Harri Hursti is coming to Riverside County, home of County Supervisor Jeff "1000 to 1" Stone, he of the now infamous, if ill-conceived, "Riverside Hack Challenge".

Hursti, the Finnish computer security expert and hacker of Diebold voting machines past (see HBO's Hacking Democracy for but one example), will be testifying to and answering the questions of the "Blue Ribbon" commission empaneled by the county to investigate complaints about the administration of the 2006 election, as well as the the many expressed security and accuracy concerns about their Sequoia Edge touch-screen DRE voting systems.

Riverside is, proudly, the first county in the U.S. of A. to have made the mistake of moving to electronic balloting systems, but if they hurry, they won't be the last to dump 'em entirely.

The Sequoia voting systems in question would be the ones involved when Stone challenged Election Integrity advocates, on video tape, back in December, to bring in a programmer and "set up an appointment with one of our machines" in order to "verify that they can manipulate that machine."

"I'm gonna bet a thousand to one that they cannot do it...I'll make that challenge," Stone blurted out to the continuing dismay of his fellow Supervisors and County Registrar Barbara Dunmore.

And then, Hursti stepped in to accept the challenge. Stone has been wafflin', duckin', and dodgin' ever since (see this page for our complete hilarious special coverage of the "Riverside Challenge").

Hursti will testify at the commission's March 30th panel at 9am in Palm Desert, CA, at the Palm Desert City Hall, 73-510 Fred Waring Drive.

The hearing and testimony is open to both the public and the media, and --- as we are both --- we might like to drive down there ourselves if the gods are with us. But, despite Hursti's travels all the way from Finland, the gods haven't been with us much of late, and so we may or may not be able to make the few hours' drive. But we hope you will, if you're in the 'hood. And if so, let us know how it went!

Either way, we hope to have some video of the whole affair to post here afterwards at The BRAD BLOG if those pesky gods are even partly with us this time around.

UPDATE: VelvetRevolution.us --- (Disclosure: The BRAD BLOG is a co-founder of VR)-- is helping to raise funds to cover the expenses of DFA/Temecula Valley & SAVE-R-VOTE in covering expenses for Hursti's visit, and other costs related to their Election Integrity advocacy. Please click here to donate, and specify funds be earmarked for "Riverside Hack Challenge".

More details on Hursti's appearance in Riverside follow in a press release which we early-obtained from the good folks of the SAVE-R-VOTE project of DFA/Temecula Valley, and we're all too pleased to share it with you in full below...

The Los Angeles Times underscores everything that is wrong with relying on "paper trails" from Direct Recording Electronic (DRE) touch-screen voting systems: Nobody ever counts them. Even in incredibly close contested elections as overseen by a court of law...

Please note that Rush Holt's Election Reform bill (HR811), which mandates the hand-count of a very small minority of paper records in most federal races (which this race was not) via an audit after Election Day, allows no audit to happen at all in the case of an automatic state-mandated recount --- the type that occurs when an election is incredibly close, and when such an audit, arguably, might be needed the most.

UPDATE 4:58pm PT: Election Integrity advocate Tom Courbatt of Riverside County points us towards an October 31, 2006 statement [PDF] from former CA Sec. of State Bruce McPherson, who said: "The mandatory paper audit trail will be used for a full recount if necessary." That statement is at the bottom of the 5-page press release. Guess he was just kidding. Or the judge in Orange County didn't care. Or "paper trails" don't actually matter after all, no matter what any law or elections officials try to tell you...Which is why we need a paper ballot --- one that is actually tabulated --- for every vote cast in America!

California's election clerks --- or at least those who are members of the California Association of Clerks and Elections Officials (CACEO) --- are freaking out in light of CA Secretary of State Debra Bowen's newly proposed draft criteria for her promised, "first-of-its-kind top-to-bottom review" of all electronic voting systems in the state.

Bowen's most welcome and strictly drawn draft criteria, as we reported last week, are open for public comment through April 6th, after which testing will begin on systems which will lose their certification for 2008 if they do not meet the refreshingly strict standards to be reviewed (finally!).

In a document dated today and obtained by The BRAD BLOG, the CACEO --- who worked very hard, if unsuccessfully, to see Bowen's irresponsible predecessor, the hapless Bruce McPherson, re-elected --- filed their comments on Bowen's test criteria. And they don't like 'em. They don't like 'em one bit.

