NYC Voting Machine Preview

As required by the Help America Vote Act (HAVA)(or the Help Republicans Get Elected Act), New York City is in the process of finding electronic replacements for the venerable old lever machines that have nobly served for over half a century. This week, the NYC Board of Elections is providing two demonstrations of the proposed new equipment in advance of a public hearing on November 21 (strategically timed two days before Thanksgiving) and a series of public vendor interviews that will precede the final order in March.

I attended the session on November 15 in Queens with a group from Democracy for NYC and, far from alleviating my concerns about the new machines, it raised even more issues that aren't always fully discussed when the contentious topic of voting machines arises. For anyone in New York City concerned about voting machine issues, I highly recommend that you find a way to attend the final demo session at 5PM on Friday, November 17 at Hostos Community College in The Bronx.

An overview of the proposed machines and some observations from the November 15 session follow the fold.

The Systems

There are four vendors planning to bid for five different systems:

Dieboldis offering a paper ballot / optical scan (PBOS) system to New York that features a user-marked paper ballot fed into an AccuVote optical scanner at each precinct. Ballots are marked in simple, cheap plastic privacy booths then physically carried over to the scanner, which alerts the voter of any overvotes (multiple candidates marked for a single office) or undervotes (no votes for an office or proposition). An AutoMark touch-screen terminal is provided for the handicapped to enable independent marking of paper ballots that are then fed into the same scanner used by non-handicapped voters. At the end of the day, a paper printout of the totals and the scanner memory card are carried by the police to the local police precinct for communication to the Board of Elections main office. The final tabulation is handled by the notorious Global Election Management System (GEMS)(R) software.

Since getting into the elections business in 2001, the name Diebold has become synonymous with election systems problems and questionable polling results. The atmosphere surrounding technical problems have complicated by utterances from former Diebold CEO andBush "Pioneer"Wally O'Dell, who resigned from Diebold in December 2005 in the face offraud allegations. Given the controversy, Diebold is consideringleaving the elections systems business in order to protect a brand name which is associated with a much larger and more lucrative ATM, software and security business. This does not bode well for a city seeking a long-term election solution.
 
 
 
 
 
 

ES&S is offering a system that is almost identical to the Diebold system. In fact, the AutoMark ballot marking terminal is the exact same AutoMark machine and, although the ballot scanner is different hardware, from the voter and poll worker perspective, the experience is basically identical. The distinction between Diebold and ES&S seems to lie in the software. ES&S machines use a Linux-based operating system (the only non-Windoze machine in the bunch) and, supposedly, the code has been examined and favorably reported on byNIST,the Election Science Institute, andCompuware. I can't vouch for the validity or integrity of these reports.
 
 
 
 
 
 

The similarity with Diebold is understandable since both Diebold Election Systems and ES&S have their roots in American Information Systems, a company founded in 1976 by Bob Urosevich. In 1995, Bob Urosevich, started I-Mark systems to market touch-screen voting systems. I-Mark was bought by Global Election Systems in 1997 and GES was purchased by Columbus-based Diebold in 2000. Meanwhile, Bob's brother Todd, remained at Omaha-based ES&S, which at one point (still?) was partially owned (35%) by Nebraska Senator Chuck Hagel.
 
 
 
 
 
 

Avante International Technologyis a Princeton-NJ-based company (with their factory in California) offering the Vote-Trakker EVC 308-FF, a large and impressive looking Direct Recording Electronic (DRE) system with a 42-inch LCD touch-screen and a voter-verifiable paper trail. The voter experience with the machine is extremely interactive and complex, with color-coded alerts to indicate under/over-voting. The paper "ballot" is a narrow strip of paper that appears behind a window to the right of the touch-screen and can be validated by the voter prior to casting the vote.

An obvious concern with the Avante machine was the complexity of the user interface and its potential to confuse and disorient voters who are not savvy computer users accustomed to complex computer interactions. In response to my query about this issue, a salesman stated that they had successfully used the exact same software in Warren County, NY with no complaints. However, the absence of complaints does not indicate the absence of problems, especially by non-technical users who may be loathe to cause a fuss or elections with smaller and less-complicated ballots. The folks at Avante should also probably should learn to spell"tracker" before marketing their product.

