Jeff,
In my
experience, the “Resume Count” feature has been used to correct the mistakes
of poll workers who “accidentally” end the election before it is over.
Granted, I don’t have a real life instance that I can tell you about where
touch screen has been used but I have utilized the “Resume Count” function
in the OS world a number of times when poll workers have used the “End” card
in the middle of the day.
Yes, it’s dumb
and seems highly unlikely but I guarantee you that it can happen and the
“Resume Count” feature is the only way we can recover. It’s our fail
safe measure for poll workers who think they have a better idea of how the
election should be conducted.
Cathi
-----Original
Message-----
From:
owner-support@gesn.com [mailto:owner-support@gesn.com]On Behalf Of Jeff Hallmark
Sent: Wednesday, May 15, 2002 8:19
AM
To:
support@gesn.com
Subject:
RE: Removal of "Resume Counting" feature
-----Original
Message-----
From:
owner-support@gesn.com [mailto:owner-support@gesn.com]On Behalf Of Nel Finberg
Sent: Tuesday, May 14, 2002 9:57
PM
To:
support@gesn.com
Subject:
Re: Removal of "Resume Counting" feature
Jeff,
Resume Counting is accessible only once an election has been ended on the
AccuVote-TS unit, placing the unit in Post-Election Mode,and not
before. In order to have accessed Post-Election Mode, the election
must first have been ended using the Administrator card and the entry of a
Supervisor Password, and presumably also printed a results report.
Therefore, the results will be known anyway. The provision of the
Administrator card and the Supervisor password provide the security
interface necessary that assures that the election is not fraudulently ended
on the BallotStation and results reported.
The fact is we
can restart the election process after it has been ended, no guarantee exist
that there will never be an opportunity for one unscrupulous individual,
acting alone and unobserved, to compromise the election by previewing the
results either via the Ballot Review process or by printing an “interim
report”. This is the point that the Technical Committee has voiced and
echoed by Jim Dearman.
We have the opportunity to
provide sufficient reason why anyone having Administrator access would
ever have the need to end the election before the official closing of the
polls.
Respond to this
post as soon as possible with reasons we need this
feature.
All
steps of election close must by necessity occur in a secure manner, under
the supervision of polling judges, thus preventing any fraudulent entry of
results. Remember also that the change in election mode is reflected
in the Audit log, that election media may be uploaded once only, and the
voting device results reports must balance against the GEMS results
reports.
There is a very
comprehensive audit trail, yet Jim Dearman has had recent discussions,
within the last week, with the FEC Technical Committee concerning this topic
of “interim report printing” and has deemed that the audit trail is not
adequate. There is no automated check by GEMS of the audit trail during
upload and unless a thorough canvas is done the election closing / reopening
would go undetected. Keep in mind that the idea here is not to have to rely
upon “Jurisdictional procedures” to ensure election security. Uploading
multiple times is not at issue.
This
behavior is consistent with the AccuVote-OS, which we have been using for
many years now. Resume Counting may only be accessed on the
AccuVote-OS from Post-Election Mode, and not before. In order to
access Post-Election Mode, an AccuVote Ender card must be submitted to the
unit, upon which the results report is automatically printed. Again,
in order to even have reached the Resume Counting option, a results report
must have been printed.
Nel
The results
report is not automatically printed, rather the option dialog to print a
result report is presented.
At this juncture
we need concrete reasons why our customers need this feature Wyle will
accept the feature given we can provide those
reasons.
Jeff
Hallmark
-----
Original Message -----
To: support@gesn.com
Sent: Tuesday, May 14,
2002 7:09 PM
Subject: Removal of
"Resume Counting" feature
Ballot Station 4.3.4.0 is currently in
process at Wyle Laboratories for
certification. The Resume Counting
feature has become an issue. The feature
is considered undesirable
because it is viewed as a breach of security as it
allows the "interim
printing" of results and the subsequent resumption of
the election
process. We have been asked for the reason(s) that the Resume
Counting
feature is available, it is imperative that anyone desiring this
feature
respond to this post. Explain how this feature has been
beneficial
to customers.
Jeff
Hallmark