Incident: Aging Voting Machines Cause Election Integrity Concerns

Published Date: 2015-09-15

Postmortem Analysis
Timeline 1. The software failure incident with aging voting machines, including issues with crashing, screen freezes, and malfunctioning memory cards, has been ongoing for several years as mentioned in the article published on 2015-09-15 [51223]. 2. Based on the information provided in the article, the incidents related to the failing voting machines have been reported over a period of time, indicating a long-standing problem rather than a specific isolated incident. Therefore, the exact date of a single software failure incident cannot be pinpointed, and it is an ongoing issue.
System 1. Electronic touchscreen and optical-scan voting systems 2. Embedded version of Windows XP 3. Memory cards used with optical-scan machines 4. Motherboards in optical-scan machines 5. PCMCIA storage cards 6. Analog modem for transmitting voting results 7. Central tabulation system using Zip disks 8. Voting machines used in Virginia that had severe security problems, leading to their decertification [51223]
Responsible Organization 1. The software failure incident in the voting machines was caused by a combination of factors including: - Aging hardware components such as degrading touchscreens, worn-out modems, failing motherboards, and memory cards [51223]. - Use of outdated operating systems like Windows XP, which are no longer supported by Microsoft [51223]. - Lack of available parts due to voting machine vendors going out of business, leading to difficulties in servicing the machines [51223]. - Inadequate funding for replacing the aging voting machines, resulting in reliance on outdated and failing systems [51223].
Impacted Organization 1. The United States voting system and election process [51223]
Software Causes 1. The software causes of the failure incident include the use of outdated voting machines running on an embedded version of Windows XP, an operating system no longer supported by Microsoft [51223]. 2. The aging voting machines were prone to crashes, screen freezes, and malfunctioning memory cards, leading to functionality issues and high failure rates [51223]. 3. Some voting districts reported calibration problems with electronic touchscreen machines "flipping" votes, recording votes for different candidates than selected by voters, indicating software glitches [51223]. 4. Virginia decertified 3,000 voting machines due to severe security problems, including a poorly secured Wi-Fi feature that could allow altering election results without leaving a trace, highlighting software vulnerabilities [51223].
Non-software Causes 1. Aging hardware components such as degrading touchscreens, worn-out modems, failing motherboards, and memory cards [51223]. 2. Use of outdated operating systems like Windows XP and Windows 2000, which are no longer supported by Microsoft [51223]. 3. Difficulty in finding parts for servicing the voting machines due to vendors going out of business [51223]. 4. Reliance on obsolete storage devices like PCMCIA storage cards [51223]. 5. Problems with analog modems transmitting voting results slowly [51223]. 6. Issues with memory cards used in optical-scan machines leading to functionality problems [51223]. 7. Calibration problems with electronic touchscreen machines causing votes to be recorded incorrectly [51223].
Impacts 1. Long lines at polling stations and disenfranchised voters leaving without casting ballots due to crashes and screen freezes on aging voting machines [51223]. 2. Recording of votes improperly, with instances of electronic touchscreen voting machines "flipping" votes and recording a vote for a different candidate than the one selected by the voter [51223]. 3. Reliability and integrity issues with malfunctioning machines failing to record votes or recording votes incorrectly, leading to concerns about the accuracy of election results [51223]. 4. Difficulty in finding parts to service aging voting machines, with some election officials resorting to scavenging eBay for decommissioned equipment [51223]. 5. Financial burden on states to replace outdated voting machines, estimated to cost over $1 billion, leading to disparities between wealthier and poorer election districts in terms of machine quality [51223].
Preventions 1. Implementing regular maintenance and upgrades: Regular maintenance and timely upgrades could have prevented the software failure incident by ensuring that the voting machines were kept up-to-date and functioning properly [51223]. 2. Proper testing and certification: Ensuring that the voting machines undergo proper testing and certification processes before being put into use could have helped identify and rectify any flaws or vulnerabilities in the software code and design, thus preventing potential failures [51223]. 3. Investing in new voting equipment: Allocating sufficient funds to replace aging and failing voting machines with modern, secure, and reliable equipment could have prevented the software failure incident by addressing the issues related to outdated technology and hardware failures [51223].
Fixes 1. Implementing proper storage, preventive maintenance, pre- and post-election testing of machines, and contingency planning to prepare for possible failures on election day [51223]. 2. Replacing aging voting machines with modern, secure, and reliable systems that meet current security standards [51223]. 3. Allocating funds for states to purchase new voting equipment to replace the outdated and failing machines [51223].
References 1. Brennan Center for Justice at New York University School of Law [51223] 2. Larry Norden and Christopher Famighetti, authors of the Brennan Center report [51223] 3. Merle King, director of the Center for Election Systems [51223] 4. Joe Rozell, director of elections in Oakland County, Michigan [51223] 5. Maggie Toulouse Oliver, the county clerk in Bernalillo County, New Mexico [51223] 6. Presidential Commission on Election Administration [51223] 7. Election Assistance Commission (EAC) [51223] 8. Famighetti, a Voting Rights Researcher for the Democracy Program at the Brennan Center [51223] 9. Virginia Secretary of State Ken Detzner [51223] 10. Bob Nichols, the election director in Jackson County, Missouri [51223]

