Ada Lovelace Day – Appreciating Marla Ludwig, “The Backpackin’ Granny”

Over 1000 blogs are celebrating Ada Lovelace day today: Ada Lovelace Day is an international day of blogging to draw attention to women excelling in technology…We want you to tell the world about these unsung heroines.

Nobody makes a bigger mistake than (s)he who did nothing
because (s)he could only do a little

Over 1000 blogs are celebrating Ada Lovelace day today:

Ada Lovelace Day is an international day of blogging to draw attention to women excelling in technology…We want you to tell the world about these unsung heroines…We’re not just interested in hardcore ninja programmers, but any woman who creates, invents, or uses any technology in an innovative way. Feel free to interpret it as widely as you like.  http://findingada.com/

Here at CTVotersCount we are recognizing Marla Ludwig a long time friend and former co-worker.  Marla is an unassuming data storage support expert with a day job to keep the “plumbing” working and avoiding data disasters for a very large insurance company.  That would be enough, yet Marla is also known to the rest of the world as “The Backpackin’ Granny”.  She spends her vacations transforming a small village in Ghana.  She has built a library, brought water purification, and is now building a school.

Nobody makes a bigger mistake than (s)he who did nothing
because (s)he could only do a little

PURPOSE: Bright Star Vision is a secular grassroots organization whose purpose is to create a world in which children are free from harm and disease; a world in which they are educated confident and motivated; a world in which all children have clean water, food in their stomachs, shoes on their feet, smiles on their faces, and joy in their hearts.

Bright Star Vision is a grassroots support organization that originated in 2005 when a woman named Marla Ludwig decided to visit the African Country of Ghana for a vacation with no more than just her backpack earning her the nickname “Backpackin’ Granny” . When asked by a friend whether she would consider bringing some books or supplies to some of the underprivileged there, she initially overlooked the idea. But upon further evaluation, she stopped wondering “Why?” and began to think “Why Not” This action led to the outcome of her single-handedly sponsoring a village in need in the Volta Region of Ghana.

Bright Star Vision is the result of one woman’s vision. The name for the organization was inspired by Marla’s dream of a bright star shining over the Dalive Village, as well as the children’s enthusiasm and eagerness to read, learn, and do well in school upon being provided with books, school resources, and student sponsorships.

For more information: http://www.brightstarvision.net/index.html

Another Take On ATM’s vs. Voting Machines

Security firm Sophos reported this week that it received three samples of a trojan that was customized to run on Diebold-manufactured cash machines in Russia…

CTVotersCount.org Myth #8 – If we can trust our money to ATMs we can trust our votes to computers. <10 myths> <also>

Perhaps ATM’s are not as safe as we sometimes think.

Today a story shows that ATM’s are vulnerable.  SCMagazineUS has the story: ATM malware appears, Diebold issues security update <read>

Security firm Sophos reported this week that it received three samples of a trojan that was customized to run on Diebold-manufactured cash machines in Russia, said Graham Cluley, Sophos’ senior security consultant. The malware was able to read card numbers and PINs — then when the attacker returned to the ATM, he inserted a specially crafted card that told the machine to issue him a receipt containing the stolen information.

“Basically [the malware] would be spewing out the identity information,” Cluley told SCMagazineUS.com on Wednesday. “It’s a really cunning scheme. You need to know how to talk to the ATM. It was working with the Diebold DLL (dynamic-linked library). It knew what API (application programming interface) calls to make, which is information, I suspect, not normally in the public domain.”

Diebold this week disclosed that it issued a security update in January for its ATMs running a Windows-based operating system to address the problem. Diebold told its customers in a letter that a number of its machines in Russia were infected — but the company did not reveal specifics on the attacks.

The somewhat comforting part of this story is that Diebold issued a fix in short order for the problem – while problems in their voting machines go unaddressed for years through multiple software versions.

However, it is a reminder of the vulnerability of any computer system to which somone gains access, including voting systems.

Diebold Audit Logs Miss Critical Data

“Today’s hearing confirmed one of my worst fears,” said Kim Alexander, founder and president of the non-profit California Voter Foundation. “The audit logs have been the top selling point for vendors hawking paperless voting systems. They and the jurisdictions that have used paperless voting machines have repeatedly pointed to the audit logs as the primary security mechanism and ‘fail-safe’ for any glitch that might occur on machines. To discover that the fail-safe itself is unreliable eliminates one of the key selling points for electronic voting security.”