Sequoia is offering both a touch-screen (DRE) and paper-ballot / optical-scan (PBOS) system. Sequoia is a New York-based company that started in 1905 and is the provider for the current absentee voting tabulating equipment. They provided the original lever machines and are deeply embedded in the New York election process. In fact, the DRE is designed to be operated by poll-workers and voters with almost the same controls and procedures as the current lever machines. The DRE paper trail is a strip of paper along the right side of the touch-screen, so similar to the Avante machine thatAvante is suing Sequoia. The alternative ballot scanner is operated in a manner almost identical to the Diebold and ES&S machines - in the words of the sales rep,"Optical scan is optical scan."
 
 
 
 
 

Given Sequoia's long relationship with the city and New York State roots, I'd say they are a slam dunk. Why send our money to Omaha when you can pump it into the depressed upstate economy. Sequoia is recommending a "Hybrid" system incorporating both types of machines, providing voters with the option of using optically-scanned paper ballots or the handicapped-accessible touch-screen system.

Issues With Touch Screen Machines

The general consensus on the Left (with the notable exception of the handicapped community) seems to be favoring paper ballots over touch-screen (DRE) machines, regardless of whether the touch-screen machines offer a paper trail. The issues surrounding universal use of touch-screen seem almost insurmountable:

Equipment or Power Failure: DREs are complex machines that present multiple failure modes and require specialize training (and/or expensive service contracts) for maintenance. If a machine goes down due to a hardware problem or if multiple machines go down due to a design flaw, voter disenfranchisement will occur. Even if "floating" machines are allocated for replacing failed machines or if paper ballots are available, delays associated with diagnosing problems and making the decision to go to the backup plan will result in voters walking away from the polls without voting. And while paper ballots can still be marked and collected in the event of a long- or short-term power failure, DREs are useless without juice.

Software Bugs: Software testing is a very inexact science. Because of the scale of system deployment, an election system can only be fully tested at its most critical life cycle moment - on election day. There is no second chance if something goes wrong and, as with hacking, election officials are almost totally dependent on vendors with a vested interest in concealing problems. Although the software and hardware have matured significantly over the past few years, complex systems will always have bugs. The question is whether the benefit is worth the risk.

Deliberate Programming Flaws: Since election system software is complex and proprietary, one cannot say with complete certainty that the software is accurately counting the data that has been input or that a corrupt developer or development team has not hidden code or backdoors that permit validation prior to election day while manipulating the final results on election day. While this may be more suspicion than documented history, with a complex system that is opaque to voters and election officials, the potential is significant and probably the single most disconcerting issue to voting machine activists.

Hacking: While all of the proposed machines were proudly touted as having no ability to communicate with the outside world through wired or wireless paths (as mandated by state law), the central tabulating software almost certainly runs on Windoze computers that can be penetrated by determined individuals or organizations for the purpose of manipulating final vote totals. Although all vendors tout their use of state-of-the-art security techniques and encryption algorithms, no computer system can ever be made 100% secure, either from external threats or corrupted election workers. While the technical barriers can be rightfully touted as an impediment to fraud, the complexity of the software, combined with an almost complete dependence on contracted support personnel with a vested interest in concealing problems, has the potential to permit serious attacks to go undetected. In fairness, the potential for central tabulator hacking is an equal problem regardless of whether votes are collected via touch-screen or optical scanner.

Machine Printed Paper Ballots are Problematic: The Avante and Sequoia machines print results on paper that, theoretically, can be verified by the voter and used by election officials in the event of a recount. However, the paper display is small and, in the context of a huge, bright touchscreen display, fairly inconspicuous. Since the paper display is not the actual voting artifact, it will doubtless be overlooked by many voters, especially if the ballot is long or if there a large number of surly voters waiting in line for the machine. Issues that arise during the voting day cannot be addressed by poll workers and voters who raise the issue after election day will be dismissed as "conspiracy theorists". While the vendors all proclaimed the reliability of their printers, given the vagaries of climate and paper conditions and the technical knowledge and authorization required to clear jams or change paper, even limited failures on a large number of machines could call into question the validity of a recount in a very close election. And since manual counts are usually only initiated in the event of a very close race, the paper trail is useless if it is never used.

Complexity of Use: Even I as a relatively knowledgeable computer user was somewhat overwhelmed by the complexity of the DRE user interface. The strong sensory stimulation of a large, bright screen in an unfamiliar environment is a complicating factor. Despite protestations by vendors to the contrary, I feel certain that some voters will be intimidated by these machines and either require extraordinary amounts of time to complete ballots or, worse, walk away from the process entirely out of fear or disgust. The affected number of people may be small, but this could be a factor in a close election.