While we can hardly say we're surprised by that, or that they didn't bother to post the document on their own website yet, we can say that we're surprised that these folks who run elections for a living still seem completely and utterly unaware of the one thing that matters to voters --- and any successful democracy --- the most...

I'll be sitting in again this week as Guest Host on Sunday for the good Cynthia Black Nova M and Air America Phoenix' Action Point with Cynthia Black on 1480am KPHX.

This week, we'll have a live broadcast exclusive first as Diebold document whistleblower Stephen Heller will be LIVE in studio to be interviewed on air for the first time! We'll also take your calls! As well, CODEPINK's Jodie Evans will join us to discuss the Democrats courageous Iraq Policy, or lack thereof. Don't miss it! More details follow...

From the San Diego Union-Tribune today:

In the North County Times' report on same, which focused on the difficulty the county may have in finding a replacement for Haas, and bothered, (unlike the as-ever rightwing U-T's coverage above) to note just some of the fire that Haas has been under for his horrible performance as head of elections in SD, added:

A "troubleshooter" indeed, for the hard rightwing San Diego County administrators.

A quick review of a just a few BRAD BLOG items concerning Haas will inform the initiated about one of America's worst, most dangerous, partisan Elections Administrators and the disaster that Diebold's man in San Diego has been for the voters of San Diego as he's overseen/mis-managed such elections as the Busby/Bilbray race and many more.

His failures have led both Democrats and Republicans to call for his resignation. Little wonder then, here in Bush's World, that he's now been rewarded for his bad work. Can the Medal of Freedom be far behind?

Heckuva job, San Diego!

"Clean up politics. Elect Women." Indeed.

In our second "New Female Secretary of State Kicks Ass, Cleans Up Mess Wrought by Male Predecessor" story of the day, California's own Debra Bowen issued her draft criteria to be used for the first-of-its-kind, "top to bottom review" of all electronic voting systems she promised just before taking office. And the electronic voting machine companies ain't gonna like 'em. But we do.

"The review is designed to restore people's confidence in the integrity of our electoral process," Bowen said in a statement issued yesterday to announce the criteria and her call for public input, "Every California voter has the right to have their vote counted as it was cast."

Imagine that. Am I dreamin'?! The criteria are now posted here [PDF] for public comment.

And, oh, man...Here's just a taste. From the "Security Standards" section...

The criteria are virtually the same for op-scans and central tabulating systems. And from the "Security Testing" section (Jeff "1000 to 1" Stone of Riverside County is not gonna like this)...

Now we're getting somewhere! And we're also reminded why Bowen was the only candidate ever officially endorsed by The BRAD BLOG!

"I want input from as many people as possible – voting rights activists, county elections officials, and anyone else who wants to offer an opinion," said Madame Secretary, putting the voting rights folks first for a refreshing change, in her statement.

Input on the draft criteria can be sent here: votingsystems@sos.ca.gov. The criteria for California, or as Diebold refers to it, "the world's largest voting market," will be finalized by April 6.

"We need not (and do not) resolve the question of whether the election contest at issue here fits within the category of election contests that may be entertained without infringing on Congress' authority because the instant dispute can, and should, be resolved on a much narrower ground — mootness."
-- CA Court of Appeals (4th District), Majority Opinion, Jacobson v. Bilbray, 3/20/07

Need more evidence for why election results need to be right on Election Night? Look no further than the now-infamous CA50 Busby/Bilbray Special U.S. House Election to replace Randy "Duke" Cunningham last June.

The latest chapter finds an Appellate Court in California dismissing the case on the grounds that the issue is now "moot" because the six month term for the original election being challenged has now ended. That, despite the defense never even having raised the issue. And thus, the voters' right to even have a proper recount as afforded by state law, in order to find out who had the most votes in an election, is usurped by the U.S. Congress's ultimate Constitutional authority to decide who will be seated in its chambers....

California's new Secretary of State, Debra Bowen, has flatly rejected a request from Riverside County, CA County Supervisor Jeff Stone to participate in a "hack test" challenge originally proposed to Election Integrity Advocates in response to their concerns about security and accuracy for the county's electronic touch-screen voting machines, The BRAD BLOG has learned.

