Putting ballot images online restores the democratic principle of counting in public

Halalang Marangal (HALAL) welcomes the positive responses to its proposal that the ballot images now on memory cards be unencrypted and made public. With this statement, we want to respond to the objection that our proposal violates ballot secrecy.

The two basic electoral principles in a democracy are voting in secret and counting in public.

Voting in secret. This means keeping a voter’s choices secret from others, shielding the voter from pressure or harassment and making vote-buying dificult. Putting the ballot images online does not violate this secrecy, because a ballot and its image do not contain the name of the voter who cast it. In the manual system, ballots are also opened and counted in public without violating ballot secrecy.

Voting in secret does not mean keeping a voter’s choices secret from himself. In fact, this is what the Comelec did when it ordered the voter verification feature of the PCOS machines disabled, keeping the electronic ballot secret from the voter himself.

Counting in public. Votes represent the collective voice of the people. Counting votes in public is therefore a basic feature of a democracy. The PCOS machine denied voters and candidates the right to see the votes being counted and tallied. In effect, our votes were counted in secret, not in public. This secret counting of votes is a big step backward, compared to the old system where voters and candidates were able to see with their own eyes if their votes were being registered, counted and tallied correctly.

Because it was going to be a public count of votes in only 1,145 out of 76,347 precincts, the random manual audit was a poor substitute to public counting. The audit had other flaws as well: 1) the precincts to be audited were announced too soon, forewarning cheats; 2) some were done several days after May 10, instead of immediately after the ERs were transmitted; 3) some were done after the ballot boxes were transported and stored elsewhere, while they should have been conducted in the precinct itself; 4) some were not conducted without political party watchers and election watchdogs, who were essential to the integrity of the process; 5) the results were not announced immediately after the conduct of the audit but went through further “processing”, raising concerns that the results were sanitized; 6) until now, more than a month after the elections, the full audit report has not been released yet; and 7) the Comelec and PPCRV have prematurely declared, based on the incomplete results, that the discrepancies found were “minimal”, without releasing the actual machine and audit counts themselves, giving the public no opportunity to compare the two ourselves.

The HALAL proposal to put ballot images online makes up for the secrecy surrounding both the automated counting of ballots and the subsequent audits of these machine counts. It restores the public counting of votes in the electoral process. We suggest that its coverage be extended in three stages: first, the 1,145 precincts covered by the audit; second, all precincts covered by local electoral protests; and third, all the 76,347 precincts in the country. Let the ballot image files on the CF cards of these precincts be unencrypted and released to the public through the Web and on DVDs, so that the public may go through every ballot image in any particular precinct and compare its count with the count posted on the Comelec website or the audit count arrived at by the audit team.

Allowing the public to actually count the votes in the ballots, as we have always done in the past, should settle once and for all public concerns about the accuracy and integrity of the automated elections.

We ask all to add their voices to this proposal, so we may count our votes in public once again.

Reference: Roberto Verzola, Secretary-general (0929-856-1930)

Secret “backdoor” allows complete control of PCOS machine

Halalang Marangal (HALAL) calls the attention of the COMELEC and the public to an unpublicized finding of the IT experts’ forensic examination of the Antipolo machines, conducted a few days before the incoming president and vice-president were proclaimed on June 9.

We have learned that a secret “backdoor” was found in the PCOS machines which, if exploited, would enable an intruder to easily control the machine completely. This backdoor is a little-known port on the PCOS called “console”. Smartmatic had given government IT experts the impression that this port could only be used as output, for monitoring the status of the PCOS.

The forensic examination at the Senate, however, has determined that the console port could in fact also be used as input. Thus, with a simple connection using a special cable, the PCOS can be controlled from another computer, and the operator on the controlling computer gains “superuser” access to the operating system of the PCOS without need for username or password. A superuser, which is similar to the “Administrator” account in Windows, can do things like save, modify, erase or overwrite files, including programs. A knowledgeable insider with superuser privileges can do practically anything on a machine.

