Another COMELEC-Smartmatic Brand of Automated Election System? Part 2

Introduction

I wrote a piece on Murphy’s Law shadowing every step of the automated election, with particular emphasis on the voter’s interface with the technology. I will revisit these issues, plus the PCOS and queuing, ex-future manual counts as well as provide some assessments coming from other citizen groups on the other aspects of this brand of technology chosen by the COMELEC.

The Military, as seen by International Observers

Observations on the General Elections in the Philippines 2010: Final Report To Compact for Peaceful and Democratic Elections (COMPACT) and Community Empowerment Resource Network Inc /Taskforce Participatory Local Governance (CERNET INC. / TF PLG) By Dr. Heiko Meinhardt (Head of Mission), Lilli Breininger, Jack Catarata, Michael Reckordt, Niklas Reese, Kai Rohrssen and Katharina Stahlenbrecher.  11th June 2010

Maguindanao

Nevertheless there was a common understanding amongst the stakeholders that the 2010 elections have been a relative success compared to former elections. On the one hand electoral violence was minimized throughout the province, unlike in former elections the security forces (AFP and PNP) have acted in a non-partisan way and were generally perceived as helpful, even crucial for a rather peaceful conduct of the elections. Even civil society members were highlighting the decent, respectful and professional behavior of AFP and PNP.

….

The role of the national security personnel, the Philippine National Police (PNP) and the Armed Forces of the Philippines (AFP), was to support the COMELEC to secure the designated places. But they also helped in distributing the PCOS machines, the flash cards and secured the clustered precincts before Election Day. On Election Day, they were present outside of some precincts, when their help was asked by the BEIs. Aside from security measures their task was also to calm down the people, who were queuing in front of the precincts.   Nevertheless there were also cases reported, where the PNP did not fulfill their neutral role.

Some People’s Evaluation of Elections

———————-

From Gus Lagman

Why didn’t it fail? First, the teachers, who were the members of the Boards of Election Inspectors (BEI), performed extremely well. Theirs was a Herculean task, fraught with all kinds of problems, yet they delivered. We truly must salute them. Second, the voters were determined to make the system work. They so wanted their voices to be heard, their votes to be counted, that they stayed on despite the very long queues at the precincts. I definitely subscribe to Conrad de Quiros’ interpretation of this current political situation as being an EDSA masquerading as an election. And third, a large logistics company with a wide geographic coverage came in the last minute, to help deliver more than 50% of the PCOS machines and later, the re-configured CF cards.

What saved the day for us was the large margin of Noynoy Aquino in the surveys. There was no way the public would have accepted contrary results. If only for this, there’s reason to keep running those surveys. Without them, any result would have to be accepted, no matter how disappointing, for there wouldn’t be any basis for contradicting it and launching protest action.

The voter turn-out, according to the COMELEC, was around 75%. That’s 5-10% short of expectations. This translates to 2.5 to 5 million voters who, because of inefficient precinct clustering, might have been disenfranchised.

From the Kaakbay Partylist

MAJOR VIOLATIONS OF THE LAW BY THE COMELEC IN IMPLEMENTING THE AUTOMATED ELECTION SYSTEM IN MAY 10, 2010

From the reports of Cong. Locsin’s Committee and the Joint Forensic Team for the Joint Canvassing Committee of Congress; and the SC and Ombudsman petitions of Atty. Adaza and PCS President Celis, here is a summary of the major violations of the law by Comelec in implementing the Automated Election System. Hope this serves as a guide in our search for truth and justice in the exercise of our right to suffrage. Please pass to friends who care. Thanks.

To view the Summary in Table Form and the Complaint-Affidavit of the Philippine Computer Society (PCS) against Comelec Officials at the Ombudsman, please check the following links and download the files:

http://www.mediafire.com/?sharekey=c83e06e1eeda20b0d8f14848abf485dd7504ec2bc0fa63b7b16e5c9d3b204475

OBSERVATIONS / ASSESSMENTS OF THESE VIOLATIONS BY COMELEC

COMELEC’s non compliance with the law resulted in a completely untested and unaudited system. The only testing made was at the precinct level and used in conjunction with sporadic voter training. No system testing was made with the Boards of Canvassers for the municipal, city, provincial and national levels. No testing was also made to determine whether the voting continuity and contingency measures were realizable.

