2019 polls source code passes foreign firm review: Comelec spokesman

Christian V. Esguerra, ABS-CBN News

Posted at Dec 06 2018 06:13 PM

2019 polls source code passes foreign firm review: Comelec spokesman 1
Joselito Gerardino from COMELEC assists a student on how to use the Vote Counting Machine (VCM) during the Ideas That Matter (ITM) Special Election forum at the University of Santo Tomas, Monday. The event aims to educate young voters on the importance of the May 2016 elections. Basilio H. Sepe, ABS-CBN News/File

MANILA — The Commission on Elections is set to proceed with the assembly of the overall software system to be used in next year’s midterm elections, its spokesman said Thursday. 

International source code review for the automated election system (AES) has been completed, allowing the poll body to proceed to the software-building phase, said director James Jimenez. 

The review process scrutinized each of the components of the AES, he said, to ensure that they would function “as planned and that there are no malicious instructions embedded in the code.”

Source code refers to the plain text version of a software that will be used for the automated elections. It is required by law to be available for review by any interested party or group.

Jimenez said the software assembly phase, called “trusted build,” would be streamed live on Facebook on Dec. 14.

It will be held in Alabama in the United States where accredited software testing company Pro V&V conducted the source code review.

“This is important for the credibility of the system because it provides the assurance that the system is not made from shady components, that all the components have been properly reviewed and cleared,” he said.

The system coming out of this build phase will produce a unique digital fingerprint “against which all components of the AES will have to be measured,” he said.

This means that the digital fingerprint for vote-counting machines (VCM) should match the one generated during the “trusted build,” he said.

“In this way, we know that the VCM runs on the program created by the trusted build,” Jimenez said.