In a letter sent to Stone last week obtained by The BRAD BLOG (posted in full at the end of this article), Secretary Bowen found that though there was no state law to prohibit such a test, her office would not participate, in part due to the narrow restrictions initially insisted upon by Supervisor Stone.

In her reply to a letter sent in early January to outgoing Secretary of State Bruce McPherson just days before he would leave office, Bowen wrote, "I am not aware of any state law that would prohibit the type of security test that you described in your letter." Unlike Bowen, the former SoS had been seen as far more favorable towards relaxed security issues for electronic voting.

As The BRAD BLOG originally reported last December, Stone had initially challenged local Election Integrity advocates "a thousand to one," during a public hearing, that a programmer would be unable to "manipulate" the county's voting system.

In her letter to McPherson Bowen joined other computer security professionals who had previously rejected Stone's unilateral suggestions for ground rules, calling them "overly narrow," potentially giving voters a "false sense of security." Stone had written to the former SoS that just "15 minutes would be allotted" for the test and the programmer who accepted the challenge --- noted computer security expert Harri Hursti --- would be prohibited from using any tools or reaching around the back of the machine. "In every sense," Stone wrote, "he would be like any voter on Election Day approaching a voting unit at the polls."

Bowen, however, balked at Stone's unilateral ground rules, writing in response...

As well, Bowen also highlighted the point made by Election Integrity Advocates, computer security professionals, and even the Baker/Carter "Blue Ribbon" National Election Reform Commission that made the point that the greatest threat to e-voting security likely comes from election insiders, such as officials or poll workers who have been allowed to take pre-programmed, election-ready systems home with them in the days prior to the election as allowed by Riverside County.

Such insider access is seen as a far greater threat to security than that from voters on Election Day. As Bowen wrote in reply...

San Francisco is considering "upgrading" their voting systems to use Sequoia machines. They are demanding that the company publicly disclose their software source code for all to see. It's called transparency. That's a good thing.

But Sequoia is refusing. Yesterday, there was another discussion/debate on the topic at an SF Board of Supes hearing. The San Francisco Examiner reported this laugh line from the Sequoia spokeshole:

For those just joining the fun, who may be unfamiliar with guffaw-worthiness of Bennet's claim about concern for the security of his company's shitty voting systems, we'll refer you to this small sampling of previous relevant BRAD BLOG articles:

• Pro E-Vote Professor Accidentally Hacks Sequoia Voting System
• Sequoia's 'Yellow Button' Allows Voters to Vote As Many Times as They Want
• Sequoia Spokesperson Against Hack Testing of Touch-Screen Machines in Riverside County, CA
• Princeton Prof. Buys Sequoia System on Internet, Hacks It in 10 Seconds

...Along with a heads up that we'll have more --- much more --- on Sequoia's "concerns" about the security of their voting systems (or lack thereof) in a detailed investigative report in the very near future...

Guest Blogged by Ken Simpkins

ED NOTE: Over the last nine months or so, along with attorney Paul Lehto, Carlsbad, CA attorney Simpkins has filed a number of voter lawsuits in San Diego in his continuing attempt to help bring accountability to the unaccountable San Diego County Registrar of Voters, Mikel Haas and his atrocious elections administration. Those suits included complaints and appeals in the now-infamous Busby/Bilbray Special Election as well as voter lawsuits brought both before and after last November's General Election in San Diego.

After being stonewalled by the San Diego County Registrar of Voters Office on requests for recounts, information regarding the right to vote on paper ballots, and the results of an audit of the November 2006 election, citizens are taking action. Last Thursday, a complaint [PDF] was submitted to the new California Secretary of State, Debra Bowen, addressing voters’ concerns. Secretary Bowen was voted into office on the promise of cleaning up elections.

SD County's Registrar of Voters, Mikel Haas, has attracted the attention of The BRAD BLOG for many months as "one of the worst elections officials in the country." His policy of sending pre-programmed, election-ready Diebold voting machines home with poll workers weeks in advance of elections, without any training on security or assurance that the machines would be held in a secure environment, likewise attracted the ire of many San Diego County voters. Those same voters are signing a petition urging the Secretary of State to investigate the allegations in the complaint and report on the findings. I urge you to sign it as well.