As a result, it led to the following problems, difficulties, irregularities and inaccuracies during the elections:

1.               Long queues of voters waiting to vote for more than 3 hours in order to locate their precincts, resulting in 3 to 5 million disenfranchised voters.

2.               Erroneous count of 253 million registered voters in the Server of the House of Representatives.

3.               Failure to read 3 to 4 million “null” votes recorded nationwide.

4.               Printed election returns containing dates before, during and after 10 May 2010 and printed on credit cards thermal papers.

Many election returns showed only 10 votes from about 500 to 600 actual voters, indicating that

5.               These returns were based on test ballots prior to Final Testing and Sealing of the PCOS machines.

6.               Electoral protests at various levels in 41 provinces and cities. The congressional inquiry at the House of Representatives (Locsin hearing) “showed that there was electoral fraud committed, and substantiated by documentary evidence, with COMELEC and Smartmatic, keeping the public in the dark about the many ways one could cheat through the machines, the many irregularities and last minute changes in orders coming from COMELEC that provided many opportunities to cheat and manipulate the votes for favored candidates.”

POINT 1. The PCOS machine uses an Ultra Violet (UV) Security Mark Sensor to determine the genuineness of a ballot. Prior to the elections, this UV Sensor was disabled by COMELEC.

The Locsin hearing confirmed that SMARTMATIC provided all the paper, UV ink, and several printing machines for National Printing Office (NPO) to print the ballots. Ms. Grace Enriquez of NPO and Mr. Flores of Smartmatic confirmed that the PCOS cannot read the UV ink printed ballots because of the lessened density of the UV ink due to the heightened printing speed to meet the printing deadline.

Instead, COMELEC immediately purchased some 76,000+ handheld UV readers that were not used during the elections.

POINT 2. In the Locsin hearing, it was confirmed that the Compact Flash (CF) cards of the PCOS can allow the reinsertion and acceptance of already scanned ballots. Later, both Ms. Quimson of Navigation Information and Mr. Flores said that scanned or previously read ballots can be re-fed into the computers even without a change of CF card.

There was no way to know whether the ballots read during the elections were genuine or fake.

POINT 3. The Joint Forensic Team, commissioned by the Joint Canvassing Committee reported June 9, 2010 the discovery that the PCOS machines have a controlling CONSOLE PORT which allowed the unsecured vulnerability of the PCOS machines to manipulation and open to malicious control and electoral fraud.

Through an unsecured (that is, with no username and password) connection of a laptop, the laptop was able to access the operating system of the PCOS machine. Smartmatic was not able to offer a technical explanation to this major security breach loophole.

The Namfrel terminal report, released July 2, 2010, said the random manual audit of certain precincts showed that the degree of variance was less than what was the required 99.995 percent accuracy. The overall performance of the machine is 99.35 percent accuracy, which was below the required 99.995 percent.  Extrapolating this percentage to 76,340 precincts, it will amount to about 345,000 ballots inaccurately read.

The digital signature is the primary feature to determine the authenticity and verifiability of the election returns from the precincts. Thus, the Contract specified these as the second main deliverable of Smartmatic.

POINT 1. COMELEC issued Resolution 8786 March 4, 2010 that no longer required the use of digital signatures. The Resolution stated:

“WHEREAS, there is a need to amend or revise portions of Resolution No. 8739 in order to fine tune the process and address procedural gaps;
SEC. 40. Counting of ballots and transmission of results
f) Thereafter, the PCOS shall automatically count the votes and immediately display a message “WOULD YOU LIKE TO DIGITALLY SIGN THE TRANSMISSION FILES WlTH A BEI SIGNATURE KEY?”, with a “YES” or ‘NO” option;
g) Press “NO” option.
The PCOS will display “ARE YOU SURE YOU DO NOT WANT TO APPLY A DIGlTAL SIGNATURE?” with a “YES” and “NO” option;
h) Press “YES” option.”

