Once again, in a world of horrible reporting and irresponsible journalists (Media Matters rounds up a bunch of them here) willing to pass on discredited, unevidenced sour grapes from Election Officials and Voting Machine Company spokesliars, it's syndicated columnist Tom Elias who cuts through the crap and tells the truth about those "loser" Officials.

Elias also validates the fine choice we made in the only official candidate endorsement at The BRAD BLOG.

Here are a few money shots, from one of the very few articles we've been able to find that gets it right, since the release of CA Secretary of State Bowen's landmark, independent review of the utter failures of every single electronic voting system that has been rubber-stamp certified by her horribly irresponsible predecessor, Bruce McPherson, and the near-entirety of CA Elections Officials who have been misleading and whining about the findings ever since...

Guest Blogged by John Gideon, VotersUnite.Org

The impact of California SoS Debra Bowen's "Top-to-Bottom Review" is beginning to be felt, tangibly, in other states across the country.

One such state is Kentucky, where this morning a press release was issued by the state's Attorney General Gregory D. Stumbo demanding that electronic voting machine manufacturers immediately correct security flaws identified in the independent reviews by experts in California.

In terse letters sent to voting machine companies Diebold and Hart Intercivic (letters posted in full below), Stumbo demanded that the companies "immediately implement in Kentucky all modifications and security upgrades necessary to correct the vulnerabilities identified by California."

Stumbo had this to say during in his news release this morning:

Meanwhile Kentucky's "do-nothing" Secretary of State, Trey Grayson publicly criticized Attorney General Stumbo's statements to which Stumbo retorted:

The two one-page letters [PDF] from KY AG Stumbo to Hart InterCivic and Diebold demanding the same immediate corrective action as required by the state of California are posted in full below...

By Brad Friedman from Plano, TX, with help from Emily Levy of VelvetRevolution.us and Tom Courbat of SAVE R VOTE...

In a dramatic late-night press conference, California Secretary of State Debra Bowen decertified, and then recertified with conditions, all but one voting system used in the state. Her decisions, following her unprecedented, independent "Top-to-Bottom Review" of all certified electronic voting systems, came just under the wire to meet state requirements for changes in voting system certification.

Bowen announced that she will be disallowing the use of Direct Recording Electronic (DRE, usually touch-screen) voting systems made by the Diebold and Sequoia companies on Election Day, but for one DRE machine per polling place which may be used for disabled voters. The paper trails from votes cast on DREs manufactured by those two companies must be 100% manually counted after Election Day. DREs made by Hart-Intercivic are used in only one California county and will be allowed for use pending security upgrades.

The InkaVote Plus system, distributed by ES&S and used only in Los Angeles County, has been decertified and not recertified for use after the company failed to submit the system source code in a timely manner to Bowen's office. LA County is larger than many states, and questions remain at this time as to what voting system they will use in the next election.

As The BRAD BLOG has been reporting in great detail for the past week since the reports were released, the "Top-to-Bottom Review" had found that all Electronic Voting Systems certified in California were easily accessible to hacking. A single machine, the testers discovered, could be easily tampered with by an Election Insider, Voting Machine Company Employee, or other individual in such a way that an entire election could be affected without detection.

In Bowen's conditional recertification she re-iterated that "expert reviewers demonstrated that the physical and technological security mechanisms" for the electronic voting systems "were inadequate to ensure accuracy and integrity of the elections results and of the systems that provide those results."

The Certification/Recertification documents for each of California's voting systems, including security mitigation procedures and other requirements for use, are now posted on the CA SoS website. The documents, in and of themselves, offer devastating indictments against the security and usability of each of the systems as revealed during Bowen's independent University of California "Top-to-Bottom Review."

Bowen, a Democrat, was elected last November largely on her promise to re-examine the state's voting systems. In an upset victory, she defeated Republican Bruce McPherson who had been appointed as Secretary of State by Gov. Arnold Schwarzenneger. McPherson had been very friendly to the voting machine vendors, allowing for the continued use of virtually every e-voting system submitted for state certification. Several of those systems had been previously revealed to have had grave vulnerabilities and included source code which was in violations of federal voting systems standards and in violation of state law.

The late-night press conference, following Bowen's decisions, was held at the SoS's office in Sacramento at 11:45pm PT, just in time to meet the state law requiring a six-month notification, prior to an election, for changes to certification of voting systems. California's Presidential Election Primary was recently moved up several months by the state legislature to February of '08.

The BRAD BLOG was able to listen in to the presser via a poor cell phone connection out of Bowen's office. As best as we were able to transcribe, these are our notes from Bowen's announcement and the questions from the media which followed...

