Black Box Voting - About Black Box Voting Systems

About Black Box Voting Systems

Both optical scan systems which interpret paper ballots and Direct Recording Electronic (DRE) systems can be black box systems; in fact, mechanical voting machines can also be seen as black-box systems, since only the technicians who set up the machines have access to the linkages between the voting levers on the face of the machine and the vote recording counters inside. Rhode Island supreme court justice Horatio Rogers, in an 1897 dissenting opinion, wrote of one early mechanical voting machine that

... a voter on this voting machine has no knowledge, through his senses that he has accomplished a result. The most that can be said is, if the machine worked as intended, then he has made his holes and voted. It does not seem to me that this is enough.

Rogers' criterion for whether a voting machine is a black box is strict -- you must be able to sense that it works correctly as you use it. A somewhat weaker criterion is sometimes accepted, based on whether the public is allowed to examine the mechanism, in a modern context, both the source code and hardware. Though source code may be available to voting system testing authorities and state or county election officials it can still be considered "black box" if it is not available to the public. Even with some open source systems, which allow examination of the source code, access to firmware, which controls the hardware, is not available.

Even if the source code is made public, significant challenges remain in the areas of authenticating that the code running systems in the field matches the publicly released code, and it is still possible to find attack vectors for open source systems.

In the U.S. presidential election, 2004, 32% of the voting was done on optical scan machines and 29% on DRE voting machines using trade secret proprietary software. As of February 2006, that figure had climbed to 49% for optical systems and 39% DRE.

Legislation has been introduced in the United States Congress to require public access to source code, hardware and firmware information, including the Voter Confidence and Increased Accessibility Act of 2007, introduced by Congressman Rush D. Holt, Jr..