POINT 2. The Locsin Report stated: “14. The digital signature—only of a particular PCOS—and not of the BEI person herself was conceded as being, for practical but not legal purposes, sufficient compliance with the intent of the E-Commerce and Automated Election laws. The Chair argued that a PCOS [or machine] digital signature serves equally as the digital signature of the BEI who has custody of the machine because it is possible to link one to the other.”

POINT 3. The Joint Forensic Report however proved that such practical purposes were not true, as there were no such digital signatures. The Report stated:

“ Absence of Machine Digital Signatures
Examination of the PCOS machines revealed that there was no evidence found to prove the existence of digital certificates in the PCOS machines, contrary to the claims of Smartmatic. The technicians of Smartmatic were not able to show to the forensic team the machine version of the digital signature, alleging that they do not have the necessary tools to show the same. More so, they were at a quandary as to how to extract the said machine signatures— to the dismay of the forensic team.

If there are digital certificates, then these were supposed to be revealed. The forensic team tried to extract the digital signatures but to no avail. Hence, the forensic team is of the opinion that there exists no digital signature in the PCOS machine.”

POINT 4. Without the digital signatures (whether that of the PCOS or the BEI), there is no way to check in the CCS servers in the municipality, city, province and national to know which PCOS machine (authorized or unauthorized) is transmitting to their CCS servers.

This is crucial with the discovery of 60 PCOS machines and 2 Broadband Global Area Network (BGAN) in Antipolo in the house of a Smartmatic technician (who could not show any authority for safekeeping, back up and to which CCS he is transmitting), and the subject of the Forensic team’s investigation.

POINT 5. As proven above, there were no digital signatures used in all level of the AES. Therefore, the Board of Canvassers themselves, from the municipal, city, provinces and national canvassing centers, cannot authenticate, duly execute and certify the Certificates of Canvass they transmit electronically to the higher levels of canvassing.

Thus, all the BOC proclamations are null and void from the beginning.

The voter had no way to check whether the PCOS correctly read and recorded his vote choices.

No Statement of Votes (SOV) accompanied the Certificates of Canvass (COC). The SOV is the details of the votes by precincts (indicated in the election returns) by which the summary votes of each candidate in the COC can be verified and checked.

COMELEC stated that it will take some time to print 10,000 SOV recorded in the CCS servers of the Board of Canvassers.

The results of 30 RMA precincts were released and announced as of 15 May 2010.

Last 20 May, COMELEC announced results of about 300 RMA precincts were completed with few discrepancies.

In the Locsin hearing, Amb. de Villa of PPCRV reported the partial results of the RMA. Out of the 1,145 randomly selected precincts, 845 precincts have already submitted reports, 15 precincts’ results were in transit leaving 285 precincts with no results yet.

As of this writing, COMELEC has not published the results of this Random Manual Audit.

SysTest Lab submitted a report with some 4,000 comments for action by COMELEC. No official announcement by COMELEC whether these SysTest comments were addressed.

The lack of transparency by the COMELEC made the Supreme Court to order COMELEC to produce the relevant documentation on these items.

Tests were conducted only at precinct level, none at the municipal, city, provincial and national.

The Joint Forensic Team reported that “the hash codes for the firmware residing in the 6 PCOS machines found in Antipolo have the same SMA256 output … However, a thorough comparison with the official document posted in the COMELEC website revealed that the published hash code is not the same as the extracted one [from the PCOS machines.”

This indicates that the computer programs in the PCOS machines have been altered.

For all documents related to the Automated Election System (AES):
http://www.mediafire.com/?sharekey=c83e06e1eeda20b0d8f14848abf485dd1e97232231037841759e682a8cd2154a

For all documents related to Critique of the AES:
http://www.mediafire.com/?sharekey=c83e06e1eeda20b0d8f14848abf485dd1e972322310378414df0d6082f1c2cd0

Advertisements

2 Comments

Filed under election, Philippines

2 responses to “Another COMELEC-Smartmatic Brand of Automated Election System? Part 2

  1. Pingback: World Spinner

  2. norms

    the reason technology defies politicism is technology does its purpose , while politics has a big mouth

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s