Listen Now

States Expand Internet Voting Experiments Amid Pandemic, Raising Security Fears

Apr 28, 2020
Originally published on April 28, 2020 1:31 pm

Election officials nationwide are preparing for what may the highest election turnout in modern history in the middle of a pandemic. In response, several states will be turning to a relatively new and untested form of Internet-based voting to aid the voters who may have the most trouble getting to the polls.

In the latest demonstration of the technology, Delaware will allow voters with disabilities to return their ballots electronically in its primary election next month, becoming the second U.S. state to do so. The decision comes despite grave warnings from the cybersecurity community that the technology doesn't offer sufficient safeguards to protect the integrity of an election.

NPR is the first to report the development, which has yet to be announced publicly. Both the state, and the Seattle-based company administering the technology, Democracy Live, confirmed the decision, although they dispute the term "Internet voting" for the cloud-based system.

Earlier this year, West Virginia passed a bill to allow the use of the technology for disabled voters, after becoming the first state to allow overseas and military voters to use an app to vote in the 2018 midterms. Delaware will also allow overseas and military voters to use the technology.

A third state, New Jersey, is considering making the technology available for voters with disabilities and overseas voters, according to an election official with knowledge of the state's plans. A state elections spokesperson did not respond to a request for comment.

The developments are sure to worry election security advocates. Until the pandemic struck, their efforts were focused on cybersecurity following the 2016 election, when Russian operatives successfully hacked election networks in multiple states. Since then, many states have increased their security protocols and generally moved away from all-electronic voting systems back toward paper ballots.

Those in favor of Democracy Live's system argue that it is a paper-based system, because when a voter elects to electronically submit their ballot, an election official must print it out before it's counted.

But most security experts scoff at that concept because the ballot is transmitted via the Internet before it reaches the stage where it's printed, leaving it potentially vulnerable to cyber manipulation.

"In the computer security business, we worry about worst-case scenarios, and the downside risk of the Democracy Live model is really bad," said Doug Jones, a computer science professor and election security expert at the University of Iowa. "If the voter is marking the ballot using a device, it's an online ballot-marking system, and if the physical ballot is not printed by the voter, it's online voting."

Still, there are signs that the general public may be becoming more open to the idea. A survey this month by TargetSmart, a data analytics firm that works with Democrats, found that a plurality of voters support Internet voting as a response to the coronavirus crisis.

But advocates of Internet voting technology are clear that they don't see it stopping with relatively small slices of the electorate such as overseas voters and voters with disabilities, or being restricted to times of crisis. They see it as the future of voting.

"You know, eventually we can't hold back the tide. We're going to get there," said Bryan Finney, the CEO and founder of Democracy Live. "Next generation voters are going to demand next generation voting technologies."

Who paper leaves behind

Voters are seen in Milwaukee earlier this month. Eager to avoid making voters use crowded polling places amid a pandemic, states are looking to expand absentee voting while a few are piloting Internet-based voting for some voting populations.
Morry Gash / AP

The pandemic took hold in the U.S. in the middle of primary season during a presidential election year. Officials around the country are scrambling with how to make sure the democratic process doesn't become a casualty.

Many voters are concerned about the potential health risks of casting ballots in person. During Wisconsin's recent controversial primary, voters wearing masks stood in long lines to cast ballots, sometimes relying on DIY safety measures crafted by election officials. State health officials say at least 36 voters and poll workers have subsequently tested positive for COVID-19.

In response, many jurisdictions and states are looking for alternatives to in-person voting.

While ballots cast by mail are viewed by many as highly accessible, they leave some people behind, says Eric Bridges, the executive director of the American Council of the Blind.

Bridges authored a letter to congressional leaders earlier this month pushing for online voting, which was signed by more than 70 national, state and local disability advocacy groups.

"To complete a paper ballot one is required to, at the least, read standard text, physically write and/or fill in the ballot choices, seal and certify the ballot via a signature on the envelope, and mail the ballot back to the appropriate voting official to be counted," Bridges wrote. "Each of these steps may act as a barrier to voting for voters who are blind and disabled."

The Democracy Live system that will be used this summer allows voters with disabilities to access and mark their ballots on their own accessible devices, meaning voters can fill them out without help and send them in using whatever technology suits their specific physical needs.