HALAL has further learned that the PCOS operating system permanently records an application log only, which is saved to an audit log file in the removable Compact Flash (CF) card. The operating system log is saved not to the CF card but to volatile memory, also called a RAM disk, whose contents are lost everytime the PCOS machine is turned off. Thus, intrusions through this secret backdoor leave no record for forensic examination. In addition, intruders can also overwrite a recent audit log file with an old copy, allowing them to hide their tracks from the application log as well.

In the House committee on suffrage hearings, Smartmatic had admitted that the PCOS machine could be used to commit fraud during the elections, but had assured the committee that this will always leave a trace. But with the discovery of this secret backdoor, HALAL concludes that any trace of the intrusion can also be erased by the intruder.

What more has Smartmatic not told the Comelec and the public?

HALAL urges the COMELEC to investigate this security lapse and to determine the liability of Smartmatic for supplying us with a voting machine with a secret backdoor for controlling the machine, for withholding this information secret from government IT experts, and for exposing the 2010 elections to high-tech fraud.

HALAL also reiterates its proposal that all ballot images be unencrypted and put online, grouped by clustered precinct, so that candidates and voters may see for themselves if the PCOS machines counted their votes properly. This is the only way to determine if this backdoor was exploited by cheats or not.

Reference: Roberto Verzola, Secretary-general (0929-856-1930)

Thank you, Smartmatic. The message is clear enough.

And thanks to Amb. Jose Zaide of the Manila Bulletin for pointing this out.

June 8: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18

June 2: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19

June 3: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21

The minutes are all in PDF files, so you need to download them first, then use a PDF viewer to read the files.

May 19: 1 2 3 4 5 6 7 8 9 10 11 12 13 14

May 20: 1 2 3 4 5 6 7 8 9 10 11 12 13

May 21: 1 2 3 4 5 6 7 8 9 10 11 12 13

May 24: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19

May 26: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

May 28: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21

Check this site and judge for yourself.

THE COMELEC SHOULD RESCIND ITS ORDER TO DESTROY THE CF CARDS!

THE DESTRUCTION OF THE CF CARDS MUST STOP IMMEDIATELY!

These cards may contain vital evidence that can prove high-tech fraud in the May 10, 2010 elections, so they should not be destroyed for any reason.

One very important file found in the CF card is called “slog.txt”. This unencrypted text file is an audit log. It logs actions done by the PCOS. Although we are not sure if the log is complete, it can contain logs of vital events that can incriminate high-tech cheats.

There is already one important case where this file revealed possible fraud. This case, ironically, involves as possible victim the wife of Cong. Teddy “Boy” Locsin Jr., main sponsor and proponent of the Automated Election Law in the House of Representatives. You can read Louie Locsin’s case here. Louie Locsin ran for congressman in the first district of Makati. According to her blog:

Earlier that evening of election day, we were already celebrating the victory of Louie Locsin because initial returns were showing a landslide victory. Strangely, despite polling precincts being closed at 8pm, a good number of precincts only transmitted the results after 2am, some even “waiting” until 7am. By 7am when the last results came in, Louie was defeated by the Binay candidate by 242 votes.

According to the log, the PCOS machine votes were zeroed on May 10 9:55pm (yes, p.m.) and then at least 624 ballots were fed to the machine every 15 to 20 seconds.

This truly makes the CF card vital in detecting and proving high-tech fraud in the 2010 elections.

Please add your voice to our call. Let us not let the Comelec destroy or erase the contents of these vital pieces of evidence.

If it can happen to the wife of the principal sponsor of the Automated Election Law, it can happen to any candidate.

The House Suffrage Committee meeting will be on
May 19, 2010, Wednesday, 1:00 PM at Conference Room Nos. 9 & 10 in
the Mitra Building. This is in line with the oversight functions of the
committee to look into reports on pockets of electoral fraud in the May
10, 2010 elections.

Everyone is welcome to attend.

Candidates who think there’s something wrong with the automated election results should probably attend, or send a representative.