Slashdot Mirror


VeriSign and Secure Internet Voting

Bucky Katt writes "VeriSign announced Monday that it will provide key components of a system designed to let Americans abroad cast absentee votes over the Internet."

25 of 290 comments (clear)

  1. OMG by tbase · · Score: 4, Insightful

    So we won't have to have physical access to log in and change votes with MS Access and no password? For the love of God, when is the mainstream press going to pick up on this?!?!?!?

    --

    666-607: 6th floor apartment of the beast
    1. Re:OMG by Zeinfeld · · Score: 3, Interesting
      The problem here is who you trust. If hardware and software made by the same entity there's nothing to prevent corruption during couting.

      Exactly, with Palladium any conspiracy would have to include Microsoft, the hardware manufacturers, the CA and the people administering the ballots.

      It is one thing to have open source code review. That is great but actually irrelevant since my main concern is not that the source code offered for review would have a backdoor. My concern is that the code running on the machine might not be the code given for review.

      With Palladium it is possible for an external process to determine that a specific version of a software code is running on a particular machine. That is exactly what I want in designing an internet supported voting scheme.

      Incidentally I find it really interesting that everyone seems to assume from the start that any ballot tampering would be directed by the GOP.

      --
      Looking for an Information Security student project suggestion?
      Try http://dotcrimeManifesto.com/
  2. GREAT! by TiMac · · Score: 5, Funny

    So if you misspell the name of your candidate, Verisign will use its * wildcard to vote for its CEO automatically!

    --

  3. This is going to be a fiasco by TerryAtWork · · Score: 4, Insightful

    The USA is handing over democracy (in a small but growing way) to a no-vision for-profit firm that has a proven lack of ethics.

    This is going to get worst before it gets better.

    --
    It's Christmas everyday with BitTorrent.
    1. Re:This is going to be a fiasco by DanoTime · · Score: 3, Insightful

      Many, many times proven a lack of ethics... I really think this is going to turn out like the old Real Networks fiasco where personal info was recorded. This company will eventually need another revenue stream and... oh, lookie here! Look at all this information!

  4. In related news... by Ayaress · · Score: 3, Funny

    Verisign has pulled a suprise victory in the California recall election.

  5. Electronic voting by Anonymous Coward · · Score: 5, Interesting
    Why is there such an obsession with electronic voting.

    Yes, the algorithms for secure anonymous fraud-proof voting exist, but I don't think the implementations are up to the task yet - in particular, if they cannot be independently verified before, during and after the elections.

    There's just too much potential for a fraud to justify dropping the good old pencil-in-the-number-of-your-candidate method.

  6. Replace the Electoral College w/ Folger's Crystals by sleight · · Score: 4, Interesting

    And, for our next trick, we absolutely won't replace the electoral college with internet voting. Even if it were secure, it would take the power out of the hands of the elite and give it to the people.

    However, wouldn't it be nice if we (the US, if you can forgive my inclusive pronoun) were a democracy instead of a republic? If internet voting is good for the goose, then shouldn't it be good for the gander? We just need to replace those old and moldy voting booths with shiny new internet-enabled booths.

    Of course, as a programmer, I'll believe the voting scheme is "secure" when monkeys fly out of my butt.

  7. They count absentee ballots? by SaXisT4LiF · · Score: 4, Interesting

    As I recall, none of the absentee ballots made any difference in the 2000 presidential election.

    Someone must have thought, "Lets let absentee voters vote electronically, we're just going to throw out their votes anyway!"

    Nothing lost, nothing gained.

    --
    Fight or flight its all the same
    Live to die another day

    --Ryan
  8. This could be good by slimak · · Score: 5, Insightful

    Naturally most /.ers are going to complain about this for various reasons generally involving security. However, this could be a good thing IF a GOOD system is actually developed (now or in the future). I for one would love to be able to vote from the comfort of my home/work/cafe without having to wait in lines. Overall voter turnout could be boosted.

    Chances are though that this first pass will not be great, which will slow/stop future development due to cries of the public for and end to insecure online voting.