A screenshot of Democracy Live's electronic ballot delivery service. Once a voter completes their ballot, they can choose whether to return it electronically or print it out and mail it in.
NPR screenshot of Democracy Live demo

Typically, voters with these sorts of needs have had to travel to a polling place to use an accessible voting machine, but the pandemic may make that difficult this year.

Bridges doesn't think politicians have purposefully or maliciously failed to take the needs of voters with disabilities into consideration by expanding mail-in voting.

"It doesn't make it any less frustrating or angering to be completely honest," Bridges said. "It's just sort of like we weren't even considered; there wasn't even a debate that took place where we could serve and volley."

When asked about security concerns with the technology, he said that's not his job, that's the role of security firms and the government.

"We want access," Bridges said. "It's not really up to the American Council of the Blind to ensure that these systems are secure."

'Risk appetite'

Returning ballots electronically is still in a pilot phase, with the states taking it one election at a time. But Finney said he expects at least five states to offer his company's ballot return technology to voters with disabilities in November's general election.

It's a major development to expand the use of such systems beyond just military and overseas voters, since many of those voters already vote by what are considered insecure methods like email and fax. Disabled voters in many instances will be choosing to electronically transmit their ballot instead of using a completely paper system.

The Democracy Live ballot return system stores a voter's ballot and then allows an election official to access and print it.

Finney, however, doesn't prefer the term "online voting."

"It's a loaded term. ... Really what this is, is a secure portal. If anything, it's a document storage application," Finney said. "When people think of online voting, they're thinking it's all being tabulated online."

But a number of cybersecurity experts disputed that characterization when presented with it by NPR.

"Sorry, but what a load of bull****," said Joe Kiniry, a principal scientist at Galois, the company contracted by the federal government to develop a secure and open source voting machine.

The phrase "online voting" encompasses any voting system where "voter choices are transmitted over a wide area network," Kiniry said, and has nothing to do with how those ballots are counted.

"Online voting is not a loaded term," Kiniry said. "It has a very simple definition that has been widely agreed upon in the research community for about 40 years."

Cities, counties and states are largely free to use whatever voting technology they want because elections are run at the local level with very limited federal oversight.

In the case of online voting, there's also very little financial risk. Tusk Philanthropies, a nonprofit funded by multimillionaire Bradley Tusk, is funding many of the pilots with an aim at expanding Internet voting and increasing turnout in U.S. elections.

Tusk Ventures founder & CEO Bradley Tusk is funding many of the efforts to introduce online voting.
Steve Jennings / Getty Images for TechCrunch

His organization has funded the West Virginia pilot program and other local pilots in Utah, Oregon, Colorado and Washington.

Tusk told NPR earlier this year that he hopes to fund as many as 50 mobile voting pilots in the coming five years.

"Everyone who doesn't want this to happen is never going to say, 'We oppose mobile voting because we don't want higher turnout,' " Tusk said in January. "They're going to say, 'It's not safe.' And if we have proven 30, 40, 50 times over that it is safe, it's a lot harder for those objections and arguments to fly."

Election security experts say that rigorous independent auditing is needed in order to reassure the public the results are legitimate. That's lacking in the case of Democracy Live, says Sen. Ron Wyden, D-Ore., who has opposed online voting for many years.

Wyden does believe voters with disabilities should have access to software that allows them to mark their own ballot using their own accessible machine, but he thinks those ballots should then be mailed in, not returned electronically.

"It is simply irresponsible to allow online voting, when leading experts have warned specifically that this technology is dangerous and before a system has passed an audit by independent experts," Wyden said in a statement to NPR. "So far none of these products has passed that test. It is far too risky to gamble the constitutional rights of voters with disabilities on unproven tech."

West Virginia dropped its previous online voting vendor after a number of independent investigators cited security issues with its system.

Overall, the amount of voters using some form of Internet ballot return in 2020 is still expected to be minuscule; Finney expects less than 10,000 voters nationwide. And he says he doesn't think the systems should be used more widely until there have been more pilots.

But many election officials say they shouldn't be used at all. One state election director who requested anonymity in order to speak candidly called the technology "the third rail" of voting systems because they ignite such controversy.

Similarly, Washington Secretary of State Kim Wyman gives two reasons for why she has pushed back for 20 years against various efforts to expand Internet voting.

