 |
Tue Feb 09 2010
|
|
|
Departments Election Issues
Utah testing of the Diebold touch-screen reveals new problems
by Black Box Voting
March 19, 2006
Emery County Clerk Bruce Funk has been running elections for 23 years.
He was quite content with his optical scan system. The state of Utah thought
otherwise: On Dec. 27, Funk took delivery on 40 Diebold TSx touch-screen
machines, part of a statewide directive.
"I had concerns about Diebold," says Funk, "but I thought, 'If the state is going
to mandate it, then I guess they'll assume responsibility if anything goes wrong.'"
Not so. He soon learned that he will be responsible but the state will decide
what election system will count the votes.
"YOU'RE GOING TO HATE MY GUTS ON ELECTION DAY"
Funk's concerns escalated when he heard a particularly unusual statement
by Diebold sales rep Dana LaTour.
"Some of you are going to hate my guts on Election Day," she said to the
assembly of elections officials. Later, another Diebold representative named
Drew was asked what LaTour meant when she said "Some of you are going
to hate my guts..."
"We're going to have problems on Election Day, and we're just going to have to
work through them," he said.
FAILURES RIGHT OUT OF THE GATE
Shortly after Funk received his "brand new" TSx machines, Diebold helped him
do acceptance testing. Two of the 40 machines promptly failed the test. Diebold
arranged to take them away.
The remaining machines showed several defects -- crooked paper feeds that jam,
memory card bay doors that wouldn't close, parts getting stuck, coming loose, falling off.
TAKING A CLOSER LOOK
Funk thought it might be a good idea to take a closer inventory.
He booted each machine up to check the battery. Some of the machines were
marked with little yellow dots, and he got to wondering about that, too. He studied
the screen messages, and noticed something very odd.
Most machines had about 25 MB of memory available, but some had only 7 MB of
free memory left. One had only 4 MB of available memory. For perspective, the
backup election file generated by the Diebold TSx is about 7.9 MB. Now why would
brand new voting machines have used-up memory?
TIME TO GET A MORE IN DEPTH EVALUATION
This prompted Funk to seek an evaluation. He asked Black Box Voting to help
him analyze his voting system.
After several consultations, Black Box Voting determined that the nature of the
problems in Emery County might be systemic and might be national in scope.
Therefore, we arranged for and underwrote the services of Harri Hursti and
also Security Innovation, Inc.
Neither Funk nor Black Box Voting were prepared for the depth and breadth of the
problems discovered. Based on these discoveries we will begin with a series of
articles followed by concise, but more formal reports.
PART I
Hursti quickly determined the three most likely causes of the low memory problem:
1. There might be completely different software in the machines with low memory.
2. Some machines might contain different external data
3. Or, some of the machines might have been delivered with natively different
amounts of memory available.
Hursti approached issue #2 first. If the used memory was due to external data or
archived election files stored on the system, he reasoned, removing any such files
would clear the memory. He discovered that some of the machines did contain test
election data, and he deleted the extra data. This produced only a small improvement
in available memory, however.
As for issue #1, different programs on the machines -- or, the existence of something
stored in memory which is hidden, such a find would obviously be disturbing.
Issue #3, the possibility that some machines had different amounts of memory left in
their life cycle, is particularly troubling. The technology choice Diebold made -- memory
storage consisting of flash memory, which is known to degrade over time -- carries
with it a possibility that used machines will be near the end of their memory life cycle.
If such machines were delivered to Emery County as "new," this would be like buying
a "new" car with 100,000 miles already on it.
The only thing that was known about the cause of this problem was that there were
different amounts of memory. The reason remained to be discovered. In the course of
evaluating the reason for the low memory, we learned much more about the TSx.
IS THERE AN INFRA-RED PORT FOR REMOTE COMMUNICATIONS?
Hursti also examined the remote communications capabilities of this system. He found
no infra-red (IrDA) ports.
"The whole thing here is that it's network aware even when RAS is not running. You're
not dialing out and it's network aware. And it's actually configured to use an Ethernet board..
.It's all the time network aware...Perhaps all you need is this Ethernet cord and a wireless
cord inserted and off you go."
Of course, the software would need to be installed for this kind of communications.