Software Taxonomy of Faults

Category Option Rationale
Recurring one_organization, multiple_organization (a) The software failure incident related to aging and failing voting machines has happened again within the same organization, specifically within the US voting system. The incident involves issues such as degrading touchscreens, worn-out modems, failing motherboards, and memory cards in voting machines that are at least a decade old [51223]. (b) The software failure incident related to aging and failing voting machines has also happened at multiple organizations, as many states across the US are facing similar problems with their voting machines. States such as Florida, Kentucky, Massachusetts, New Hampshire, Texas, Virginia, and Washington are using machines that are at least 15 years old and are struggling to keep up with technological advancements [51223].
Phase (Design/Operation) design, operation (a) The software failure incident related to the design phase is evident in the article. The voting machines in use are reported to be technologically antiquated, with many running on an embedded version of Windows XP, an operating system that Microsoft no longer supports [51223]. Additionally, the initial voting standards and testing processes for the machines were highly flawed, leading to insecure software code and design issues [51223]. (b) The software failure incident related to the operation phase is highlighted by instances of crashes, screen freezes, and malfunctioning machines that fail to record votes or record votes improperly. There have been reports of calibration problems with electronic touchscreen voting machines "flipping" votes, recording a vote for a different candidate than the one selected by the voter onscreen [51223]. Additionally, there have been cases where memory cards used with optical-scan machines experienced functionality issues as the machines got older, leading to a high failure rate and the need for machine replacements [51223].
Boundary (Internal/External) within_system, outside_system (a) within_system: The software failure incident related to the aging voting machines is primarily within the system. The failure is attributed to factors such as technologically antiquated machines, wear and tear leading to degrading touchscreens, failing motherboards and memory cards, outdated operating systems like Windows XP, difficulty in finding parts for servicing, crashes, screen freezes, calibration problems, and malfunctioning machines that fail to record votes properly [51223]. (b) outside_system: While the primary cause of the software failure incident is within the system, there are also contributing factors originating from outside the system. These include the lack of funding for replacing the aging voting machines, the inability of states to afford new equipment, and the impact of wealth disparities where wealthier districts can replace machines while poorer districts are stuck with failing ones [51223].
Nature (Human/Non-human) non-human_actions, human_actions (a) The software failure incident occurring due to non-human actions: The software failure incident in the articles is primarily attributed to aging voting machines that are technologically antiquated and have reached or exceeded their expected lifespans. Issues such as degrading touchscreens, worn-out modems, failing motherboards, memory cards, and outdated operating systems like Windows XP are causing problems with the voting machines [51223]. (b) The software failure incident occurring due to human actions: Human actions have also contributed to the software failure incident. For example, the lack of proper vetting of voting machines installed after the Help America Vote Act in 2002, the flawed initial voting standards and testing processes, and the decision to purchase machines before new voting system standards were in place have all played a role in introducing new problems with insecure software code and design [51223]. Additionally, the reluctance of some election officials to publicly complain about the machines due to fear of undermining voter and candidate confidence in the election results has also been a factor [51223].
Dimension (Hardware/Software) hardware, software (a) The articles mention hardware-related failures in the context of aging voting machines. The hardware issues include degrading touchscreens, worn-out modems for transmitting election results, failing motherboards, and memory cards [51223]. Some specific examples include motherboards going down, memory cards having functionality issues, and reliance on outdated analog modems [51223]. (b) The articles also discuss software-related failures, particularly concerning the operating systems running on the voting machines. Many of the machines are running an embedded version of Windows XP, an operating system that Microsoft no longer supports or is about to stop supporting [51223]. This lack of support means that Microsoft won't produce patches for any new security holes found in the software, leaving the systems vulnerable to potential software-related issues. Additionally, some voting machines run on Windows 2000, further exacerbating the software obsolescence problem [51223].
Objective (Malicious/Non-malicious) non-malicious (a) The articles do not mention any malicious software failure incidents related to intentional harm caused by humans. [51223] (b) The software failure incidents discussed in the articles are non-malicious in nature. The failures are primarily attributed to aging voting machines, technological obsolescence, wear and tear, lack of support for outdated operating systems like Windows XP, difficulty in finding parts for servicing, and hardware malfunctions such as failing motherboards and memory cards. These issues have led to crashes, screen freezes, calibration problems, and reliability issues, impacting the integrity of the voting process. The failures are not intentional but rather a result of neglect, lack of proper maintenance, and inadequate funding for replacement. [51223]
Intent (Poor/Accidental Decisions) poor_decisions, accidental_decisions The software failure incident related to the aging voting machines in the US can be attributed to both poor decisions and accidental decisions: (a) poor_decisions: The incident reflects poor decisions made in the past regarding the procurement and maintenance of the voting machines. The Help America Vote Act allocated funds for new equipment in 2002, but the machines purchased were not properly vetted, leading to issues with insecure software code and design [51223]. Additionally, some states are using systems that were never EAC-certified due to being purchased before the establishment of proper standards [51223]. (b) accidental_decisions: The incident also involves accidental decisions or unintended consequences, such as the lack of foresight in anticipating the rapid technological advancements and the longevity of the voting machines. The machines were designed and engineered in the 1990s, with many running on outdated operating systems like Windows XP, which Microsoft no longer supports [51223]. Furthermore, the lack of available parts due to vendors going out of business has forced states to resort to unconventional methods like purchasing decommissioned equipment from eBay [51223].
Capability (Incompetence/Accidental) development_incompetence, accidental (a) The software failure incident related to development incompetence is evident in the article as it discusses how the voting machines used in the US are technologically antiquated, with many running on outdated operating systems like Windows XP and Windows 2000. The machines were designed and engineered in the 1990s, far behind modern technology standards. Additionally, the article highlights that the initial voting standards and testing processes for these machines were highly flawed, leading to insecure software code and design issues. The lack of proper vetting and testing before implementing these machines showcases a failure in professional competence by the authorities responsible for their development [51223]. (b) The software failure incident related to accidental factors is demonstrated in the article through instances of aging voting machines experiencing crashes, screen freezes, and malfunctioning memory cards. These issues were not intentional but occurred due to the natural wear and tear of the machines over time. For example, the article mentions how some machines had motherboards go down on Election Day, leading to the machines stopping working. Similarly, New Mexico faced functionality issues with memory cards as the machines got older, resulting in a high failure rate that required one-third of the machines to be replaced in every election. These accidental failures due to aging and degradation of the machines highlight the challenges faced with maintaining outdated technology [51223].
Duration permanent, temporary The software failure incident related to the aging voting machines in the US can be considered both permanent and temporary: (a) Permanent: The incident can be seen as permanent due to the long-term effects of using outdated machines that are prone to crashes, screen freezes, and malfunctioning memory cards [51223]. (b) Temporary: On the other hand, the incident can also be viewed as temporary as some election officials have resorted to temporary solutions such as scavenging eBay for parts, hiring consultants to build customized hardware, and implementing preventive maintenance measures to extend the life of the machines [51223].
Behaviour crash, omission, value (a) crash: The articles mention instances where voting machines experienced crashes, such as motherboards failing on Election Day, leading to the voting machine stopping working [51223]. (b) omission: There are reports of memory cards used with optical-scan machines having functionality issues as they got older, resulting in a high failure rate and the need to replace one-third of machines in every election [51223]. (c) timing: The articles do not specifically mention failures related to timing, where the system performs its intended functions but at the wrong time. (d) value: There are instances of calibration problems with electronic touchscreen voting machines, where votes were recorded for a different candidate than the one the voter selected onscreen, indicating a failure in performing the intended function correctly [51223]. (e) byzantine: The articles do not specifically mention failures related to byzantine behavior, where the system behaves erroneously with inconsistent responses and interactions. (f) other: The articles do not mention any other specific behaviors of software failure incidents beyond the ones described in options (a) to (e).