Direct Recording Electronic (DRE/touch-screen) voting systems decertified and recertified for use by disabled only.
100% manual count for Diebold and Sequoia DREs.
One machine per polling place.

Diebold – Optical scan system: – decertified and recertified only if meets certain requirements.

Diebold TSx DREs – decertified and recertified subject to certain conditions. Only one machine in a polling place for use by disabled voters. Reduces risk of viral attacks that could infect central equipment.

Sequoia – Optec optical scan: – decertified and recertified – subject to conditions

Sequoia AVC Edge I and II (DREs) – decertified and recertified with a number of security requirements including only one machine in each voting location to allow independent access by disabled voters – concern regarding corruption of software and source code

Hart Intercivic – eSlate DRE: Used only by one county – decertifying and recertifying subject to security requirements. Has the least risk of the three systems.

ES&S InkaVote Plus - optical scan: (LA County only) – ES&S ignored my March demand to submit source code. ES&S eventually submitted source code too late for t2b review. Therefore, "I am decertifying the InkaVote Plus without recertification."

Voters are victims of federal certification process that has not done a job of assuring machines are accurate, accessible, secure.

I reject the notion that I should not require changes in systems solely because we already own them. She compares it to a recall of cars....When NASA finds a problem, they don't continue just because they've already spent the money. They scrub the mission and spend the money to get it right. We must do same with elections.

Guest Blogged from Sacramento by Emily Levy of VelvetRevolution.us (with assistance from Michelle Gabriel, photos by Bill Lackemacher of Sacramento for Democracy) from the public hearing on 7/30/07, called by California Secretary of State to receive comments on her landmark "Top-to-Bottom review" of the state’s electronic voting systems. No internet access was available in the hearing room, so I wasn’t able to live blog as I’d hoped. I did, however, take copious notes, which are posted in full below this brief summary.

ED NOTE: The video of the hearing, which was not easily available as it streamed live today, is now posted here and here. But I recommend Emily's detailed description below for a great deal of value-added content and perspective! And it's faster! - BF

Note: Story very slightly updated with some corrections in the spelling of names, plus one substantive correction regarding Jim Soper's testimony (the very last one in the entire article).

SACRAMENTO - California Secretary of State Debra Bowen made opening remarks, followed by an overview of the Top-To-Bottom Review by the chief investigator, Matthew Bishop, University of California Davis (UCD) Professor of Computer Science.

Following that, each of the three vendors whose machines went through the Top-To-Bottom Review were given 30 minutes to respond to the report. Diebold went first and only took about five of the 30 minutes, followed by Hart Intercivic and Sequoia.

I’m absolutely thrilled to report that Sequoia knows just how to solve the problems found in the Top-To-Bottom Review: California should just by newer systems from them!

After lunch was the public comment period, the longest part of the hearing. I’ve paraphrased and sometimes quoted the comments of just about every person who testified (including my own testimony). There were maybe 25 or 30 county election officials present, many of whom spoke. Freddie Oakley of Yolo County, an election integrity hero, spoke in favor of the Top-To-Bottom Review and said we bought these systems to accommodate voters with special needs and disabilities and “we have let them down in the most appalling way” by certifying systems with such obvious defects and continuing to use them despite those defects.

I believe every other elections official spoke critically of the Top-To-Bottom Review, most criticizing Bowen for not including county elections officials in the review, not reviewing policies and procedures as part of the Top-To-Bottom Review, and conducting the review in a laboratory setting rather than a real election setting. (I, in contrast, think our elections in recent years have been nothing but one giant beta test!)

It will take some scrolling to find my notes on the remarks of the many election integrity advocates who spoke. Most spoke late in the day, probably because they signed up later, after the pre-hearing press conference they held outside the Secretary of State’s office building. But it’s worth the scrolling, because many important things were said. Many of the EI advocates encouraged Secretary Bowen to decertify not just the three election systems tested, but all electronic voting systems. Many advocated for hand-counted paper ballots. Testimony was frequently backed up with credentials, experience, statistics and technical information. The depth and breadth of expertise in the election integrity movement continues to amaze me. (Note: I’ve posted my own comments in full because I had them available. If others who spoke would like their testimony posted in full, I invite them to paste them into the “comments” section of this blog item.)

Several people with disabilities and advocates for people with disabilities spoke. Some, notably Jennifer Kidder, spoke about the importance of election integrity. Kidder said, “The purpose of any equal opportunity legislation is to get marginalized voices heard,” and went on to note that this purpose is defeated if, after voting privately and independently, the vote of a disabled voter is changed by an electronic voting system.

