Secure Elections Network – Indivisible East Bay

June 5, 2019 indivisibleebadmin Election results, Get Involved, Uncategorized

Building a Team to Secure Our Elections

By Haleh S

The security and integrity of U.S. elections has been heatedly discussed in public, and by the media and politicians, especially since our 2016 election. The terms election security and election integrity are often used interchangeably, with much of the recent focus on election security – generally referring to steps we take to protect voting machines from foreign or domestic hacking – because of Russia’s interference. Election integrity usually refers to preserving our democratic electoral processes, including voter registration, accessibility, ballot counting, vote audits, and generally protecting voter confidence in the system.

To ensure election integrity we must promote fair, credible, professional, and inclusive electoral processes. According to the Electoral Knowledge Network, without electoral integrity we can’t hold leaders and officials accountable to the public, and our confidence in election results is weakened. A 2016 Gallup poll revealed that only 35% of Americans were “very confident” that their vote would be counted accurately. Voter confidence in any democratic election process is one of the necessary elements of protecting the integrity of elections.

On May 19, 2019, the Secure Elections Network presented a webinar, “Making Connections: Working with Elections Officials for Common Goals,” featuring Tina Barton, the City Clerk of Rochester Hills, Michigan, and an election security advocate. Barton was appointed to Michigan’s Election Security Commission by the MI Secretary of State. The Commission, the first of its kind, was created in March 2019 to help boost voter confidence, increase turnout, and secure the integrity of elections against known and future threats such as hacking.

A passionate leader in protecting the electoral process, Barton wants to make the process fair and accessible to all eligible voters, and to increase voter confidence in elections. In her presentation, Barton highlighted current challenges with interactions between election officials and election advocates, and suggested ways to overcome them. We should benefit from each other’s strengths by collaborating, said Barton, stressing the importance of having a unified team of election officials and advocates to secure our 2020 and future elections. Her presentation featured Henry Ford’s motto: “Coming together is a beginning, staying together is progress, working together is success.” Some of her concrete suggestions were that officials and advocates communicate frequently to share information, work together to recognize and fix problems, present unified messaging on registration and voting, and hold events jointly.

In her “Open Letter to Advocates of All Things Election Related”, Barton encourages advocates and officials to work together to get correct information to voters. She’s also dedicated to stopping partisan interference and attacks on voter confidence, stating during the webinar that elections should be a nonpartisan battle ground.

We are not each other’s enemy

Barton noted that the majority of contacts between election officials and voting rights groups have been negative and adversarial. She believes that advocacy groups have the misconception that election officials and election workers seek to impede the process, and because of that election officials often feel they’re being attacked or are doing something wrong. Barton thinks these problems are often caused by lack of understanding of each other’s roles. She explained that in many small or rural municipalities, one official is responsible for a wide range of duties and responsibilities, with elections being only one. Often these officials lack the necessary technical knowledge about aspects of election security that advocates ask about. This misunderstanding often causes hostility between them, although in reality both sides want the same things — secure electoral processes.

Another cause of mistrust and confusion between advocacy groups and election workers is that every state’s election process and registration is different. For example, in some states — such as Barton’s (Michigan) — local officials run elections, whereas in other states county clerks do so. Barton also noted that most election officials’ main complaint is a lack of resources, including the scarcity of election workers who are knowledgeable about information technology (IT). In her community, most election workers are retired adults who have been out of the workforce for years. They work long hours on election days and a lot of expectations are placed on them, but they’re not IT experts and this is one cause of negative and adversary interactions between the election workers and poll monitors.

Let’s work together, not against each other

When asked by one of the Secure Elections Network members how to overcome the mistrust and open a dialogue with election officials, Barton suggested person-to-person, face-to-face introductions. She said that advocates should simply go meet the officials. She emphasized that one of the best ways to build trust is for advocates to start by asking how they can help. She believes that when we work together toward a shared cause, whether or not we have the same political views, we will respect one another more and help solve problems together rather than finger-pointing and blaming. She also noted that activist groups could help under-funded counties which don’t have the resources to hire enough election workers or hire workers who are IT knowledgeable. Every election official in the country needs help with setting up and explaining basic IT, and knowledgeable advocates who want to improve things can be of real use.

