Re: "E-Vote: Ohio Election Systems Have Critical SecurityFailures, Says Secretary of State"--GovTech.com (Ed's occasional clippingservice)

From: Richard C. Johnson <dick_at_iwwco_dot_com>
Date: Wed Dec 19 2007 - 09:19:44 CST

Ron,

OVS can build an Open Source optical scan system for Cuyahoga County if they are willing to partner with us and front money for Federal and Ohio State certification. In the end, they will save money over any other solution and will have full control over a fully certified Open Source voting system based on optical scanners.

But...there is nothing on the shelf that is suitable right now. If Cuyahoga wants to partner, let us know. We will do it on a cost + $0 basis. OVS simply does not have the resources at this time to build out a system for Ohio and to get the system certified without front money.

Otherwise, I would have to recommend that they invest in both precinct and central scan from different vendors and cross-check the different systems after the election, running the precinct paper ballots through the central scanner to look for discrepancies.

Finally, I would perform a full audit, including hand counting, of the election and all the official ballots counted, checking both vendor's systems against a hand count. Most of all, I would insure that the entire election process be done with the public able to watch.

Best wishes,

-- Dick

Richard C. Johnson, Ph.D.
CEO
Open Voting Solutions, Inc.
3 Silver Beech Court
Poquott, NY 11733
631-689-3736 office
631-689-3774 fax
631-827-6899 mobile

Ron Olson <ron@caseohio.org> wrote: The Ohio report also touches briefly on the need to replace the DRE's in
Cuyahoga county asap.

If there is a Open Source Optical Scan alternative available now, let me
know and I will try to inform the right people.

Ron

-----Original Message-----
From: ovc-discuss-bounces+ron=caseohio.org@listman.sonic.net
[mailto:ovc-discuss-bounces+ron=caseohio.org@listman.sonic.net] On Behalf Of
Edmund R. Kennedy
Sent: Tuesday, December 18, 2007 10:46 AM
To: Open Voting Consortium discussion list
Subject: [OVC-discuss] "E-Vote: Ohio Election Systems Have Critical
SecurityFailures,Says Secretary of State"--GovTech.com (Ed's occasional
clippingservice)

This should come as no surprise to most readers of this list. Still, it is
nice to get confirmation.

E-Vote: Ohio Election Systems Have Critical Security Failures,
Says Secretary of State
Dec 17, 2007, News Report

Ohio's electronic voting systems have "critical security failures" which
could impact the integrity of elections in the Buckeye State, according to a

review of the systems commissioned by Secretary of State Jennifer
Brunner.

"The results underscore the need for a fundamental change in the
structure of Ohio's election system to ensure ballot and voting system
security
while still making voting convenient and accessible to all Ohio voters, "
Secretary Brunner said Friday in unveiling the report.

"In an era of
computer-based voting systems, voters have a right to expect that their
voting
system is at least as secure as the systems they use for banking and
communication," she said.

The Report

The Evaluation &
Validation of Election-Related Equipment, Standards & Testing report, known
as EVEREST,
is a comprehensive review of voting systems revealing startling findings on
voting machines and systems used in Ohio and throughout the country. The
Ohio
study tested the systems for:

Risks to vote security
System performance, including load capacity
Configuration to currently certified systems specifications
Operations and internal controls that could mitigate risk.

The $1.9 million study, paid for using federal funds, was structured to
allow
two teams of scientists, corporate and academic, to conduct parallel
assessment
of the security of the state's three voting systems -- Election Systems &
Software (ES&S), Hart Intercivic and Premier Election Solutions (formerly
Diebold) -- in both voting and board of elections environments. Separate
research was conducted on each voting system's performance, configuration
and
operations and internal controls management. A bipartisan team of 12
election
board directors and deputy directors advised the study and evaluated all
reports, participating with the secretary in making recommendations for
change.

While some tests to compromise voting systems took higher levels
of sophistication, fairly simple techniques were often successfully
deployed.

"To put it in every-day terms, the tools needed to compromise an
accurate vote count could be as simple as tampering with the paper audit
trail
connector or using a magnet and a personal digital assistant," Brunner
said.

The researchers in the Ohio study didn't address the issue of
probability of attack, leaving that to the determination of state and local
officials. The researchers commented that with the lack of technical
measures in
voting system design, its integrity "is provided purely by the integrity and

honesty of election officials."

"It's a testament to our state's boards
of elections officials that elections on the new HAVA mandated voting
systems
have gone as smoothly as they have in light of these findings," Brunner
said.