Most of the people with disabilities and their advocates, however, cautioned against going “back” to paper ballots, saying that would be a move in the wrong direction in terms of the accessibility of voting systems. In general, they were supportive of the types of mitigations recommended by the accessibility team of the Top-To-Bottom Review, despite the findings that none of the systems tested actually met the federal accessibility standards as required by law.

Secretary of State Debra Bowen’s office is accepting public comments by email until Wednesday, August 1 at VotingSystems@sos.ca.gov On Friday, August 3, Bowen will announce what actions she will take in light of the Top-To-Bottom Review. We can only hope that she remembers why she was elected, and will take bold action to protect California's elections.

Detailed notes on the hearing appear below. Where I have paraphrased a speaker, I have done so in the first person, sometimes making my own [occasionally snarky] comments inside square brackets. I hope this isn’t confusing...

Blogged by Brad from Houston...

Going on air in 4 minutes...But still on line on media conference call w/ CA SoS Debra Bowen concerning her landmark independent "Top-to-Bottom Review" of all voting systems in the state.

I'll have more on the air tonight (see link above), but she has just said "The independent teams of analysts were able to bypass both physical and software security measures in every system tested."

The reports are not yet posted, but should be any moment right here.

As mentioned, more throughout tonight's Peter B. Collins Show which I'm currently Guest Hosting...

UPDATE BY JOHN GIDEON: None of the voting systems tested were found to meet federal mandates for disabled voter accessibility. This may present a problem for the state as they will not be able to allow those systems to be used for accessibility unless the vendors can find solutions for their shortcomings.

EVEN LATER UPDATE (BY BRAD): John and I discuss (and rant about) all of the above, along with more details on the reports findings in this audio clip from today's Peter B. Collins show [appx. 10 mins]...

UPDATE 7/28/07: We'll have much more on this in the days ahead, and we strongly recommend folks read comments below for more details, thoughts from citizens. But in the meantime, here's NY Times' coverage: "Scientists’ Tests Hack Into Electronic Voting Machines in California and Elsewhere" and San Francisco Chronicle coverage: "STATE VOTE MACHINES LOSE TEST TO HACKERS."

Blogged by Brad Friedman from Houston...

Following up on yesterday's report on the latest machinations surrounding the release of CA Secretary of State Debra Bowen's unprecedented "Top-to-Bottom Review" --- including independent hack testing and source code analysis --- of electronic voting systems. The BRAD BLOG has received a few more details on official release dates and timing, including a public hearing in Sacramento next Monday, from the SOS's office [emphasis ours]:

We're in Texas, but hoping those within driving, walking, running distance from Sacramento will show up to the Capitol to give their thoughts on the findings on Monday, as we expect the voting machine vendors to be there in droves, and they may need a reminder that they do not own these elections. The citizens do.

We're also still waiting to hear back from Steve Weir, the Registrar-Clerk of Contra Costa County and President of the California Assoc. of Clerks and Election Officers (CACEO), for details on his published comments indicating that CA registrars may choose to ignore Bowen's findings. The CACEO has blasted Bowen's review of voting systems previously.

Not sure what Weir's legal theory is for such an action, which seems to fly in the face of both the law and the will of the people --- Bowen was elected precisely on her promises to take the actions she's currently taking after both her predecessor in CA and federal agencies had failed completely to properly test these voting systems before certifying them --- but we'll let you know what we learn. We've invited Weir to appear on the Peter B. Collins Show, which we continue to Guest Host through the end of this week. We'd love to hear from him, of course. Stay tuned...

UPDATE 7/27/07 2:40pm PT: Still waiting for the release of the reports, which I'm told by the SOS will be "any moment". When it's released, it should be right here.

Blogged by Brad Friedman from Houston...

The results of California Secretary of State Debra Bowen's landmark "top-to-bottom" review of electronic voting systems in California are due on August 3rd. (UPDATE: The SoS's Office informs us the report will be released this Friday. Details now posted here.) It'll be the first such official analysis, performed by several teams of testers, in which these voting systems have actually been tested for vulnerabilities and failures by "red team" hack/penetration testers, as well as having the system source codes fully and independently tested.

An article by Steve Harmon published in several CA newspaper this week offers a preview of the battle which may be ahead, including one exceedingly disturbing suggestion that California Election Clerks may be preparing to "ignore Bowen's findings and continue to use their systems" no matter what she may find, and whether or not she decertifies the systems for use.

