• On BNET: Vote: How will Apple blow it?
July 30, 2008 11:41 AM PDT

Calif. official votes for optical scans, hand tallies

by Elinor Mills

SAN JOSE, Calif. -- California voters this year will be using paper ballots that will be optically scanned and manually audited to protect against fraud and problems that have marred elections conducted with electronic voting systems, California Secretary of State Debra Bowen said Wednesday.

Debra Bowen, California's secretary of state, speaks with CNET News after giving a keynote address at the Usenix security conference on the voting plan for the state.

(Credit: CNET News)

In a keynote address at the Usenix security conference entitled "Dr. Strangevote or: How I Learned to Stop Worrying and Love the Paper Ballot," Bowen said optical scanning was a "pretty good, although not perfect alternative" to direct-recording electronic voting.

"I don't think a perfect voting system exists or can be created because for every brilliant idea that we execute perfectly we'll have an equally brilliant person figuring out a way around it," she said.

Optical scanning preserves the original ballot and allows the state to check the accuracy of results "through hand tallies of a meaningful percentage of randomly selected precincts after every election and for every contest," she added. "Hand tallies mean never having to say 'I trust you' to hundreds of thousands of lines of code."

Touchscreen systems don't have an original record or any way to reconstruct the voter's intent, Bowen said. Also, e-voting paper trails often are confusing to voters who are forced to verify their votes on paper that appear in a different format from what they saw on the touchscreen, she said.

Not only have outcomes with electronic voting systems been challenged and questioned in real elections, but numerous studies--including a thorough study Bowen commissioned last year--have shown that the e-voting systems can be tampered with, can have programming mistakes that record the wrong results or display the wrong ballot type, and choices can be altered or interfered with as a result of something as simple as barbeque sauce stuck to the touchscreen, according to Bowen.

The frailty of e-voting systems
Reviews of electronic voting systems have found that they are susceptible to virus attacks that can corrupt data and spread from one machine to every other machine in the jurisdiction, she said. Many electronic systems have been found to have hardcoded passwords or passwords that are easy to guess or the same in every machine, and vendors have systems where a single key opens any voting machine from that company, she said.

Bowen told of the ease with which researchers were able to defeat physical security features on e-voting machine, for instance by unscrewing housings to bypass a security seal and thus leaving no evidence that the box was tampered with.

A new report on the ES&S voting systems from a team at the University of Pennsylvania found numerous exploitable vulnerabilities in the system, including the ability to delete data using handheld devices and a small magnet, she said.

With systems that use paper trails combined with electronic ballots, research has found that it can be difficult to see the results on the paper through a plastic covering that they appear behind, and many voters don't bother to try to verify their results.

A paper ballot is a permanent record that is easy to audit, whereas electronic vote records and audit logs can be altered, she said. And many e-voting systems use Microsoft Access for tallying votes, which opens the system up to fraud, she added. "Votes can readily be moved from one column to another .... without being detectable."

California and West Virginia are the only two states that have a statutory requirement for random manual vote tallies, according to Bowen.

"I added requirements for additional manual tallies of 10 percent of precincts in any contest where the margin of victory is less than one half of one percent," Bowen said. If there is a problem with the scanning software for any reason additional audits can be done, she added.

VIDEO: Bowen tells CNET News what system will be used in the November elections and why she thinks it is better than relying on electronic voting systems that use paper trails.

Elinor Mills covers Internet security and privacy. She joined CNET News in 2005 after working as a foreign correspondent for Reuters in Portugal and writing for The Industry Standard, the IDG News Service, and the Associated Press. E-mail Elinor.
advertisement
Click here!
Recent posts from Security
Microsoft to fix holes in Windows, Office
Google privacy controls: Most people won't care
Zero-day flaw found in Web encryption
Mac Game: Art project or malware?
Corporate bank accounts targeted in online fraud
Hacker breaks into jailbroken iPhones, asks for $7
Malwarebytes accuses rival of software theft
Security firm M86 acquires Finjan
Add a Comment (Log in or register) (3 Comments)
  • prev
  • 1
  • next
by AndrewRich July 30, 2008 1:32 PM PDT
Wonderful, California will use honest machines. Will Florida and Ohio?
Reply to this comment
by Dalkorian July 30, 2008 3:03 PM PDT
I'm struggling to remember when I *DIDN'T* use these machines in my jurisdiction (Santa Barbara County). It's been DECADES that I've been voting with these optical scan machines. I can't for the life of me understand why everyone isn't using them - except for the obvious one that they're harder to tamper with (they hold the evidence of the vote within them!). Perfect? No, there is no such thing. But I have some confidence in them, which I wouldn't using some Diebold rigged POS touch screen disaster designed to re-elect repukes. Believe me, if we were forced into those deceitful atrocities, I'd absentee vote instead and hope for the best.
Reply to this comment
by pamvv July 30, 2008 4:59 PM PDT
Great article. But more than just two states have statutory requirements for manual post-election audits of the vote tallies. See http://verifiedvoting.org/audits for details.
Unfortunately, not all the states that COULD be doing audits ARE doing audits.
Reply to this comment
(3 Comments)
  • prev
  • 1
  • next
advertisement

FAQ: Buying the right Windows 7 upgrade

Readers still have lots of questions on just which version of the software they need to buy in order to upgrade their PC. CNET News tries to offer some answers.

N.Y. lawsuit details Intel's 'largesse' toward Dell

Attorney General Andrew Cuomo's federal antitrust case filed Wednesday alleges a longstanding symbiotic relationship between Intel and Dell.

About Security

Online security is threatened by more than hacking and phishing attempts. Check here for the latest updates on software vulnerabilities, data leaks, and rapidly spreading viruses--and learn how to protect your systems.

Add this feed to your online news reader

Security topics

advertisement
advertisement

Inside CNET News

Scroll Left Scroll Right