By Parke Bostrom and Brad Friedman

On Tuesday, April 21, we gave Humboldt County, CA Registrar of Voters Carolyn Crnich a public records request for the two letters she read aloud (but declined to otherwise disclose) at a March 24 public meeting of the ad-hoc Humboldt Election Advisory Committee.

As The BRAD BLOG previously reported the two letters were from Premier Election Solutions (formerly Diebold Election Systems). The primary purpose of both letters was to terminate all contracts between Premier and the county. The letters were dated March 17 and 18, the day of, and the day after, the CA Secretary of State's hearing regarding serious flaws found in Diebold/Premier's GEMS vote-tabulation system.

At that hearing, a Diebold/Premier spokesperson admitted that all versions of their GEMS systems --- as used in 20 counties in CA, and 34 states across the nation --- feature such flaws. Some of those flaws, including the wholesale deletion of ballots without notice to the system operator, were discovered to the surprise and dismay of Crnich and volunteers working on the Humboldt County Election Transparency Project following the certification of the November 2008 election. Crnich was subsequently forced to re-certify the election with new results. [Disclosure: Parke Bostrom is one of the volunteers on the Humboldt ETP.]

Last Tuesday, at the next monthly meeting of the ad-hoc committee, Crnich presented copies of the two one-page letters and allowed examination of the originals (copies of which are posted at the end of this article.) The letters' legal language is very plain, straightforward and troubling. The contracts' termination clauses are being executed, and those clauses specify the necessary steps and required time frames...no matter how it may adversely affect upcoming elections in Humboldt County...

Guest Blogged by Parke Bostrom of the Humboldt Transparency Project

At the California Secretary of State's public hearing regarding the possible decertification of Diebold's tabulator systems, GEMS v1.18.19, in relation to the "Deck Zero" covert deletion of 197 ballots in the November election, the audit log's magical "clear" button, and the GEMS audit logs failing to report when ballots were manually deleted by the operator, Diebold/Premier representatives tried to shift blame for the 197 deleted ballots onto the Humboldt County, CA, Registrar of Voters, Carolyn Crnich.

Crnich responded, "If you're saying that your system needs to be checked every damn time we turn it on, I agree with you."

Crnich's use of an expletive seems to have pushed Diebold/Premier's legal counsel over the edge, causing them to reach for and firmly press the "nuke" button in response, by petulantly informing the county of termination of licensing for the use of any of the company's products.

Several days after returning to Humboldt, following the hearing in Sacramento, Crnich received two letters from Premier. Both letters arrived in a single envelope, but unlike Premier Khrushchev's two letters to President Kennedy, Crnich did not get to choose which letter to respond to....

Guest Blogged by Mitch Trachtenberg, with Brad Friedman

Even the audit log system on current versions of Premier Election Solutions' (formerly Diebold's) electronic voting and tabulating systems --- used in some 34 states across the nation --- fail to record the wholesale deletion of ballots. Even when ballots are deleted on the same day as an election. That's the shocking admission heard today from Justin Bales, Premier's Western Region manager, at a State of California public hearing on the possible decertification of Diebold/Premier's tabulator system, GEMS v. 1.18.19.

An election system's audit logs are meant to record all activity during the system's actual counting of ballots, so that later examiners may determine, with certainty, whether any fraudulent or mistaken activity had occurred during the count. Diebold's software fails to do that, as has recently been discovered by Election Integrity advocates in Humboldt County, CA, and then confirmed by the CA Secretary of State. The flaws, built into the system for more than a decade, are in serious violation of federal voting system certification standards.

The problems may lead to decertification of the company's voting systems, as well as an examination of voting systems made by other companies to determine if they too may have been able to sneak such violations past both federal and state testers...

A Diebold/Premier spokesman, Chris Riggall, has finally spoken about the California Secretary of State’s report on the discovery of violations of the accuracy standards required by federal law and violations of the voting systems standards. In our featured article Riggall shrugs off their violations by minimizing the report.

"I think it's fair, from our perspective, to say that the report editorializes in a number of ways that don't reflect the sort of even-handedness that one would like to see," Riggall said, adding that he sees the software error simply as a "contributing factor" to Humboldt County's inaccurate election results. "To say it caused it and to solely attribute that discrepancy to the software is, in our judgment, not accurate and not objective."

I say balderdash. Diebold knew they had a problem back in 2004 and they issued "work arounds." If they had a problem and knew it why did they not recall the software and provide good software in its place? Why did they not provide warnings and instructions in their operator’s manual? Why did they only send an email with a two paragraph attachment that didn’t even have the company’s logo on it? What did/does the company have to hide? How many elections nationally were affected before Diebold discovered the problem? How many elections were affected after Diebold sent their unofficial "work around"? ...