Yours truly is quoted early in the piece, suggesting that "voting machine companies are quaking in their boots," as Bowen is doing precisely what she was elected to do and is fulfilling her campaign promises through the unprecedented series of tests.

John Gordon of Public Radio's Future Tense program followed up that printed report with his own four-minute audio report in which I'm also interviewed:

Of note in both reports, the voting machine company spokesholes are on the defensive, as expected. But the real battle after Bowen releases her findings may lie with the California Association of Clerks and Election Officers (CACEO), currently led by President Steve Weir, who makes some startling statements in the report...

Doing twelve things at once today, so no time for analysis at this point. I'll just run CA Sec. of State Debra Bowen's just released statement on her promised, unprecedented, first-of-its-kind in the nation, "top to bottom review" of all of California's electronic voting systems.

The review will include "red team" hack testing for the first time ever. Done as standard operating procedure for similar security-sensitive, mission-critical commercial systems, this sort of penetration testing has never been performed on America's voting systems. Until now.

The one page summary [PDF] of the plan states:

• [University of California] will provide specialists from its campuses, as well as experts from public and private universities and private sector companies throughout the United States to create three teams of experts to conduct the reviews.
• Each system will undergo a thorough document and source code review, red team penetration testing, and a review to determine whether it’s accessible to all voters.
• The review teams will provide an independent technical evaluation of the voting systems that the Secretary of State will use to carry out her statutory duty with respect to voting systems in determining whether the systems comply with current state and federal law.

There are links within her statement below where you can find more details. For example, the State's review teams will include folks such as computer security expert "hacking" Harri Hursti, and blind technology expert Noel Runyan, who has been highly critical of unverifiable touch-screen DRE voting systems.

More on all of this, perhaps, later after I've had time to review the materials myself. But for now, see the statement below for some killer quotes from Bowen...

It may not be a very good day in the corporate offices at Diebold, but The BRAD BLOG has learned some big news that may well indicate today is a very good day indeed for the voters of America and specifically in California.

As incoming Sec. of State Debra Bowen was sworn in to her new office just moments ago, The BRAD BLOG can now reveal that one of the nation's top critics of unverifiable electronic voting systems --- and a key player across several states in the legal battles against voting machine companies such as Diebold, ES&S, Sequoia Voting Systems, and Hart Intercivic --- is today being named by the new California Sec. of State Debra Bowen as Deputy SoS for Voting Systems Technology and Policy.

Lowell Finley, the lead attorney for the non-partisan voting machine legal watchdog organization VoterAction.org, will be named to the position today.

In his new capacity, Finley will oversee testing and certification for all voting machine technology in the State of California. In a phone call this morning, Finley confirmed that he would be working closely in his new role with key national associations like the National Institute for Science and Technology (NIST) and the U.S. Elections Assistance Commission (EAC).

E-voting critics and at least one California Registrar of Voters have hailed both the swearing in of Bowen as SoS and her appointment of Finley, expressing delight to The BRAD BLOG over the news, characterizing it as a "colossal surprise" and a "very, very good sign for the future of voters' rights in California."

America's voting machine companies are less likely to feel quite as happy about the news.

Finley and VoterAction have filed a number of landmark lawsuits in several states, including in California, over the past year or so, demanding an immediate halt to the use and purchase of Direct Recording Electronic (DRE/touch-screen) voting systems and decertification of many of those systems, as well as improved processes for certification of such systems.

VoterAction is one of over 30 Election Reform organizations who recently went on record with an open letter to Members of Congress demanding federal legislation requiring a paper ballot for every vote cast in America. Such legislation would effectively ban the use of DRE systems, with or without a so-callled "Voter Verified Paper Trail" (VVPAT).

Bowen has been a dogged critic of former Secretary of State Bruce McPherson during her candidacy and in her role overseeing the Elections Committee as a California State Senator. She has criticized his lack of oversight and lax testing procedures, and has championed a "Voters' Bill of Rights" for the Golden State.

While a suit by VoterAction.org filed against former SoS McPherson and several CA Registrars of Voting --- concerning McPherson's certification of Diebold TSx touch-screen systems --- is still pending in state court, the disposition of that suit will likely change due to the fact that the lead defendant, McPherson, is no longer in office.

The Berkeley-based attorney Finley --- also one of the attorneys representing voter plaintiffs in the contested election in Florida's 13th Congressional district in Sarasota --- had one of his most recent and notable successes last September, when a Colorado judge ordered a complete review of certification procedures for voting machines in the state. The court found the official placed in charge of testing and certification didn't have the qualifications necessary, and performed little or no testing. That man, John Gardner, was appointed by former CO Sec. of State Donetta Davidson, who has been appointed by George W. Bush to head the U.S. Elections Assistance Commission.

