Slashdot Mirror


Inside Electronic Voting Machines

Alien54 and several other people wrote in about a couple of stories published in a New Zealand webzine: an examination of an electronic voting system, and some less interesting political speculation about it. Diebold voting systems are in fairly wide use, and apparently provide zero security to keep election officials from writing in whatever election totals they want.

84 of 398 comments (clear)

  1. First vote! by Anonymous Coward · · Score: 5, Funny

    We should have a slashdot poll about this.
    And then rig the results. :)

    1. Re:First vote! by ethx1 · · Score: 3, Funny

      Hey! We are not all in Florida you know.

    2. Re:First vote! by Anonymous Coward · · Score: 5, Informative

      > Hey! We are not all in Florida you know.

      At least in Florida, no one was encouraged to vote the DAY AFTER the election.. the final "unofficial" recount had Gore winning by a wide margin, except for one thing...

      Ever wonder how in 2000 there were an unusual amount of "Florida military ballots" that went through the postal system LATE and WITHOUT POSTMARK?

      That normally does not happen (especially since mail ballots are sent EARLY and mail can't be routed without a postmark).

    3. Re:First vote! by Detritus · · Score: 4, Funny

      Sorry, the City of Chicago has been granted a "business process" patent on fixing elections.

      --
      Mea navis aericumbens anguillis abundat
    4. Re:First vote! by jacquesm · · Score: 3, Insightful

      right, but it wouldn't make much difference to the crowd here, as much as rigged elections in the real world make (none).

      Think about it: How many people would it need to care about rigged elections in order for it to be brought to light ? There is lots of evidence that the 2000 elections were less than proper, but so far there has been very little response to these allegations. A normal reaction would be absolute outrage by ALL politicians and an inquiry that brings up every last bit of evidence. The fact that this has not happened shows that politicians are happy with the status quo (two parties, for outsiders absolutely indistinguishable that exchange the baton every four to eight years).

      As if the only subjects you can differ on are abortion, healthcare and whether or not we should endorse a government religion.

  2. I need my meds.. by grub · · Score: 4, Funny


    [tinfoil_hat]In the near future we will be given ballots containing RFIDs which will tie the voter to the vote. mwahahahaha![/tinfoil_hat]

    --
    Trolling is a art,
    1. Re:I need my meds.. by morcheeba · · Score: 2, Informative

      They somewhat do this in developing countries - they dye your thumb in an indelible ink so you can't vote twice (at least on the same day). Of course, guerillas who don't want anyone to vote tend to cut those thumbs off... and it isn't just so that the peasents can try to vote again

  3. Hanging Chads by DrWho520 · · Score: 3, Interesting

    Suddenly hanging chads aren't so silly anymore...

    --
    The cancel button is your friend. Do not hesitate to use it.
  4. Of course by DNS-and-BIND · · Score: 4, Funny

    It's not a bug, it's a feature!

    --
    Shutting down free speech with violence isn't fighting fascism. It IS fascism!
  5. good website about this whole topic by Chef+Ramen+Noodle · · Score: 4, Informative

    http://www.blackboxvoting.com i suggest you check it out.

    --
    --CRN
  6. I'll take 500,000 by tbase · · Score: 2, Flamebait

    Can you drop ship them to every voting precinct in the U.S. and send the bill to 1600 Pennsyvania Ave.? Thanks! GWB ps- is a check from Halliburton ok?

    --

    666-607: 6th floor apartment of the beast
  7. Abuse potential by Roark+Meets+Dent · · Score: 5, Interesting

    It should be required that machines use open-source code, and some mechanism be provided for public inspection of the machines to verify the code hasn't been altered, some sort of checksum mechanism.

    1. Re:Abuse potential by Knife_Edge · · Score: 3, Interesting

      No kidding, these things have the potential to be a disaster for the democratic process, enabling voting fraud on a scale never before seen. If they ever try to get such devices in my district without making them open and easily accountable, my congressional district is going to hear holy hell about it from me. I almost never care about politics. I don't write letters to my elected officials or to the editor. I don't donate money to political campaigns or consider myself a member of either party.

      But if democracy is going to be done away with through the adoption of flawed technology, I feel I have no choice but to act. Luckily, I believe budgetary constraints are preventing these 'upgrades' in my area.

    2. Re:Abuse potential by teamhasnoi · · Score: 3, Interesting

      This article talks about how the lack of inspection of the votes and machines is unconstitutional. Interesting read, with case referrences.

    3. Re:Abuse potential by chaosmind · · Score: 4, Informative
      I would go that far. I have to agree with Knife_Edge that OSS for voting systems should be mandatory--this isn't about "companies making a buck," this is about establishing democratic vote-counts.

      As our friend the Peruvian senator pointed out, in a real democracy the people would have access not only to the raw data of elections but also to the software used to compute the outcome of said elections (amazingly he said this before our 2000 election debacle).

      Anyone have any idea what sorts of physical voting mechanisms the Peruvians use to interact with those OSS voting systems?

    4. Re:Abuse potential by gokubi · · Score: 4, Insightful

      No kidding, these things have the potential to be a disaster for the democratic process, enabling voting fraud on a scale never before seen.

      Except in Florida.

      --
      I'm much funnier now that I'm a subscriber.
  8. Diebold. by FreeLinux · · Score: 4, Insightful

    This should be of no surprise to anyone familiar with Diebold. You may have noticed that these guys are the makers of bank ATMs, among other banking and security equipment. Most of these ATMs, especially the older ones, use only 56bit encryption. 128bit is available in the form of a ridiculously expensive chip which also costs a few hundred dollars labor to have a tech come out and stick it in. Most banks, being the biggest cheap-skates in business, are unwilling to spend the money for these upgrades so, many of the ATMs that you regularly use likely have 56bit encryption at best.

    1. Re:Diebold. by cheezedawg · · Score: 2, Informative

      8 byte key with 1 parity bit per byte (7 bits * 8 = 56). That is what DES uses.

      --
      "The defense of freedom requires the advance of freedom" - George W Bush
    2. Re:Diebold. by homer_ca · · Score: 5, Insightful

      As bad as ATM security might be, they're still better than voting machines in one way. There's a paper trail. They print a paper receipt for the user and print an internal receipt for its own records. IMHO a paper trail is even more important than open source or code review.