Unfortunately, we could find no way for elections officials to find out whether inappropriate
software is in the touch-screen.
"I haven't asked any 'pins' (Personal ID Number). It hasn't been hostile to me at all.
It's a very friendly guy," Hursti reports.
Hursti made a number of observations about the touch-screen, and connected it to
his laptop for further "conversation."
In the interest of brevity, we will return to this issue in a later article in this series.
A "SHOCKING" DISCOVERY
It's common for polling places to have too few outlets for a bank of voting machines.
The normal cure is to set up hook the computers up in a daisy-chain configuration, with
one plug to the wall, and the rest of the plugs linking voting machines together.
Diebold's output plug falls out readily, exposing live 110 volt wall outlet power on
bare wires.
This happened on every TSx we tested, and presents a significant safety hazard for
poll workers, especially the elderly. According to Hursti, the electrocution might only
result in a burned hand, and probably wouldn't be fatal.
This is a design flaw worthy of a general recall for standard consumer and office electronics.
DIEBOLD: DOWN FOR THE COUNT?
While analyzing the memory storage problem, Hursti discovered a critical security
hole in the foundation of the touch-screen. Then he found another in the "lobby,"
and another on the "first floor." Taken together, these present a potentially catastrophic
security hole.
These are not programming errors, but architectural design decisions.
Black Box Voting is turning the "road map" of the most dangerous security findings
over to the proper authorities. We won't let anybody sit on this for very long because
elections are looming and elections officials need to know what to do now.
A concise and more formal report will be released in a few weeks, and this will
discuss the procedures for preparing a recovery path for these security holes.
TWO THINGS WE HAVE LEARNED ALREADY:
1. Source code reviews alone are NOT sufficient. Access to fully functional
systems MUST accompany source code reviews.
2. Honest election officials and citizens again take the lead in learning the truth
about voting machines. We ask for maximum public support for Bruce Funk, who
showed courage and commitment to responsible elections. The important and
effective work of Utah voting integrity advocates Kathy Dopp
(http://www.uscountvotes.org) and Jocelyn Strait should be applauded by fellow
activists. They have played an important role to inspire this study in Utah, which may
in turn assist with efforts in many other states.
---
Black Box Voting is a nonpartisan, nonprofit 501c(3) organization dedicated to
investigating issues of election accuracy and fairness.
Email this article to a friend
|
|
 | |
Don't forget to check out articles from 2009 and 2010Election Issues
"Renowned computer security expert agrees to meet California county supervisor's '1000 to 1' challenge to 'manipulate' Sequoia voting machine!" December 13, 2006 Brad Friedman
"100 phantom votes found in one precinct; DelCo board of elections hinders investigation" December 12, 2006 Stephanie Frank Singer
"Think globally, protect the vote locally" December 1, 2006 Paul Rogat Loeb
"Will they or won't they: last chance for Democrats" November 17, 2006 David Swanson
"The vote protectors" November 16, 2006 Robert C. Koehler
"Ohio's 2006 vote count now includes a higher percentage of uncounted ballots than in 2004, and a statistically impossible swing to the Republicans" November 14, 2006 Bob Fitrakis, Harvey Wasserman and Ron Baiman
"The drama of empty numbers" November 9, 2006 Robert C. Koehler
"A monumental victory for the election protection movement" November 8, 2006 Bob Fitrakis & Harvey Wasserman
"Pick a number 2006" November 7, 2006 Mike Ferner
"How they stole the mid-term election" November 7, 2006 Greg Palast, The Guardian ( UK ), Comment
"STOP Blackwell, what's that sign: Everyone look what's going down" November 7, 2006 Bob Fitrakis & Harvey Wasserman
"Parallel election midday report" November 7, 2006 Rady Ananda
"Tuesday's outcome may depend on the power of the election protection movement" November 5, 2006 Bob Fitrakis and Harvey Wasserman
"The power of a social movement can beat the GOP double Chickenhawks" November 2, 2006 Bob Fitrakis and Harvey Wasserman
"Check out We Count for a great TownHall confrontation between Vicki Lovegren of Ohio Vigilance and Michael Vu, Supervisor of Cuyahoga County BOE" November 1, 2006 Victoria Lovegren, Ph.D.