The Secure Elections Network is made up of leaders and members of several Indivisible groups nationwide, including Indivisible East Bay. For more info about the webinar, email stephanie.chaplin20@gmail.com. Watch “Building a Team To Secure Our Elections” webinar here. You can watch SEN’s past webinars here. And read our articles about prior webinars: Ballot Marking Devices 101 and Indivisible Webinar to Secure Our Elections

If you want to learn more about the work that IEB’s Voter Rights & Election Integrity team is doing, and how you can help, email us at info@IndivisibleEB.org, or join the #voting-issues channel on IEB’s Slack. For an invitation to join Slack, email: info@IndivisibleEB.org

Haleh S. is an Engineer turned Lawyer, turned Activist

May 14, 2019May 16, 2019 Heidi Rand Congressional legislation, Events, Get Involved, Meetings, Our Impact, Uncategorized

Building Teams to Secure Our Elections

Haleh S contributed to this article

A webinar presented by the Secure Elections Network titled “Elections Officials: Building a Team to Secure Our Elections” on May 19 at 5 PM, will feature speaker Tina Barton, an election security advocate and the City Clerk of Rochester Hills, Michigan. In her presentation, “Building Networks/Working Together to Build Election Security,” Barton will describe her community work and ideas for creating a team of election officials and advocates to secure the 2020 elections.

Barton was appointed to Michigan’s Election Security Commission by the MI Secretary of State. The Commission, the first of its kind, was created in March 2019 to help boost voter confidence, increase turnout, and secure the integrity of elections against known and future threats such as hacking. Barton also oversaw Michigan’s first risk limiting audit pilot project after the 2018 midterm elections.

The Secure Elections Network (SEN) is made up of leaders and members of several Indivisible groups nationwide, including Indivisible East Bay. For more info about the webinar, email stephanie.chaplin20@gmail.com. You can watch SEN’s past webinars here. And read our articles about prior SEN webinars: Ballot Marking Devices 101 and Indivisible Webinar to Secure Our Elections

Haleh S. is an Engineer turned Lawyer, turned Activist

May 7, 2019 indivisibleebadmin Get Involved, Uncategorized

Ballot Marking Devices 101

By Ion Y and Haleh S

The redacted Mueller Report is out, and we’re all trying to grapple with how the Russians interfered in our 2016 elections. But even at a whopping nearly 500 pages, the report reveals only one aspect of election interference; as we look to 2020 we need to be aware of other ways our elections might be compromised, hacked, and manipulated.

The Secure Elections Network, made up of leaders and members of Indivisible groups in several states, including California (that’s us – Indivisible East Bay), is trying to help as many people as possible understand how elections can be compromised. An April 28 webinar “BMDs: The Good, the Bad, and the Ugly” addressed concerns about the security of Ballot Marking Devices (BMDs), computerized voting devices that enable voters with disabilities to vote when they’re unable to hand mark a paper ballot. In an attempt to simplify the purchase of voting machines, a number of states and counties are now considering BMDs for use in casting all votes. However, BMDs suffer from some fundamental security problems that make them particularly vulnerable to hacking. The webinar explains the particular nature of the issues with BMDs, and importantly, explains what can be done to alleviate them.

Background – Hacking BMDs

All voting systems, electronic and otherwise, are potentially subject to hacking. The primary trait of electronic voting systems is that they make everything about the process of casting and counting votes faster than doing the same things by hand. This includes real benefits such as votes being counted and tallied faster, more cheaply, and much more accurately. On the downside, they also make tampering with votes possible at a much larger scale and much more cheaply – and, critically, they make tampering much, much harder to detect: discarded boxes of ballots or erased marks are at least possible to observe, but altered bits on disk look no different from unchanged ones. It is possible to digitally add verification that catches accidental errors, and this is widely used, leading to the higher accuracy of tallies. But any part of a digital system can be hacked, which means that just as votes can be altered electronically, electronic verification can be altered as well. And electronic hacking is particularly pernicious because while a physical ballot would have to be destroyed or physically erased, altering a digital result leaves behind no obvious trace. The overall lack of verifiability may be BMDs’ most severe problem: a voting system that is cheap and error-free but whose results can never be trusted ultimately undermines faith and trust in all elections.