  9. Electronic voting in U.S. by grennis · · Score: 5, Interesting
    Here in Georgia we had an electronic voting summit in Savannah and examined products from eSlate, AccuVote-TS and the iVotronic.

    The short story is that they were all very flashy and glitzy, but all had severe problems with security and/or usability. We eventually decided to run a pilot program in last year's off-year election and try out 5 of the most promising machines in a real-world election. The final winner will be used across the state in 2004.

    No more hanging chad, but I think we are going to have a whole new set of problems to deal with.

  10. Does it really take a computer... by el-spectre · · Score: 5, Funny

    ... to tabulate the votes of the supreme court? Those are the votes used to selec..., er elect the pres...

    --
    "Faith: Belief without evidence in what is told by one who speaks without knowledge, of things without parallel." - A.B.
  11. Text here: by Dinosaur+Jr. · · Score: 5, Informative

    I don't know if I am supposed to do this but I am sure I will find out soon enough... ;)

    Text:

    Bigger Than Watergate!

    How To Rig An Election In The United States

    Column: C.D. Sludge

    07/08/03: (Scoop) The story you are about to read is in this writer's view the biggest political scandal in American history, if not global history. And it is being broken today here in New Zealand.

    This story cuts to the bone the machinery of democracy in America today. Democracy is the only protection we have against despotic and arbitrary government, and this story is deeply disturbing.

    Imagine if you will that you are a political interest group that wishes to control forevermore the levers of power. Imagine further that you know you are likely to implement a highly unpopular political agenda, and you do not wish to be removed by a ballot driven backlash.

    One way to accomplish this outcome would be to adopt the Mugabe (Zimbabwe) or Hun Sen (Cambodia) approach. You agree to hold elections, but simultaneously arrest, imprison and beat your opponents and their supporters. You stuff ballot boxes, disenfranchise voters who are unlikely to vote for you, distort electoral boundaries and provide insufficient polling stations in areas full of opposition supporters.

    However as so many despots have discovered, eventually such techniques always fail - often violently. Hence, if you are a truly ambitious political dynasty you have to be a bit more subtle about your methods.

    Imagine then if it were possible to somehow subvert the voting process itself in such a way that you could steal elections without anybody knowing.

    Imagine for example if you could:

    - secure control of the companies that make the voting machines and vote counting software;
    - centralise vote counting systems, and politicise their supervision;
    - legislate for the adoption of such systems throughout your domain, and provide large amounts of money for the purchase of these systems;
    - establish systems of vote counting that effectively prevent anybody on the ground in the election - at a booth or precinct level - from seeing what is happening at a micro-level;
    - get all the major media to sign up to a single exit-polling system that you also control - removing the risk of exit-polling showing up your shenanigans.

    And imagine further that you;

    - install a backdoor, or numerous backdoors, in the vote counting systems you have built that enable you to manipulate the tabulation of results in real time as they are coming in.

    Such a system would enable you to intervene in precisely the minimum number of races necessary to ensure that you won a majority on election night. On the basis of polling you could pick your marginal seats and thus keep your tweaking to a bare minimum.

    Such a system would enable you to minimise the risks of discovery of your activities.

    Such a system would enable you to target and remove individual political opponents who were too successful, too popular or too inquisitive.

    And most importantly of all, such a system would enable you to accomplish all the above without the public being in the least aware of what you were doing. When confronted with the awfulness of your programme they would be forced to concede that at least it is the result of a democratic process.

    How To Rig An Election In The United States

    So how would such a system actually work?

    Well one way to run such a corrupt electoral system might look like this.

    - Each voting precinct (or booth) could be fitted with electronic voting systems, optical scanning systems, punch card voting systems or the more modern touchscreen electronic voting machines;

    - At the close of play each day the booth/precinct supervisor could be under instructions to compile an electronic record of the votes cast in their booth;

    - They might print out a report that contains only the details of the total votes count fo

  12. Re:confusing by adamsan · · Score: 3, Interesting

    "Then we can get to work on helping the rest of the world with their troubles."

    Maybe if you looked outwards more, at countries who can already run a fair election for example, then p'raps you could get around to helping us all out much quicker!!!

  13. Eletronic voting in the real world by dark-br · · Score: 4, Informative

    The Brazilian government converted to fully electronic voting in 2000, deploying over 400,000 kiosk-style machines. Although our elections are often compared to those in the US, they are actually quite different because the voters cast ballots by using numbers assigned to each candidate (this is necessary because of a high degree of illiteracy here).

    Concerns regarding accuracy of the self-auditing systems caused the legislature to mandate a retrofit of 3% (some 12,000 machines) to produce a paper ballot that the voter could peruse and deposit in a box for recount (the first large-scale use of the "Mercuri Method" -- described more fully here "A Better Ballot Box?").

    These paper-trail machines were successfully used during the October 6, 2002 election, and it is hoped that their other machines will eventually be retrofitted as well. Further discussion on this subject can be found in the article: "The importance of recounting votes" by Michael Stanton (originally published in Portuguese as "A importância da recontagem de votos", on the website of the Agência O Estado de São Paulo, November 13, 2000, http://www.estadao.com.br/tecnologia/coluna/stanto n/2000/nov/13/194.htm). There is also an informative website: Brazilian Electronic Voting Forum by Amilcar Brunazo Filho.

    1. Re:Eletronic voting in the real world by pentalive · · Score: 2, Interesting

      A voting machine should produce 4 ballots, one you put in the slot, one you keep, and two you can send to "independant" counting agencies. The ballot itself will have a serial number assigned so the independant agencies can report their tallies to each other and come up with a separate vote count.

  14. Need paper trail by El · · Score: 5, Interesting

    Any computer data can be quickly and easily changed. The best solution I can think of is to print out two paper receipts for each vote, one to go to the election commission (for manual recounts) and one to go to the voter. Each receipt would contain a random code which the voter could then type in on a web site to verify their choices have not been changed. Of course, most people wouldn't bother to verify, but it only takes one person to catch vote fraud.

    --

    "Freedom means freedom for everybody" -- Dick Cheney

    1. Re:Need paper trail by garcia · · Score: 3, Funny

      with less than half the population deciding it's important to vote, I don't see how it would really matter.

