Will The Next Election Be Hacked?

In October 2005, the government Accountability Office issued a damning report on electronic voting machines. Citing widespread irregularities and malfunctions, the government's top watchdog agency concluded that a host of weaknesses with touch-screen and optical-scan technology "could damage the integrity of ballots, votes and voting-system software by allowing unauthorized modifications." Some electronic systems used passwords that were "easily guessed" or employed identical passwords for numerous systems. Software could be handled and transported with no clear chain of custody, and locks protecting computer hardware were easy to pick. Unsecured memory cards could enable individuals to "vote multiple times, change vote totals and produce false election reports."

An even more comprehensive report released in June by the Brennan Center for Justice, a nonpartisan think tank at the New York University School of Law, echoed the GAO's findings. The report - conducted by a task force of computer scientists and security experts from the government, universities and the private sector - was peer-reviewed by the National Institute of Standards and Technology. Electronic voting machines widely adopted since 2000, the report concluded, "pose a real danger to the integrity of national, state and local elections." While no instances of hacking have yet been documented, the report identified 120 security threats to three widely used machines - the easiest method of attack being to utilize corrupt software that shifts votes from one candidate to another.

Computer experts have demonstrated that a successful attack would be relatively simple. In a study released on September 13th, computer scientists at Princeton University created vote-stealing software that can be injected into a Diebold machine in as little as a minute, obscuring all evidence of its presence. They also created a virus that can "infect" other units in a voting system, committing "widespread fraud" from a single machine. Within sixty seconds, a lone hacker can own an election.

And touch-screen technology continues to create chaos at the polls. On September 12th, in Maryland's first all-electronic election, voters were turned away from the polls because election officials had failed to distribute the electronic access cards needed to operate Diebold machines. By the time the cards were found on a warehouse shelf and delivered to every precinct, untold numbers of voters had lost the chance to cast ballots.

It seems insane that such clear threats to our election system have not stopped the proliferation of touch-screen technology. In 2004, twenty-three percent of Americans cast their votes on electronic ballots - an increase of twelve percent over 2000. This year, more than one-third of the nation's 8,000 voting jurisdictions are expected to use electronic voting technology for the first time.

The heartening news is, citizens are starting to fight back. Voting-rights activists with the Brad Blog and Black Box Voting are getting the word out. Voter Action, a nonprofit group, has helped file lawsuits in Arizona, New York, Pennsylvania, Colorado and New Mexico to stop the proliferation of touch-screen systems. In California, voters filed suit last March to challenge the use of a Diebold touch-screen system - a move that has already prompted eight counties to sign affidavits saying they won't use the machines in November.

It's not surprising that the widespread problems with electronic voting machines have sparked such outrage and mistrust among voters. Last November, comedian Bill Maher stood in a Las Vegas casino and looked out over thousands of slot machines. "They never make a mistake," he remarked to me. "Can't we get a voting machine that can't be fixed?"

Indeed, there is a remarkably simple solution: equip every touch-screen machine to provide paper receipts that can be verified by voters and recounted in the event of malfunction or tampering. "The paper is the insurance against the cheating machine," says Rubin, the computer expert.

In Florida, an astonishing new law actually makes it illegal to count paper ballots by hand after they've already been tallied by machine. But twenty-seven states now require a paper trail, and others are considering similar requirements. In New Mexico, Gov. Bill Richardson has instituted what many consider an even better solution: Voters use paper ballots, which are then scanned and counted electronically. "We became one of the laughingstock states in 2004 because the machines were defective, slow and unreliable," says Richardson. "I said to myself, 'I'm not going to go through this again.' The paper-ballot system, as untechnical as it seems, is the most verifiable way we can assure Americans that their vote is counting."

Paper ballots will not completely eliminate the threat of tampering, of course - after all, election fraud and miscounts have occurred throughout our history. As long as there has been a paper trail, however, our elections have been conducted with some measure of public scrutiny. But electronic voting machines are a hacker's dream. And today, for-profit companies are being given unprecedented and frightening power not only to provide these machines but to store and count our votes in secret, without any real oversight.

You do not have to believe in conspiracy theories to fear for the integrity of our electoral system: The right to vote is simply too important - and too hard won - to be surrendered without a fight. It is time for Americans to reclaim our democracy from private interests.

>>This article is from the October 5th, 2006 issue of "Rolling Stone" magazine.

>>Post your thoughts about the threats to fair voting, in the National Affairs blog. Plus, read Robert F. Kennedy Jr.'s "Was the 2004 Election Stolen?" -- his report on Republican methods for keeping more than 350,000 Ohio voters from casting ballots or having their votes counted.

For additional reporting on the threat posed by electronic voting machines, visit The Brad Blog.

Read Diebold's letter to Rolling Stone and Robert F. Kennedy Jr.'s response.