Fortunately, there is a way to provide the benefits of electronic voting and also satisfy the issue of trust: using the voter’s original ballot as the basis for a risk-limiting audit (RLA), an election audit that can be used to double-check the results of the election with very high accuracy and very low cost. If the results of an audit don’t match the election results, tampering can be detected. Statistics can be arcane, but the method is sound, and done properly the odds of an election’s results not matching the audit can be made less likely than being struck by lightning multiple times on a sunny day.

For the audit process to work, the voter’s original ballot must be saved and the ballot must record the voter’s original intent. And this is where the difficulties with BMDs come in. Unlike a hand marked paper ballot, where voters mark their choices directly on paper with a pen, BMDs first tally the vote electronically and only afterward produce a paper copy of the vote. But the moment an electronic system participates there is an unverifiable step: hacking a BMD can cause the printed ballot to not match the choices a voter made, compromising the vote just as thoroughly as if there were no paper involved at all. Thus, the paper ballot must exist before the electronic system comes in.

The Webinar

Featured speaker Andrew Appel, professor of Computer Science at Princeton University and expert in voting machine security, explained to webinar participants the ways that electronic voting equipment is vulnerable to hacking. He mentioned other machines, like Direct Recording Electronics (DREs) and Precinct-Count Optical Scanners (PCOS), but the focus of the presentation was on BMDs. Professor Appel described BMDs’ weaknesses, how they can be used to steal an election, and how to run a safe election and avoid the problems BMDs produce.

There are several ways to hack an election machine, including:

Altering the machine’s software in its original form before it is distributed to polling places. It is not enough for a polling place to be secure if the manufacturer or distributor is hacked instead.
Inserting a memory card into the machine, once it is installed at a polling place.
Hacking machines via the internet if the machine has internet access (voting machines are not supposed to have internet access, but they often do).

As a result, according to Appel, elections are most secure when NO electronic or computer-based voting systems are used in the actual casting of ballots. Whenever an electronic device is used at any stage of voting – marking or counting – the chances of distorting the result increases. But while hacking can occur at the counting stage with any device, hacking can still be detected if everyone hand marks a paper ballot and the actual ballot is preserved for purposes of audits or recounts. BMDs, however, compromise the marking stage and leave no original ballot that can be verified in an audit as not having been tampered with electronically.

What makes BMDs particularly pernicious is that unlike a physical ballot, which would have to be destroyed or physically erased, altering a digital result leaves behind no obvious trace of an altered vote. BMDs provide a paper copy of a ballot, giving the illusion of auditability, without the actual benefit. Hacking a BMD is no more detectable than if voting was done completely electronically.

What is more, a little hacking goes a very long way: changing only 5% of the votes on a ballot is enough to change the outcome of an election. Most voters, however, will never detect such a small amount of changed votes; even when the voter is given a paper copy of their votes for the purposes of double-checking, only a tiny percentage of voters actually examine printouts from electronic voting machines. Worse, even if they do check and spot an error, there is nothing a poll worker can do to correct it other than voiding the bad vote and allowing the voter to vote again. There is no way to prove that the error was caused by a compromised voting machine instead of voter error. A hacked BMD could thus remain in use for years even if errors were detected. Appel emphasized the need for a process that is auditable, and thus that hand marked ballots are essential for trusting election results.

Why use BMDs at all? Access to the ballot is also necessary to democracy, and because some disabled voters are unable to use paper ballots federal law requires at least one BMD in every polling location. Some election officials thus favor using BMDs for all voters, to simplify purchasing and training, and to cut down on (perceived) costs. Some officials and elected representatives also believe, incorrectly, that any paper output is sufficient for an audit, and don’t understand the importance of the ballot being hand marked before any electronic device comes into play. As a result a large number of counties use BMDs and a number of states are considering requiring them for all voters.

Appel recommended using BMDs only as required and needed for disabled voters, and not for all voters, and minimizing the use of computer voting devices at all possible stages of the process, to ensure that elections are trustworthy. Appel’s ideal approach:

Hand mark a paper ballot for nearly all voters. If a BMD is required for accessibility, ensure the user verifies the vote’s accuracy and prints a paper copy.
Feed the paper ballot into the Precinct Count Optical Scanner, which scans and stores the vote electronically and saves the physical paper ballot in a box.
Paper ballots may be audited by counting a sampling of the votes and compared to the PCOS count, to verify.

