TAMPA - Hillsborough County’s touch-screen voting system could be vulnerable to fraud because it relies on common software that security experts warn can be used to manipulate vote totals without leaving a trace.
The risk was discovered last week during a demonstration of the $13 million voting system conducted for The Tampa Tribune.
Computers used by Hillsborough elections officials to retrieve vote totals registered in the touch-screen machines are equipped with the popular Microsoft Office Suite software package, which includes the Excel spreadsheet and Access database programs. Office Suite uses the same format as the touch-screen system’s tabulation software, according to security experts, and could allow vote totals to be altered without producing an electronic entry on the system’s activity log.
Security Procedures Vary
The patchwork of resulting procedures for protecting the integrity of touch-screen systems is evident in the three counties using the touch- screen system in the Tampa Bay area:
Pasco County, aware of the software warnings, operates its computers without the standard-issue Microsoft Office package; Pinellas County uses the Microsoft software but has a mechanism to prevent the information from being altered by it; Hillsborough County Supervisor of Elections Buddy Johnson said he was unaware of the concern.
A spokeswoman for Secretary of State Glenda Hood, whose office is responsible for certifying the security of voting systems before they are used, said the ``local supervisors then have the responsibility to make the decisions on how their systems are configured.’’
The spokeswoman, Jenny Nash, said proprietary agreements with voting machine makers prevent her from discussing whether state-certified systems contain Microsoft Office Suite.
Hillsborough County’s touch-screen machines were built by Oakland, Calif.-based Sequoia Voting Systems. A company spokeswoman said it advises its customers to make sure only the software that comes with the voting machines is used to tabulate results. The manufacturer of the other type of touch-screen machines being used in Florida, Omaha-based Election Systems and Software Inc., provides the same advice to its customers.
**No Way To Track Fraud**
University of Iowa computer science Professor Douglas W. Jones, who advised Miami- Dade and is a national expert on touch-screen voting security issues, said he recommends counties use a video projector to provide a live display of the computer screens the night of the election so tabulation can be more closely monitored.
``Watching people at computers doing computer things is not always informative. We should see what they are doing up close. We should ask them for explanations for what they are doing,’’ Jones said.
Jones said Hillsborough’s use of Microsoft Office Suite is especially troublesome because, unlike other opportunities for fraud, it leaves no entry on the Sequoia vote tabulation software’s activity log.
``As long as you are using the Sequoia management system, it contains a nice log of who has done what, when, but if you shut it down and use one of those database tools, there won’t be a record in the change log,’’ Jones said.
``In the event of a recount, in the event of an audit, there will be no record of 20 funny votes being added to Candidate X’s tally, if that’s what happens.’’
Additionally, it is unlikely the standard audit procedures in Hillsborough County would trigger closer inspection because votes could be swapped from one candidate to another without a trace. The audit compares signature logs from the polling place to determine that the total number of votes counted matches the total number of voters casting electronic ballots.