Poll Worker Burden: While poll workers deserve our respect and thanks, poll staffing is thankless, low-paying transient work that, because elections occur on Tuesday, is usually not sought after by folks with regular jobs or familial commitments. Training for poll workers is limited by logistic and budgetary constraints and retraining for completely new processes associated with new machines will be problematic. Given the currentshortage of poll workers, introduction of extremely complex machines threatens chaos if there are even mild technical problems.

Cost: Touch-screen machines are, obviously, very expensive capital items, although none of the vendors would give sample or comparative prices and the actual cost will certainly be subject to a bidding process and backroom dealing. There is a legitimate question about whether the total cost of operation is comparable or even lower than paper ballots when the costs of printing, training and transportation are considered. But given the ever-increasing rate of technological change, new machines will certainly have a lifetime exponentially shorter than that of the old lever machines and may become obsolete before they pay back the differential in costs relative to cheaper (but not cheap) scanners.

Paper Is Not A Perfect Solution

The general response to the issues with touch-screen machines has been a cry for return to the use of paper ballots. However, in the strong reaction to hastily implemented voting machine laws, problems with paper ballots can easily be overlooked:

Machine Counting is Inevitable: In a city that cast 2.3 million ballots cast in 1,369 precincts during the 2004 election, voting in NYC represents a significant information technology challenge. Hand counting of 2.3 million ballots would be hugely expensive, extremely time-consuming and fraught with human error. Machine counting and tabulation of votes is inevitable, bringing with it many of the same software issues as DREs. For those of us who routinely vote absentee and take comfort in our tangible paper ballot, those ballots are currently counted by Sequoia scanners. In addition, the new State and Federal rules mandate replacement of the old machines (the stick) and the State will get $50 million towards the effort (the carrot).

Paper ballots are Also Subject to Undetectable Tampering: The only way to protect the vote count with paper ballots is to protect the physical security of the ballot boxes. Since the physical security of the ballot boxes is entrusted to civil servants who are largely invisible to the larger electorate, there is little to assure voters that their paper ballots ever made it to the counting process or were not tampered with prior to a recount. Ballot stuffing, destruction and replacement are classical election manipulation techniques that go back centuries and are totally reliant on the complete integrity of hundreds of election workers. The return to paper ballots will certainly provide fodder forright-wing activists to continue to erroneously spread claims of vote fraud. In speaking with the Sequoia sales rep, I discovered that, to preserve confidentiality, NY State law does not permit the use of any sequence or identification numbering on the ballot forms. Ballots are identical and only distinguishable by the voter markings. There is no way to determine whether a ballot is legitimate.

Paper Ballots are Useless Unless They are Recounted: Most jurisdictions only permit an expensive and time-consuming hand recounts if the election falls within a very small margin of difference. Given the avenues for physically or electronically manipulating the vote counts prior to release of the initial results, it would be relatively easy for a small number of people to keep a close election from ever reaching the point of needing a recount.

User-Marked Paper Ballots are Prone to User Error: Paper ballots involve making some kind of mark with a pen to fill in a space that is then read by the scanner. The new generation of scanners currently being offered by vendors are designed to alert voters if they have overvoted (selected more than one candidate for an office) or undervoted (failed to select a candidate for an office). However, in the event of a manual recount, the markings of the voter are subject to the opinion of the auditors and can present ambiguity if the markings are not clear or if stray markings appear on the ballot. As with Florida 2000, in a close election, ambiguity on even a small fraction of 2.8 million would offer fodder for questionable legal action and unending controversy.

Conclusions

While I personally still favor paper ballots over touch-screen machines and Oregon-style mail-in balloting over in-person poll voting, the opportunity to directly see the different options has led me to some tempering of my strong opposition to DREs. There is no hardware solution to the problem, only a weighing of whether the solution only makes the problem worse.

Ultimately it's not who votes that counts, it's who counts the votes.

Tags: Avante, Diebold, ES&S, HAVA, New York City, Sequoia, Voting Machines (all tags)

Comments

7 Comments

Re: NYC Gets Voting Machines

ESS is open source. Case closed. My infamous county (Broward) used ESS.

I was a voting systems technician during the last election. My precinct had one over vote. I[m pretty sure I know what happened. A voter fiddled with the flash card and froze the system. We were able to get the machine back up and running, but were couldn't get the original ballot back up to cancel the vote.

When there is a voting machine mishap and you are voting, your privacy goes out the window because it's pretty hard to fix the machine without seeing the person's vote. (I don't have to tell you who the dirty trickster who jammed the machine was voting for.