      Find 99% of 18 year old's SSNs, enter into voting machine, instant winner.

    2. Re:Need paper trail by jeti · · Score: 2, Insightful

      How can the voter verify that his number is unique?

      And how can you assure voting is anonymous when the
      machine can keep the votes ordered by time and it's
      easy to note when a voter verified his identity?

    3. Re:Need paper trail by ianezz · · Score: 3, Insightful
      The best solution I can think of is to print out two paper receipts for each vote, one to go to the election commission (for manual recounts) and one to go to the voter.

      Ok for the receipt to the commission, but I'm not completely sure about the receipt to the voter: let's say that some days before the elections someone comes to you telling how you should vote, "or else". And he requires that after the elections, you show him a proof that you actually voted as you were told.

      This went so far in some areas of Italy that on the last (regional) elections the usage of photocameras and videophones were explicitly forbidden in the voting booth. And yes, someone actually tried anyways and was discovered (and his vote invalidated).

      So, in some way, being unable to prove to someone else how you voted is not entirely a bad idea.

      (of course it can be objected that the nasty guys could come after you anyways if the result of the elections is not the expected one, regardless of how you actually voted...).

    4. Re:Need paper trail by reuel · · Score: 2, Insightful

      In the US (and other places, too!) there's this thing called a "secret ballot". A paper receipt that can be used to verify the actual votes once you've left the polling place can also be used by thugs to make sure you voted the way they wanted you to.

      Any verification scheme has to be contained within the polling place to avoid this (very real) problem. We depend on having two election officials present, typically from different parties, to prevent systematic voter fraud.

      --
      [place clever signature here]
  15. This article raises an excellent point by ikewillis · · Score: 5, Interesting
    The primary drawback of electronic voting systems is that they aren't automatically self-documenting. Hardcopies of all electronic votes could be produced, however the act of punching a card is much harder to do surropticiously than printing a modified or forged vote to a printer.

    The only solution I can suggest for an all-electronic voting system would require extensive use of cryptography. Every voter would have to register a public key and every vote would be cryptographically signed. This would require a database of public keys outside of any political influence and it would also require that voters keep their private keys secure, both of which are enormous problems.

    Given these drawbacks, an antequated punchcard system doesn't seem quite so bad...

    1. Re:This article raises an excellent point by GreenBugsBunny · · Score: 2, Interesting

      Or...

      We could use stand-alone systems with a touch screen. Once all of the selections are made, have a 'confirm selections' and print a hard-copy that is automatically put into a sealed tray.

      By sealed, I mean that voters have no access to it, so the officials running the booth have to collect the printouts occasionally. It could even remain locked until a certian number of printouts are collected, say 100, to help ensure anonyminity (yeah, I'm pretty sure that's spelled wrong). There could also be a timer to unlock the tray once the election is over, since the last batch of ballots probably won't be an even 100.

      Just because the booths are electronic, it doesn't mean they have to be networked...

  16. Plenty of Security by kovacsp · · Score: 2, Interesting

    There's plenty of security preventing people from changing the results. Its called exit polling. If the vote tallies are wildly different from the scientific exit polling done by independent 3rd parties, then I'm sure a full investigation would follow.

    They could certainly be abused, however, in smaller state and local elections where a small handful of votes can make a huge difference.

    1. Re:Plenty of Security by graxrmelg · · Score: 4, Interesting

      Vote tallies have been different from exit polling in recent elections (that's one of the reasons people were looking at Palm Beach County), and what has it gotten us? Besides, in 2002 we had almost no exit polling because of the convenient demise of the Voter News Service. Exit polling is hardly a solution to flawed electronic voting systems.

    2. Re:Plenty of Security by GFW · · Score: 4, Informative

      There's plenty of security preventing people from changing the results. Its called exit polling.

      You're forgetting that the exit polls declared Gore the winner in Florida, by a pretty good margin. However, the *official* ballots told a different story, mostly because of all the accidental Buchannan votes. So without an audit trail, vote riggers could just say "Gosh, I guess those people reporting their votes to the exit pollers were mistaken or lying."

  17. The US military wants to use windows by karl.auerbach · · Score: 4, Interesting

    The US military wants to make sure that US servicemen/women overseas can vote. That's not a bad thing and there is a US law that requires this.

    But there is a bad thing - the system they are promoting runs on MS Windows - including Win 95/98 - using Internet Explorer (5.5 and up) and Netscape.

    Somehow they have in their minds that if they run HTTPS and require anti-virus software that the machines will be secure enough so that votes made through those machines won't be buggered.

    Oh, and did I mention that the voter registration occurs through the same machines and same web-browser/https mechanisms?

    Seems to me that this is a recipie for disaster - I don't consider any operating system safe from tampering, particularly none of the MS products. And these machines will likely be shared by many people, configured by DHCP (itself a security risk), perhaps with programs being loaded over insecure nets from insecure file servers, and crossing the internet via web proxies, "transparent" web caches, WCCP, and who knows what else.

    This could make Florida 2000 look like a picnic.

  18. Re:So? by Hex4def6 · · Score: 2, Insightful

    Except for the fact that if you speed and don't hit anyone, then no-one is affected. If you DO hit someone, there is proof, and you are then punished for it. Rigging the voting though will affect people anyway you cut it, however the PROOF that you rigged it is a lot harder to find.

  19. Re:Solve all voting machine problems by bofkentucky · · Score: 4, Informative

    I hope you are kidding but, the 1965 VRA prevents literacy exams, and the USSC has upheld it as Constitutional

    --
    09f911029d74e35bd84156c5635688c0
  20. Commodotize Voting Machines by Soong · · Score: 4, Insightful

    Make a public domain design&software for a voting machine. Get five companies to build them. No one company can rig the election.

    My only big design point is Dual Receipt, like a credit card transaction. Fast electronic count, paper count for them, paper count for me.

    --
    Start Running Better Polls
  21. Some observations by binaryDigit · · Score: 4, Interesting

    Their article is interesting, but a bit misguided IMNSHO. First they harp on the three sets of ledgers. Well what's the big diff. They say that this somehow allows more leeway to fudge, well actually it doesn't. The fact is that you have to know that there are three sets and exactly which sets of reports get their data from which sets (a very lame attempt at security thru obscurity?). Having a single ledger means that you only have to go to a single place to mess with things.