"The Internet is not secure, and we know this more today than I did 20 years ago," Wyman says.

The second problem has less to do with technology, but is tougher to solve she says: convincing voters in a close election that the results are legitimate when they don't understand the underlying technology.

Ahead of a highly polarized presidential election, Wyman says it's not the time to introduce new technology.

"We can't put our election at risk to technology we cannot guarantee is secure, and right now, in 2020, we cannot guarantee that any electronic transmission of a ballot is secure," Wyman said. "While it seems like electronic voting would really solve a lot of problems, it would create far more mistrust than I think we have the risk appetite for."

Copyright 2020 NPR. To see more, visit https://www.npr.org.

RACHEL MARTIN, HOST:

How do you prepare for an election with possible historic voter turnout amid a pandemic? Online voting could be part of the answer. NPR's Miles Parks has been looking into this and joins us now. Good morning, Miles.

MILES PARKS, BYLINE: Hi, Rachel.

MARTIN: So you are reporting that a number of states are planning these pilot programs to offer electronic voting to some voters. Explain. How would this work?

PARKS: Yeah, so this is a system provided by a Seattle-based company called Democracy Live that's allowing some states to offer electronic ballot return through a web portal to some of their voters. West Virginia passed a law earlier this year allowing voters with disabilities to vote this way, and now two more states are likely coming on board. Delaware confirmed to me that they'll be piloting the technology in their June primary, and New Jersey is also considering offering the technology, according to an election official who I spoke with who's familiar with their plans.

But it's important to note that this is only for use in these states for overseas and military voters and voters with disabilities. It's still a really, really small subset of voters. But it does mean that we're probably in a situation where 2020 is going to see the most online Internet voting of any presidential election ever. And advocates see it as the beginning of a new future for voting, not something that is just stopping here with these small population blocs.

MARTIN: Right. All right. So even though it's a small number of voters who are going to be able to do this, let's talk about the pros and the cons. The country is still, obviously, reeling from the Russian interference in the 2016 election.

PARKS: Sure.

MARTIN: I imagine there are concerns about vulnerabilities of this online system.

PARKS: Yeah. There are plenty of concerns, which is why people who want to use this technology and people want to advocate for it don't really prefer the term Internet voting. I talked to Democracy Live founder Bryan Finney, and he explained the company's cloud-based system to me.

BRYAN FINNEY: Online voting is a pretty broad term. In fact, it's a loaded term. Really, what this is - it's a secure portal. If anything, it's a document storage application.

MARTIN: This feels like semantics, though. The ballots are transported through a cloud, right? How is that not Internet voting?

PARKS: Exactly. I mean, I reached out to a number of cybersecurity experts with this explanation, and they had a number of different variations of basically saying, no way, this is Internet voting 100%. Here's Dan Guido, who's the co-founder of a cybersecurity firm called Trail of Bits.

DAN GUIDO: It's Internet voting. At the end of the day, it's still trusting a computer to record a vote correctly.

PARKS: Another expert emailed me saying, and I quote, "sorry, but what a load of BS." So the other consistent thing here, other than that kind of response, is that these experts seem to think that there are probably some vulnerabilities in this system. There hasn't been an independent security audit that's been made public yet by the company, and without that, no one in the security world can say for sure that this is a safe way to transmit ballots, even for a small number of voters.

MARTIN: Huh. Well, then how do advocates for these online programs combat those critiques?

PARKS: Basically, by saying that the risk is worth the benefit of the increased accessibility. You know, a lot of the push right now in the voting world is toward mail voting systems. But disability rights advocates, I should say, basically say that the push for mail voting potentially leaves a lot of voters who have more unique needs behind. You think about blind voters or voters who have trouble writing. How are they supposed to, you know, fill out a mail ballot easily? I talked to Washington Secretary of State Kim Wyman.

KIM WYMAN: While it seems like electronic voting would really solve a lot of problems, it would create far more mistrust than I think we have the risk appetite for.

PARKS: What she says, basically, is it's hard to get anyone to trust the legitimacy of an election when it's electronic at all.

MARTIN: Yeah, an important balancing act there. NPR's Miles Parks, we appreciate it.

PARKS: Thank you. Transcript provided by NPR, Copyright NPR.