[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Removal of "Resume Counting" feature



In the AccuVote-OS world an accidental ender card would require this feature.  And personally I'd like to keep it, but it also makes sense that you would have several other machines that did not end the election, and in theory could continue (unless they ended the election on all machines).  Again, the testing environment seems the most likely place for this use, and we could probably live without it.  Just one perspective - I could live with it either way.
----- Original Message -----
Sent: Wednesday, May 15, 2002 5:34 AM
Subject: RE: Removal of "Resume Counting" feature

Jeff,

 

In my experience, the “Resume Count” feature has been used to correct the mistakes of poll workers who “accidentally” end the election before it is over.  Granted, I don’t have a real life instance that I can tell you about where touch screen has been used but I have utilized the “Resume Count” function in the OS world a number of times when poll workers have used the “End” card in the middle of the day.

 

Yes, it’s dumb and seems highly unlikely but I guarantee you that it can happen and the “Resume Count” feature is the only way we can recover.  It’s our fail safe measure for poll workers who think they have a better idea of how the election should be conducted.

 

Cathi

 

-----Original Message-----
From: owner-support@gesn.com [mailto:owner-support@gesn.com]On Behalf Of Jeff Hallmark
Sent: Wednesday, May 15, 2002 8:19 AM
To: support@gesn.com
Subject: RE: Removal of "Resume Counting" feature

 

 

 

-----Original Message-----
From: owner-support@gesn.com [mailto:owner-support@gesn.com]On Behalf Of Nel Finberg
Sent: Tuesday, May 14, 2002 9:57 PM
To: support@gesn.com
Subject: Re: Removal of "Resume Counting" feature

 

Jeff, Resume Counting is accessible only once an election has been ended on the AccuVote-TS unit, placing the unit in Post-Election Mode,and not before.  In order to have accessed Post-Election Mode, the election must first have been ended using the Administrator card and the entry of a Supervisor Password, and presumably also printed a results report.  Therefore, the results will be known anyway.  The provision of the Administrator card and the Supervisor password provide the security interface necessary that assures that the election is not fraudulently ended on the BallotStation and results reported.

The fact is we can restart the election process after it has been ended, no guarantee exist that there will never be an opportunity for one unscrupulous individual, acting alone and unobserved, to compromise the election by previewing the results either via the Ballot Review process or by printing an “interim report”. This is the point that the Technical Committee has voiced and echoed by Jim Dearman.

 

We have the opportunity to provide sufficient reason why anyone having  Administrator access would ever have the need to end the election before the official closing of the polls.

 

Respond to this post as soon as possible with reasons we need this feature.

 

All steps of election close must by necessity occur in a secure manner, under the supervision of polling judges, thus preventing any fraudulent entry of results.  Remember also that the change in election mode is reflected in the Audit log, that election media may be uploaded once only, and the voting device results reports must balance against the GEMS results reports.

There is a very comprehensive audit trail, yet Jim Dearman has had recent discussions, within the last week, with the FEC Technical Committee concerning this topic of “interim report printing” and has deemed that the audit trail is not adequate. There is no automated check by GEMS of the audit trail during upload and unless a thorough canvas is done the election closing / reopening would go undetected. Keep in mind that the idea here is not to have to rely upon “Jurisdictional procedures” to ensure election security. Uploading multiple times is not at issue.

 

This behavior is consistent with the AccuVote-OS, which we have been using for many years now.  Resume Counting may only be accessed on the AccuVote-OS from Post-Election Mode, and not before.  In order to access Post-Election Mode, an AccuVote Ender card must be submitted to the unit, upon which the results report is automatically printed.  Again, in order to even have reached the Resume Counting option, a results report must have been printed.

 Nel

The results report is not automatically printed, rather the option dialog to print a result report is presented.

 

At this juncture we need concrete reasons why our customers need this feature Wyle will accept the feature given we can provide those reasons.

Jeff Hallmark

 

----- Original Message -----

 

To: support@gesn.com

Sent: Tuesday, May 14, 2002 7:09 PM

Subject: Removal of "Resume Counting" feature

 

Ballot Station 4.3.4.0 is currently in process at Wyle Laboratories for
certification. The Resume Counting feature has become an issue. The feature
is considered undesirable because it is viewed as a breach of security as it
allows the "interim printing" of results and the subsequent resumption of
the election process. We have been asked for the reason(s) that the Resume
Counting feature is available, it is imperative that anyone desiring this
feature respond to this post.  Explain how  this feature has been beneficial
to customers.
Jeff Hallmark