On the heels of yesterday’s announcement of a letter to the Election Assistance Commission (EAC) and a full report on the findings of an investigation by the California Secretary of State’s office, we have articles from Kim Zetter in her blog for Wired Magazine and one from one of the principles of the “Humboldt County Election Transparency Project,” Mitch Trachtenberg that is posted on The BRAD BLOG.

Yesterday I mentioned the letter sent by the Secretary of State to the EAC. In that letter is a request by Bowen that the EAC “consider requiring that, for every voting system certified by the EAC, the voting system vendor report any and all flaws and problems with the system to the EAC and to the elections officials in the states where the system is used when such flaws are discovered.” This morning I was reminded by a member of the EAC staff, who receives DVN, that in the “Testing and Certification Manual” the EAC already requires what the Secretary has suggested they require....

Guest Blogged by Mitch Trachtenberg of the Humboldt County Election Transparency Project

California Secretary of State Debra Bowen has released a remarkable 13-page report [PDF] of her office's investigation into how the Diebold/Premier GEMS software silently dropped all votes contained on 197 ballots from the Humboldt County, California, November 2008 general election.

The report shows that this version of GEMS not only deleted a batch of ballots without any request by --- or alert to --- the elections staff, but also failed to note the deletion in the system's audit log. The report also points to other startling deficiencies with Diebold/Premier's software: "Key audit trail logs in GEMS version 1.18.19 do not record important operator interventions such as deletion of decks of ballots, assign inaccurate date and time stamps to events that are recorded, and can be deleted by the operator."

That's right. The Diebold/Premier vote tabulation system in question not only fails to record all events accurately, and sometimes at all, it also allows anyone with access to the system to completely delete audit logs, covering the tracks of any tampering that may have occurred, at any time, on the system.

Any of these flaws, the report concludes, "appears to violate the 1990 Voting System Standards to an extent that would have warranted failure of the GEMS version 1.18.19 system had they been detected and reported by the [federal] Independent Testing Authority [ITA] that tested the system."...

Yesterday, the California Secretary of State released a letter [PDF] to the U.S. Election Assistance Commission (EAC) and a report of their findings with regards to the problem discovered in early December, in Humboldt Co., with disappearing ballots on the Diebold GEMS v. 1.18.19 voting system.

The letter actually challenges the EAC to take action in “requiring that, for every voting system certified by the EAC, the voting system vendor report any and all flaws and problems with the system to the EAC and to the elections officials in the states where the system is used when such flaws are discovered.” And Secretary Bowen has taken the action herself by sponsoring legislation in California that will do what she has challenged the EAC to do.

The report is amazing in that it reveals why our voting systems are failing. The issues with the GEMS software go much deeper than just the fact that the system may lose votes. The state also found readily apparent violations of the federal voting system standards. These violations seem to have been ignored by federal test labs, by the National Assoc. of State Election Directors (NASED), and their consultants who qualified the voting system for use, and by-passed CA Secretaries of State and their consultants.

The big question is, will the EAC, staffed by people who were involved in the original NASED “rubber-stamp” of GEMS 1.18.19, take any action? Will they post the letter and report it in their “clearinghouse?” We certainly hope so. The present CA Secretary of State, Debra Bowen, and her staff deserve congratulations and appreciation for a job well done so far. It will be interesting to hear what follow-up actions will now be taken on the federal and state levels....

Guest Blogged by John Gideon of VotersUnite.org

"It is through the Constitution that we control the reins of government and insure that it remains the protector of individual, unalienable Rights - i.e., the servant of the People.

"Therefore, it behooves the People to show the Government that the People know what their Rights are and what Government's obligations are, that the People are watching Government as it exercises its delegated powers and that the People are prepared to act if the Government steps outside the boundaries drawn around its power by the Constitution." --- We The People Foundation

The U.S. Election Assistance Commission (EAC) works for the People. It doesn't work for special interests. It doesn't work for the voting system vendors. The EAC has an obligation, spelled out in its past advisories, public statements and, most importantly, in federal law, to carry out oversight of the voting systems we, the People, use in our federal elections. It does not matter that the EAC commissioners are not elected to their positions. They are still servants of the People.

Not long after being created by the Help America Vote Act (HAVA) of 2002, the EAC published, on June 8, 2004, "Chairman Soaries' Remarks about Electronic Voting Security Strategy for the November 2004 Presidential Election." The comments, by then EAC Chairman DeForest "Buster" Soaries included recommendations "to insure election integrity and promote voter confidence in the administration of the 2004 federal election," and stated, in part: "[The] EAC should solicit information about suspicious electronic voting system activity including software programming and should request aggressive investigative and prosecutorial responses from the U.S. Department of Justice Elections Crimes Branch in the Criminal Division."

The above was restated in a July 13, 2004 "Commission Advisory Letter" [PDF].