"Official states electronic voting system added votes never cast in 2004 Presidential election; audit log missing" November 1, 2006 Peter Peckarsky, Ron Baiman, and Robert Fitrakis
"Repairing the U.S. system of voting: 50 concrete steps" November 1, 2006 Harvey Wasserman, Bob Fitrakis and Steve Rosenfeld
"Will a shocking new GOP court victory and Karl Rove's attack on Ohio 2006 doom the Democrats nationwide?" October 30, 2006 Bob Fitrakis & Harvey Wasserman
"Renoite sue Sequoia Voting Systems" October 28, 2006 Patricia Axelrod
"Severe election problems seen in ten states" October 27, 2006 Jason Leopold
"Direct material proof of massive election fraud in Ohio in the 2004 U.S. presidential election" October 26, 2006 Ron Baiman
"A talk with Mark Crispin Miller about what voters can do to prevent another stolen election" October 26, 2006 The Ostroy Report
"Will Ken Blackwell find the ways to steal Ohio 2006 as he did in 2004?" October 25, 2006 Bob Fitrakis and Harvey Wasserman
"Important voter activism" October 22, 2006 Victoria Lovegren, Ph.D.
"A loaves & fishes/Holy Ghost victory for the GOP in November?" October 17, 2006 Bob Fitrakis & Harvey Wasserman
"Why is the man who stole Ohio campaigning with a white supremacist?" October 9, 2006 Bob Fitrakis and Harvey Wasserman
"This cannot be" September 28, 2006 Robert C. Koehler
"Court victory lets preserved Ohio 2004 ballots tell new tales of theft and fraud as indictments and convictions mount" September 25, 2006 Bob Fitrakis & Harvey Wasserman
"Unfit for use in ANY democracy" September 20, 2006 Rady Ananda
"An open letter to Gov. Robert Taft and Sec. of State J. Kenneth Blackwell" September 8, 2006 Harvey Wasserman, et. al.
"Coshocton County complaint" September 3, 2006 Tim Kettler
"Saving the ballot evidence from Ohio 2004" September 2, 2006 Bob Fitrakis and Harvey Wasserman
"San Diego suit’s second hearing: Judge to rule next Tuesday on constitutional and jurisdictional questions" August 25, 2006 Rady Ananda
"New Zogby Poll: It’s Nearly Unanimous" August 24, 2006 Michael Collins, “Scoop” Independent Media
"How the last presidential election awoke me from an unsound sleep" July 22, 2006 Jeanne Norris Weinberg
"PFAW's Neas praises advance of Voting Rights Act, Calls on Bush Administration to start enforcing the law" July 22, 2006 People For the American Way
"Why Democrats don't count: lessons from the un-Gore of Mexico" July 16, 2006 Greg Palast
"Resolution of no confidence in current U.S. elections" July 16, 2006 J30 Coalition
"An open letter from Ohio to the people of Mexico" July 13, 2006 Bob Fitrakis and Harvey Wasserman
"The stolen election of 2004" July 11, 2006 Michael Parenti
"The Democrats must now say "We Do Not Concede" in the U.S. as it's being said in Mexico" July 9, 2006 Bob Fitrakis and Harvey Wasserman
"Project Vote, voting rights organizations, file to overturn restrictive voter registration rules " July 7, 2006 Brian Mellor
"BBV: Unredacted Hursti Diebold reports, photos released" July 4, 2006 Bev Harris
"Ignore that man behind the screen, Dorothy" July 1, 2006 Greg Palast
"Bob Fitrakis for Governor -- he is now on the ballot" July 1, 2006 Fitrakis campaign
"Alameda County supervisors embrace election fraud" July 1, 2006 Allen C. Michaan
"San Diego’s run-off election aggregate results are plausible" June 18, 2006 Ron Baiman
"A vote of no confidence: democracy left to languish in living rooms, garages" June 15, 2006 Robert C. Koehler
"Kennedy's challenge: Salon, Mother Jones & the tortured dialogue" June 15, 2006 Michael Collins and
"Warren County revisited" June 12, 2006 Richard Hayes Phillips, Ph.D.
