By Greg Gordon, McClatchy Newspapers –
WASHINGTON — Counties in 31 states are accepting tens of thousands of electronic absentee ballots from U.S. soldiers and overseas civilians, despite years of warnings from experts that Internet voting is easy prey for hackers.
Some of the states made their technological leaps even after word spread of an October 2010 test of an Internet voting product in Washington, in which a team of University of Michigan computer scientists quickly penetrated the system and directed it to play the school’s fight song. The Michigan team reported that hackers from China and Iran also were on the verge of breaking in.
Election watchdogs, distraught over what they fear is a premature plunge into Internet voting, put most of the blame on an obscure Defense Department unit that beckoned state officials for 20 years, in letters, legislative testimony and at conferences, to consider email voting for more than 1 million troops and civilians living abroad.
The Pentagon’s Federal Voting Assistance Program persisted in its below-the-radar pitch even after Congress refused to endorse any form of Internet-related voting, delegating that responsibility largely to the National Institute of Standards and Technology in 2005. Seven years later, the national institute still says more research is needed.
Congress balked after Deputy Defense Secretary Paul Wolfowitz scrapped a live demonstration planned for the 2004 presidential election because of security concerns.
Election officials from Mississippi to Washington state who’ve embraced email and fax voting say that it’s worth a small risk to protect troops’ voting rights, and that hackers also could attack other types of electronic voting widely used at U.S. polling places, such as digital and optical scanners.
But most states have begun requiring verifiable paper trails for those systems, an option that is difficult to incorporate in Internet voting, and which compromises privacy.
It’s unclear to what degree the tiny Pentagon program influenced states to pass a flurry of laws permitting Internet-related voting, but the Federal Voting Assistance Program and its recently departed chief, Robert Carey, are drawing fire for allegedly overstepping their mission.
David Jefferson, a computer scientist at California’s Lawrence Livermore National Laboratory — who calls email and fax transmission “by far the most dangerous forms of voting ever implemented in the U.S.” — said the Pentagon program’s and Carey’s advocacy “have done grave damage to U.S. national security, and it will be very difficult to undo it.”
Jefferson, who doesn’t work on ballot security issues at Lawrence Livermore but has studied them for a decade and is on the board of the Verified Voting Foundation, an election watchdog group, said that partisan, criminal or foreign hackers could alter emailed or faxed votes in several ways.
For example, he said, they could intercept ballots as they hop from server to server and — without detection — transform losers into winners. Or “malware” could sit silently on a voter’s computer until he sends his ballot, which it could instantly divert to the malware designer for modification before it reaches election officials.
Suzannah Goodman, director of government watchdog Common Cause’s voting integrity project, said the Federal Voting Assistance Program leadership’s advocacy was “irresponsible,” given the security warnings.
“State lawmakers and election officials trusted FVAP, thinking that the Department of Defense wouldn’t support online voting for the troops if it wasn’t secure,” she said.
Carey, a former Navy pilot and Senate Republican aide who became something of a crusader for upgrading the military’s “1950s-style, paper-and-pen” voting during his three-year tenure that ended in July, rejected the criticism.
“I don’t believe that I was an evangelist for the electronic return of the voted ballot,” he said. “I was not going to stand in the way of election jurisdictions who wanted to pursue full Internet voting on their own authority.”
He called Jefferson a zealot who wants no zero risks in electronic voting but “ignores the fact that 200,000 to 250,000 military voters are unable to successfully cast their ballots,” a reference to what the military turnout would be if it matched that of other voters.
But Carey’s successor, acting Federal Voting Assistance Program chief Pamela Mitchell, said her office is “not advocating for or against Internet voting” of any kind.
The Pentagon program’s prodding wasn’t the only pressure exerted on state officials, who have wide latitude to set voting procedures. Military groups have long lobbied them to provide redress for the disenfranchisement of military and overseas voters, especially those in combat zones who’ve had a hard time getting paper ballots in on time. In the 2008 presidential election, 35 percent of military and overseas civilians’ votes were nullified because they arrived flawed or too late.
More than 60 percent of the states have gone high-tech.