    But the biggest problem with there report is that they spend a lot of time talking about essentiallly one issue, that the tables are available for anyone with the password to edit and manipulate. There doesn't seem to be any type of tiered access and because they use access, a TRUE audit trail can not be created.

    I would think that a voting system would be important enough to warrant the extra time to create a custom DB that audits absolutely everything to a file/table that can't be touched by anyone but the app (e.g. only the app can add rows and rows can never be deleted). I assume that Diebold was able to use Access because it made their bid lower and the company that actually had a decently secure system was underbid.

    I smell a voter's lawsuit, oh to be a lawyer.

  22. Who needs voting machines? by mkweise · · Score: 2, Informative
    --
    Gentlemen! You can't fight in here, this is the War Room!
  23. What ever happened to the concern? by dachshund · · Score: 5, Insightful
    It amazes me. After the 2000 elections, every expert in the world pretty much agreed that electronic voting technology should not be deployed unless safeguards were added, and they went to great lengths to enumerate those safeguards.

    Three years later, and it seems that equipment manufacturers have managed to blithely ignore every bit of it. And apparently, so have the people purchasing the stuff.

  24. Electronic voting is stupid by TheVampire · · Score: 2, Interesting

    Using purely electronic voting for anything other than informal polls and amusement is very, very dumb. Besides the potential for tampering, there is also the potential failure of the machine in general. ( How'z about a nice big lightning storm hitting and frying all of the machines in a polling station through a power surge. What'll you do, have the election over again? ) After all, one US judge said that the constitution does not state that election results have to be accurate. Just that they *tried* to have a fair election. Funny that he did not define *tried*. If you want to use electronic type systems, it needs to print / punch out a paper ballot of some sort that the person feeds through a reader that displays how the ballot was marked ( to make sure the machine punched it correctly ) then they deposit it into the ballot box, And they keep a numbered receipt that shows who they voted for in each race. The paper ballots are then machine counted a few times to ensure accurate counts. ( Get the same count each time they are checked ).

  25. Re:Solve all voting machine problems by cK-Gunslinger · · Score: 4, Funny
    why not at least require a literacy standard for voting
    Because everyone in the US is affected by US policy, therefore everyone in the US needs to be represented. If illiterates weren't allowed to vote, should they also not be required to pay taxes since they are not represented by lawmakers? Anyway, why stop at illiteracy. Why not require IQ scores of 145+ or high SAT verbals? Or anything that would exclude you from voting. Would you like that?

    Try this cool Slashdot method I've developed:

    1) THINK
    2) THINK AGAIN
    3) POST!
    4) :-)
  26. Re:Solve all voting machine problems by andrewjjenkins · · Score: 4, Insightful

    United States citizens don't have a right to responsibly vote, they have a right to vote. If you open a door for literacy, why not require that people have certain moral standards? Why not require that they not be communists? Why not require that they be conservative or liberal or white or black?

  27. A little inflammatory by indros13 · · Score: 4, Interesting
    On the issue of electronic security, I have to concede that I have little experience. Given these tests, I am concerned that a dishonest person could edit returns and cause problems with an election. This could be particularly problemmatic in counties that use 100% electronic voting, with no paper trail. It's bad enough that the log is so easily hacked without a trace. It would be even worse to have no real recourse.

    Fortunately, as someone who has served as an election judge (working the polls) in Minnesota, I can tell you that these concerns are a little overblown. We use the optical scan machines here, and we submit the precinct detail report (list 1 for those who read the article) to the county electronically and in paper format (3 copies). Additionally, we have all the paper ballots that were filled out by the voters carefully stored in the machines during the voting period, and then mailed to the county in sealed envelopes and signed by all the election judges.

    Not only is the written process pretty fail-safe, but I worked an election where there was a discrepancy between our ballot count (kept as people vote) and the machine count at the end of the day. We hand-counted all the ballots (they were bubble test style, so no hanging chads or dimples) to make sure the count was accurate. Even if someone had hacked the voting machine, there was little chance for them to bust into the voting machine to steal or alter the ballots.

    Additionally, although some nefarious person could hack the machine, I have no idea when they would. Most polling places have a team of election judges present from the time the machine is unlocked until after the results have been transmitted. Judges are not supposed to linger near the voting machine for any length of time. Certainly it's important to implement appropriate safeguards in the software (such as the automatic numbering system that was disabled for the log file), but chances of election fraud due to machine tampering are pretty darn low.

    --
    Under capitalism man exploits man. Under communism it's the other way around.
    1. Re:A little inflammatory by plalonde2 · · Score: 4, Insightful

      But the Diebold machines leave *no* paper trail - there are no paper ballots to check againts. Once the database is tampered with there is no way to reconstruct the voter's intent.

  28. Re:So, why is this insightful? by teamhasnoi · · Score: 2, Insightful
    It's a constitutional RIGHT to be able to vote. Speeding and driving appear nowhere in the constitution.

    More here.

  29. Actually by greechneb · · Score: 3, Informative

    The biggest delay is in the manufacturing and installing of the triple DES 128 bit encryption boards to install. Most ATM service providers have already changed it so that any new ATM has to have the new board installed, and existing ATM's have to be upgraded also. With ATM's becoming more popular, and are popping up nearly everywhere(We have 12 ATM's in a town of 5,000). Makers of the hardware encryption boards are backed up, and the ATM vendors aren't hiring enough bright people to get the work done.

    Most banks are rushing to get security features like this in place, because these are the things that government bank examiners have field days on. Don't blame this on the bank, this is out of their hands.

  30. Who's freedoms? by alfredo · · Score: 2, Interesting

    Yeah, their freedom to loot our treasury, make war worldwide, and reward their rich buddies.

    It did seem funny that republicans in many races made remarkable surges on election day. I wonder why exit polls were suspended during the 2002 election?

    --
    photosMy Photostream
  31. Re:How is this different than with paper ballots? by gurps_npc · · Score: 4, Informative
    But it IS easier to change - a LOT easier to change.

    And a lot easier to forge.

