Hacking democracy

Computerized vote-counting machines are sweeping the country. But they can be hacked -- and right now there's no way to be sure they haven't been.


Hacking democracy

During the past five months, Bev Harris has e-mailed to news organizations a series of reports that detail alarming problems in the high-tech voting machinery currently sweeping its way through American democracy. But almost no one is paying attention.

Harris is a literary publicist and writer whose investigations into the secret world of voting equipment firms have led some to call her the Erin Brockovich of elections. Harris has discovered, for example, that Diebold, the company that supplied touch-screen voting machines to Georgia during the 2002 election, made its system’s sensitive software files available on a public Internet site. She has reported on the certification process for machines coming onto the market — revealing that the software code running the equipment is seldom thoroughly reviewed and can often be changed with mysteriously installed “patches” just prior to an election. And in perhaps her most eyebrow-raising coup, she found that Sen. Chuck Hagel, a Nebraska Republican, used to run the company that built most of the machines that count votes in his state — and that he still owns a stake in the firm.

Harris hasn’t been alone in making such discoveries. A small group of writers, technologists and activists is working hard to convince elections officials all over the country that their rush to upgrade aging punch-card machines with seemingly more reliable touch-screen systems is dangerous. But so far neither the general public nor elections officials appear too worried.

It’s not hard to see why: If you look at some of the conspiracy theory rhetoric on the Web spawned by the work of Harris and others, it becomes all too easy to dismiss the whole campaign as sour grapes. There is no smoking-gun evidence to support the conclusion that Hagel’s landslide Senate victory in 2002 benefited from voter fraud. The same is true for several unexpected Republican victories in Georgia last year — during which the entire state used touch-screen machines for the first time.

But Harris herself is no conspiracy nut. Her facts check out. Nor is she an ideologue. Her stories on voting machines are based not on her politics but on serious, in-depth investigative reporting. Since October, she’s spoken to dozens of people in the voting world, from elections officials to “systems certifiers” to engineers whom she calls whistle-blowers. She’s detailed some of her findings on her Web site, but she says they aren’t the whole story — which she’ll tell in a book, “Black Box Voting,” to be published in May.

The facts Harris and others lay out ought to give many election officials pause. Touch-screen voting machines aren’t especially reliable; there are documented cases in which they have frozen, broken down and tabulated incorrectly during actual, binding elections. They’re also not immune to hacks. Though voting companies will confidently tell you about their myriad security policies, the fact is that these machines run software, and software can be tampered with: An election result could be changed without anyone being the wiser. And perhaps worst of all, the machines and the companies that make them are shrouded in secrecy. What really happens in a touch-screen machine when you select your candidate? In most cases, everything probably goes as it should — but there is no way to know for sure.

Indeed, the conspiracy theories, regardless of their validity, nevertheless highlight the main problem with electronic machines. Because they leave no paper trail — the vote count is registered only electronically in the machine — the results that the new machines deliver are open to dispute by people who have cause to be suspicious. For instance, Charlie Matulka, Hagel’s Democratic opponent in Nebraska last year, believes that he might have won the race — though the official count put him at about 15 percent of the vote.

Bev Harris doesn’t believe that anything went wrong in Nebraska, but that’s not the point. She wonders how you can prove that everything went well when what goes on inside a voting machine isn’t accessible by the public.

The same problems are in play with respect to the Georgia elections. “I don’t think that there was anything wrong, but I can’t show that there wasn’t,” says David Dill, a computer scientist at Stanford University. Dill is trying to get Santa Clara County, the home of California’s Silicon Valley, to reject electronic machines that don’t produce a paper trail. “And it always frustrates me when I read a conspiracy theory and I can’t find some way to dismiss it — it bothers me that I can’t show people that they’re full of it.”

Harris first became interested in elections last fall, when she read an article that detailed some problems with electronic voting systems — specifically that the machines store their data in a way that isn’t readily “auditable” and that they are made by companies that tend to be secretive about their processes and investors.

“Something just clicked,” Harris says of reading that article, “and in this climate of a year of corporate shenanigans, I said, ‘I’ll just do a quick search to see who controls some of these companies.’”

Harris, who runs a P.R. firm in Seattle that does work for “unknown authors that need some publicity,” had always hankered to do investigative journalism. She once publicized a book for Jack Anderson, the Pulitzer Prize-winning Washington Post reporter, and his stories of investigative reporting had intrigued her.