Last month, Alaska joined Arizona as states that have invited all registered voters to mark and send ballots via online systems that vendors say are secure. North Dakota provides an Internet portal, as well as email and fax options, for military and overseas voters.
Twenty-eight other states, including at least four presidential campaign swing states, are permitting service members and overseas civilians to vote either via fax, e-fax or email, at least under some circumstances, according to a study last summer by Common Cause and the Verified Voting Foundation.
If e-voting increases participation by troops or far-flung civilians on Tuesday, the added votes could be pivotal.
Among presidential swing states, Colorado now allows these voters to email ballots if mail is unavailable, Florida permits them to fax ballots, Iowa accepts emailed or faxed ballots from those in “imminent danger” and Nevada allows email or faxes from those who attest to their voting eligibility under penalty of perjury.
The controversy over the Federal Voting Assistance Program’s role largely surrounds allegations that it ran an end run around Congress.
In passing the Military and Overseas Voter Empowerment Act in 2009 to address continuing obstacles to voting by those groups, Congress directed states to offer blank, electronic ballots to troops and foreign-based civilians 45 days before Election Day. In the three years since, the Pentagon program has paid more than $27 million to help states and counties comply.
The law only authorized electronic voting in pilot projects, but it could not preclude states from approving email or fax transmission over private email accounts or wires not funded by the Federal Voting Assistance Program.
Chief election officers or their surrogates in Mississippi, Washington, West Virginia and Utah, all states that got funding from the Pentagon program, said t they are allowing email or fax voting, but not with the Pentagon money.
Mississippi Republican Delbert Hosemann was among five secretaries of state whom the Pentagon flew in 2008 to Afghanistan, Iraq and Kuwait, where they asked troops about their voting concerns.
In a phone interview, Hosemann said he concluded that the “minute opportunity” for hacking was outweighed by the desire of “the people who are standing on the sand dunes” to vote electronically.
Carey’s assertion that the Federal Voting Assistance Program stopped pitching email and fax voting in 2010 appears to conflict with what occurred in Washington state last year.
When legislation to allow email and fax voting arose in the state legislature, the Pentagon “liked (it) so much that they actually had somebody show up and testify for it, without us even asking,” the state’s Republican secretary of state, Sam Reed, said in a phone interview.
Gary Bartlett, executive director of North Carolina’s Board of Elections, said passage of his state’s similar measure was a foregone conclusion in 2010, but a Pentagon liaison appeared anyway “to thank everybody, to encourage it and to see it all the way through the North Carolina House and Senate.”
If the liaisons encouraged email voting legislation, Carey said, “it was contrary to the guidance we gave them.”
However, in a letter to Reed early last year, he urged “the expanded use of email and online transmission for all election materials throughout the entire absentee voting process.”
The Federal Voting Assistance Program’s machinations have caught the attention of at least one senior member of the Senate Armed Services Committee. Republican Sen. John Cornyn of Texas said “federal agencies skirting the implementation of laws is always a concern for taxpayers, which is why Congress must be vigilant in its oversight duties.”
———
In the 2008 presidential election, 989,207 absentee ballots were sent to military and overseas voters, upon their request, according to a survey by the U.S. Election Assistance Commission. Of those, 682,341 were returned for counting, and 637,216 were counted as valid ballots.
Here is 2008 data on ballots sent and ballots returned for counting for the top 10 states:
Florida: 121,395 — 96,144
California: 102,983 — 64,514
Texas: 91,106 — 63,169
New York: 83,422 — 54,220
Washington: 61,934 — 44,463
Virginia: 41,762 — 29,258
Pennsylvania: 40,279 — 31,978
Ohio: 32,334 — 26,114
Illinois: 26,316 — 17,372
Georgia: 25,035 — 17,183
Other McClatchy states:
Alaska: 13,766 — 11,583
Idaho: 3,677 — 2,664
Kansas. 6,613 — 5,021
Kentucky: 6,576 — 4,933
Mississippi: 5,660 — 1,329
Missouri: 16,561 — 13,400
North Carolina: 19,109 — 12,811
South Carolina: 12,134 — 8,943
Source: U.S. Election Assistance Commission