    To stuff a ballot box, you need the right paper, ink, and print format BEFORE the election. This creates a paper trail and gives us time to stop you before you do it.

    It also requires multiple criminals, which may very well turn state's evidence.

    To change purely electronic data, it can be done on the fly, during the election, by one angry man, leaving apparently NO traces, according to the analysis of the machines currently used. And their would be no way to recover the original data.

    The original paper ballots can and DO get checked by hand. To really fix any election that has paper ballots, it is MUCH harder than a pure electron one.

    --
    excitingthingstodo.blogspot.com
  32. OTOH... by Gorimek · · Score: 4, Insightful

    Then again, it would only take one fraudster to falsly claim their vote had been miscounted.

    Also, any system that lets the voter check their vote also lets someone forcing them to vote one way or another to verify that they've done as commanded.

    1. Re:OTOH... by sacrilicious · · Score: 2, Interesting
      Then again, it would only take one fraudster to falsly claim their vote had been miscounted.

      Scrutiny of the system would scale with the amount of interest in it. If ten isolated people in Florida report their votes miscounted, no biggee. If those ten people get their friends to verify their votes as well and there emerges a pattern of claims, an investigation can begin. A single case of claimed miscounting - whether it be genuine miscounting, voter fraud, or senility - need not trigger an investigation.

      Also, any system that lets the voter check their vote also lets someone forcing them to vote one way or another to verify that they've done as commanded.

      A possible solution: while in the voting booth, voter can snapshot any speculative set of votes in the dbase with any associated phrase, such as the phrase "This is my real vote", and "This is truly my real vote". Only one of them is marked as the true vote for tally purposes. A user can retrieve any thusly snapshotted set of votes via the web at any time, but can only do so by knowing the key phrase a priori. Most people will only bother putting in their actual votes, but those with an interest in subterfuge can put in more than one.

      --
      - First they ignore you, then they laugh at you, then ???, then profit.
  33. Re:Solve all voting machine problems by Anonymous Coward · · Score: 2, Informative

    The prohibited literacy test applied to a common practice in the South previous to 1965 in which people of color were required to pass a literacy test. These tests often encluded stating from memory all of the supreme court justices from the beginning of the countriy's history, reading Mandarin Chinese newspapers, and anything else they could to prevent people from passing. Even most Ph.d in English couldn't pass these tests.

  34. Electronic voting in US by KillerHamster · · Score: 2, Insightful

    I'm already not so sure I trust our current election system, and from what I've seen of computer security breaches, I would never trust a computerized system. Cheating aside, it would only take one malicious cracker, a bad hard drive or two, a broken communications line, a power failure, or any one of countless possible catastrophes to ruin the credibility of an election or make it impossible to vote. And there would be no hard copies to recount.

  35. No different than from voting in South Texas by christoofar · · Score: 5, Funny

    Politicians here have to spend lots to get the dead to vote... but they manage to turn out year after year. How failful to their citizenry after they're gone...

  36. Re:Somebody Call Georgia by pmz · · Score: 3, Insightful

    Access databases

    Voting is one domain where Microsoft needs to step aside and let someone else do it right.

  37. Oh My God ... by DogIsMyCoprocessor · · Score: 3, Funny
    This week's sign the apocalypse is upon us -

    (From the article - emphasis mine)

    At the county office, there is a "host computer" with a program on it called GEMS.

    GEMS receives the incoming votes and stores them in a vote ledger. But then, we found, it makes another set of books with a copy of what is in vote ledger 1. And at the same time, it makes yet a third vote ledger with another copy.

    The Elections Supervisor never sees these three sets of books. All she sees is the reports she can run: Election summary (totals, county wide) or a detail report (totals for each precinct). She has no way of knowing that her GEMS program is using multiple sets of books, because the GEMS interface draws its data from an Access database, which is hidden.

    What's next? NASDAQ running off of Access?

    --

    "And this is my boy, Sherman. Speak, Sherman." "Hello." "Good boy."

  38. Re:Wow... by Anonymous Coward · · Score: 5, Interesting

    It doesn't have to be the Republicans themselves. Just people who would benefit from them being in power.

    It may interest you to check campaign contributions from executives at Diebold. They seem to like to give quite a bit of money to the Republicans. Just a quick taste:

    Walden W. O'Dell
    Chairman of the Board, President and Chief Executive Officer, Diebold
    2/14/01 $2,015.00
    RNC REPUBLICAN NATIONAL STATE ELECTIONS COMMITTEE
    12/17/97 $1,000.00
    VOINOVICH FOR SENATE COMMITTEE
    1/30/01 $3,950.00
    RNC REPUBLICAN NATIONAL STATE ELECTIONS COMMITTEE
    8/16/01 $500.00
    VOINOVICH FOR SENATE COMMITTEE
    12/17/97 $1,000.00
    VOINOVICH FOR SENATE COMMITTEE
    6/30/00 $1,000.00
    DEWINE FOR US SENATE

  39. Re:Wow... by alfredo · · Score: 4, Interesting

    Yes, Diebold and ES&S are both closely tied to the Republican party, and have been for a long time. If you look at their campaign contributions for the last election, you will see that everyone that gave, gave only to the GOP.

    Chuck Hagel still owns stock in ES&S's parent company. He has won every election that used ES&S machines to count the votes.

    --
    photosMy Photostream
  40. Idea by pmz · · Score: 2, Interesting

    Why not implement a "paper trail" through punching holes in a metal plate using a laser. Each machine would encode their votes in metal, which would be hard to falsify (the holes will have clear characteristics). The metal plates can then be removed from the machines after voting and kept available for recounts, if needed. Optical scanners could even automate recounts.

  41. Deliberate abuse just one of many factors by Zen+Mastuh · · Score: 3, Interesting

    I found this gem on alternet:

    All races of voters make errors on paper ballots. But in white counties like Leon (Tallahassee), if you make a stray mark or other error, the vote machine rejects your ballot, and you get another ballot to vote again. But in black counties like Gadsden, you make a mistake and the machine quietly accepts and voids your ballot.
    While we may look at hacking or intentional fraud as one of the only (or few) potential abuses WRT electronic voting, we might forget about structural abuse like we've seen in Florida. It makes me laugh when someone comments on a vote saying "the people have spoken". We should just roll dice instead...
    --
    "What is the sound of one belly slapping?"
  42. Source code availability by whitroth · · Score: 2, Interesting

    I was one of those reporting this story. What wasn't mentioned was that the source code availability, at

    They mention that there is some corruption of some files, and offer

    and some are password protected, and recommend:

    Personally, as someone who also does configuration management, I found the Motherlode in Vol 2: cvs.tar, which does, indeed, have the entire cvs source code tree. Note that it is damaged, and about 1/3rd of the 72M of code won't untar (though I suspect that someone with a good familiarity with the format of tarfiles might recover some).

