North Carolina’s (NC) recent Decision to Certify New Voting Systems for use Next year did Not follow State Law, according to a Letter that a Group of Experts on Election Security and Administration sent to the NC Board of Elections late Wednesday night.
NC has been in the Process of Reviewing New Voting Systems for Certification for over Two years. The Law requires a Security Review of the Source Code of All Voting Systems before they are Certified for use in the State.
The Letter states that there is No Indication that the State, either through its Own Contractors or through Required Federal Testing, Reviewed the Source Code for the Computers in the Voting Systems it recently Certified.
The Experts in question, including Duncan Buell, a Professor of Computer Science at the University of South Carolina, reviewed Testing Documentation from the State and from the Federal Government.
“You read all of that, and it’s clear,” Buell said. “There was no source code review conducted. That would certainly seem to suggest that things are not in accordance with North Carolina law.”
The Law Details an Extensive List of Components to be Reviewed, including: Application Vulnerability, Application Code, Wireless Security, Security policy and Processes, Security Organization and Governance, and Operational Effectiveness.
Some of these things could be Covered by the Federal Review, according to an Expert with the U.S. Election Assistance Commission (EAC), but without Clarification on the Testing Requirements, it’s not clear if they are. The State Board does Not clarify these Testing Requirements in its Voting System Certification Manual. Even so, the Law requires the State or an Independent Expert of its Designation to do a Review of “all source code made available by the vendor.” The Federal Certification Process Reviews a Minimum of 1% of Source Code, a Rate that Buell said was Not Adequate for anything expected of a Full Source Code Review as has been conducted in other States.
North Carolina’s Law requiring the Code Review was ahead of its time when it was Passed in 2005, the Letter states. But since the State has Not bought New Voting Equipment yet, the Legal Requirements remain Untested.
State Board of Elections Member Stella Anderson put Forward a Motion last week asking for Documentation of the Source Code Review. She had heard of this Problem from North Carolina Voters and Election Integrity Advocates Lynn Bernstein and Marilyn Marks. The State Board of Elections is working to respond to Anderson’s Motion “as soon as possible,” according to an Email. According to Anderson, NCSBE Staff is striving to Provide that Information by Oct. 1st, when the Board is next scheduled to meet.
The State has very little time to put the New Systems it Certified on Aug. 23rd into Place before the 2020 Elections. In order for Counties to buy the New Equipment, each County’s Board of Elections needs to attend a Demonstration of the Voting Systems, Recommend One to their County Commissioners for Purchase, Test that System in the October or November Elections, then Purchase and Deploy them by the March 2020 Primaries.
Counties are moving quickly to enter into Multimillion-Dollar Contracts to Purchase this Equipment. “What the state board is doing is irresponsible in letting these counties proceed as if they are going to go to contract and not letting them know that there is a serious black cloud over the certification,” Marks said.
Marks, who is the Executive Director of the Nonprofit Election Integrity Watchdog Coalition for Good Governance, has Sued other States over Election Law Violations. Marks hopes the State Board of Elections will Solve this Problem without the need for Litigation from Organizations like her own. “This is way too important to take a passive position on,” Marks said. “But once you put things in the court system, it slows everything down. The board will not be in an easier place to make the prompt decisions they need to. Everything becomes much more formalistic. It becomes much harder to get the right things done quickly.”
If there is further Delay in the Rollout of the New Systems, which is Not certain, it could mean that North Carolina Counties would be Forced to run 2020 Elections on Equipment that has been in use in the County since 2005.
There is a Short-Term plan for that eventuality, according to Anderson. While most Counties could simply keep the Systems they have now, about a Third of North Carolina Counties, covering 2.4 Million Voters, use Voting Machines that will be taken Out of Circulation as of Dec. 1st, 2019. Those Counties would be Forced to go to All Hand-Marked Paper Ballots that are Counted using Scanners, just like the Ones the Rest of the State currently uses. This Solution could Require the Purchase or Short-Term Leasing of these Scanners and Tallying Equipment.
The Review of the Source Code in question is More than a Technical Matter, according to Buell. It also addresses Public Trust in the Election. “If there is a source code review and all these issues are dealt with, that increases voter trust,” Buell said. “If people hide behind weasel wording to avoid doing a source code review, I think people will wonder why.”
UPDATE
As of Sept. 26th, 2019, Karen Brinson-Bell, Executive Director of the Board of Elections, Emailed County Officials to say she would have Answers at a Board Meeting next week. "The lack of response to date is irresponsible, given that the questions have been swirling for at least three weeks,"
Marks wrote to the Board. "Obviously, if the legally mandated certification work had been performed, documentation would have been produced weeks ago."
NYC Wins When Everyone Can Vote! Michael H. Drucker
No comments:
Post a Comment