratch, with a variety of real world constraints, such as election-day vote centers that must support thousands of ballot styles and run all day in the event of a power failure. This paper describes the current design of STAR-Vote which is now largely settled and whose development will soon begin. 1. INTRODUCTION A decade ago, DRE voting systems promised to improve many aspects of voting. By having a computer mediating the user’s voting experience, they could ostensibly improve usability through summary screens and a variety of accessibility features including enlarged text, audio output, and specialized input devices. -
Firmware Manipulations on an Optical Scan Voting Terminal
Taking Total Control of Voting Systems: Firmware Manipulations on an Optical Scan Voting Terminal Seda Davtyan Sotiris Kentros Aggelos Kiayias Laurent Michel Nicolas Nicolaou Alexander Russell Andrew See Narasimha Shashidhar Alexander A. Shvartsman Voting Technology Research Center and Computer Science and Engineering Department University of Connecticut, Storrs, CT 06269, USA fseda,skentros,aggelos,ldm,nicolas,acr,andysee,karpoor,[email protected] ABSTRACT chines by presenting a detailed case study focusing on the The firmware of an electronic voting machine is typically AccuVote Optical Scan Terminal (AV-OS) that is widely treated as a \trusted" component of the system. Conse- used in the US elections. Our investigation demonstrates quently, it is misconstrued to be vulnerable only to an insider the possibility of an array of firmware manipulation attacks attack by someone with an in-depth knowledge of the sys- against the AV-OS that are characterized by their low cost tem and access to the source code. This case study focuses (<$300) and the fact that they were developed without on the Diebold/Premier AccuVote Optical Scan voting ter- any access to hardware specifications or the source code of minal (AV-OS) that is widely used in the USA elections. We any software running in this system. By virtue of being a present three low level manipulations of the above voting ter- firmware modification, our attacks are totally immune to minal's firmware resulting in divergence from its prescribed cryptographic integrity checks or any other type of auditing operation: (i) the first bestows the terminal with a powerful procedure (aside from an auditing procedure that inspects memory card dumping functionality, (ii) the second enables the firmware itself, which is a type of audit whose impor- the terminal to leak the ballot details through its serial port tance is strongly underscored by our work). -
Security Evaluation of ES&S Voting Machines and Election
Security Evaluation of ES&S Voting Machines and Election Management System Adam Aviv Pavol Cernˇ y´ Sandy Clark Eric Cronin Gaurav Shah Micah Sherr Matt Blaze faviv,cernyp,saender,ecronin,gauravsh,msherr,[email protected] Department of Computer and Information Science University of Pennsylvania Abstract EVEREST was the first major study of ES&S voting sys- tems, despite the system’s popularity (ES&S claims to be This paper summarizes a security analysis of the DRE the world’s largest e-voting systems vendor [1], support- and optical scan voting systems manufactured by Election ing more than 67 million voter registrations with 97,000 Systems and Software (ES&S), as used in Ohio (and many touchscreen voting machines installed in 20 states and other jurisdictions inside and outside the US). We found 30,000 optical ballot readers present in 43 states [4]), and numerous exploitable vulnerabilities in nearly every com- only the second comprehensive study that examined all ponent of the ES&S system. These vulnerabilities enable components – from backend registration systems to fron- attacks that could alter or forge precinct results, install tend ballot casting – of any electronic voting system. In a corrupt firmware, and erase audit records. Our analysis ten week period, our seven-member team was tasked with focused on architectural issues in which the interactions analyzing the nearly 670,000 lines of source code that between various software and hardware modules leads to comprise the ES&S system, encompassing twelve pro- systemic vulnerabilities that do not appear to be easily gramming languages and five hardware platforms1. -
The Help America Vote Act and Election Administration: Overview and Selected Issues for the 2016 Election
The Help America Vote Act and Election Administration: Overview and Selected Issues for the 2016 Election Arthur L. Burris, Coordinator Section Research Manager Eric A. Fischer Senior Specialist in Science and Technology October 18, 2016 Congressional Research Service 7-5700 www.crs.gov RS20898 The Help America Vote Act and Election Administration: Overview for 2016 Summary The deadlocked November 2000 presidential election focused national attention on previously obscure details of election administration. Congress responded with the Help America Vote Act of 2002 (HAVA; P.L. 107-252). HAVA created the Election Assistance Commission (EAC), established a set of election administration requirements, and provided federal funding, but it did not supplant state and local control over election administration. Several issues have arisen or persisted in the years since HAVA was enacted. Some observers have criticized the EAC for being obtrusive, slow, ineffectual, or even unnecessary. Others believe that the agency is an important resource for improving the election administration. The EAC lacked a quorum of commissioners between 2011 and 2015. HAVA requires computerized state voter registration systems, and its voting-system requirements promote the use of electronic voting systems. However, those systems, especially the kinds that record votes directly into a computer’s memory (DREs), raise concerns about security and reliability. In response, many states have enacted requirements for paper ballot records that can be verified by the voter and used in recounts. All states now use paper-based optical scan systems for at least some voters, and most use them in at least some polling places. DRE systems are also used in most states, in many cases to meet HAVA accessibility requirements, but in several states to serve as the primary voting system in at least some jurisdictions. -
STS Recommendations for the TGDC
Discussion Draft Context Description: Posted Dec. 1, 2006 This draft report was prepared by NIST staff at the request of the Technical Guidelines Development Committee (TGDC) to serve as a point of discussion at the Dec. 4-5 meeting of the TGDC. Prepared in conjunction with members of a TGDC subcommittee, the report is a discussion draft and does not represent a consensus view or recommendation from either NIST or the TGDC. It reflects the conclusions of NIST research staff for purposes of discussion. The TGDC is an advisory group to the Election Assistance Commission, which produces voluntary voting system guidelines and was established by the Help America Vote Act. NIST serves as a technical advisor to the TGDC. The NIST research and the draft report's conclusions are based on interviews and discussions with election officials, voting system vendors, computer scientists, and other experts in the field, as well as a literature search and the technical expertise of its authors. It is intended to help in developing guidelines for the next generation of electronic voting machine to ensure that these systems are as reliable, accurate, and secure as possible. Issues of certification or decertification of voting systems currently in place are outside the scope of this document and of the TGDC's deliberations. Requiring Software Independence in VVSG 2007: STS Recommendations for the TGDC November 2006 Acronyms and Terms Used in This Paper The following acronyms and terms are used in this paper. Some of these terms are also defined in the draft VVSG 2007 glossary, located at http://vote.nist.gov/TGDC/VVSG2007- glossary-20061011.doc.