Why you shouldn't trust electronic voting machines

Here's why:

As the Leon County supervisor of elections, Ion Sancho's job is to make sure voting is free of fraud. But the most brazen effort lately to manipulate election results in this Florida locality was carried out by Sancho himself.

Four times over the past year Sancho told computer specialists to break in to his voting system. And on all four occasions they did, changing results with what the specialists described as relatively unsophisticated hacking techniques. To Sancho, the results showed the vulnerability of voting equipment manufactured by Ohio-based Diebold Election Systems, which is used by Leon County and many other jurisdictions around the country.

Sancho's most recent demonstration was last month. Harri Hursti, a computer security expert from Finland, manipulated the "memory card" that records the votes of ballots run through an optical scanning machine.

Then, in a warehouse a few blocks from his office in downtown Tallahassee, Sancho and seven other people held a referendum. The question on the ballot:

"Can the votes of this Diebold system be hacked using the memory card?"

Two people marked yes on their ballots, and six no. The optical scan machine read the ballots, and the data were transmitted to a final tabulator. The result? Seven yes, one no.

"Was it possible for a disgruntled employee to do this and not have the elections administrator find out?" Sancho asked. "The answer was yes."

Diebold and some officials have criticized Sancho's experiments and said his conclusions about the vulnerability of electronic voting systems are unfounded.

What Sancho did "is analogous to if I gave you the keys to my house and told you when I was gone," said David Bear, a Diebold spokesman. As Bear sees it, Sancho's experiment involved giving hackers "complete unfettered access" to the equipment, something a responsible elections administrator would never allow.

Questions about the security of electronic voting machines have been circulating widely in recent years. But many of the concerns have been dismissed as the fantasies of Internet conspiracy theorists or sore-loser partisans who could not accept that their candidates simply got fewer votes. Critics have not demonstrated that any real elections have had returns altered by the manipulation of electronic voting systems.

But the questions raised by Sancho, who has held his post since 1989, show how the concerns are being taken more seriously among elections professionals.

"While electronic voting systems hold promise for improving the election process," the Government Accountability Office said in a report to Congress last year, there are still pressing concerns about "security and reliability . . . design flaws" and other issues.

Diebold took a dim view of the experiments. On June 8, a senior company lawyer faxed Sancho: "You have willfully and intentionally allowed the manipulation of memory cards related to your elections. . . . We believe this to have been a very foolish and irresponsible act."

The response frustrated Sancho. "More troubling than the test itself was the manner in which Diebold simply failed to respond to my concerns or the concerns of citizens who believe in American elections," he said. "I really think they're not engaged in this discussion of how to make elections safer."

He is also critical of state officials who he believes should have caught the vulnerabilities earlier. He said that vendors such as Diebold have too much influence in the administration of elections, a view that resonated with Lida Rodriguez-Taseff, the founder of the Miami-Dade Election Reform Coalition. Sancho is "truly an advocate for voters," she said. "What he is doing in Leon County goes completely against the grain of county election commissioners elsewhere, who are allowing vendors to dictate how to run their own elections."

Johns Hopkins University computer sciences professor Avi Rubin, who is leading a group that has received a $7.5 million grant from the National Academy of Sciences to research election technology, said the vulnerabilities of electronic systems -- including new touch-screen voting machines -- point to the need for a paper trail in any election. "The more I see, I say we need voting to rely on paper," he said. About 26 states require paper ballots, according to Verified Voting, an advocacy group.

Jenny Nash, a spokeswoman for Florida's secretary of state, said in the end the integrity of any voting system must be protected by the local officials who administer elections. "Machines are designed and certified to operate in a secure environment and under secure procedures that each supervisor puts in place and follows directly," she said.

And of course we can ALWAYS rely on elections supervisors, right? Tell that to voters in the state of Ohio.