As Elections Near, Officials Challenge Balloting Security

The questions about electronic balloting have become widespread as states and counties move to upgrade equipment, as required by the 2002 Help America Vote Act. The law and new state regulations were enacted to make voting more accessible and more accurate, a response to the controversy generated by the contested outcome in Florida in the 2000 presidential election.

Since the federal law was passed, though, a hodgepodge of federal and state requirements and debates over the best technology have complicated the task of upgrading. In a recent survey by the National Association of Secretaries of State, 17 of 43 states that responded said they expected to miss a congressionally imposed Jan. 1, 2006, deadline to upgrade voting systems. Election officials have repeatedly clashed with voting-machine manufacturers.

In Connecticut, for example, Secretary of State Susan Bysiewicz said she would scrap her plans to replace her state's lever machines after the company she planned to buy from "misrepresented" itself in negotiations about how accessible the machines would be for people with disabilities.

In Miami-Dade County, Fla., the elections chief -- the third in five years -- is thinking about tossing out touch-screen systems installed after 2000. The concern is that they do not leave a paper trail that auditors could examine in a disputed election and are expensive to use.

In California, the secretary of state recently asked Hursti to investigate whether Diebold machines the state was considering had similar vulnerabilities.

The events that set in motion Hursti and Sancho meeting, and a new wave of concern over today's voting technologies, started in 2003, when a Seattle-based activist named Bev Harris released thousands of Diebold documents she said she found on an unsecured portion of the company's Web site. Some computer scientists said the documents showed Diebold's systems were vulnerable to attack. Today, more than 800 jurisdictions use their technology, Harris said.

She wanted to find a way to test whether those vulnerabilities could be exploited. Sancho volunteered his equipment to be tested by experts Harris would select.

Harris recruited computer expert Herbert Thompson, and on Feb. 14, 2005, in Tallahassee, Thompson met with Sancho and tried to crack the Diebold system remotely. The first attempt failed. On a second attempt, by directly accessing a computer where the votes are counted in a final tally, he manipulated returns. They used a local high school election for the experiment.

In May, two more tests were held, this time with Hursti present. Using a device bought for about $200, he was able to easily alter the final vote by changing the program stored on the memory card.

"You have to admit these systems are vulnerable and act accordingly," Hursti said.

Diebold took a dim view of the experiments. On June 8, a senior company lawyer faxed Sancho: "You have willfully and intentionally allowed the manipulation of memory cards related to your elections. . . . We believe this to have been a very foolish and irresponsible act."

The response frustrated Sancho. "More troubling than the test itself was the manner in which Diebold simply failed to respond to my concerns or the concerns of citizens who believe in American elections," he said. "I really think they're not engaged in this discussion of how to make elections safer."

He is also critical of state officials who he believes should have caught the vulnerabilities earlier. He said that vendors such as Diebold have too much influence in the administration of elections, a view that resonated with Lida Rodriguez-Taseff, the founder of the Miami-Dade Election Reform Coalition. Sancho is "truly an advocate for voters," she said. "What he is doing in Leon County goes completely against the grain of county election commissioners elsewhere, who are allowing vendors to dictate how to run their own elections."

Johns Hopkins University computer sciences professor Avi Rubin, who is leading a group that has received a $7.5 million grant from the National Academy of Sciences to research election technology, said the vulnerabilities of electronic systems -- including new touch-screen voting machines -- point to the need for a paper trail in any election. "The more I see, I say we need voting to rely on paper," he said. About 26 states require paper ballots, according to Verified Voting, an advocacy group.

Jenny Nash, a spokeswoman for Florida's secretary of state, said in the end the integrity of any voting system must be protected by the local officials who administer elections. "Machines are designed and certified to operate in a secure environment and under secure procedures that each supervisor puts in place and follows directly," she said.