    1. Re:This could be good by I8TheWorm · · Score: 3, Informative

      I agree about the voter turnout, and that's something this country really needs. The United States now ranks 139th out of 167 of the world's democracies in voter turnout which is just plain sad. The majority of folks don't actually vote (but love to complain about our law/policy makers). I'm sure some (most?) candidates count on that low turnout.

      I don't agree on the first pass comment though. I think a bad show on the first pass will eliminate a chance of it ever happening again.

      --
      Saying Android is a family of phones is akin to saying Linux is a family of PCs.
    2. Re:This could be good by tsg · · Score: 4, Insightful

      I for one would love to be able to vote from the comfort of my home/work/cafe without having to wait in lines. Overall voter turnout could be boosted.

      People who don't care enough to vote don't care enough to be informed. Pointing at "voter apathy" and claiming it's the problem is extremely short sighted. Voter apathy is a symptom, not the cause. Making voting easier to get better turnout is just going to ensure that more uninformed people are going to vote. I can't see how this is a good thing. Make people care about the issues and they'll find the way to the polls all by themselves.

      --
      People's desire to believe they are right is much stronger than their desire to be right.
  9. what about.. by myspys · · Score: 3, Insightful

    .. making people IN the country vote?

    last vote less than 50% or something voted

    what about fixing that problem first?

    geez..

  10. I could see by smurphette · · Score: 3, Funny

    a use for One Click(tm) technology here.

  11. actually an improvement by pangian · · Score: 4, Interesting

    While I'm usually skeptical of Internet voting, I'm actually in favor of it in the limited case of American personnel overseas, because it is better than the current system. Presently, most absentee votes don't even get counted, unless the margin of victory is less than number of absentee ballots. While this is technically accurate and efficient, it kinda sucks to be one of those people who's vote is never even considered.

    On the security side, I hope that VeriSign avoids Diebold's mistake (with electronic voting machines, which is different from Internet voting) and makes the source code and security procedures public for scrutiny.

  12. better? by twitter · · Score: 4, Insightful
    This is going to get worst before it gets better.

    How do you think things will get better? There are few if any local independent news papers because they have all been crushed by big coroprate owned national broadcasters and "news" services like MSNBC. The same people have made sure that individuals have a hard time publishing on the internet, so everyone has to go through providers or portals where they can be shut down. Now the loop is being closed with black box voting, which is impossible to audit. Even if you could tell people the truth, they won't be able to do anything about it.

    Vote against this kind of thing NOW.

    --

    Friends don't help friends install M$ junk.

    1. Re:better? by antic · · Score: 3, Insightful
      Vote against this kind of thing NOW.

      Vote how? They will own the voting process...

      It's a downward spiral.

      --
      'Thats they exact same thing a banana wrench monkey.'
  13. Only in limited cases... by pangian · · Score: 5, Insightful

    Notice that the article only talks about using Internet voting as an alternative to absentee voting for citizens abroad and only in U.S. government agencies where secure Internet-enables voting stations can be set up. This is good .

    Internet voting on a large scale will never take place due to logistical [for lack of a better word] rather than technical reasons. Electoral law requires that your vote be made in a manner that is free from influence (intimidation or vote buying). This is controlled by ensuring that voting goes on in select locations where campaigning is not permitted. Even campaign posters within sight of a voting station must be taken down.

    With Internet voting, essentially anyplace could be a voting station. I could set up a little voting party for my friends and let them vote on my computer. Don't mind that there is paraphernalia all around for my candidate, or that I'm looking over your shoulder. After the party, laptop and cell in hand, I could help all the little old ladies in my neighborhood vote too.

    [Your sig here]

  14. free -project.org by Albanach · · Score: 3, Informative
    When complaining about this it's worth remembering that there has been an open source internet voting project under the gnu auspices for some time. It's website is over here

    Even better, if Verisign running your elections worries you, why not see if you can help the project. With a secure, trusted and freely available alternative, Verisign will find it more difficult to convince audit committees that their software is the best option.

  15. I just don't get it. by MarvinMouse · · Score: 3, Informative

    How do people anywhere trust Verisign?