In Connecticut we avoid these specific problems. But we don’t avoid similar problems.

Kim Zetter at wired has on of several reports on hearings in California <read>

Summary:  “The Humboldt Election Transparency Project” discoverd 179 missing ballots in the original election accounting.  One memory card total was dropped in accumulating votes after the election.  Subsequent investigations found that there was a known (to some) problem in the code that could cause that to happen, yet, no record of the event was in the audit logs and the audit logs could be easily deleted.   Yesterday the Secretary of State held hearings as reported by  Kim Zetter:

“Today’s hearing confirmed one of my worst fears,” said Kim Alexander, founder and president of the non-profit California Voter Foundation. “The audit logs have been the top selling point for vendors hawking paperless voting systems. They and the jurisdictions that have used paperless voting machines have repeatedly pointed to the audit logs as the primary security mechanism and ‘fail-safe’ for any glitch that might occur on machines. To discover that the fail-safe itself is unreliable eliminates one of the key selling points for electronic voting security.”

Following a public records request of GEMS logs, Threat Level previously reported that the Premier/Diebold logs did not indicate when election officials in Humboldt County, California, intentionally deleted more than two dozen batches of ballots from their system during the November general election.

The finding raised questions about the integrity of elections conducted with the system, but it was unknown at the time whether the problem with the audit log existed with other versions of the GEMS software used in other counties in California and across the country. Premier/Diebold didn’t respond to phone calls seeking information at the time.

In Connecticut we avoid these specific problems as we do not use the GEMS system for election totaling votes from memory cards.  (Our vendor, LHS uses GEMS for programming the memory cards for each of our elections).  But we don’t avoid similar problems, Connecticut uses an error prone three step process of manual transcription to produce our vote totals – for the November 2008 election this system dropped and added even more votes than the number of ballots dropped in California: e.g. <here> <here> <here> <here>

********
Update 3/25:  Diebold tries to cut off Humbolt, Are the sending a message “Don’t Tread on Dieblod?”

Here is the Daily Voting News Summary which is good summary of what we have so far <read>

Yes Virginia! – No Ballots, No Problems – Trust The Memory

Close election in Fairfax County decided by reading computer memory.

Maybe it is all mostly accurate. But, without a voter verified paper record who knows? Maybe there is a lesson in here for us. Unfortunately, there is also a lesson here for those looking for ways to game the system in the future.

A close election in Virginia with electronic touch screen voting.  They have optical scanners, but they saved some paper and used their expensive touch screen machines.  One machine made an obvious error so they counted the votes in the memory log on the two machines in that precinct and declared the records in memory accurate.  Yet what about all the other machines that counted 89 votes more for one candidate out of 12,000 cast?

Stories in the Washington Post,  BradBlog and LocalTV

According to Brad and the WaPo:

the geniuses who run Fairfax County’s election decided to use only touch-screen systems in the election yesterday, despite having used both paper ballots and touch-screens in last November’s election. The WINVote “is the most widely used touch-screen voting machine in Virginia,” according to the Washington Post story in which explanations are given for why the Republican “narrowly defeated” the Democrat by 89 votes.

Officials are “not yet sure what caused the device to malfunction.”

WaPo’s earlier story — when the Republican John Cook was said to have been leading the entirely-unverifiable election by 69 votes, before the wholly-unverified and unverifiable “votes” from the failed machine were printed out, one-by-one, and then tallied by officials from the machines memory — notes that the race came down to the votes cast in the single precinct where the machine failed.

Brad had the same reaction that I did to a quote in the local TV story:

Voters are mixed. “I think the electronic equipment these days is pretty good,” said Fairfax County resident Julie Stewart. “But paper would be fine if they’ve got a lot of money and they want to spend the time doing it,” said Fairfax County resident Richard Carlson.

…Dear Richard: Paper elections are cheaper, more accurate, and take no more “time” to tally than touch-screen elections. And at the end of the day, it’s possible to know who actually won them.

Maybe it is all mostly accurate.  We have no reason to assume the result is inaccurate.  But, without a voter verified paper record who knows?  Maybe there is a lesson in here for us.  Unfortunately, there is also a lesson here for those looking for ways to game the system in the future.

Of Levers, WPE, and The National Popular Vote

How certain can we be that George Bush won the popular vote in 2004?
How certain can we be that Al Gore won the popular vote in 2000?
How many votes would be added or subtracted if the reported popular vote was close and a process like Minnesota’s were used for a nationwide recount of the paper ballots?