It's clear that if there is to be any federal body to recommend investigation and/or prosecution to the DoJ, in regards criminal violation of federal law concerning voting systems, it is to be the EAC, the body charged with testing, certifying, and performing as the "national clearinghouse...with respect to the administration of federal elections" (42 U.S.C. § 15322) and the electronic voting systems employed across the country.

And yet, the EAC has continued to utterly fail in those duties, as a particularly maddening chain of inquiries and emails --- back-and-forth and round-and-round --- that we'd sent to the EAC commissioners and their spokesperson over the past three months illustrates all too well. All we were trying to do was get a simple answer to a very simple question...

Recently it was revealed that the Humboldt Election Transparency Project had found that the county’s Diebold/Premier voting system had lost 197 ballots. Today Kim Zetter of WiredBlog, in one of our featured articles, revealed that the GEMS audit logs not only don’t answer questions about how the 197 ballots were lost but don’t answer many questions at all. Zetter also reveals that the state of California is investigating the lost ballots and these “Greek” audit logs. One of the featured interviews in Zetter’s article is with Doug Jones of U of Iowa. His comments are discussed in our second featured article....

Following the discovery of hundreds of ballots deleted by Diebold's paper ballot op-scan system in Humboldt County, CA, the county's election chief Carolyn Crnich has finally decided to dump Diebold all together. That's the good news.

The bad news, as longtime local election integrity advocate Dave Berman detailed this week, is that Crnich has decided to jump out of the frying pan, and into the fire with a different op-scan system, made by a different private vendor, using similarly secret software, with many of the same problems found in the crappy Diebold system she's finally tossing over the side.

A spokesman for Hart InterCivic, the private Austin, TX company which makes the paper ballot op-scan system Crnich is hoping to use, defended the county's planned move, though he had to make some erroneous claims to The BRAD BLOG in order to do so...

Hillsborough Co Florida outgoing election chief, Buddy Johnson, wanted $2.3M from the county to cover election cost overruns from the Nov. election. Stupidly Johnson did not bother showing up to appear before the county supervisors so they could ask him questions. The supervisors took his no-show as an insult and they have deferred any decision until they can review the election office’s records.

Meanwhile the Maryland Board of Public Works has approved a contract between the state and Premier/Diebold for $974,000 for six months to cover municipal elections within the state. That contract could add up to $1.4M if two three month options are exercised. All of this even though the state is scrapping their paperless DREs at the end of next year in place of a paper based system.

And, after the reports of Diebold accuracy failures in Humboldt Co., California, the county has decided to scrap their present system and replace it with machines provided by Hart Intercivic. The selection of Hart is a bit strange in light of the fact that Hart has removed themselves from all EAC certification testing. They will not, in the future, have a voting system that has been tested to the voting system standards and certified by the EAC....

Following up on the latest monumental failure by Diebold/Premier --- whose voting system was recently found by a citizens' transparency project to have lost hundreds of ballots in a single precinct in Humboldt County, CA --- Wired's Kim Zetter covered the issue earlier this week.

Her article touched on a number of technical issues involved in the failure of the Diebold GEMS central tabulator which, though we hadn't noted them in our own coverage, are nonetheless important, even if somewhat down in the weeds, and perhaps most of note to technical election integrity geeks only.

As quoted below in some detail from Zetter's report, she advances the story by noting:

• The problem, which Diebold admits has been in its system for years, likely wouldn't have been noticed at all were it not for the unique, experimental, citizen-led "Humboldt Transparency Project." Even CA's required 1% random post-election "audit" wouldn't have uncovered the problem, since absentee ballots are not included in that audit.
• The chances of the problem occurring, which resulted in ballots being deleted without notice by the Diebold GEMS tabulator, are rather high, even if chances of discovery of the error by election officials are very low.
• Diebold's explanation for the failure may or may not be legitimate.
• The GEMS internal "audit logs" (the GEMS system was used in 34 states around the nation last November) aren't actually audit logs at all, and may not actually note the complete set of events which occurred on the voting system, even if anyone is allowed to review those logs in the first place.

Let's take a look at the details...

By John Gideon and Brad Friedman

"Some people have called those who have long decried our nation's move toward voting machines nuts or just sore losers," reads the editorial from yesterday's Eureka Times-Standard.

"They were loud, and they were strident in proclaiming that they didn't trust election technologies as much as they trust the ability of actual human beings to count votes," the paper continues in response to the citizen's "Transparency Project" in Humboldt County, CA which, as The BRAD BLOG reported last week, discovered some 200 ballots that the county's Diebold optical-scan system had deleted from the initially certified count. Humboldt registrar Carolyn Crnich --- who deserves much credit for working with local election integrity advocates to allow them to create a more transparent, open-source optical-scan system as a check on the buggy Diebold hardware and software --- was forced to to re-certify the November 4th election with new results after the findings.