She began by looking into Election Systems & Software, the world’s largest election supply company, based in Omaha, Neb. Harris quickly found that ES&S was owned, in part, by a merchant banking holding company called the McCarthy Group and that the firm’s chairman, Michael McCarthy, was Chuck Hagel’s campaign treasurer. After searching news archives, Harris found that during Hagel’s first campaign, in 1996, the Nebraska media reported that he had been president of ES&S — which at the time was called American Information Systems — between 1992 and 1995. But the articles suggested that Hagel was no longer affiliated with the voting equipment company. Harris saw election records that showed Hagel still holding between $1 million and $5 million worth of stock in McCarthy, which owned about 25 percent of ES&S.

Harris had stumbled on what seemed to be a striking conflict of interest — a U.S. senator owned a share in a company that built all the vote-counting machines in his state. She put up the relevant documents on her site, “and immediately I knew I’d hit a sore spot,” she says, “because right away I got a threat letter from ES&S.”

The letter from ES&S’s attorneys demanded that Harris take down her article. “While you claim that your article is all based upon verifiable facts, even if true, which ES&S disputes, you should be aware that such ‘facts,’ or the implications therefrom, when presented in a false fashion, constitute defamation or defamation by implication as well as the privacy tort of false light,” the attorneys said.

It’s not clear what ES&S meant to convey by such a letter, but Harris didn’t take down her article. “What I would certainly do if they launched a lawsuit is, we’d have a field day with discovery,” she jokes now. ES&S did not return Salon’s phone calls for comment.

Harris thought it odd that McCarthy’s underlying assets, including the voting company, were not disclosed in Hagel’s election filings, and she tipped off the Hill, a newspaper that covers Congress. Late in January, the paper reported that Hagel’s omission might have constituted a Senate ethics “disclosure issue.”

Did Nebraskans know of Hagel’s affiliation with the voting company? Lou Ann Linehan, Hagel’s chief of staff, says that the senator has been upfront with all of his business dealings. Although he owns a share in McCarthy, and McCarthy owns a share in ES&S, Linehan says there is “absolutely no affiliation” between the senator and the voting company. Hagel’s indirect ownership of ES&S is tiny, his staff points out — he owns “less than 2 percent” of McCarthy, and McCarthy owns only about a quarter of ES&S. Linehan denied there was any ethical problem with the way Hagel disclosed his McCarthy holdings. Members of Hagel’s staff pointed to a letter to the Hill by William Canfield, a Senate ethics expert, that said that “Sen. Hagel has fully met his obligation, under the statute and the committee’s guidance, in publicly disclosing this particular investment.”

Linehan said there’s nothing irregular about a person who used to run a voting-machine firm running for office. “Maybe if you’re not from Nebraska and you’re not familiar with the whole situation” you would have questions, she says. “But does it look questionable if there’s a senator who is a farmer and now he votes on ag issues? Everybody comes from somewhere.”

Nebraska was considered a “safe state” for Republicans in 2002. Most political commentators believed Hagel’s opponents — Phil Chase, an independent, John Graziano, a Libertarian, and Charlie Matulka, the Democratic candidate — did not stand a chance. And according to the official count, Hagel trounced the opposition. He won about 400,000 votes — Matulka, in second place, won just over 70,000.

Matulka believes that Hagel’s landslide doesn’t indicate a victory but something underhanded with the vote. “Why in the world would anybody with the election company want to run for office? It’s like the fox in the henhouse — they said they didn’t do it, but they got feathers in the mouth.” Matulka can’t show any feathers, however: There appears to be not a shred of evidence to suggest that Hagel didn’t honestly win his landslide, and the only thing Matulka has going for him is his hunch.

Then again, there’s nothing to disprove what Matulka says, either. And that’s the problem.

Many of the counties in Nebraska in 2002 used optical-scan ballots, in which votes cast on a paper ballot are counted in a machine; but several big counties, constituting a large part of the Nebraska electorate, used touch-screen machines. Matulka says that the lack of paper ballots that can be counted manually makes him suspicious. “What’s so wrong with manually counting the votes?” he asks. “They’ve done away with the damn paper trail.”

Linehan sees nothing wrong with the way the vote was conducted. “Nebraska is a very special place,” she says, “and when you go to vote in Nebraska, the people at the polls know who you are. Sen. Hagel won by 83 percent of the vote, and there’s no doubt he won by an overwhelming majority. And you get poll workers there who would — if something was wrong, people would know what’s going on.”

According to elections firms and election officials, the software and hardware in voting machines is thoroughly inspected and tested before the systems are certified and put on the market for sale to county election directors. Doug Lewis, who heads the Election Center — a nonprofit management division of the National Association of State Election Directors, which handles part of the voting-machine certification process — said that “the likelihood of doing something to [a machine] without detection is very, very small.”

