Thread: Security debate grows over Internet voting

Security debate grows over Internet voting

By Richard Wolf, USA TODAY

State efforts to let military and overseas voters cast ballots using the Internet have set off warnings from computer security experts that elections could be subject to cyberattacks.

The debate intensified after the District of Columbia tested an Internet voting system for possible use next month and invited computer scientists to try hacking into it. They did, without much trouble.

Arizona and West Virginia will allow military and overseas voters to use the Internet on Nov. 2 with systems the states claim are safe. More than 20 other states let those voters use e-mail, which some election security experts say is just as vulnerable. Congress has asked the Pentagon and the states to conduct pilot projects.

MAP: Track House, Senate and governor races

Computerized options for the nation's 4 million to 5 million military and overseas voters have spread almost as fast as the use of touch-screen machines in the United States a decade ago. Although no fraud has been detected, the computer lines are fraught with danger.

"The nature of the Internet can be so insecure," says Rokey Suleman, the D.C. director of elections who ordered up the test. "Right now, maybe it can't be done. But we have to do projects to get us there."

The debate over Internet voting focuses on members of the military and Americans living overseas who have had difficulty getting and returning ballots by Election Day. In 2008, only two-thirds of them returned their ballots on time, compared with 91% of absentee voters.

A law passed by Congress last year mandates that states send out absentee ballots to military voters and Americans abroad at least 45 days before an election and make electronic delivery of those ballots an option. It recommends pilot programs for returning voted ballots via the Internet, which is considered riskier.

'We have to move cautiously'

So far, two states and the District of Columbia have made tentative moves in that direction:

•Arizona pioneered the process in 2008 and is continuing it this year. Voters can scan and upload paper ballots to an online system with a user name and password, and they must include a signed affidavit. In 2008, 135 of 9,171 military and overseas voters used the system. So far this year, 57 voters have used it in three elections.

"It's something that we have to move cautiously on," Secretary of State Ken Bennett says. "If people can go to ATM machines and move tens of thousands of dollars around, I'd like to believe that someday we'll be able to make voting similarly convenient."

•Five counties in West Virginia let military and overseas voters cast ballots on a website that uses proprietary software. Just 77 voters used it in the May primary. For next month's general election, which includes a U.S. Senate race that could tip the balance of power between Democrats and Republicans, eight counties are offering it.

"This is still just an option for our military and overseas voters," Secretary of State Natalie Tennant says. "But I feel like we have our bases covered."

•The District of Columbia was preparing to offer Internet voting to its military and overseas voters Nov. 2, but the test proved its vulnerabilities.

University of Michigan assistant professor J. Alex Halderman and two graduate students hacked in, saw who was "voting," changed votes and left the school's fight song as their calling card. While controlling the server, he says, they also saw cyberattack efforts that appeared to come from China and Iran.

"It's a learning experience for everyone," he says. "Election officials should be asking whether the technology is safe, not presuming that it someday will be."

Halderman's success came as little surprise to the non-profit Open Source Digital Voting Foundation, which provided the technology for the D.C. test. Its officials don't believe Internet voting is ready for prime time.

"How America votes is just as important as who they vote for," says Gregory Miller, the foundation's co-executive director. "You are running far too much risk."

How much risk to accept

Internet elections have been held elsewhere in the past. In 2000, Arizona Democrats held their presidential primary mostly on the Internet. In 2007, Honolulu offered Internet voting for its 33 neighborhood advisory boards. Last year, it eliminated in-person voting for those boards to save money and went entirely to the Internet and phone, but participation dropped from 24% to 6%.

Organizations directly involved in serving military and overseas voters say the Internet isn't ready to host elections. The Defense Department's Federal Voting Assistance Program, which helps military and overseas voters, has been working with the U.S. Election Assistance Commission in hopes of holding a test in 2012.

"This is ultimately a policy decision as to how much risk you're willing to accept," says Bob Carey, the program's director. "We need to make sure that we've crossed our T's and dotted our I's."

Susan Dzieduszycka-Suinat, executive director of the Overseas Vote Foundation, which helps U.S. voters in foreign countries, says Internet and e-mail voting puts at risk what they fought for years to obtain by demanding earlier and easier delivery of ballots.

"We're pushing the envelope too early with what I call precious cargo," she says.

Security watchdogs agree.

"Nobody knows how to conduct an election that is immune to the kinds of attacks we in the security community know how to do," says David Jefferson, a computer scientist at Lawrence Livermore National Laboratory who chairs VerifiedVoting.org, an election security group. "We can't have our election systems exposed to cyberattacks."

http://www.usatoday.com/tech/news/techp ... 6_ST_N.htm

E-mail, fax voting widely available

A growing number of states allow military and overseas voters to cast absentee ballots by fax and e-mail, in addition to mail. Voting methods, by state:

Interactive map @

http://www.usatoday.com/tech/news/techp ... 6_ST_N.htm

What about all this early voting. I keep running into people saying that they have already voted. I can see allowing the military to vote early, but the neighbor next door?? Something is fishy about it.

internet voting without a paper trail is a bad bad idea ....

Originally Posted by GoodVibrations

What about all this early voting. I keep running into people saying that they have already voted. I can see allowing the military to vote early, but the neighbor next door?? Something is fishy about it.

Early voting is really convenient for people who have variable work schedules, like truck drivers ,traveling salesmen, company reps, etc. who don't have much advanced notice of when they have to leave home. They go to the Registrar of Voters Office up to 30 days before the election and vote. They then can't have a ballot mailed to them and they can't vote at the polls. It has worked well for many years. Also nice if you just want to vote on Sat. or Sun. because you are busy on election day. I have been voting by mail for years. You can mark your ballot any time of the day or night, 7 days a week and just drop it in the mail anytime before the election.

New machine moves mail ballots faster

By Michele Clock
Tuesday, October 26, 2010 at 7:33 p.m.

A week before Election Day, a new $700,000 machine was already processing many of the growing number of vote-by-mail ballots county voters are filing.

San Diego County Registrar of Voters Deborah Seiler and her staff showed the machine on Tuesday, which she said will be used to count the estimated 400,000 mail ballots expected to be submitted.

About 49 percent of county voters are signed up to use mail ballots, Seiler said. Overall, she expects 55 to 65 percent of registered voters to participate in Tuesday’s election.

The new machine is similar to those already used in some California counties, Seiler said. The 56-foot long machine sorts ballot envelopes by precinct, and then election staff take the ballots and count them.

Previously, she said her office borrowed other machines to sort the mail ballots, but she said the new machine can sort the ballots more quickly. She expects to save about $80,000 in processing costs and said the county hopes to be at least partly reimbursed by the federal government for the cost of the machine.

The Registrar of Voters office in Kearny Mesa was already in full swing Tuesday, Seiler said, taking walk-in voters and sorting through the roughly 221,000 mail-in ballots that have already been received.

More poll workers were still needed in some neighborhoods for next Tuesday’s election, the registrar announced. In particular need are people who are bilingual in Spanish, Filipino or Vietnamese. Poll workers receive stipends ranging from $75 and $150 depending on the assignment, county officials said. For more information, call 858-565-5800 or e-mail

pollworker@sdcounty.ca.gov.

michele.clock@uniontrib.com • (619) 293-1264

http://www.signonsandiego.com/news/2010 ... ts-faster/