Testers looking at the performance of the voting systems used in
Ohio and in many locales throughout the country, identified numerous risks
to
election integrity ranging from minor to severe, according to the
review.

Also, those examining how voting systems were configured in the
field found risks such as the use of materials like memory storage and
printer
paper that had not been certified by the voting system manufacturers; a lack
of
standardized equipment testing and that revisions to voting system software
for
all systems and counties were not documented or tracked, the review
said.

Recommendations
Secretary Brunner has presented
recommendations and options to address these findings to Gov. Ted Strickland
and
legislative leaders for their consideration. Among the top recommendations
are:

Eliminating points of entry creating unnecessary voting system risk by
moving to central counting of ballots
Eliminating Use of direct recording electronic (DREs) and precinct-based
optical scan voting machines that tabulate votes at polling locations
Utilizing the AutoMark voting machine for voters with disabilities. This
machine "reads" the bar code on a blank ballot and acts solely as a ballot
marking device, allowing voters, especially those with disabilities, to mark

ballots with little or no assistance, preserving the secrecy of their ballot

selections.
Requiring all ballots be optical scan ballots for central tabulation and
effective voter verification
Maintaining "no fault" absentee voting while establishing early (15 days
prior to the election) and Election Day vote centers (of the size of five to
10
precincts), eliminating voting at individual precincts or polling places of
less
than five precincts
Requiring all special elections (issues only) held in August 2008 to be
voted by mail (no in-person voting, except at the board of elections, for
issue-only elections held in August 2008)

Cuyahoga County Primary Election Remedy

With a swift indication
for state funding assistance, Cuyahoga County could move to a central-count
optical scan voting system in time for the March 2008 primary election by
using
leased DREs for precinct- based voting by persons with disabilities and
purchasing high-speed optical scanners (with compatible server and software
and
voting booths) for optical-scan voting.

This option has been estimated
to cost between $2 million and $2.5 million. All purchased equipment could
transfer to a vote center voting system for use in November 2008, and extra
voting booths not needed for vote centers could be redistributed to other
counties migrating from DRE to optical scan central count vote centers. The
county would be responsible for printing a sufficient number of ballots for
the
March primary election. If this option were approved, purchases would need
to be
made immediately, with reimbursement applied for by the secretary of state
to
the Ohio General Assembly to reimburse the Cuyahoga County commissioners for

equipment purchases.

Conclusion
The EVEREST study builds upon
previous studies conducted around the country on voting systems, the Ohio
secretary of state's office said. The study of the ES&S systems, however, is

the first of its kind, according to officials.

The Ohio study used
testing done by both researchers from academic institutions including the
University of Pennsylvania, Pennsylvania State University and University of
California at Santa Barbara, as well as corporate security personnel from
firms
such as Systest Labs of Denver and MicroSolved Inc. of Columbus, Ohio. The
Battelle Memorial Institute of Columbus served as project
manager.

Researchers in the Ohio study had access to the computer source
code provided by voting machine manufacturers as well as access to much of
the
equipment and documentation, the Secretary of State's Office said.

Thanks, Ed Kennedy
 

-- 
10777 Bendigo Cove
San Diego, CA 92126-2510 
858-578-8842
 
Work for the common good.
My profile:  
_______________________________________________
OVC-discuss mailing list
OVC-discuss@listman.sonic.net
http://lists.sonic.net/mailman/listinfo/ovc-discuss
By sending email to the OVC-discuss  list, you thereby agree to release the
content of your posts to the Public Domain--with the exception of
copyrighted material quoted according to fair use, including publicly
archiving at  http://gnosis.python-hosting.com/voting-project/
_______________________________________________
OVC-discuss mailing list
OVC-discuss@listman.sonic.net
http://lists.sonic.net/mailman/listinfo/ovc-discuss
By sending email to the OVC-discuss  list, you thereby agree to release the content of your posts to the Public Domain--with the exception of copyrighted material quoted according to fair use, including publicly archiving at  http://gnosis.python-hosting.com/voting-project/

_______________________________________________
OVC-discuss mailing list
OVC-discuss@listman.sonic.net
http://lists.sonic.net/mailman/listinfo/ovc-discuss
By sending email to the OVC-discuss list, you thereby agree to release the content of your posts to the Public Domain--with the exception of copyrighted material quoted according to fair use, including publicly archiving at http://gnosis.python-hosting.com/voting-project/
==================================================================
= The content of this message, with the exception of any external
= quotations under fair use, are released to the Public Domain
==================================================================
Received on Mon Dec 31 23:17:06 2007

This archive was generated by hypermail 2.1.8 : Mon Dec 31 2007 - 23:17:10 CST