Washblog || Diebold ("Premier") vote tabulators drop ballots without a record

Diebold ("Premier") vote tabulators drop ballots without a record

By Fred
Thu Mar 19, 2009 at 12:41:22 AM PST
Section: Diary Topic: Election Integrity

King County adds up votes from precincts on a system called GEMS, from Premier Election Systems (the new name for Diebold).

Despite passing certification testing, all versions until 1.18.24 could accidentally delete the first batch of ballots under some quite common conditions. Then the log files that are supposed to keep a record of changes like that did not record the deletion.

I can't figure out right now whether this affects King County: that depends on the software version and procedures in use.

The problem got caught by an innovative program in California in which volunteers re-scan the optical scan ballots and publish them on the Web so anyone can examine and re-count them:
http://blog.wired.com/27bstroke6/2008/12/unique-transpar.html

Premier acknowledged the bug, which has been in their software since 2004.

Don't confuse this with another dropped-vote bug, which showed up when uploading memory cards:
http://blog.wired.com/27bstroke6/2008/10/voting-groups-w.html

More disturbing is that the logs that exist to catch problems like this didn't record the deletion:
http://blog.wired.com/27bstroke6/2008/12/unique-election.html

More disturbing yet is the fact that "In addition, the software was discovered to have a "Clear" button which, when pressed, would actually delete the contents of an audit log without even asking for confirmation from the user":
http://www.bradblog.com/?p=6995

< On Tap @ Newport Hills Drinking Liberally | FUSE Budget Game Shows Legislators' Zero-Sum Scenario >

Diebold ("Premier") vote tabulators drop ballots without a record | 2 comments (2 topical)

We've Got to be able to Read the Code

Texas did it. I have a friend who has been in IT her whole life. She was on the committee that did code review. They made the company fix it.

by ktkeller on Thu Mar 19, 2009 at 12:49:05 PM PST

* 1 none 0 *

Immutable Transaction Logs

Hi Fred. Thanks for posting this important development. As you can guess, I'm still recovering from my burn out last year.

I'll try to determine if (and how) this new vulnerability impacts King County and other Diebold customers in Washington State.

I don't know if it's technically possible to prove that a database, and its audit logs, haven't been tampered with. (Can't prove a negative.) But I think it may be possible to verify that a log is legit.

The best candidate I recently found is a data structure called a immutable transaction log. In brief, you sign each log entry, have each entry reference the prior entry, and thereby form a daisy chain of confidence.

Here's an opinion peice: Keeping your DBA Honest, a report: Implementing a Trusted Information Sharing Environment, and a patent Method and system for generating immutable audit logs.

(Stupid patents.)

I've been researching this area for my day job, electronic medical records. I'm again delighted by how much my day work and activism compliment each other.

by zappini on Tue Mar 24, 2009 at 12:17:32 PM PST

* 2 none 0 *

Diebold ("Premier") vote tabulators drop ballots without a record | 2 comments (2 topical)

PNW TOPIC HOTLIST

WELCOME AND FAQ
ABOUT

Login


Make a new account
Username:
Password:

HELP

Recommended Diaries

We Want to Take You and We Will Nyah Nyah
Last week I'm watching a podcast of Monday's House Local Government and Housing Committee because I'm interested in the Executive Session
By ktkeller (6 comments)
Online Voting Rights for Overseas Military Personal
Having been deployed during an election I have some very passionate views on this issue. I have seen my friends simple
By dorsolplants (18 comments)
A Modest Proposal: How to Cut Education Funding
As cited in a recent Seattle P-I article, Sen. Rosemary McAuliffe, chairwoman of the state Senate education committee, warned that budget
By OrneryDemocrat (6 comments)
Federal judge calls 3-strikes "cruel and unusual"
[Front paged: NM]As seen in a DailyKos diary posted yesterday, a Ninth Circuit federal appeals court struck down a 28-years-to-life sentence
By N in Seattle (5 comments)
Michael Connell, Rove's IT Consultant, Dies In Plane Crash
On the national election integrity front, one of the big stories all summer long pertained to Stephen Spoonamore, a Republican computer
By raincity calling (7 comments)
Dorsol Plants to run for City Council
Dorsol Plants, Chair of Highland Park Action Committee, has announced that he "feels called" to run for Seattle CityCouncil, continuing
By dinazina (7 comments)