    I *also* found a comment in the archive
    AVTSCE/TSElection/ResultFile.cpp:
    > Modified ElectionArchive to allow user to see all ballot results files
    > that match the election-vcenter-dlverion, thereby allowing restoring of
    > results from different 'machines'.

    Now, there may be a good reason for this...perhaps in testing...but it's not coded as a debugging function, and looks to be in the live code, in what records the tallies.

    mark

  43. Re:Solve all voting machine problems by pkling · · Score: 2, Informative

    Actually the fore fathers had in the constitution that only property owners should be allowed to vote. It wasn't because they wanted just rich people voting. It was to prevent poor people from electing congressmen that would steal money from the rich and disturbed to the poor. Its intent was to make sure capitalism exists, rather than the socialist system we are living in today.

    Just my 2 cents because the goverment takes the rest!!
    Paul

  44. Re:Solve all voting machine problems by NihilSmurf · · Score: 2, Informative

    Regarding taxation without represention: American citizens in DC are not fully represented, even though they pay federal taxes. Just for comparison, DC's population exceeds that of Wyoming.

  45. You might *think* you're joking but... by Aexia · · Score: 2, Interesting

    Look, the republicans are not smart enough to fix an electronic voting machine and the democrats would fix it so that the votes were split between 3 different right in canidates.

    Take a gander at this article from the Hill.

    Chuck Hagel is the Senator from Nebraska. 80% of its ballots are done electronically. It just so happens that Hagel owns a stake in the company(ES&S) that produced those voting machines. And he failed to disclose as much too.

    Searching Google for more information turned up this confidence building bit:

    "ES&S's machines are not tampered with. I've seen them in action. They are, in fact, buggier than hell. The software running them is not very stable code, and that's why there is so many problems with the machines."

  46. Electronic voting machines are a bad idea by ChaosDiscord · · Score: 2, Insightful

    Electronic voting machines are a bad idea. There is NO reason to use them for general voting.

    By electronic voting machine, I mean a machine with a display that allows you to select candidates and keeps the tally electronically. You the voter directly interact with this machine.

    Ultimately there is no way to be 100% certain that the machine is doing what you want. The only real backup is a paper trail for a hand recount. These machines don't offer that. Result: the machine can make up numbers and you'd be hard pressed to tell.

    Okay, so the machine can print out a verification receipt that you also file. That solves the problem. Of course, then what has the machine gained you? The voter still needs to verify that the printout says what it should (and what do you do if it doesn't?). This just adds an unnecessary double check that voters have to worry about.

    You might as well just initially fill out a paper ballot and have a machine scan it. Machine scanned paper ballots can be simple for voters to use, simple for machines to scan, and simple for a hand recount. If a machine doesn't like the ballot it can reject it and a poll staff person can explain the situation ("The machine rejected your ballot. I can force it through, but one or more of your votes might be thrown away. Or I can shred this ballot and give you a new one. If you like, a poll staff member can help you fill out the new ballot.") This is exactly the situation here in Madison, Wisconsin and it works great. The ballots are really simple (there is a two inch arrow with a one in gap in the middle pointing to each candidate's name with, you just fill in the gap on the arrow pointing to your choice). It's easy to fill out. It's trivial for a machine to scan (it's like the fill in the bubble tests, but with much larger, easier to read fill in areas). The big arrows are trivial for a hand recounter to check. You can do occasional random hand recounts to verify that the automatic tabulators are working correctly.

  47. Re:Highly Biased Article by Daniel+Dvorkin · · Score: 4, Informative

    Um ... believe it or not, when a certain group of people does something evil, saying "that group of people is doing something evil" does not constitute "bias" against that group of people. It constitutes telling the truth.

    Ahhh, fuck it, why am I even bothering? Just go and watch Fox News and be happy.

    --
    The correlation between ignorance of statistics and using "correlation is not causation" as an argument is close to 1.
  48. Black Box Voting should be a great book on this. by jbn-o · · Score: 2, Informative

    Bev Harris' Black Box Voting: Ballot-tampering in the 21st Century has much to offer on this, most notably a chance to preorder Harris' book on the topic. I don't have any connection to her or the book, and I make no money from saying this. My awareness of her comes from reading the website and listening to her radio interviews describing her findings and research. She offers compelling evidence on what has gone wrong with Diebold's machines, Sen. Hagel's connection to Diebold, and how votes get lost. She writes in a manner that is accessible to technical and non-technical people alike. I think this book will be another must-read investigative journalism highlight just like Greg Palast's "The Best Democracy Money Can Buy" on the 2000 presidential election in 2000.

  49. Re:Won't Prevent Voter Fraud by davebo · · Score: 4, Informative

    I'll respond to points 2 & 3.

    The reason I've been told that one isn't allowed to ask for an ID to vote is that it would be a violation of the Constitution - specifically, the 24th Amendment.

    Now, you're asking yourself, "why would asking for an ID violate the prohibition of poll taxes?" Think about the time you got (or last renewed) your driver's licence. It wasn't free, was it? Ta-dah! A poll tax.

    So, if you've got to show a photo ID to vote, the state's got to provide a free photo ID. And most states right now are too broke to even think about something like this.

    And as far as point 3 - Purging of the voting roles led to big problems in the 2000 election in Florida. Basically, some voters that shouldn't have been purged were purged. When they showed up to vote, they were told they couldn't. Big disaster. I suspect most places would rather have voting roles with ineligible voters (99.99% of whom won't show up to vote, because they've moved or are dead - and if "they" do show up, it's unlikely anyone will find out about it, thus causing problems for the officials running the election) than voting roles missing eligible voters (who will make a huge stink if they show up and are told they can't vote, which will cause a problem for the officials running the election).