We have made several posts lately about the relative merits of touch screens (DREs), vs. optical scanners vs. lever machines.  We have also warned of the risks in going to the National Popular Vote given the current state by state variations in voting integrity.

We ask you to contemplate:

  • How certain can we be that George Bush won the popular vote in 2004?
  • How certain can we be that Al Gore won the popular vote in 2000?
  • How might the totals change if every error or fraud in every state could contribute to the popular vote and it would decide the President?
  • How many votes would be added or subtracted if all the absentee ballots and provisional ballots were counted in every state and the results for every district and precinct reviewed to make sure each state’s totals were accumulated correctly?
  • How many votes would be added or subtracted if the reported popular vote was close and a process like Minnesota’s were used for a nationwide recount of the paper ballots?
    (answers below)

Within Precinct Error (WPM) is a measure of the difference between the exit polls and the actual result.  We have heard a lot about the discrepancies between the exit polls in 2004 and the election results that claim that Kerry was consistently higher in the polls than the results and that it points to fraud <e.g.>.  Countered by strong arguments from statisticians that there are other explinations. <e.g.>

A story today reminds us that we cannot trust the fictional national popular vote number. <read>

The 12% NY WPE cut Kerry’s vote margin (and increased Bush’s) by about 900,000. Kerry also won late paper ballot votes (absentees, provisionals, etc.) by the same 64%.  Just a coincidence, Lever bots will surely say. But Past is Prologue. Obama won 71% of NY late votes and just 63% of the recorded vote. Gore won 66% of late votes and 60% officially. Mechanical Levers had the highest average WPE (11%) of all voting machines. Paper ballots had 2%, optical scanners and unverifiable touch-screens 7%. At least there is a paper trail with optical scanners,

New York is just one state:  No paper – No means of proving/refuting – No confidence

Our answers to questions above:

  • How certain can we be that George Bush won the popular vote in 2004?
    Not certain enough to feel confident.
  • How certain can we be that Al Gore won the popular vote in 2000?
    Given the errors in 2000 accounting in FL and fraud found in other elections its quite likely that the magnitude of error exceeded the margin nationwide.
  • How might the totals change if every error or fraud in every state could contribute to the popular vote and it would decide the President?
    The incentive for fraud would apply to every district, precinct, and state, not just a few close states.  There would be more for advocates to monitor.
  • How many votes would be added or subtracted if all the absentee ballots and provisional ballots were counted in every state and the results for every district and precinctreviewed to make sure each state’s totals were accumulated correctly?
    Lots.
  • How many votes would be added or subtracted if the reported popular vote was close and a process like Minnesota’s were used for a nationwide recount of the paper ballots?
    None.  This is a trick question.  Each state only recounts its on votes based on a close margin in its own totals.  Even in a very close national popular vote, none or very few states would have a recount.  Also many states, like New York, do not have  paper ballots to count.

Sparks Fly Over Threat To Cut Registrars’ Hours In Half

In the proposed 2009-10 operating budget, Karen Doyle Lyons and Stuart Wells, the Republican and Democratic registrars of voters, respectively, are facing having their pay cut from $46,800 to $23,800.

The Stamford Advocate has the story <read>

The city’s registrars of voters, in a pitch to the city’s Board of Estimate and Taxation on Monday evening, made a plea that their full-time jobs escape the budget axe.

In the proposed 2009-10 operating budget, Karen Doyle Lyons and Stuart Wells, the Republican and Democratic registrars of voters, respectively, are facing having their pay cut from $46,800 to $23,800.

Both argued there is more than enough work in the registrars’ office.

“We simply need three full-time people to do this stuff,” Wells said while outlining the registrars’ office year-round workload, including elections…

“I urge caution in precipitous staffing changes that may render it very difficult for Norwalk to meet its obligations under Connecticut law and expose you to greater costs in the event of non-compliance of fines,” Deputy Secretary of the State Lesley D. Mara wrote…

An irritated Mayor Richard Moccia responded the letter was “an implied threat” and criticized Mara for involving herself in the city’s budget process after he learned from Doyle Lyons and Wells that the state’s election-related technology will occasionally break down.

We are on the side of the registrars and agree with Deputy Mara.   Their salary is hardly excessive at $46,800 for full time, while a total of three full time registrars and deputies seems reasonable for a town of Norwalk’s size, with about 37,000 votes for President in November.

