Doubting Electronic Voting

twitter writes "The NYT is raising the alarm on electronic voting. After citing expert opinion on the need for a paper trail, they then quote election officials and vendors who dismiss that opinion as the ignorant work of dreamers. The reporter titles his article, 'To Register Doubts, Press Here' and seems less than convinced."

Comments

It's not about electronic vote casting.

[s20451]

The best idea is not electronic vote casting, it's electronic counting. The most recent Toronto mayoral election used a ballot similar to those used in electronic test-scoring, where you use your HB pencil to fill in a blank. The votes were all counted within a couple of hours after the polls closed.

If you wanted to avoid confusing the easily confusable, you could have a touch-screen system that prints a paper ballot, with the blanks ideally positioned for the electronic counters. Efficiency and a paper trail.

Re:Yeah right

[Dr. Bent]

Unfortunately, the US government runs its own elections, rather than a truely impartial third party.

"a truely impartial third party"? Like who? What organization is responsible enough to oversee the elections of the most powerful nation on Earth and yet has no opinion one way or another on how they should go.

There is no "impartial third party". The U.S. electoral process isn't perfect but handing it over to Deloitte and Touche, or the U.N. or any other supposedly 'impartial' body is just going to make it worse. The best way to keep it legit is just to make the counters accountable.

Electronic voting and air gaps

[Millennium]

The only way you can possibly make electronic voting machines acceptably secure is to not network them at all. This isn't so much a measure to prevent hacking as it is a measure to control the amount of damage a hacker can do; if only one machine at a time can be hacked, then damage remains localized. Here's my idea for such a system:

• The user shows up at the polling place, and is given a token, which will be used to operate the voting machine. The user then goes to one of several voting booths, which can be chosen at random.
• The user presents the token to the machine, which marks that token as used (such that it can never be used to operate another machine). Only then is the user allowed to begin the voting process.
• The user chooses a language for onscreen text and voice instructions. Ideally, instructions should be phrased in such a way that they can be reused between elections.
• The user is presented with a list of candidates, including names and pictures. One by one, each candidate is highlighted; as this occurs, a voice sample is played of the candidate saying his or her name. This is important, because it allows for a person to recognize the proper candidate based on written name, picture, spoken name, and sound of voice. This is pretty much everything that can reasonably be done to ensure that a person knows which candidate is being voted for.
• The vote can be controlled in two ways: by touching the candidate's name onscreen, or by pressing a button as that candidate's name is being read. This latter is a measure to accommodate blind voters., or others who could not effectively use a touch screen.
• Each vote is confirmed twice, onscreen and by voice -again using the sample of the candidate- to ensure that the voter is absolutely certain that this is the proper choice.
• Once the voting process is completed, a paper ballot is printed for the user (there will be strong warnings onscreen and in voice to ensure that the user understands to take the ballot). This ballot is marked with a barcode stating what machine it came from, but no information which could identify the user (this is why it is important to let the user pick a booth at random). The purpose of this barcode is so that if a machine is known to be tampered with, votes cast using that machine can be tracked down.
• The ballot is then taken by the user to a ballot box, where it will be shipped to the usual facilities for counting purposes.

The advantages to this system are many:

• Every possible method of recognizing candidates is taken into account. This won't totally eliminate confusion -some people are so monumentally stupid that nothing will get through to them- but this minimizes that problem.
• There is a paper trail which can be consulted. The value of this cannot be overestimated.
• There is no single point of failure. Tampering with a single machine cannot in and of itself damage any other machines, so the number of votes which must be considered suspect due to machine tampering is minimized.
• Counting is still done by machines, which are not prone to bias as humans are, but because the ballot os filled out by machine, the process is somewhat more controlled.

And one final note, particular to US elections: poll results should be considered classified information until the polls are closed in all fifty states. Timezones being what they are, this exit-poll crap is causing election results in East Cost states to affect West Coast states, however slightly, and that needs to be dealt with. Each state's results must be completely independent of the results of any other state, and measures need to be taken to ensure that.

Why reliable electronic voting will not happen

[targo]

The main reason is actually political, not technical. Imagine a world where we have really foolproof and very convenient electronic voting (like everybody just voting from home over the Internet, provided that a good and secure protocol is invented for it). Elections would be hundreds of times cheaper because of lesser staff and organization costs. As a result it would become possible to have people vote for many more issues than just who is going to be a president (think Switzerland where almost everything is decided by popular vote). We would never have DMCA or any of the other strange laws pushed through by special interest groups and hurting the general public. Congress would suddenly lose 90% of its importance, becoming just a law-drafting institution without too much decision power.
Obviously this is something that today's rich and powerful would never want to happen, and they would fight long and hard before giving any of this power up.