Slashdot Mirror
E-Voting Done Right - In Australia
tehanu writes "After all the furor over e-voting in America, Wired News has an article about e-voting done right in Australia. An important factor is that all of the software is open-source. The company responsible actually seems to have given consideration to the integrity of the democratic process, too - from the lead engineer: 'Why on earth should (voters) have to trust me -- someone with a vested interest in the project's success? A voter-verified audit trail is the only way to 'prove' the system's integrity to the vast majority of electors, who after all, own the democracy.' They also have scathing words for Diebold: 'The only possible motive I can see for disabling some of the security mechanisms and features in their system is to be able to rig elections. It is, at best, bad programming; at worst, the system has been designed to rig an election.' In general they are 'gob-smacked' by the whole situation with electronic voting machines in the US right now."
meaning what? If the punch card machines had provided a human-readable printout that the voter could read, and realize that he/she accidentally voted for Pat Buchanan rather than Al Gore, there would have been no issue.
Toronto-area transit rider? Rate your ride.
I dislike IRV as much as you do, but at the moment you can't blame Australia - no country is doing any better than IRV for their national elections.
Good methods (like Condorcet) should start in small organizations and work their way up, so that people are already familiar with how good preferential voting works.
Debian, for example, has already worked out lots of kinks and unfairness in their voting system by switching to Condorcet. Some "rules of order" books now advocate using Condorcet when possible. Encouraging this is what will get good preferential voting accepted, not pointing an angry finger at the government that's using a slightly better method than everyone else but still isn't good enough.
Win dain a lotica, en vai tu ri silota
I don't know if the problem is really that the software needs to be open source, or simply the fact that there is software at all.
I mean, think about it. What do you really want the system to do?
State: Waiting for User
State: Present User with Options
State: Ask User to Confirm
State: Record User Choice
Four states. That's all you've got. Four states. Why, precisely, are they using cheap hardware for something that a pair of dual flip-flops could handle?
Honestly - think about this. The only reason there are "security concerns" at all is because they were too cheap to design a dedicated system, no software, just pure logic, that can be run on a logic checking system looking for races, possible vulnerabilities, etc.
Paper trail? Well, paper's not exactly THAT good (it does burn, and as Florida proved, it's not always verifiably correct). What about a write-once, read-many device? Like, I don't know, a CD-R, with packet-based writing?
Embedded systems are becoming so much more popular over discretes because hardware is cheap, and bad software is cheaper. But in a case like this, I don't understand it. An idiot could design dedicated hardware voting terminals, which don't even have the possibility of tampering. It's just incompetence.
(P.S.: Sounds like a decent business plan, doesn't it? "Tamper-proof Voting Terminals" - "No more software crashes, no more unreliable messes - works the same way, every time, guaranteed.")
Yes, I know things are a bit more complicated than I'm pointing out here. But it is still correct: E-Voting doesn't HAVE to be fundamentally flawed. It just is when they use cheap hardware. C'mon. Haven't they seen the i-Opener BBSes? Hardware based on the "limit possibilities by creative software" is screaming to be hacked.
Australians invented the secret ballot - which was referred to originally as "the australian ballot". Australian electoral processes have complete preferential voting - or automatic runoff. Upper house ballots are generally on a multi-member electorate - for the Australian Senate, 12 senators are elected from each state at large, this way you get more than just the two major parties, and they generally hold the balance of power.
I think using computers to count vote is a mis-application of technology. My reasons are:
- Security. None of the operating systems and hardware in use are designed from the ground up to be secure. The reason is that security and ease-of-use are at loggerheads - get more of one you lose some of the other. One of the key features of every OS I've worked on is the ability to install a daemon somewhere in the message queue so you can remap devices to other purposes. For example, keyboard drivers are easily changed to morph a 'p' into a long sequence of instructions. No matter how well you try to detect a daemon/hook/wedge or whatever you want to call it, if the developer is intent on inserting his code and there are provisions for mapping into user space (I've yet to run on an OS that that couldn't be done) the code can be inserted. That means that open source, closed source, audited source, tested source are all susceptible to modification by a malacious bit of code. It just requires access. Touch screen/punch card/optical scan - it doesn't matter - if you're relying on a computer to do the tally and you can't guarantee that no one has inserted a daemon, you don't have a secure vote.
- Little gained. A lot of "improvements" to what's out there right now discuss the idea of a voter-inspectable audit trail. Voter uses a computer to vote and the computer produces a paper ballot that the user can inspect to make sure the computer isn't cheating. There are two things wrong here. First if a computer is going to tally the paper ballot, you're back to point 1. You've just moved the location of the fraud. If the computer is going to tally and the paper is just a backup, then in most cases, a fraud will go undetected. If the fraud is small enough to be within the bounds of statistical uncertainty but large enough to sway the vote, you're not going to catch it unless you hand count the entire population of ballots. Secondly, you're in essence using a machine to mark a piece of paper which a human can just as easily do - you haven't gained anything by introducing the voting machine into the mix.
I think the Canadians who just use a paper and pencil and cross-checked human counters to tally the vote have it right. The whole system is very simple. You mark your ballot, put it in a box. When the poll closes, at least 3 pairs of eyes look at it, one person is the election official, the other two are from opposing parties. When all 3 agree what the vote is, it's tallied as such. They can cross check tallies as they go so you're not running into a transcription problem down the road. The precinct reports its tallies to a higher level up the tree and the results are published so that the three (or more) counters can check the tally was accurately registered at the next level. Anyone who wants to can check the process from start to finish. Open, transparent, accurate and simple. Contrast that to encrypted keys, password maintenance, static discharge induced miscounts, lack of audit trails and the rest of the mess that characterizes the spectrum of American voting techniques and you have to ask - why the hell do we bother using machines to do this when we can do a better job by hand?There are lots of times that tech is part of a solution. Then there are times, like vote counting, where it is part of the problem. It may be retro and old fashioned but I think it's time we just used paper and pen again. It worked all the way up to the sixties and the country managed then. If our parents and grandparents could manage it, shouldn't we be able to hand count as well?