Election results inaccessible due to tampering

News online only online only!

The results of this week’s student government elections were deemed inaccessible Wednesday evening, possibly due to malicious tampering with the electronic key that decodes the results.

Without elections results, no winners could be certified and the position of student body president, vice president, and vice president for finance became vacant. In response, Student Senate Chair Joel Bergstein and Graduate Student Assembly President Beth Ayers appointed Germaine Williams as the interim student body president immediately after the Elections Board publicly announced the problem.

The student body’s constitution empowers the Senate chair and GSA president to appoint a student body president in the event that the position becomes vacant. Williams is currently the GSA vice president for finance.

“This was an unforeseeable event,” Bergstein said. “We are doing everything in our power to correct it.” Bergstein is also a candidate for student body vice president for finance.

Bergstein and Ayers announced to a joint meeting of the GSA and Student Senate that a new election will most likely be held in September, leaving candidates in limbo while a new election plan is finalized. Bergstein said he expected that only those eligible to vote in this week’s election would be eligible to vote in the next.

According the Meg Richards, the Elections Board chair, a timestamp on the encryption key indicates that the file was modified on Monday at 2:08 p.m., after the elections had begun and the encryption had been implemented.

Carnegie Mellon’s Information Security Office is investigating the situation, according to Director of Student Development John Hannon, and significant disciplinary action could result if any students are found to be responsible.

Ballot data is immediately encrypted when voters cast their ballots online. The encryption makes the ballot data unintelligible until the password-protected key is used to decrypt that data. According to Richards, the encryption key was altered in some way that makes it unable to decrypt the data. Richards does not expect the results to be recoverable.

“For all of us running, it's disappointing,” said Joe Arasin, a candidate for student body vice president. “We're disappointed the results aren't available right now.”

During the joint meeting of Student Senate and GSA, originally scheduled so the bodies could validate the elections, candidates expressed concern that holding elections in the fall would be unfair, since graduating seniors would be less likely to vote.

“It's really a fitting culmination to this year's elections process,” student body presidential candidate Sean Weinstock stated in an e-mail. “The voters must feel that the system is intact if we are to ever take student government seriously.”

“I just hope that people in the community won't get apathetic towards this process,” said Alan Eaton, a current Student Senator and fellow presidential candidate. “I'm really proud that almost 2000 people voted in the first place, because it shows that people are interested.”

Between Monday morning and Wednesday at 1p.m., when the election was concluded, voters cast 1933 ballots online.

Until a new election takes place, Williams, a Ph.D. candidate in history, will be responsible for the operation of the executive branch of student government.

"I appreciate the great vote of confidence that Beth and Joel have shown by identifying me as their choice for interim student body president," Williams wrote in an e-mail.

"A number of difficult questions need to be answered quickly. I have every confidence that the Elections Board, Student Senate, and Graduate Student Assembly are capable of finding equitable solutions to the problems presented by this unfortunate situation."

During the summer months, it is the vice president for finance who tends to have the most active role. Williams may choose to assume the role or appoint an interim from the student body.

According to the student body constitution, students must submit a petition with 100 signatures to be considered for the role of interim student body president or interim student body vice president for finance, but student government officials waived this requirement.

A revote will likely take place in September, in which case those eligible in the last election will be eligible to vote in the fall. No new student would be able to vote.

1 comment | Post a Comment
Comment Ian Fette
May 02, 2007 at 11:00 PM

Am I the only one who is disheartened by the very poor image created by this whole election? I'm not talking about the possible disenfranchisement caused, or the lack of faith in representative government or anything like that - what I'm talking about is how such a simple thing could have been botched so badly at the world's best university for computer science. (Not to call e-voting in the general population simple, but come on - there's already an authentication/authorization system in place at CMU, the rest is quite simple.) I mean honestly, who was in charge of running these elections?

First, the elections had to be postponed because supposedly the server couldn't handle the load. Excuse me? Only 1900 votes were cast over a period of two days, and that was too much load? Was this running on a 486, or was the code really that bad? A static form was being displayed, and two values were being stored in a table in some database... that's hardly load intensive. And then to have lost the private key? (The article was rather light on actual details and, from a technical perspective, not at all satisfying, but I'm assuming that's what was meant by the article. If I'm incorrect in that assumption, I apologize, but the article could have been a lot clearer.) Why wasn't the public/private keypair created under the supervision of appropriate authorities (i.e. GSA president, Senate president) and then stored in multiple locations? (i.e. burn it to a CD-ROM and shove it in a doubly-locked (physically) box, give 1 key for the box to GSA president and 1 key for the box to the Senate president, or something like that, and store another copy off site). The fact that apparently no backups of the private key exist is rather sad. Backing up important data is something that we preach every day. Sure, there should have been adequate security on the box, and sure nothing should ever get corrupted, but things happen and that's why we teach people to make back-up copies.

Pardon me for venting, but I know that there were a lot of people who put a lot of effort into their campaigns. The fact that the technical elements of the election were so poorly conducted does a great disservice to those people who took a great deal of time out of their lives to run, and I can tell you that I likely will not vote in a September election. (And why delay until September instead of holding a vote next week? Alas, that's a topic for another post...)

Important: The Tartan provides these discussion boards to encourage discussion about the topics we report. The views and opinions expressed in these comments are those of their authors, and do not reflect the opinions of The Tartan.