On the issue of costs, Appel noted that BMDs are individually much more expensive to maintain than optical scanners. It is thus more secure and three to four times less expensive to mix predominantly PCOS systems with a much smaller number of BMDs for voters who need them, as compared to using entirely BMDs.

Appel suggested safeguards for voters in states (Georgia was a prominent example raised in the webinar) that are mandating purchase of BMDs by law, and thus have no choice but to use them. These included educating voters (perhaps by poll monitors) to check the accuracy of their votes before submitting them, and printing a copy of votes after using a BMD to preserve a paper record in case of an audit or recount. He emphasized, however, that these methods do not reliably deal with the fundamental problem: there is no way to perform an audit without a trusted record that can be proven to never have been interfered with electronically, and BMDs by definition do not provide such a record.

Voting in the East Bay

Contra Costa County uses paper ballot scanners on Election Day. It uses BMDs primarily for accessibility and it appears they’re not intended for use by default. However, in the 2018 election they were the only option to vote in person at the County’s early voting sites. It is unclear what the County is planning for the 2020 election. Alameda County uses paper ballot scanners, and for accessibility they have “touchscreen devices.” Although they’re not explicitly called BMDs, that is what they are, and they have the same concerns.

To look up what kinds of voting machines your county uses, see the California Secretary of State’s list of voting machines used by county. For an overview of the three types of voting machines you’re likely to use or read about see the Brennan Center’s overview of voting equipment.

Did you miss the webinar? You can watch it, and see the comprehensive slides from Professor Appel’s presentation, at this link. You can also see the Secure Elections Network’s past webinars at the same link.

Can you help work on these critical issues with the Indivisible East Bay Voter Rights & Election Integrity team? Email: info@IndivisibleEB.org, or join the #voting-issues channel on IEB’s Slack. For an invitation to join Slack, email: info@IndivisibleEB.org

Haleh S. is an Engineer turned Lawyer, turned Activist

Featured photo: Quadriplegic voter using a BMD, photograph by Joebeone

April 24, 2019April 24, 2019 Heidi Rand Actions, Election results, Events, Get Involved, Our Impact, Uncategorized

Ballot Marking Devices: The Good, The Bad, and The Ugly

Ion Y contributed to this article

The 2020 election may be the most consequential election of our lives, and we must ensure that it’s secure and that all our votes are counted. Ballot Marking Devices (BMDs), electronic marking devices that don’t make a lasting paper record of a vote, are used in 20 states statewide; another 23 states, including California, use them in some counties. However, despite their rising popularity and claims about their safety, BMDs have serious weaknesses we need our state officials to be aware of.

The Secure Elections Network, made up of leaders and members of Indivisible groups in several states, including California (that’s us – Indivisible East Bay), are presenting a free webinar about BMDs. Join us for “Ballot Marking Devices: The Good, The Bad, and The Ugly” on April 28 at 5 PM. You can register here.

The agenda and speakers include:

Introduction: Jon Foreman, Indivisible Montgomery Maryland
Program: Andrew Appel, the Eugene Higgins Professor of Computer Science at Princeton University and expert on voting machines and technologies, will present an Analysis of Various BMD Systems
Discussion and questions

For more info about the webinar, email stephanie.chaplin20@gmail.com. And see the Secure Elections Network’s past webinars here.

To look up what kinds of voting machines your county uses, look at the California Secretary of State’s list of voting machines used by county. For an overview of the three types of voting machines you are likely to use or read about see the Brennan Center’s overview of voting equipment.

Contra Costa County uses paper ballot scanners on Election Day. It uses BMDs primarily for accessibility and it appears they’re not intended for use by default. However in the 2018 election they were the only option to vote in person at the County’s early voting sites. It is unclear if this issue has been rectified since. Alameda County uses paper ballot scanners, and for accessibility they have “touchscreen devices”. Although they’re not explicitly called BMDs, that is what they are, and have the same concerns.