"Something smells fishy in San Diego!" June 11, 2006 Ron Baiman
"Response to Salon Magazine" June 6, 2006 Ron Baiman
"Analysis of Connally spreadsheet and other documents" June 5, 2006 Ron Baiman
"RFK and Rolling Stone nail Ohio's stolen 2004 election, but much more must be done" June 3, 2006 Bob Fitrakis and Harvey Wasserman
"Pick a card, any card" May 27, 2006 Richard Hayes Phillips, Ph.D.
"Will the major media finally cover the electronic election fraud issue?" May 15, 2006 Bob Fitrakis and Harvey Wasserman
"The money pit: Diebold vs. America " May 15, 2006 Denis Wright
"Worst security flaw ever - 3 states invoke Diebold emergency procedures" May 15, 2006 Black Box Voting
"Cranks and Kooks: Kerry won in '04" May 11, 2006 Greg Palast
"Ohio 2004 election thief grabs Gov nod while (surprise! surprise!) voting machines malfunction" May 5, 2006 Bob Fitrakis and Harvey Wasserman
"Hand counted paper ballots in 2008" April 14, 2006 Sheila Parks
"Busheviks connected to New Hampshire phone-jamming scheme" April 14, 2006 The Ostroy Report
"Are mainstream churches finally standing up to the GOP’s hateful “Christian” blitzkrieg?" April 9, 2006 Bob Fitrakis and Harvey Wasserman
"Thousands march in New Orleans for right for Katrina survivors to vote in the city’s April 22 election" April 7, 2006 Rainbow/PUSH Coalition
"Shocking Diebold conflict of interest revelations from Secretary of State further taint Ohio's electoral credibility" April 6, 2006 Bob Fitrakis and Harvey Wasserman
"Faith-based voting" March 30, 2006 Robert C. Koehler, Tribune Media Services
"Targeting the voters in Toledo" March 30, 2006 Richard Hayes Phillips, Ph.D.
"Targeting the voters in Cincinnati" March 30, 2006 Richard Hayes Phillips, Ph.D.
"Through a glass Darkely" March 30, 2006 Richard Hayes Phillips, Ph.D.
"Is the Mainstream Media finally getting half the rigged voting machine story?" March 29, 2006 Bob Fitrakis and Harvey Wasserman
"Please help Clint Curtis" March 23, 2006 Robert Lockwood Mills
"Utah testing of the Diebold touch-screen reveals new problems" March 19, 2006 Black Box Voting
"Trust us" March 17, 2006 Robert C. Koehler, Tribune Media Services
"Harman vs. Winograd, tough choice?" March 17, 2006 David Swanson
"Why did J. Kenneth Blackwell seek, then hide, his association with super-rich extremists and e-voting magnates?" March 10, 2006 Bob Fitrakis and Harvey Wasserman
"Did 308,000 cancelled Ohio voter registrations put Bush back in the White House?" February 28, 2006 Bob Fitrakis and Harvey Wasserman
"Statisticians recommend new measures to ensure vote count accuracy, release "Ohio’s 2004 exit poll analysis for novices”" February 17, 2006 Kathy Dopp
"As Alito takes Supreme Court seat, Ohio GOP guts election protection " February 1, 2006 Bob Fitrakis and Harvey Wasserman
"The Harri Hursti hack and its importance to our nation" January 29, 2006 Susan Pynchon, Florida Fair Elections Coalition
"Programmer Jeff Dean worked for chief of White House Plumbers unit" January 26, 2006 Bev Harris, Kathleen Wynne, and John Howard
"Free Press Editor in Film at Sundance" January 23, 2006 Free Press Staff
"PA activists sue to vote on machines" January 20, 2006 Rady Ananda
"Important documents" January 20, 2006 Free Press staff
"The gun is smoking - The gun is smoking - 2004 Ohio precinct-level exit poll data show virtually irrefutable evidence of vote miscount" January 18, 2006 Kathy Dopp and Ron Baiman
"Recipe for hacking ES&S and Sequoia, Hursti-style" January 4, 2006 Black Box Voting
"What’s all the fuss about Diebold in Florida and California?" January 4, 2006 John Washburn, for VoteTrustUSA
"New info may take out Diebold touchscreens" January 1, 2006 Black Box Voting
Read Articles by Year: 2010 2009 2008 2007 2006 2005 2004 2003 2002 2001 2000

All content © 1970-2009 The Columbus Free Press Disclaimer |