    You can read about the Florida voting list purge here if you wish, and check the mention in the U.S. Commission on Civil Rights' report here.

  50. Re:Solve all voting machine problems by Archangel+Michael · · Score: 2, Informative

    If taxes were abolished, then voting would be .... equal. The masses could vote to enrich themselves.

    As it stands now, the few are at the wims of the majority. If the Few (rich) are at the wims of the majority (poor), the majority will always think that they are entitled to what the Few have, and take it by means of Taxation, and redistribute it according to arbatrary (meaningless, random) guidelines. Want more, vote for the people who will give you more, while taking more from those that have it.

    The only alternative that works is a system of usage fees and voluntary fees. The US government ran for nearly 100 YEARS on this type of revenue.

    The moment this system broke was when the masses realized that they could take from others, give to themselves, and considered it a RIGHT to do so.

    Taxes should be limited (if at all), because Taxes are a form of extortion, theft by threat of violence. Tell me it isn't so, and I will demand you stop paying taxes and see what happens to you.

    --
    Agent K: A *person* is smart. People are dumb, stupid, panicky animals, and you know it.
  51. Response by XiChimos · · Score: 2, Insightful

    If you have dead people voting, then the non-electronic systems aren't perfect. What we can do is realize that both are flawed and just work at improving the systems.

    We could have some hasing system to track where and who votes while still keeping privacy. Other stated ideas are open source code. What about using state-school run voting servers? Just having series of mirrors that politicians can't touch. There are many possibilities out there, so lets refine instead of announcing its failure.

  52. Re:restore Jim Crow, the neat 'n' easy way! by mmontour · · Score: 2, Informative

    And rather than spouting off your conspiracy theories about the election, how about providing some proof. If a crime was committed, where are the investigations and indictments?

    Go here and you can read Greg Palast's version of the story and the evidence he collected (e.g. pages 60 and 61 of the Chapter 1 PDF).

    Where is the public outcry?

    Good question. Ask the American public.

  53. Canadian? by BrainInAJar · · Score: 4, Insightful

    During the 2000 election mess, Canada just happened to have an election. We found out our results about 15 hours after ballots were closed.

    This isn't a troll about Florida, etc. but rather a comparison. America uses punch cards and fancy voting machines and all that stuff.
    Canada, OTOH has a piece of paper. With some names on it, and circles next to the names. you put a mark (check, X, your initials, whatever) next to the person you want to vote for. If there's a mark in more than one (and not just a small pencil mark like a dot. Something that actually looks like you meant to vote for more than one person) or no marks at all, the vote is thrown out. Everything is counted by humans.

    So, why is it that they're looking for new fancy ways to (screw up) voting, when countries like Canada managed to use circa 1868 technology and have a more efficient (based on 2k elections) system?

  54. Digital Magic by pete-classic · · Score: 2, Insightful

    Diebold voting systems are in fairly wide use, and apparently provide zero security to keep election officials from writing in whatever election totals they want.


    Where did the perception that replacing a practical solution with a technical one erased all need for the practical precautions associated with that solution?

    "We used to keep personnel files in a locked cabinet in a locked room, but now we just keep them on a SMB share with a null password."

    "We used to keep voting half-way honest through careful ID and ballot controls, but now it's just Diebold's problem."

    What gives?

    -Peter
  55. "Paper Trail" Bill by tunesmith · · Score: 5, Informative
    I can't believe no one has mentioned this yet - please mod this up if you can. Congressman Holt (D-NJ) has introduced a bill to require paper trails in electronic voting machines. This needs *aggressive* support as it is currently stuck in committee. Please review the bill:

    http://holt.house.gov/issues2.cfm?id=5996

    and contact your congresscritters...

    --
    skkkoooonnnggggkkk ptui
  56. Currently very relevant in Cal by anadem · · Score: 2, Informative

    California's Secretary of State, Kevin Shelley, is currently inviting comments on implementing e-voting...

    http://www.ss.ca.gov/elections/taskforce.htm

    The present proposal is to defer requiring a paper trail until 2007. If you're in California it's important to let him know what you think.

  57. So this is how the security is SUPPOSED to work by pseudoelfling · · Score: 3, Interesting

    Try to reconcile these comments with how the system is secure with the system that was described by Bev Harris... It is full of strawmen. I think my favorite part is that they'll keep it secure by never allowing patches to be applied to the Microsoft Windows OS.

    - begin here -

    Security in the Georgia Voting System
    Britain J. Williams, Ph.D.
    April 23, 2003
    Introduction: The State of Georgia replaced all voting systems statewide with a computer-based voting system. This system, known as a direct recording electronic (DRE) voting system, was first used in the November 2002 election. This voting system, described in the next section, is computer based. As a result, questions have been raised regarding the vulnerability of the system to attacks by hackers and persons attempting election fraud.

    Overall security of any computer-based system is obtained by a combination of three factors working in concert with each other. First, the computer system must provide audit data that is sufficient to track the sequence of events that occur on the system and, to the extent possible, identify the person(s) that initiated the events. Next, there must be in place well defined and strictly enforced policies and procedures that control who has access to the system, the circumstances under which they can access the system, and the functions that they are allowed to perform on the system. Finally, there must be in place physical security; fences, doors, locks, etc.; that control and limit access to the system. This article describes how these factors are incorporated into the election system in the State of Georgia.

    Overview of the Georgia Voting System: The computer-based election system deployed in the State of Georgia is classified as a direct recording electronic (DRE) system. The components of the system consist of the following:

    Standard personal computers running an executable module known as GEMS, Global Election Management System. This system, called the GEMS computer, is used to define the election, enter the candidates and questions, and format the ballots for the voting devices. This computer also accumulates the votes after the polls close and prints various reports and audits.

    Touch-screen voting stations are used for in-person voting.

    Optical ballot scanners are used for absentee and provisional voting.

    Each county election office in the State is equipped with a GEMS computer. This computer is used to define elections and format the ballots for both the touch-screen voting stations and the absentee (paper) ballot scanners. The system also produces files that can be sent directly to a printer to print the absentee and provisional ballots.