Lewis says that if you have “malicious code in the system” — such as a simplistic virus, perhaps, designed to change a vote cast for one candidate into one for his opponent — the code will be caught in the testing phase of the certification process: “It will not compile right. The testing itself would discover this.” Moreover, Lewis says, the testing labs simulate actual voting on each type of machine. The test, which is 163 hours long, “puts tens of thousands of votes into the system, and we know what the outcome is supposed to be.”

Lewis says that no voting system ever designed has been perfect. If it’s “created by man, it can be destroyed by man,” he says. But he believes that several rounds of testing make the machines about as good as we can get them.

Harris finds that hard to believe. In the course of her research, she’s uncovered what she says is evidence to suggest that the testing phase of the certification process is flawed. One person she holds up as an example is Dan Spillane, an engineer who worked on the software at a company that made electronic voting machines. Spillane says that national testing labs “are very much like Arthur Andersen in the Enron case”: They don’t do a very good job. The company Spillane worked for — he prefers not to have the name published — would pass systems “with problems that we knew about internally, problems with severity level 1, the highest” on to the testing labs, and the labs would certify the equipment. (Spillane was fired from the company, and he says he plans to sue the firm for wrongful termination.)

Lewis’ claim that malicious software “won’t compile” is also suspect. Malicious software abounds on computers; on every platform, in every application, from Microsoft Word to e-mail, are bad bits of code. There’s no technical reason why one renegade coder at a voting company couldn’t slip some pro-Republican or pro-Democratic code into his firm’s systems. Computer scientists fear that malicious code can be written so as to evade detection during the testing process, going live only on Election Day.

And for each security procedure that a company might put in place to defeat such efforts, hackers will come up with more sophisticated methods to get around them, says Stanford’s David Dill. Recently, worried about the possibility that paperless electronic voting machines will become the national standard, Dill decided to see what others in his field — people who know about computers and the limits of their security — could do to let election officials know of the danger.

“Almost any computer scientist I would walk up to would agree with me,” says Dill. So he put up a statement of his beliefs regarding electronic voting, and he invited other computer scientists to sign on to it. The statement reads:

“Computerized voting equipment is inherently subject to programming error, equipment malfunction, and malicious tampering. It is therefore crucial that voting equipment provide a voter-verifiable audit trail, by which we mean a permanent record of each vote that can be checked for accuracy by the voter before the vote is submitted, and is difficult or impossible to alter after it has been checked. Many of the electronic voting machines being purchased do not satisfy this requirement. Voting machines should not be purchased or used unless they provide a voter-verifiable audit trail; when such machines are already in use, they should be replaced or modified to provide a voter-verifiable audit trail. Providing a voter-verifiable audit trail should be one of the essential requirements for certification of new voting systems.”

The response to Dill’s petition was remarkable. In a few weeks, he’d garnered more than 100 signatories, including some of the biggest names in computer security.

Dill recently learned that Santa Clara County is considering purchasing electronic machines that don’t print out an audit trail, and he’s become an outspoken local advocate against them. He says he’s somewhat surprised that election officials haven’t taken his and other technologists’ concerns more seriously. “I must admit to a certain amount of frustration showing up at these county meetings and hearing that everyone’s getting their information from the vendor,” he says. “And basically I think that once you get out into the real world, nobody knows who these computer scientists are.”

Still, Dill says, his group does “seem to be changing the equation” in Santa Clara, and he thinks that if the county goes the way he’d like — forcing voting firms to put an audit trail into the machine — other parts of the country may be more inclined to follow.

Harris has also been popularizing Dill’s cause, because she fears that if paperless electronic machines aren’t stopped, dire consequences will follow. I asked Harris if she wonders whether she could be too late — whether there’s already been an election in which an electronic machine has produced the wrong result.

“I have worries about Georgia,” Harris said. In 2002, the entire state of Georgia used touch-screen machines provided by Diebold. Harris has found an FTP site run by Diebold that allowed anyone with access to the Internet to peruse what might have been important software files concerning the machines used in the state. It’s unclear what files were on that site, but Harris wonders whether the programs, which could have been tampered with, were actually loaded onto the voting machines. More recently, Harris found that in an effort to fix a problem that was causing 5 percent of the machines in Georgia to freeze up, Diebold administered a software “patch” to all 22,000 machines in the state shortly before the November election. The patch — which changes the code on the machine — was certified “by phone,” according to a Georgia election official quoted by Harris.

