Comelec to open up automation source code

The Commission on Elections (Comelec) promises to make publicly available the source code of the automation software it will use in next year’s national elections.

But the poll body said it will need to have the source code certified first by an international organization.

Comelec chairman Jose Melo said the source code--or the program instructions that will define how the poll machines will operate--needs to be accredited first by an international certification body as prescribed by law before it becomes available for final review by interested IT groups, political parties and poll watchdogs.

Melo made the statement after several groups continuously prodded Comelec since last week to make the source code publicly available, saying the code review would take about three months to finish to ensure the program is sturdy against hacking.

The software will power the precinct count optical scan (PCOS) system Comelec will use next year. Smartmatic-Total Information Management will provide the system as the winning bidder.

Under the law, the Technical Evaluation Committee (TEC), a body created by Republic Act 9369 or the poll automation law, shall certify through an established international certification entity chosen by Comelec that the poll automation system is operating properly and securely according to provisions of the law, not later than three months before Election Day.

“We will make the source code available for review once it is customized and gets certified sometime in February,” Melo said.

“The source code review is a transparency measure to make sure the operating instructions are free of malicious programs that can cause electoral fraud and is stored in escrow [with Bangko Sentral ng Pilipinas],” he added.

Meanwhile, Ateneo de Manila professor Renato Garcia, who sits as consultant for the poll body's project management office (PMO) for the 2010 elections, said they have written letters to at least five of the international software certification bodies that can conduct a “formal, thorough review” of the poll automation system software.

“One of the five international software certification bodies, have already expressed interest to do the formal review of the customized automation software. This body, we found out, has been conducting a software review for Canadian-based Dominion, the software provider for Smartmatic's poll machines,” Garcia said.

“If we can get them, the certification will be easier and faster,” he added.

Comelec urged to adopt cyber security amid hacking fears

A computer expert said Sunday that there is need for the Commission on Election (Comelec) to adopt cyber security amid fears of internet hacking as the Philippine is set to go for poll automation this 2010.

Speaking at the Balitaan sa Tinapayan news forum held in Sampaloc, Manila, computer expert Dante Mara raised the concern of hacking because the system to be used by consortium of Smartmatic-Total Information Management Corp. (TIM) may be susceptible to hacking of internal data system.

The Smartmatic will supply the precinct count optical scan (PCOS) machines that the Comelec will use in automating the 2010 national elections.

Mara stressed that the Comelec should opt for a closed loop network that would not be open to outside influences.

“There is no assurance from Comelec and Smartmatic that there will be no problem on mode of connectivity and the outside influences as they will be using worldwide net,” he said.

“The Smartmatic will be using overlaying network using satellite so the data will be transmitted to the main from regional and provincial. The system is good but many factors can affect the transmittal like the clouds, the rains and most importantly the power supply. What if they encounter powers supply interruption?,” he asked,

Mara said another concern is the risk of hacking because Smartmatic will be using worldwide network (internet) as it is open to interference worldwide. “This is the reason why the Comelec should adopt cyber security and come up with a system for auditing,” he said.

Retired police general Virtus Gil, former Western Police District (WPD) director and is now into cyber security agency, echoed Mara’s concerns, saying that the he read the contract of Smartmatic with the Comelec and it did not touch much of the cyber security of the system.

Mara also said the Congress needs to allocate additional P7.2 billion for the cyber security. “This is also for the future of the government. In fact the system to be used should be owned by the government to avoid outside influences,” he said.

Meanwhile, Comelec Commissioner Rene V. Sarmiento Sunday allayed fears that the automated election system can be hacked, the vote results altered during electronic transmission and the system programmed to favor specific candidate or group of candidates, even as he stressed that Republic Act 9369 or the Poll Automation Law squarely addresses these concerns.

In an 11-page study which he submitted to the Comelec en banc headed by Chairman Jose A.R. Melo coinciding with the publication of the statement attributed to Issues and Advocacy Center and the National Computer Center that the Philippine Automated Poll System can be hacked, Sarmiento cited at least 10 safeguards contained in RA 9369 which were precisely crafted to prevent hacking and abort automated cheating and tampering of results during transmission.

Sarmiento said these safeguards were formulated by lawmakers with the help of inputs from the private sector and information technology (IT) experts from nongovernmental electoral reforms groups who appeared during the public hearing on the legislative measure.

He said among the safeguards are the Source Code Review by any interested political party or groups and Field Testing of Precinct Count Optical Scan (PCOS) machines followed by a mock election event in one or more cities or municipalities. RA 9369 also provides for the examination and testing of PCOS by political parties and candidates or their representatives, Sarmiento pointed out.

Election websites raise privacy concerns

If radio, TV, print and multimedia ads weren't enough, potential candidates for the 2010 elections are taking a page from US President Barack Obama's successful 2008 campaign and launching their own interactive websites.

Some of the politicians who have their own websites are Sen. Loren Legarda (www.lorenlegarda.com), former president Joseph Estrada (www.erap.com), Sen. Francis Escudero (www.chizescudero.com), Sen. Manuel Roxas (www.marroxas.com) and even Sen. Jamby Madrigal (jambymadrigal.com).

Two websites, however, are offering more than just information about the candidates.

The Akalamo website (www.akalamo.com) of Sen. Manny Villar is gaining a lot of hits after it offered to raffle off free cellphones.

To become eligible for the prize, one has to sign up their name, e-mail address and cellphone number. The sign-up page also indicates that the website owner can use the information and contact details.

The website also encourages users to post their photos online.

Another website maintained by Metro Manila Development Authority chairman Bayani Fernando is awash in the MMDA chief's favorite blue and pink colors.

It has an interactive game -- "Be The Chairman -- that allows users to solve various problems such as traffic and sidewalk obstructions. Each finished challenge awards users "pogi points" while animated photos of the MMDA chief congratulate you for a job well done.

At the end of the game, users are asked to submit their name, e-mail address and contact number to make their entry valid. Two users who get the highest points will get laptops worth P16,000 to P24,000.

Camille Madrigal, spokesperson of akalamo.com, said the prizes are meant to encourage users to become more active in the site. She said the user info will be used to send updates and invitations to events sponsored by akalamo.com.

IT expert Jerry Liao, however, said the public should be careful about giving information online. He said the information could be used to build a database that would be used for spam e-mails and text.

"Pag nag-sign up ka at binigay mo e-mail add mo at cell number mo, kapareho na yun sa pagbigay sa kanila ng permission na padalahan ng mga campaign or promo messages. In essence they are building a massive database," he said.

The National Telecommunications Commission said the website promos are legal since the campaign period has yet to start.