    When the election definition is complete, the GEMS system produces PCMCIA cards, also called PC memory cards, which are used to program the touch-screen voting stations and the ballot scanners. One card is produced for each voting station and ballot scanner.
    While still in the county warehouse the voting stations are arranged by precinct and the PC cards are inserted. In the days just before the election a series of tests called Logic and Accuracy tests are conducted. These tests are designed to confirm that the voting stations have been properly prepared for the election and that they correctly register all votes cast. These tests are open to the public. At the completion of the Logic and Accuracy tests the voting stations are sealed and delivered to the precincts.

    On the morning of Election Day the Precinct Manager and Assistant Precinct Manager break the seals and prepare the voting stations for the election. The first step in this process is to print out a 'zero totals tape'. This tape verifies that no votes have been recorded on the voting stations prior to the opening of the polls. As the voters cast their ballots on a touch-screen voting station their choices are recorded on the PC memory card. The absentee ballots and provisional ballots are processed through ballot scanners and their votes are r

  58. Re:Highly Biased Article by SN74S181 · · Score: 2, Interesting

    So, you're implying that Fox News is the only news service that doesn't report 'the truth' as you know and believe it, eh?

    It's surprising, though, to hear a lockstep liberal using the word 'evil.'

    Shouldn't the term be 'ethically different.'

  59. Old-Fashioned Insecurity by PRickard · · Score: 2, Interesting
    I live in Georgia also. I've noticed one thing about the new voting machines - no privacy. Before they set up the new Diebold systems, we always had a little closet to vote in. It had cloth walls and a curtain at the back you could close. Once you finished with the ballot, it would go inside a metal sleeve that hid your choices until you slid the ballot inside the locked box.

    Now we have big flatscreen computers - backlit screens with huge fonts and a color behind each candidate's name. There's no curtain, no closet, and the screen is aimed back where anyone in the room can watch you vote. This not only hurts people who want to vote against what most in their community support, it lets the old ladies who run polling places keep their own unofficial tally of the results (if they want to). That would facilitate fraud, wherein you just keep up with your preferred candidate and then go vote a few extra times if you notice he's falling behind.

    Additionally, I have personally met our county registrar, and deal with her on a regular basis in matters not related to the government. She's not qualified for the job, and wouldn't know a case of computer fraud from a hole in the ground if it ever happened on her watch.

    --

    == Paul Rickard, Editor of The Microsoft Boycott Campaign ====

  60. glad you brought up georgia by zogger · · Score: 2, Interesting

    I live here so I voted in the last election using the diebold "system". It's the most BLATANT phony vote system you can imagine. There is ZERO way to account for the tally, any "official" can slide in a disk and change the results, there's no way for any local poll watcher to verify a count, because all you can do ishave the machine run it's same program again, so if it's been monkeyed with, you'll get the same monkeyed results. I made an offical protest after I voted, it lead to nothing, just an exasperrated and computer illeterate older lady poll official who couldn't understand why I wouldn't trust the machine,how it could be tampered with, then she transferred me to some person at the other end of a telephone who insisted the machines were fair, accurate and honest. I disputed that, said there was no proof, there was no proof of the vote that any poll watcher could verify, and I demanded the code, of course refused. I just wanted there to be an official protest, so I did it. Before we had a plain wooden box, paper ballots, you could look inside the box at poll opening, verify it empyty, sit there at poll closing time and watch the count. the potential for verification is VERY high with such a system and good ole mark I human concerned eyeballs. I like computers, but I got no use for these "systems". And I remember BEFORE I voted, a big Drudge headline about large numbers of "irregularities" showing up during the vote in georgia, I came back from voting and that story POOFED off his page and there was little of it at any other big georgia sites like ajc.com. That's some JUICE to be able to do that, and yes, biggest upsets since civil war reconstruction, defying all pre and post polling, so much so all the news orgs stopped even reporting the polls or that story.

    That election was RIGGED, and it was the test case for nation wide rigging, that's my opinion, and the test worked, 99.999% of the people just sucked it up. To be fair, there was a big anti barnes vote over the flag issue, but still... too many races had completely bogus results. And BOTH PARTIES have endorsed these "systems", which means they are "in" on it at the top party levels.

    It's a JUNTA. The vote was marginally useful before, now it's about useless.

  61. Peruvian voting mechanisms by Aropax20 · · Score: 2, Funny
    Surely they'd use quipu to keep track of the voting, just as their Incan forebears did?

    Thank you, thank you, I'll be in town all week

  62. Premature optimisation strikes again by thisrod · · Score: 2, Informative

    I live in Australia, where people vote with pencils, piles of paper, eyeballs, and telephones. Thanks to massively parallel processing we usually know who's going to form the next government by bedtime on election night. The first-past-the-post tallies are invariably known on the night, but the winners are decided by a rather complicated algorithm to avoid the Nader effect, so the closest electorates take weeks to count. The government has to get its legislation passed by the senate, which uses an even more complicated algorithm, and often takes a month to determine.

    But it doesn't matter. Really important politics, such as abolishing slavery, liberating women, banning alcohol, or providing public funding for education, happens over decades or centuries. Even on such an immediate issue as building a dam on the Franklin River, political debate took years. Urgent decisions such as going to war would usually be decided the same way by any party that might win an election. Voting machines gain only speed, while only accuracy counts.

  63. Next election will be worse with Saudi control by Anonymous Coward · · Score: 4, Informative

    Ever wonder how in 2000 there were an unusual amount of "Florida military ballots" that went through the postal system LATE and WITHOUT POSTMARK?

    Next election will be even more corrupt for military ballots. Military personnel will vote online in 2004

    http://seattlepi.nwsource.com/local/126504_vote14. html

    The company that has been contracted to provide this service was just bought by a group of Saudi investors.
    http://www.newsday.com/business/ny-bzelec0227.stor y

    "Election.com, a struggling Garden City start-up scheduled to provide online absentee ballots for U.S. military personnel in the 2004 federal election, has quietly sold controlling power to an investment group with ties to unnamed Saudi nationals, according to company correspondence."

    You wanna see how computerized voting really works?
    Go here:
    http://www.cntrybob.com/Fun/Voter/voter.html

    Why bother to vote at all. Just resign yourself to fighting a revolution. If you value freedom and democracy.