Joseph Richardson, a spokesman for Diebold, denied that a patch had been applied to the Georgia machines: “We have analyzed that situation and have no indication of that happening at all.” In regard to the FTP site, he said, “Our review of this matter indicates there is no merit to the insinuations of security breaches in the Diebold Election Systems solutions. The old Global Election Systems site has been taken down because it contained old, out-of-date material. For 144 years, Diebold has been synonymous with security, and we take security very seriously in all of our products and services.” (Georgia elections officials did not respond to phone calls for comment.)

Republicans enjoyed great success in Georgia last year. Defying pre-race polls, voters chose Sonny Perdue, the state’s first Republican governor in 135 years, and, for the Senate, the Republican Saxby Chambliss over the incumbent Democrat Max Cleland. After the race, many pundits wondered what had caused the GOP sweep: Was it the president’s nonstop campaigning? Had the Democrats dropped the ball on homeland security?

There’s every reason to believe that an explanation can be found among those conventional theories. The problem with the widespread use of electronic voting machines, though, is that there’s nothing to stop people from thinking that something else, something altogether baser than pure politics, got in the way.

More Related Stories

Featured Slide Shows

  • Share on Twitter
  • Share on Facebook
  • 1 of 11
  • Close
  • Fullscreen
  • Thumbnails

    Ten spectacular graphic novels from 2014

    Beautiful Darkness by Fabien Vehlmann & Kerascoët
    Kerascoët's lovely, delicate pen-and-watercolor art -- all intricate botanicals, big eyes and flowing hair -- gives this fairy story a deceptively pretty finish. You find out quickly, however, that these are the heartless and heedless fairies of folk legend, not the sentimental sprites beloved by the Victorians and Disney fans. A host of tiny hominid creatures must learn to survive in the forest after fleeing their former home -- a little girl who lies dead in the woods. The main character, Aurora, tries to organize the group into a community, but most of her cohort is too capricious, lazy and selfish to participate for long. There's no real moral to this story, which is refreshing in itself, beyond the perpetual lessons that life is hard and you have to be careful whom you trust. Never has ugly truth been given a prettier face.

    Ten spectacular graphic novels from 2014

    Climate Changed: A Personal Journey Through the Science by Philippe Squarzoni
    Squarzoni is a French cartoonist who makes nonfiction graphic novels about contemporary issues and politics. While finishing up a book about France under Jacques Chirac, he realized that when it came to environmental policy, he didn't know what he was talking about. "Climate Changed" is the result of his efforts to understand what has been happening to the planet, a striking combination of memoir and data that ruminates on a notoriously elusive, difficult and even imponderable subject. Panels of talking heads dispensing information (or Squarzoni discussing the issues with his partner) are juxtaposed with detailed and meticulous yet lyrical scenes from the author's childhood, the countryside where he takes a holiday and a visit to New York. He uses his own unreachable past as a way to grasp the imminent transformation of the Earth. The result is both enlightening and unexpectedly moving.

    Ten spectacular graphic novels from 2014

    Here by Richard McGuire
    A six-page version of this innovative work by a regular contributor to the New Yorker first appeared in RAW magazine 25 years ago. Each two-page spread depicts a single place, sometimes occupied by a corner of a room, over the course of 4 billion years. The oldest image is a blur of pink and purple gases; others depict hazmat-suited explorers from 300 years in the future. Inset images show the changing decor and inhabitants of the house throughout its existence: family photos, quarrels, kids in Halloween costumes, a woman reading a book, a cat walking across the floor. The cumulative effect is serene and ravishing, an intimation of the immensity of time and the wonder embodied in the humblest things.

    Ten spectacular graphic novels from 2014

    Kill My Mother by Jules Feiffer
    The legendary Pulitzer Prize-winning cartoonist delivers his debut graphic novel at 85, a deliriously over-the-top blend of classic movie noir and melodrama that roams from chiaroscuro Bay City to Hollywood to a USO gig in the Pacific theater of World War II. There's a burnt-out drunk of a private eye, but the story is soon commandeered by a multigenerational collection of ferocious women, including a mysterious chanteuse who never speaks, a radio comedy writer who makes a childhood friend the butt of a hit series and a ruthless dame intent on making her whiny coward of a husband into a star. There are disguises, musical numbers and plenty of gunfights, but the drawing is the main attraction. Nobody convey's bodies in motion more thrillingly than Feiffer, whether they're dancing, running or duking it out. The kid has promise.

