JUDY WOODRUFF: Protecting the voting process from
outside interference is a high priority this election season.
In his latest report, Miles O'Brien looks at some of the latest technology being used in Georgia,
and whether it provides a stronger defense against tampering than the traditional paper ballot.
It's part of our ongoing Leading Edge series on science and innovation.
MILES O'BRIEN: In Georgia, early voting turnout is high, the presidential race is a toss-up,
and both Senate seats are in play. So, naturally,
the political world is nervously watching what voters here will do,
while, in the world of computer science, they are tensely tracking what the voting machines will do.
J. ALEX HALDERMAN, University of Michigan: Georgia is kind of a petri dish.
MILES O'BRIEN: Alex Halderman is a professor of computer science at the University of Michigan.
J. ALEX HALDERMAN: There's a lot more we have to learn about Georgia's election system.
And that's going to help inform how to better secure elections, not just in Georgia in November,
but across the country for years to come.
MILES O'BRIEN: He's among a handful of independent election security experts
getting unprecedented access to the inner workings of the state's $107 million voting system
rolled out earlier this year.
Also taking a deep dive? Election security white hat hacker Harri Hursti.
HARRI HURSTI, Nordic Innovation Labs: They have set up a complicated system,
which is centralized, and doesn't seem to have any safeguards.
MILES O'BRIEN: Georgia's vote-tallying system is a complex assortment of laptops, iPads,
magnetic cards, touchscreens, printers, and scanners, lots of moving parts.
RICK BARRON, Director of Registration and Elections, Fulton County, Georgia: This is
the Poll Pads. On Election Day, it is used to check in voters.
MILES O'BRIEN: Rick Barron is Fulton County's director
of registration and elections. He gave me a demo.
RICK BARRON: It tells whether we issued an absentee-by-mail
ballot, whether somebody's voted early, whether they have
voted that absentee ballot, or whether they are still eligible to vote.
MILES O'BRIEN: Once a voter is deemed eligible, the iPad activates a magnetic card,
which in turn unlocks a so-called ballot marking device, or BMD OK.
This is a pretty complicated way to do something you could do with pen and paper.
RICK BARRON: Yes. MILES O'BRIEN: There are advantages here, right?
RICK BARRON: Yes. The advantages are, it puts a true mark on the screen.
MILES O'BRIEN: When done, the voter prints a ballot. Selections are recorded in human
readable text and in a Q.R. code, which is read and counted by an optical scanner.
Georgia's secretary of state, Brad Raffensperger, says this is more accurate than pen and paper.
BRAD RAFFENSPERGER, Georgia Secretary of State: The problem with pen and paper is, sometimes,
you have your instructions on what you're supposed to do, but you end up with spoiled ballots.
Sometimes, people will put an X here, but then they circle this one here, or
they will make different marks on it. What did they really mean there?
MILES O'BRIEN: Still, elections officials tell us they seldom see
a hand-marked ballot where they can't determine voter intent.
In 2019, Georgia bought the devices from a Canadian company called Dominion Voting systems.
They replaced paperless machines like these made by a now defunct company called Diebold
Election Systems. A federal judge forced the state to scrap the discredited devices.
Election security activist Marilyn Marks was part of the lawsuit that triggered the change.
But, for her, ballot-marking devices, now used widely in 14 states, are not the ideal remedy.
MARILYN MARKS, Coalition For Good Governance: We need paper records that are marked by the voter,
with the voter's own hand, where we know
that was recorded the way that the voter wanted it recorded.
MILES O'BRIEN: So, she and the other plaintiffs took aim at the new voting machines.
The lawsuit came into sharp focus after their chaotic debut in the June primary.
The Poll Pads took as long as 30 hours to download the voter database,
displayed the wrong races, and would randomly shut down.
And the power-hungry ballot-marking devices blew circuit-breakers in numerous locations.
Poll workers, many of whom had no hands-on training because of the pandemic,
were often befuddled by the new technology.
RICK BARRON: We have learned a lot of lessons.
We're putting technicians in every single polling place.
We have to make sure that not only do the poll workers know how to use the equipment,
but then these technicians are then going to be relied upon to fix any issues. We want to just
fly under the radar and do our jobs and stay away from the news.
(LAUGHTER)
MILES O'BRIEN: But election experts working for the plaintiffs in the lawsuit against the state
have uncovered several troubling issues.
Alex Halderman looked closely at the Q.R. codes where the votes are encoded for the scanner.
J. ALEX HALDERMAN: By analyzing the structure of the Q.R. codes,
I have been able to learn that there's nothing that stops an attacker
from just duplicating one, and the duplicate would count the same as the original bar code.
MILES O'BRIEN: And in late September, another concern came to light.
During testing, election workers found half the names of the 21 candidates for Senate
intermittently disappeared from screens during the review phase.
Dominion sent out a last-minute software patch.
J. ALEX HALDERMAN: I'm worried that the Georgia system is the technical equivalent to the 737
MAX. They have just made a last-minute software change that might well have
unintended consequences and cause even more severe problems on Election Day.
HARRI HURSTI: You never want to rush something which is mission-critical,
and this is mission-critical, into production without proper time for testing.
That's really one of the ways bad actors are finding the vulnerabilities to exploit is looking
for honest vulnerabilities and finding out if they can be weaponized, if they can be exploited.
MILES O'BRIEN: Despite all the concerns, federal Judge Amy Totenberg
decided to let the election proceed with the ballot marking device system.
The secretary of state says post-election audits will bring any Q.R. code discrepancies to light.
BRAD RAFFENSPERGER: We're in the process of really continuing to expand
the capabilities that we have, so we can audit more of the races. When we do the audit,
we actually do it on the human-readable portion, and not on the Q.R. code.
MILES O'BRIEN: Alex Halderman and his team at Michigan conducted a mock election
to see if voters are likely to catch mistakes on the printouts. Only 7 percent
spotted a deliberately planted error. So, double-check your ballot before you scan.
For the "PBS NewsHour," I'm Miles O'Brien in Atlanta.