Reliability of pricey new voting machines in question
Nearly 1 in 5 U.S. voters will cast ballots this year on devices that look and feel like the discredited paperless voting machines they once used, yet leave a paper record of the vote. But computer security experts are warning that these so-called ballot-marking devices still pose too much of a risk.
Ballot-marking machines were initially developed not as primary vote-casting tools but as “accessible” alternatives for the disabled. They print out paper records that are scanned by optical readers that tabulate the vote.
They cost at least twice as much as hand-marked paper ballots, which computer scientists prefer because paper can’t be hacked. That’s an important consideration as U.S. intelligence officials warn that malicious meddling in this year’s presidential contest could be worse than in 2016.
The machines have been vigorously promoted by the trio of privately held voting equipment vendors that control 88% of the U.S. market and are nearly unregulated at the federal level. They are expected to be used by some 40 million eligible voters more than in the 2018 midterm elections.
Key counties in the crucial swing states of Pennsylvania, Ohio and North Carolina, much of Texas, California’s Los Angeles County and all of Georgia and Delaware have bought ballot-marking machines. So has South Carolina, which will use them in Saturday’s primaries.
Some of the most popular such devices, from Election Systems & Software and Dominion Voting Systems, register votes in bar codes that the human eye can’t decipher. That means skilled hackers could alter outcomes without detection, gaming bar codes while keeping voters’ intended choices on the human-readable portion of the ballot printout, computer scientists have found.
ES&S claims such tampering is “a practical impossibility.”
Spokeswoman Katina Granger said the company’s ballot-marking machines’ accuracy and security “have been proven through thousands of hours of testing and tens of thousands of successful elections.” Dominion declined comment for this story.
Even on machines that don’t use bar codes, voters may not notice if a hack or programming error mangles their choices. A University of Michigan study determined that only 7% of participants in a mock election notified poll workers when the names on their printed receipts didn’t match the candidates they voted for.
Critics say currently available ballot-marking devices undermine the very idea of retaining a paper record. It’s an idea supported by a 2018 National Academies of Sciences report that favors hand-marked ballots tallied by optical scanners, which 70% of U.S. voters used in 2016 and 2018 and will again rely on in November. It is a stance also shared by Colorado,
a national leader in election security. The state is banning bar codes from ballot-marking voting machines beginning in 2021.
But some election officials see ballot-marking devices as improvements over paperless touchscreens, which were used by 27% of voters in 2018. They like them because the touchscreens are familiar to voters, looking and feeling like what they’ve been using for nearly two decades, and they can use one voting method for everyone.
Michael Anderson, elections director for Pennsylvania’s Lebanon County, said “voters want it.” The county offers all voters both machine- and hand-marked ballots.
“When we give them a paper ballot, the very first thing they say to us is, ‘We’re going back in time,’” he said.
At last year’s DefCon hacker convention in Las Vegas, it took tinkerers less than eight hours to hack two older ballot-marking devices that organizers obtained.
But New York State election commission co-chair, Douglas Kellner, an early critic of paperless electronic voting machines, said he’s confident in a ballot-marking device, the ImageCast Evolution by Dominion, certified for use in his state.
He said safeguards built into the machines and security protocols make a hack of the ImageCast Evolution “extraordinarily unlikely.”