    Ten spectacular graphic novels from 2014

    The Motherless Oven by Rob Davis
    This is a weird one, but in the nervy surreal way that word-playful novels like "A Clockwork Orange" or "Ulysses" are weird. The main character, a teenage schoolboy named Scarper Lee, lives in a world where it rains knives and people make their own parents, contraptions that can be anything from a tiny figurine stashable in a pocket to biomorphic boiler-like entities that seem to have escaped from Dr. Seuss' nightmares. Their homes are crammed with gadgets they call gods and instead of TV they watch a hulu-hoop-size wheel of repeating images that changes with the day of the week. They also know their own "death day," and Scarper's is coming up fast. Maybe that's why he runs off with the new girl at school, a real troublemaker, and the obscurely dysfunctional Castro, whose mother is a cageful of talking parakeets. A solid towline of teenage angst holds this manically inventive vision together, and proves that some graphic novels can rival the text-only kind at their own game.

    Ten spectacular graphic novels from 2014

    NOBROW 9: It's Oh So Quiet
    For each issue, the anthology magazine put out by this adventurous U.K.-based publisher of independent graphic design, illustration and comics gives 45 artists a four-color palette and a theme. In the ninth issue, the theme is silence, and the results are magnificent and full of surprises. The comics, each told in images only, range from atmospheric to trippy to jokey to melancholy to epic to creepy. But the two-page illustrations are even more powerful, even if it's not always easy to see how they pertain to the overall concept of silence. Well, except perhaps for the fact that so many of them left me utterly dumbstruck with visual delight.

    Ten spectacular graphic novels from 2014

    Over Easy by Mimi Pond
    When Pond was a broke art student in the 1970s, she took a job at a neighborhood breakfast spot in Oakland, a place with good food, splendid coffee and an endlessly entertaining crew of short-order cooks, waitresses, dishwashers and regular customers. This graphic memoir, influenced by the work of Pond's friend, Alison Bechdel, captures the funky ethos of the time, when hippies, punks and disco aficionados mingled in a Bay Area at the height of its eccentricity. The staff of the Imperial Cafe were forever swapping wisecracks and hopping in and out of each other's beds, which makes them more or less like every restaurant team in history. There's an intoxicating esprit de corps to a well-run everyday joint like the Imperial Cafe, and never has the delight in being part of it been more winningly portrayed.

    Ten spectacular graphic novels from 2014

    The Shadow Hero by Gene Luen Yang and Sonny Liew
    You don't have to be a superhero fan to be utterly charmed by Yang and Liew's revival of a little-known character created in the 1940s by the cartoonist Chu Hing. This version of the Green Turtle, however, is rich in characterization, comedy and luscious period detail from the Chinatown of "San Incendio" (a ringer for San Francisco). Hank, son of a mild-mannered grocer, would like to follow in his father's footsteps, but his restless mother (the book's best character and drawn with masterful nuance by Liew) has other ideas after her thrilling encounter with a superhero. Yang's story effortlessly folds pathos into humor without stooping to either slapstick or cheap "darkness." This is that rare tribute that far surpasses the thing it celebrates.

    Ten spectacular graphic novels from 2014

    Shoplifter by Michael Cho
    Corinna Park, former English major, works, unhappily, in a Toronto advertising agency. When the dissatisfaction of the past five years begins to oppress her, she lets off steam by pilfering magazines from a local convenience store. Cho's moody character study is as much about city life as it is about Corinna. He depicts her falling asleep in front of the TV in her condo, brooding on the subway, roaming the crowded streets after a budding romance goes awry. Like a great short story, this is a simple tale of a young woman figuring out how to get her life back, but if feels as if it contains so much of contemporary existence -- its comforts, its loneliness, its self-deceptions -- suspended in wintery amber.

    Ten spectacular graphic novels from 2014

    Through the Woods by Emily Carroll
    This collection of archetypal horror, fairy and ghost stories, all about young girls, comes lushly decked in Carroll's inky black, snowy white and blood-scarlet art. A young bride hears her predecessor's bones singing from under the floorboards, two friends make the mistake of pretending to summon the spirits of the dead, a family of orphaned siblings disappears one by one into the winter nights. Carroll's color-saturated images can be jagged, ornate and gruesome, but she also knows how to chill with absence, shadows and a single staring eye. Literary readers who cherish the work of Kelly Link or the late Angela Carter's collection, "The Bloody Chamber," will adore the violent beauty on these pages.

  • Recent Slide Shows



Comment Preview

Your name will appear as username ( settings | log out )

You may use these HTML tags and attributes: <a href=""> <b> <em> <strong> <i> <blockquote>