"The recent discovery, thanks to the Humboldt County Election Transparency Project, of a discrepancy in election results due to flawed software reveals that these activists were right to make noise, and right to complain about a company that has been less than responsible in dealing with the problem."

Thanks for noticing, Times-Standard. Now will the rest of the country notice? Specifically, will the U.S. Election Assistance Commission, responsible for testing and certifying these machines at the federal level, and the U.S. Dept. of Justice, responsible for enforcing federal laws --- which again seem to have been violated by Diebold (whose election division now calls themselves Premier) --- notice and take action?

Interviews with and responses from CA officials from Crnich to Sec. of State Debra Bowen's office indicate a serious problem, yet again, with Diebold's handling of the software failure which the company has known about for four years, even as they allowed election officials to continue using the same system in several states.

The BRAD BLOG has obtained a copy of Diebold's original terse, emailed notice of the software failure, sent to Crnich's predecessor in 2004, but never sent to CA's new Sec. of State, despite her "Top-to-Bottom Review" of all e-voting systems in the state which she undertook after taking office in 2007. (The Diebold email notice is posted below, in full.)

At the same time, local software programmer Mitch Trachtenberg, who developed the simple, transparent, open-source optical-scan software, using off-the-shelf hardware for the citizen's project --- including the ability to post all scanned ballots onto the web for citizen review --- may have inadvertently revealed the scam perpetuated by the nation's electronic voting machine vendor's who were allocated some $3.9 billion federal tax dollars for their efforts at creating proprietary systems, which don't even work as promised...or as required by federal law...

Guest Blogged by John Gideon of VotersUnite.org

First I think congratulations are in order for Humboldt County California Registrar of Voters Carolyn Crnich. Crnich worked with local voters and began the "Humboldt Election Transparency Project". The Eureka Times-Standard describes the program like this:

Crnich also deserves a big thank you, along with Trachtenberg, from the voters of Eureka Precinct 1E-45 because if not for the project and Trachtenberg's software their votes in the recent general election would not have been counted. The Times-Standard explains:

And this "glitch" in the Diebold/Premier GEMS central tabulator software has been known to the company since 2004, or so Crnich learned after exchanging several calls with the vendor...

Blogged by Brad on the Road...

I know I'm supposed to be taking a few hours off (how's that going, Brad?)...But I couldn't help sharing with you a quick piece of audio from my regular Friday guest appearance on KRXA 540am's Peter B. Collins Show today (broadcast out of Monterey, CA).

I was pleased that Carolyn Wilson Crnich, Elections Registrar of Humboldt County, CA was able to join us on air for one of the segments (posted below.)

Crnich is one of the officials named as a defendant in the recent lawsuit against CA Sec. of State Bruce McPherson and other county elections officials around the state. The suit calls for the ban of use and purchase of Diebold touch-screen voting systems in the state since (amongst other reasons) they have proven to be hackable and their recent certification was in violation of state law requiring all certified voting systems to conform to Federal Voting System Standards. Diebold's machines do not conform to such standards because they contain "interpreted code" --- which is specifically banned by the Federal standards. Diebold has now admitted to the existence of such code on their systems. The forbidden code went unexamined and untested by Federal authorities when the machines received Federal certification.

Nonetheless, Crnich (we believe) is one of the good guys. She's proven willing to dump her previous plan to use Diebold AccuVote TSx (touch-screen) machines, which she was going to use in order to meet the disabled-accessible voting device requirement in the Help America Vote Act (HAVA). She is now hoping to use the paper-ballot based Vote-PAD system in Humboldt County this year instead.

However, as our on-air conversation revealed, there are still very serious concerns with Humboldt County's optical-scan system since they use the very system, made by Diebold, which was shown to be hackable last December in Leon County, FL.

Of note in our conversation, Crnich admits that optical-scan systems are sent home with poll workers the night before elections where --- even if the hackable memory cards are wired into the machine so they can't be removed --- they can still be accessed by other means. If so, a malicious poll worker could modify the code on the memory cards, allowing an election to be hacked without a trace left behind during that breakdown in chain of custody for such home-stored voting machines.

Give the interview and discussion between Crnich, myself and Peter B. a listen. See what you think. It's good to have such an admission on the public record, and the fact that she admits to not knowing what could happen when these machines are stored at poll workers' houses.

Again, I'm glad she was willing (unlike many other Elections Officials around the country) to come on air and face some of these tough questions. Happy to hear your thoughts.

-- Carolyn Wilson Crnich, with Brad on the Peter B. Collins Show, 3/24/06 [MP3, about 13 mins]
-- Complete Brad appearance on Peter B. Collins Show, 3/24/06 [MP3, about 35 mins, and quite a bit funnier, IMHO]

(Thanks to Joe at the Peter B. show for sending the audio!)