The news of Finley's appointment will undoubtedly be of concern to the major voting machine companies that received little oversight from the former Sec. of State McPherson.

"I wish I was a fly on the wall in the offices at Diebold as they learn of this appointment. I'm sure jaws will be dropping and damage control will be ramping up," John Gideon of election watchdog organization VotersUnite.org told us today. (Gideon is also a frequent Guest Blogger here at The BRAD BLOG.) ...

Tech Mag PCWorld named E-Voting #3 on their list of "The 21 Biggest Technology Mistakes of 2006"...

We've come a long way, baby.

And we also take year-end great pride in that folks look back on Princeton's Diebold Virus Hack as one of the seminal moments in this whole sordid affair. (The machine used in the research was a DRE/touch-screen system supplied to VelvetRevolution.us by a BRAD BLOG source and we then gave it to Princeton for their now-infamous study.)

First they ignore you.
Then they laugh at you.
Then they attack you.
Then you win.

I just got off the phone with Steve Young, the Democratic candidate in CA-48 (Orange County). He reports that his office is receiving calls from at least 8 precincts of voting machines down with no paper ballots available for voters. All, he says, in strongly Democratic areas of the otherwise conservative Orange County. I believe they use ES&S voting machines down there. Several Emailers have contacted us to let us know it's Hart Intercivic machines in use down there, not ES&S.

He says voters were either being turned away without being able to vote at all, or voting on Chinese and Vietnamese paper ballots --- since English ones are not available --- just so they are able to vote!

By the time we were done with the call, a staffer came in with a report from machines down in a Republican area, but said the machines were fixed quickly, whereas one of the reports you'll see below (transcribed during our quick phone conversation) shows poll workers repeatedly trying to get help from the Registrar to no avail.

Please note, a memo from the CA Sec. of State last month had said all voters who wished to vote on paper in California may do so, but he left it up to them how many would be "an adequate supply." He also said they should be counted as "normal ballots" and not as provisional ballots which are usually counted days later, if ever. None of those orders seems to be being enforced anywhere in CA, as far as I can tell.

Blogged By John Gideon, 28 October 2006

Still over a week from election day and already the problems are piling up. Meanwhile the vendors and their shills are making excuses and attempting to sell the voting public a line of garbage. Among the shills is a federal agency, the Election Assistance Commission, that is supposed to assist the voter and, instead, has sent their chairman out on the road to defend the vendors.

In a blog posted yesterday, Brad said it well:

In a rebuttal to DeGregorios' opinion piece in the Tallahassee Democrat Avi Rubin, Johns-Hopkins Professor, computer scientist and author of "Brave New Ballot" had this to say in his blog:

In The Mean Time Across The Nation...

Guest Blogged by John Gideon

As reported by The BRAD BLOG on Tuesday, Hart Intercivic machines being used in Virginia are cutting off the names of candidates when they appear on the review screen. Thus James H. "Jim" Webb shows as James H. "Jim" on the screen.

Well, when a problem is found in one place it is going to be found elsewhere too. Now counties in Texas are reporting the same problem according to the Austin American-Statesman.

The Help America Vote Act of 2002 mandates that a voting machine must provide the voter with an ability to review their vote before they finalize the process. These machines may be in violation of that law but that can be left to the attorneys. It might be nice if those attorneys showed up now, instead of after the election when it'll be too late.

What with all the talk of the disaster that is Diebold, Inc., other Voting Machine Companies such as ES&S and Sequoia have gotten a far too easy ride over the past several months. The easiest ride of all, however --- of the big four democracy-hating American Voting Machine Companies --- has gone to Hart InterCivic, which deserves no such benefit of the doubt.

So to be clear: Hart InterCivic voting systems suck just as much as the others.

Washington Post today has details on how their machines are sucking in the hotly contested U.S. Senate race in Virginia between George Allen and "James H. 'Jim'"

The "good news" reported in the article: "Hart InterCivic officials yesterday said they hoped to correct the problem by next fall."

I just received a phone call from Holly Jacobson of VoterAction.org, the group that has supported voter lawsuits attempting to decertify e-voting machines in Colorado, California, Arizona, Pennsylvania and elsewhere.

She called us from Colorado just after leaving the courtroom, where the case in that state against the use and purchase of e-voting systems made by Diebold, ES&S, Sequoia and Hart InterCivic was being heard yesterday. She called and said: "We won!"

That call came moments after I'd received a report that CNN's Lou Dobbs had reported an hour or so ago that they had lost the case...