If we want to talk excessive, look at Hartford!  Hartford had about 34,000 voters for President in November and  now has three full time registrars at $80,000 each.  Just two at $80,000 is excessive especially considering that each registrar (including the third) has a full time deputy.

(As we have pointed out before, we are pleased that Hartford has a third registrar and dissapointed that Hartford cannot right-size the hours and staff in the Registrars’ Office to fit the job)

Or Could We Have Been Even Better Off With Levers?

I read HAVA. It clearly does not ban levers. I recently discovered what has helped fuel this misinformed opinion in part: it is the discredited position of the discredited U.S. Election Assistance Commission (EAC)

But there is more to the story.

BradBlog reports that the Election Assistance Commission (EAC) may have been wrong when it issued an advisory indicating that lever machines were banned by the Help America Vote Act (HAVA) <read>

The EAC Lied, Lever Voting Machines (Almost) Died

Exclusive: Discredited federal E-voting oversight commission issued an incorrect 2005 ‘legal advisory’ helping to keep NY on a collision course with democracy
But it’s not too late to save the last transparent electoral system in the United States…

So what is driving New York State to stick with a law that so many in New York believe to be such a bad idea? As a New Yorker who has been talking to many election commissioners, legislators and citizens, I was surprised to learn how many people believe the “Help America Vote Act” (HAVA) actually banned lever machines.

I read HAVA. It clearly does not ban levers. I recently discovered what has helped fuel this misinformed opinion in part: it is the discredited position of the discredited U.S. Election Assistance Commission (EAC), as detailed in a newly-unearthed document prepared for the state of Pennsylvania, at their request, in regard to the legality of lever voting machines.

We remember that Connecticut and New York were “late” in becoming HAVA compliant.  Connecticut rushed to comply almost making the expensive and risky mistake of purchasing uncertified “touch-screen” from Danaher,  with the Secretary of the State, thankfully, changing course to optical scanners.  New York chose defy the feds and stick with levers until a suitable alternative could be found.

But there is more to the story. Here is a quote in the article, not clearly attributed, purporting to describe lever machines:

* For those who don’t know, here’s how lever machines work:
Voter pulls lever for candidate of her choice; gears increment a mechanical counter by one and only one vote — only for the desired candidate. No vote switching or overvoting is possible! (Some machines increment the counters as the big lever is pulled, but unlike software, either method of operation can be observed and thoroughly tested before and after each election and both have been completely disclosed in the machines’ patents.) Rinse and repeat for the entire ballot, which takes less than a minute for most voters. Change or correct your votes as many times as you like – not just three. When you’re done, just pull the big lever that casts the ballot, locks in all your votes, opens the privacy curtain, and repositions the candidate levers for the next voter, leaving the locked immutable mechanical counters as the durable record of all the votes cast on the machine — until after the election is certified. On election night, a permanent paper record of the vote tallies on each machine is produced by the machine, and/or by bi-partisan teams of poll workers, before the machine is moved and the poll workers are permitted to leave.

Not so fast.  Looking at comment #3 below the article, David Jefferson, makes the case against levers:

Without commenting on the rest of this posting let me say that the italic comment at the bottom that describes lever machines somewhat mischaracterizes them.

1) Although it is true that the mechanics of a lever machine are vastly simpler than software, and can be understood by careful observation (if the back of the machine is open) by a mechanically inclined person, it is easy to tamper with the gear mechanism so that it miscounts votes, either by failing to increment one time out of 10 or by failing to carry into the next decimal place. This almost always causing an undercount for particular candidate(s), and not an overcount. If such a problem occurs, it is unlikely to be discovered very quickly, since undercounts never lead to any outright inconsistency with the counts of voters or any other data. And whether the problem is detected or not, there is no possibility of recovery, because there is no redundancy at all, let alone anything you would call an audit trail.

2) The same is true if the machine has been misconfigured (equivalent to having a bad election definition file). There my be no recovery.

3) It is true that you can change your (tentative) vote as many times as you want with lever machines. But you can also do that with DREs. The max number of three spoiled ballots is only a limitation of paper ballots, and then only because of an arguably obtuse law–not for any fundamental reason.

4) The counters are not any more “immutable” than any other volatile memory medium. If I remember correctly, a single key turn allows all counts to be zeroed, with no record of the time the occurred, or who did, it or anything else. Arguably, the paper record of the counts is just as durable as the counts that are stored mechanically.