The complaint reports on the violations of the certification requirements under state and federal law, the failure to properly test the machines pursuant to official procedures, the policy of undermining the right to vote on paper ballots, and the disregard of basic auditing principles in conducting the required one percent manual tally.

The voting machine "sleepover" policy is one example of the disregard by the Registrar of Voters of the proven vulnerabilities of the Diebold machines, which can be hacked in one minute and made to change the outcome of an election. In defending the sleepover policy, Mr. Haas points to the "tamper-evident" tape used to seal the memory card compartment as sufficient security against fraud. But, when one observer discovered on election day that the tape had been removed from the machines at two precincts, and reported the violation of the certification requirements to Mr. Haas, he refused to take the machines out of service and allowed voters to cast their votes on the then-uncertified machines...

Guest Blogged by John Gideon, with additional reporting by Brad Friedman

"We can take a version of Sequoia's software program and modify it to do something different --- like appear to count votes, but really move them from one candidate to another. And it can be programmed to do that only on Tuesdays in November, and at any other time. You can't detect it," Princeton's Professor of Computer Science Andrew Appel explains in New Jersey's Star-Ledger today.

Like Diebold's touch-screen machines before them, Sequoia's voting machines have now been found to be hackable in seconds by a Princeton University professor who says the systems could be "easily...rigged to throw an election." Someone may wish to let the folks in Riverside County, CA, know since County Supervisors there recently issued a "thousand to one" bet that their Sequoia voting systems couldn't be manipulated.

In the same report, it was revealed that an attorney has filed suit, claiming the Sequoia AVC Advantage Direct Recording Electronic (DRE) voting machines used in 18 of New Jersey's 21 counties were never reviewed by the state before they were improperly certified for use and that Princeton's Appel was able to acquire five Sequoia voting machines for only $86. The same machines were recently purchased by the state for $8,000 apiece.

According to the Star-Ledger...

Venetis argues that the state certification is in violation of NJ state law which says such systems must "correctly register and accurately count all votes cast," be "of durable construction" to be used "safely, efficiently, and accurately."

The lack of documentation and testing, however, is hardly the only problem, as reported by the paper today. "Had the machines been tested," Election Integrity advocates have found, "they would have proved to be a hacker's dream."

Princeton Computer Science Professor Andrew Appel revealed that he bought 5 of the Advantage voting machines from an on-line government equipment clearinghouse for a total of $86. Virtually identical machines were bought in 2005 by Essex County New Jersey for $8,000 per machine.

"Appel had to submit only minimal personal information and a cashier's check to close the deal," the Star-Ledger reports. He and his team then put the 5 machines to good use...

There were two fresh articles this week in the media on the Riverside Hack Challenge as initially reported by The BRAD BLOG after the throw-down by Riverside County Supervisor Jeff Stone to Election Integrity Advocates just before the holidays in early December.

You'll recall he bet "a thousand to one" that the county's touch-screen Sequoia voting system could not be hacked. He did so during a public meeting on video tape. If you don't recall, we'll summarize as briefly as we can. He challenged and the Election Integrity Advocates accepted, as noted voting machine hacker and computer security expert Harri Hursti agreed to take the challenge, and then Stone and the rest of the Riverside Supervisors began to go wobbly. Stone even went so far as to invent ridiculous, unrealistic, unilateral conditions for the hack test in a desperate letter sent to then-outgoing Secretary of State Bruce McPherson, in an apparent hope for a life line from the county's old, but now out-of-power, state ally up in Sacramento. He doesn't appear to have gotten one. The new SoS Debra Bowen's office has informally told The BRAD BLOG they see no legal hurdles to such an independent test of voting machine security.

But with internationally respected computer security experts such as Hursti and Dr. Herbert F. Thompson of Security Innovation (the author of some 12 books on the topic including How to Break Software Security: Effective Techniques for Security Testing and The Software Vulnerability Guide) and others having pointed out that Stone's unilaterally created conditions meant to simulate an attempted hack by a voter on election day were silly, unrealistic, and not the way such a penetration test would ever be carried out in the real world, Stone continues to cower behind them as reported by both media reports this week.

In doing so, Stone is tacitly admitting, of course, that his county's electronic voting systems --- which the Board of Supervisors and Riverside Registrar of Voters Barbara Dunmore have devoutly declared to be "secure" --- are, in fact, anything but.