IoT System Layer

Layer Option Rationale
Perception None None
Communication None None
Application None None

Other Details

Category Option Rationale
Consequence property, delay, theoretical_consequence (a) unknown (b) unknown (c) unknown (d) The software failure incident related to aging voting machines had consequences on property as it impacted people's access to voting due to crashes, screen freezes, and malfunctioning machines that failed to record votes properly [51223]. (e) The software failure incident caused delays as it led to long lines at polling stations and disenfranchised voters who left without casting their ballots due to crashes and screen freezes [51223]. (f) unknown (g) unknown (h) The articles discussed potential consequences of the software failure incident, such as crashes and screen freezes leading to long lines at polling stations and disenfranchised voters, but did not mention any actual deaths, physical harm, or impact on basic needs [51223]. (i) unknown
Domain finance, government, other (a) The software failure incident discussed in the articles is related to the government industry, specifically the electoral process in the United States. The incident involves the aging and failing voting machines used in various states for elections, highlighting issues such as outdated technology, failing hardware components, security vulnerabilities, and potential risks to the integrity of the voting process [51223]. (h) The failure of the voting machines also has implications for the finance industry, as it involves the allocation of funds for the replacement of outdated voting equipment. The Help America Vote Act allocated federal funds to help states purchase new voting equipment after the 2000 presidential race, but many of the machines purchased then are still in use and facing issues [51223]. (m) The software failure incident can also be categorized under the "other" industry, as it pertains to the broader domain of technology and cybersecurity. The incident underscores the challenges associated with maintaining and securing critical infrastructure systems, such as voting machines, in the face of evolving technological standards and security threats [51223].

Sources

Back to List