Without using the phrases "risk-based audit" or "software independence", Rivest makes the important point.
MIT computer science professor Ron Rivest, who has studied the security and privacy of voting systems, says that these systems should be designed to work even if the software underneath is somehow flawed. "Do you have to trust the software in order to trust the election results?" he asks. The ideal situation, Rivest says, is one where the presence of bugs or malware cannot affect the outcome of an election.
The ten percent audit of VVPAT's ordered by the SoS in the recertifications, and largely ignored by the counties, is a more serious issue.
And so is this disturbing information revealed in the article...
One of Bowen's biggest worries about November's presidential election isn't the voting machines being used but the databases in which voter registration information is stored. A number of states recently introduced a requirement that names on drivers' licenses and voter registration records match exactly. Bowen says this could unfairly disqualify some voters, because the software used to compare records often cannot account for typos. For example, a computer may not recognize that "OM'alley" is a typo of "O'Malley." In 2006, Bowen says, exact match requirements prevented more than 20 percent of Los Angeles County voters from being properly placed on voter registration lists.