    This company has a proven track record of bad security, unethical behaviour, and well.. I just don't get it, they are the main "TTP" of the web, and yet aren't worth anyone's trust really, then a Domain controller that abused it's power as such, and now they are going to run elections for Americans...

    */me shakes head in total astonishment*

    Well... G'luck to ya guys. Here's hoping for once they'll maintain their ethics. (Or assign the project to Dilbert (for those who've seen that episode of Dilbert TV. ;-) ))

    --
    ~ kjrose
  16. Something is needed to get people to vote by tobybuk · · Score: 3, Interesting

    In the UK I think the average voter turnout for the general elections is hovering around the 35% mark and falling.

    This is a huge problem for a democracy IMHO. Considering we've fought 2 world wars for the right to determine who governs us, it's pathetic that a majority of people cannot be bothered to get off their arses and vote.

    However, I have a confession. I'm one of the majority and ashamed of it. I always intend to vote, but when the time comes I always seem to have something important to do instead. If we had an easy electronic voting system then I for one would always cast my vote.

    OTOH Do we really want to encourage EVERYONE to cast a vote? If there was no effort involved (like actually having to travel to vote) then would we be encouraging people with no real political views to vote 'just because they can' Maybe then the result of the election would be decided by the lazy jobless who had nothing better to do than vote?

  17. Outsourcing Security and Voting by globalar · · Score: 4, Informative

    This is purely bad principle. This is outsourcing voting. Elections should be handled as much as possible by regular people. Companies should provide paper, pencils, and maybe some refreshments.

    Now I RTFA and I understand this is for military absentee ballots. But this will set precedence. Who will get the job next year? Don't you think the standards applied here will eventually be used for absentee ballots for State Department personnel? And then eventually the general public?

    If the government is not capable on its own of running a fully electronic election, then they should not be doing it. Period. Forget the cost of alternative systems or even the impossibility. If the DOD cannot handle this internally (they should, they handle billions of dollars of secrets) then I think it is a step to far to outsource it.

    "The sanctity of the vote can't be compromised nor can the integrity of the system be compromised"

    Doesn't that line make you feel worried. At least they could say,"we have the best security and experience." But no, "the integrity of the system [can't] be compromised."

  18. Re:It was already a fiasco by paroneayea · · Score: 4, Funny

    On that note, using Verisign's software, if you aren't sure who you want to vote, you can just put an asterisk after the first letter, and Verisign will choose whoever has the corresponding last name that paid them the most money!

    --
    http://mediagoblin.org/
  19. Re:Replace the Electoral College w/ Folger's Cryst by bladernr · · Score: 4, Insightful
    Malaysia uses a pure democracy form of government. A friend of mine from there, who is ethnic Chinese, tells me that open-discrimination is perfectly legal by the majority Malay against the minority Chinese. (there is even something about the minority subsidizing housing for the majority, even though the majority is financially better off)

    The PM of Malaysia is quoted as saying the duty of the democracy is to better the majority. Strictly speaking, that is true in that form of government.

    That is why I support the Republic form is government. Republic is representative rule, not majority rule. Each stakeholder in the US system should be represented. Arguments about the rights of any minority make sense only in a Republic. In a democracy, who cares about minorities? We all vote in self-interest, and majority rules.

    To repeat an oft repeated quote, Democracy is three wolves and a sheep voting on whats for dinner.

    --
    Sarcasm and hyperbole are the final refuges for weak minds
  20. I'm voting by mail by Pedrito · · Score: 4, Informative

    I live abroad and frankly, I'm just not quite prepared to trust my vote to the internet. I'll be sending my vote by mail and would encourage other expats to do the same.

    I certainly don't trust Verisign. I think the first few elections using this technology should be limited to say, a few thousand votes so as not to have a significant impact on the results (of course, given what happened in Florida, a few thousand votes might have a significant impact). Maybe it would be even better to run the electronic voting at the same time, requiring mail-in ballots and compare the results and not count the electronic voting until it's proven itself. Mail-in ballots aren't anonymous votes, so it should be easy enough to compare.

    Even then, I don't know that that would work. I'd eventually like to see secure internet voting, but I'm just not sure the implementations are there yet.