They know damned well they are not. And their evidence-free claims to the contrary over the last 10 years or so are revealed as little more than unsubstantiated hot air now that their true lack of confidence in their own voting systems has been put on display for the world.

As they well know --- as do the Election Integrity advocates on the ground in Riverside --- the real threat to unsecured, hackable Electronic Voting Machines comes from insiders. That much has been written about time and again by computer security experts and in any number of reports on the topic. Even the biased and partisan and pro-electronic voting machine Baker/Carter Commission admitted as much when their final report on National Election Reform said, "Software can be modified maliciously before being installed into individual voting machines. There is no reason to trust insiders in the election industry any more than in other industries."

Revealed along with Stone's disingenuous "condition" in his letter to McPherson, that the hack tester may not "reach around the back of the machine" --- (Stone may have forgotten when he made his challenge initially that The BRAD BLOG had long ago reported that voters could vote as many times as they wanted on Sequoia touch-screen systems by merely pressing a yellow button on the back of the machine) --- the folks in Riverside have exposed themselves as knowing full well about the unreliability of their crappy, unsecured voting system.

Unless Stone allows a legitimate security penetration test to be held on his systems, as would occur in the commercial world for any such mission-critical, secure system, he is signaling to his constituents, the state of California, and America that even he has no confidence in the security of the equipment supplied to his voters to exercise their precious democratic franchise.

Two more reporters picked up the shameful tale this week in local media.

The Desert Sun's Nicole C. Brambila filed a short piece on Sunday headlined "Hacking debate gains traction" in which Stone and his pusillanimous peeps once again re-iterate the phony conditions for "no tools and no dismantling the machine. And, the hacker has to infiltrate the system in 15 minutes, the estimated time it takes a voter to do his or her civic duty."

We laugh knowingly in Stone's general direction. Even as he likely cries inside.

Of fresh note in Brambila's piece are these final grafs...

Yes, like the Energizer Bunny, the case in CA50 (Jacobson v. Bilbray) is still going. The first oral arguments on the appeal took place on Monday.

To recap: the original case was filed last Summer by San Diego voters Gail Jacobson and Lillian Ritt against then-candidate Brian Bilbray and SD County Registrar of Voters/Voter Hater Mikel Haas, after a BRAD BLOG report revealed that pre-programmed, election-ready, hackable-in-60-seconds Diebold voting machines were sent home illegally (in our rarely humble opinion, though one shared in a recent interview by California's new Secretary of State Debra Bowen) with poll workers on overnight "sleepovers" days and weeks before the U.S. House Special Election last July to replace the disgraced Randy "Duke" Cunningham.

There is much more than just the "sleepovers" at question in the case, like the fact that Haas, one of America's worst Elections Officials, arbitrarily and capriciously quoted a legal request by voters for a hand-count in the race at $150,000, effectively stymieing the possibility that such a count would happen at all. Also at issue is the fact that the case was tossed out by a lower court judge after the Bilbray team argued --- with the help of a letter [PDF] from the then-Republican U.S. House Admin Committee in Congress --- that California courts and voters had no say over the issue.

In that letter, the House Admin Committee argued that they, not the California courts or voters, had sole jurisdiction over the case once Bilbray was sworn in. He was sworn in after a fax was sent claiming he was the winner of the election, from the very partisan and now-former CA SoS Bruce McPherson's deputy, Susan Lapsley. Lapsley sent the fax just days after the election, despite the controversy that had erupted over the effectively-decertified voting systems used in the race, the slim reported margin between the two candidates, and the fact that the state hadn't yet actually certified the race, in which tens of thousands of votes in San Diego county had yet to be counted at the time.

Attorney Paul Lehto, working with Carlsbad attorney Ken Simpkins, filed both the original case and the appeal. UPDATE: We've now got a number of accounts of the argument from folks in the courtroom on Monday.

First, Simpkins sends us the following update (which is shorter than our recap) from the first day of hearings last Monday in the appellate case...

There's been a fair amount of media coverage (at least in California papers), since our scoop yesterday of new CA SoS Debra Bowen's brilliant appointment of dogged E-voting critic and VoterAction.org attorney Lowell Finley to the post of Deputy SoS for Voting Systems Technology and Policy.

