Computer security experts have warned for years that some voting machines are vulnerable to attack. And this week, in Virginia, the state Board of Elections decided to impose an immediate ban on touchscreen voting machines used in 20 percent of the state's precincts, because of newly discovered security concerns.
The problems emerged on Election Day last November in Spotsylvania County. The AVS WINVote touchscreen machines used in precinct 302 began to shut down.
"One machine would go and crash. They'd bring it back up. Another one would crash," said Edgardo Cortes, the state's elections commissioner. "Starting in the early afternoon, they brought in a piece of replacement equipment that experienced the same issues when they set it up in the precinct."
Cortes added that elections workers had a theory about what had caused the problem.
"There was some interference," he said, "potentially from a wireless signal from an election officer [who] was streaming music on their phone."
When state auditors investigated, though, they didn't find that particular problem. Instead, they found something more disturbing. While using their smartphones, they were able to connect to the voting machines' wireless network, which is used to tally votes.
Other state investigators easily guessed the system's passwords — in one case, it was "abcde" — and were then able to change the vote counts remotely without detection.
Jeremy Epstein is co-founder of Virginia Verified Voting and one of many computer experts who had warned about the security flaws. He's not at all surprised by the state's findings. He said there's no evidence that anyone has ever tampered with Virginia's voting machines, but if they had, there's no way to tell.
Epstein said the vulnerabilities could be used to create a lot of mischief, "to change the list of races, change the list of candidates, change the votes that have been recorded, change the totals recorded, things like that."
The state board of elections found that risk unacceptable, and voted to decertify the equipment immediately. But the decision leaves officials in 30 counties and cities scrambling to find replacements, in some cases as early as June, when some hold primaries.
The good news, is that these machines — purchased over a decade ago — are no longer made or used anywhere else in the country. But the Virginia action comes amid growing concern that much of the nation's voting equipment is getting old and outdated and will need to be replaced soon.
Tammy Patrick is a former Arizona election official, now with the Bipartisan Policy Center in Washington, D.C. She served on a presidential commission that studied the issue.
"We don't want to be yelling fire in the crowded theater," she said. "But you also want to make sure that the voting public still has confidence that their ballots are going to be counted as cast."
Patrick said the biggest obstacle for localities will be finding enough money to buy new equipment. And that's the challenge now for Virginia localities that had hoped to eke out another election or two using the old machines.
Fairfax City officials say it will cost them about $130,000 to replace the WINVote machines. And they're upset. They never had any problems, and the city's general registrar, Kevin Linehan, thinks setting up a new voting system too quickly poses a greater risk to voters than a hypothetical hacker.
"My most vulnerable aspect of running an election is having properly trained officers of election. I'm looking at a very short timeline getting my officers trained in a whole new system," he told the state board.
Karen Alexander also isn't sure what to do. She runs elections in Powhatan County and has a primary in June. Still, she thinks the state made the right move.
"I would feel very uncomfortable using the WINVotes," she said. "I wouldn't want my voters to know what I know and feel they had to vote on these machines. The security risk is too high. "
She said her county might borrow equipment from a neighboring county to get through the primary. Or, since only a few hundred voters are expected, they might count ballots the old fashioned way — by hand.
Copyright 2015 NPR. To see more, visit http://www.npr.org/.
