General Discussion
In reply to the discussion: Risk limiting audit results from PRIMARY in Pennsylvania - one batch showed half of the votes had not been counted [View all]Abnredleg
(1,024 posts)Last edited Thu Nov 21, 2024, 02:55 PM - Edit history (2)
Here is a link to the testing procedure for the EAC - read the section on testing source code and creating trusted builds.
https://www.eac.gov/voting-equipment/manuals-and-forms
To do the testing EAC has certified two labs to conduct the testing. Some states also require further testing to ensure that the system works in their environments, and there are many security companies that can do the work.
https://www.eac.gov/voting-equipment/voting-system-test-laboratories-vstl]
Speaking generally, there are many systems that need to be certified (banking, medical, law enforcement, military) and there is a large industry that caters to this. They all require access to the code because how can you certify if you cant look at code. Proprietary software is the norm and it is handled by confidentiality agreements - dont agree to submit software and no certification. Proprietary information is not an impenetrable wall - it can be signed away and law enforcement can look at it during criminal investigations.
As to tampering in the field, there are multiples layers of physical and cyber security to prevent that from happening. There are 3,200 separate counties, each with their own equipment and security measures that need to penetrated to perpetrate wide-spread fraud. And if post-election audits indicate issues, law enforcement can seize the machines and send them to the labs for forensic examination.