There are a couple more ironic points to the Finley appointment above and beyond the ones we mentioned yesterday. One we knew about, another we hadn't.

In his report on the matter, Oakland Tribune's Ian Hoffman reminds us of the qui tam lawsuit filed by Finley against voting machine company Diebold and joined by the state in 2004, which eventually resulted in a settlement:

In a point we hadn't previously known, the Los Angeles Times blogger on state capitol and gubernatorial issues, Robert Sallady, highlighted our coverage here --- describing us as "The state's most persistent blogger-watchdog on the dangers of voting technology" (thank you, sir) --- and advanced the story a bit with this irony-laden chestnut about the man who will now, officially, be working as an appointed member of Schwarzenegger's own Executive Branch:

Office Christmas parties next year in Sacramento ought to be a hoot. Hopefully the Governator supplies the medication.

It may not be a very good day in the corporate offices at Diebold, but The BRAD BLOG has learned some big news that may well indicate today is a very good day indeed for the voters of America and specifically in California.

As incoming Sec. of State Debra Bowen was sworn in to her new office just moments ago, The BRAD BLOG can now reveal that one of the nation's top critics of unverifiable electronic voting systems --- and a key player across several states in the legal battles against voting machine companies such as Diebold, ES&S, Sequoia Voting Systems, and Hart Intercivic --- is today being named by the new California Sec. of State Debra Bowen as Deputy SoS for Voting Systems Technology and Policy.

Lowell Finley, the lead attorney for the non-partisan voting machine legal watchdog organization VoterAction.org, will be named to the position today.

In his new capacity, Finley will oversee testing and certification for all voting machine technology in the State of California. In a phone call this morning, Finley confirmed that he would be working closely in his new role with key national associations like the National Institute for Science and Technology (NIST) and the U.S. Elections Assistance Commission (EAC).

E-voting critics and at least one California Registrar of Voters have hailed both the swearing in of Bowen as SoS and her appointment of Finley, expressing delight to The BRAD BLOG over the news, characterizing it as a "colossal surprise" and a "very, very good sign for the future of voters' rights in California."

America's voting machine companies are less likely to feel quite as happy about the news.

Finley and VoterAction have filed a number of landmark lawsuits in several states, including in California, over the past year or so, demanding an immediate halt to the use and purchase of Direct Recording Electronic (DRE/touch-screen) voting systems and decertification of many of those systems, as well as improved processes for certification of such systems.

VoterAction is one of over 30 Election Reform organizations who recently went on record with an open letter to Members of Congress demanding federal legislation requiring a paper ballot for every vote cast in America. Such legislation would effectively ban the use of DRE systems, with or without a so-callled "Voter Verified Paper Trail" (VVPAT).

Bowen has been a dogged critic of former Secretary of State Bruce McPherson during her candidacy and in her role overseeing the Elections Committee as a California State Senator. She has criticized his lack of oversight and lax testing procedures, and has championed a "Voters' Bill of Rights" for the Golden State.

While a suit by VoterAction.org filed against former SoS McPherson and several CA Registrars of Voting --- concerning McPherson's certification of Diebold TSx touch-screen systems --- is still pending in state court, the disposition of that suit will likely change due to the fact that the lead defendant, McPherson, is no longer in office.

The Berkeley-based attorney Finley --- also one of the attorneys representing voter plaintiffs in the contested election in Florida's 13th Congressional district in Sarasota --- had one of his most recent and notable successes last September, when a Colorado judge ordered a complete review of certification procedures for voting machines in the state. The court found the official placed in charge of testing and certification didn't have the qualifications necessary, and performed little or no testing. That man, John Gardner, was appointed by former CO Sec. of State Donetta Davidson, who has been appointed by George W. Bush to head the U.S. Elections Assistance Commission.

The news of Finley's appointment will undoubtedly be of concern to the major voting machine companies that received little oversight from the former Sec. of State McPherson.

"I wish I was a fly on the wall in the offices at Diebold as they learn of this appointment. I'm sure jaws will be dropping and damage control will be ramping up," John Gideon of election watchdog organization VotersUnite.org told us today. (Gideon is also a frequent Guest Blogger here at The BRAD BLOG.) ...