5) A lever machine does not accumulate a “record of all the votes cast”. It records only counts of the votes cast, which is vastly less information than any other voting system. There is absolutely no redundancy in this information, as there is with all other forms of voting, which is why it is impossible to do a meaningful audit that corresponds in any way to the audits that are possible with paper ballots or VVPAT.

We tend to agree with David Jefferson about the attributes of lever machines.  Yet, given all that we know now – the cost of optical scanners — the risks without sufficient, reliable audits — the stories we have heard from registrars about problems with lever machines covered over in the backrooms in Connecticut — it is a close call.  But with sufficient audits, a stronger chain-of-custody for ballots, and manual recounts we still would favor optical scanners.

Reminder: We’re Better Off With Optical Scanners

OpEd News reminds us that it could have been much worse. A picture is worth a 1000 words!

For those who question the costs of our post-election audits, OpEd News reminds us that it could have been much worse. We could have been stuck with touch screens (DREs) which would have cost much more, are less safe even with a paper trail, and are much harder and more expensive to audit. A picture is worth a 1000 words! <read & view photo>

Also note that the November 2008 audit cost Connecticut about $0.06 per ballot cast.  That is a small price to pay when a typical high-turn-out election in Connecticut costs towns in the range of $5.00-$10.00 per ballot cast.   My polling place is a mile and a half away, so it costs me close to $1.00 round trip just to drive to vote.

A look back:  Hartford Courant Editorial, December 7, 2006:  A TrueVote Vindication, Connecticut owes TrueVote CT a debt of gratitude. <read>

What Can Science Do For Us? – Nothing Unless We Pay Attention

This, from Ash’s perspective, represents the crux of the problem. We have sophisticated statistical tools that we rely on for everything from medical research to verifying the flow of money through Las Vegas casinos but we simply haven’t chosen to mandate that they be used to verify election results. Even in cases like the elections in Sarasota, where they were deployed, the results were deemed legally irrelevant unless they provide an indication that election results were distorted by malice or intent. Sloppiness or incompetence, apparently, is acceptable, despite our country’s promise to respect the intent of the voters.

American Association for the Advancement of Science meeting, “”Science for Public Confidence in Election Fairness and Accuracy”  <read> statements by Ed Feltion and Arlene Ash.

it’s mathematically impossible to verify that the code they run will behave properly under all circumstances, which means that the best we can do is provide a verifiable and auditable record of the vote, allowing problems to be identified retrospectively. Even that’s difficult to reconcile with our expectations for anonymity; in describing the challenge of creating an algorithm that simultaneously encrypts and anonymizes the votes, Felten said, “we’ve reduced this to a previously unsolved problem—we’re really good at that in computer science.”

Until that problem is solved, many states are opting for optical scan voting or printing voter verifiable receipts, which can allow a post-election audit to identify significant problems. But running these audits raises a whole new series of issues, some of which are less a technical challenge than a matter of how carefully we want to listen to what an rigorous analysis of a vote tells us…

This, from Ash’s perspective, represents the crux of the problem. We have sophisticated statistical tools that we rely on for everything from medical research to verifying the flow of money through Las Vegas casinos but we simply haven’t chosen to mandate that they be used to verify election results. Even in cases like the elections in Sarasota, where they were deployed, the results were deemed legally irrelevant unless they provide an indication that election results were distorted by malice or intent. Sloppiness or incompetence, apparently, is acceptable, despite our country’s promise to respect the intent of the voters.

Answer Quick: What Do Premier/Diebold and Wal-Mart Have In Common?

Hint: It is not low prices for computer memory cards.

The Raw Story has the story <read>

To convince Utah decision-makers that Premier was a big company with a substantial presence, Kathy Dopp, founder of UtahCountVotes.org, reported that a company representative told the decision-makers in 2006 that Diebold “has about 20 offices in Utah.” When pressed further, the representative refused to give the locations of any of the offices. In fact, the White Pages lists 18 Diebold offices.

However, when calls were made to all of these offices, only one picked up the phone. And when the addresses of offices listed under Diebold in the White Pages were visited, the addresses turned out to belong to either a Wal-Mart, a Sam’s Club, or no building at all. In the end, 16 of the 18 Diebold offices in Utah listed in the White Pages were false listings…

A quick investigation by Bob Fertik on Democrats.com revealed that a similar scam existed in New York, with another Diebold listing in Buffalo turning out to be a Wal-Mart. Out of 13 listings in Florida, 5 turned out to be Wal-Marts. Similar office listings have been uncovered in Alabama, Mississippi, and New Hampshire.