The other glaring problem is that there is no random system of checks, although the validity of an open source operating system can be ascertained.

I didn't know that ESS used Linus. Thanks! I feel better already.

by misscee 2006-11-16 10:09AM | 0 recs
Re: NYC Gets Voting Machines

oops uses.

I haven't been able to find out very much information about central tabulators. There was a request from BBV to Slashdot members the other day. I haven't had a chance to read the comments (you can filter the comment the 194 comments received so far.)

http://it.slashdot.org/article.pl?sid=06 /11/13/1843244

by misscee 2006-11-16 10:17AM | 0 recs
Re: NYC Gets Voting Machines

Unfortunately, the presentations were focused on the hardware and look-and-feel rather than on software. Avante was notable for bringing a group of tech guys that gave a long-winded discussion of system architecture that was mostly lost on the non-technical audience. Its a shame, too, since the software issues are probably significantly more critical than the hardware, although the major capital expenditure will be the hardware

.

I'm not sure of how open-source ES&S's software is, although from your comment, you seem to know that it is. I'd assume that even if the boxes use some kind of embedded Linux, the tabulator software runs on Windoze machines.

I think the importance of open-source is a bit overstated since voters and most election officials probably have no way of knowing if the executable code on the machines has anything to do with the source code that was reviewed and certified. In all the layers of complexity and contracting, it might be relatively easy for a rogue or implanted configuration management person to slip an uncertified module or library into the final system image. And even if you assume no nefarious intent, I could certainly understand a panicked developer slipping in an uncertified patch if a show-stopper bug is discovered in the 11th hour.

by ProgressiveChristian 2006-11-16 10:59AM | 0 recs
Re: NYC Gets Voting Machines

agh.....if I have a chance I'll do the research. I have to admit I'm just pro open source. But having an operating system that is proprietary doesn't make a whole lot of sense in a democracy.

Can you think of any system that isn't vulnerable? As a math person I would think that a well developed system of random and independently performed audits would take care of bugs. What do banks do?

by misscee 2006-11-20 10:15AM | 0 recs
Re: NYC Gets Voting Machines

OK. I've had a little time to think. Because open source is open to scrutiny, it is less susceptible to bugs.

Did I tell you I am a voting machine tech? We print the zero tapes in the morning and tape them by the precinct door. Then at the end of the day we run the totals tapes and paste them next to the zero tapes. Any citizen can verify the county total results by going from precinct to precinct and counting up the totals tapes. My county tabulator doesn't worry me.
.
I would like the VST to calibrate each machine, run a logic and accuracy test on a random machine before running the zero tapes, and replace problem machines. There shouldn't be problem machines. Period. If there is a paper trail, if random audits are performed by independent technicians, I think a voter could cast his/her vote with confidence  and a recount could be conducted with some legitimacy.

Regards

by misscee 2006-11-20 02:54PM | 0 recs
and duh

I was having a blond moment.  I  can't imagine allowing a corporation to own the platform, especially given the choice. When you buy your voting equipment it should be yours to keep.  Unlike Diebold who fights every request to inspect the source code, open source means that the operating system isn't owned by anyone. It's free. Anyone can look at it without getting the permission of some corporation.

In any event, I just wanted to make some sense about what I intuitively thought.

by misscee 2006-11-27 11:47AM | 0 recs
Re: NYC Voting Machine Preview

I think your point about the central tabulator not being that serious a problem may be valid. In most of the elections I've worked, there have been multiple poll monitors recording the final precinct results and phoning them in. Assuming the machines are collecting valid data (a big assumption), problems with the tabulation software can be detected.

However, that requires a not insignificant amount of manpower for the candidates on a state level. I worked for Lamont in CT on election day and even with that high profile race, there were a number of polling places with no Lamont monitor. And once the polls have closed, there's little to guarantee the integrity of the poll tapes (which can be easily forged) or machine memory (which can be tampered with). In a close race, transposing a digit or two in a few precinct results could make a significant difference. And the central tabulator is an issue with absentee votes, since those are counted by machine in a hidden process.

With some tweaks, I still prefer the simplicity and economy of the Oregon system. Yes, it's reliant on the integrity of election officials to collect and store ballots, but thats a smaller and simpler process that can be more easily structured and monitored.

And, perhaps one of the messages of 2006 is that if you can build a large enough majority, fixing the vote becomes too difficult or obvious.

by ProgressiveChristian 2006-12-01 04:31AM | 0 recs

Diaries

Advertise Blogads