Slashdot Mirror


Can America Trust Electronic Voting?

A anonymous reader writes: "The Sacramento Bee wrote an excellent article about the issues surrounding electronic voting. It was written by the Yolo County clerk/recorder and a professor of law at UC Davis. They quote sources such as Peter G. Neumann and Diebold's president Walden O'Dell."

35 of 452 comments (clear)

  1. Redundant, I know by Trioge · · Score: 3, Insightful

    ... But the only e-voting situation I would trust would be an open source one. Even with paper reciepts, there's still an unprecidented oppourtunity for fraud.

    1. Re:Redundant, I know by Shakrai · · Score: 5, Insightful
      But the only e-voting situation I would trust would be an open source one. Even with paper reciepts, there's still an unprecidented oppourtunity for fraud.

      Perhaps. But I've said this many times before (as have others) and I'll say it again:

      Why does an e-voting machine have to be anything more then a fancy dumb terminal with a printer attached? Don't record the votes to a hard drive or flash card (or the worst possible idea: networked to some central server). The machine should be nothing more then a gateway to print a paper ballot.

      This ensures that the ballot is filled out correctly, gives the user ample time to correct any mistakes (before printing the ballot) and lets them verify it with their own two eyes before they drop the paper ballot in the lockbox.

      Said ballots can then be counted with OCR software -- or by hand if it comes down to a manual recount.

      Open source or not, I do not trust the vendors of these machines ("I'm going to deliver Ohio's electoral votes to Bush next year") enough to assume that my vote is actually counted on that hard drive. Even if they released open source code, how do you really know that's what's running on the machine itself? Once the election is over it's too late as Florida proved.

      --
      I want peace on earth and goodwill toward man.
      We are the United States Government! We don't do that sort of thing.
    2. Re:Redundant, I know by Anonymous Coward · · Score: 5, Insightful

      So why not just do what we do here in Canada: make the ballot as simple as possible, just mark an X by your candidate. All that's on the ballot is a list of names and a box by each one.

      Why bother with electronic voting? We get our results around an hour after the polls close, plus there's much less room for voting fraud (and I'd assume it's cheaper).

    3. Re:Redundant, I know by Shakrai · · Score: 4, Interesting
      So why not just do what we do here in Canada: make the ballot as simple as possible, just mark an X by your candidate. All that's on the ballot is a list of names and a box by each one.

      I wouldn't have a problem with that either. Problem is, somebody will point out "Ah, but what if people can't figure out how to use it or they mark it incorrectly?"

      Anyway you cut it, voting is not rocket science people. All I want (as a concerned citizen) is someway to verify the process.

      --
      I want peace on earth and goodwill toward man.
      We are the United States Government! We don't do that sort of thing.
  2. Some paranoia... by zeux · · Score: 5, Interesting

    Maybe I'll be a little 'off-topic' but I would like to add some reflexion to this article.

    E-Voting and its problems are a clear example of what is happening: we are giving to our computers and networks more and more 'power' over our own lives. This wouldn't be a problem if security was some exact science.

    We still have big problems with computer security and while we didn't fix them yet (anyway can we really fix them ?) the overall 'value' of the data that goes through our networks is fast increasing.

    This, I think, will be even worse in the near future because the software, systems and networks we use will be more and more complex and it will be harder and harder to maintain a good level of security on them.

    You could argue that the problems exposed in the article are not related to security. I would say 'not yet'.

    But something really interesting is said: "These machines leave no 'paper trail,' that is, no voter-verifiable record allowing a retrospective audit of the votes recorded as cast for each candidate or ballot proposition.".

    Everything in these system is 'virtual'. It makes it easier to loose, to replicate (to steal) or to alter information. I'm quite afraid about that.

    Maybe the E-Voting system is not connected to Internet, which increase security of course, but maybe one day it will...

  3. Not with these companies... by Yaa+101 · · Score: 3, Insightful

    The problem is not the technique, the problem is the fraudulous mentality of the management of these companies...

  4. Hasn't Australia just mandated a paper trail by Space+cowboy · · Score: 5, Informative

    ... for their next election, which seems to be the best option to me. Voter gets a piece of paper (anonymous) which records his/her vote. The slip has to be left at the polling station in a sealed container, and in the event of "it screwed up", the slips get counted...

    Simon.

    --
    Physicists get Hadrons!
    1. Re:Hasn't Australia just mandated a paper trail by phalse+phace · · Score: 3, Informative

      All I know is that California recently mandated paper receipts for all its voting machines. Sucks is that this isn't required for all of them until 2006, which is a little too late for the 2004 elections.

    2. Re:Hasn't Australia just mandated a paper trail by mindriot · · Score: 4, Interesting

      ...which brings you back to the question, "what advantage is the electronic system then?" Right now we have a paper trail, and it works well. (OK, maybe you Americans should work on the Usability of your forms :-))

      That we will be able to get voting results faster? Well, let's see. In Germany, polls are always on Sunday and the booths close at 6pm. By that time, you already get projected results that usually differ from the final results by less than one percent. By 11pm the final results ("Vorlaufiges amtliches Endergebnis", "preliminary official results") are available. Is it worth spending millions of dollars just to get the results, say, four hours earlier? OK, there's one advantage if the results can be seen in "real time," e.g. over the day, while elections are still running. Because then the knowledge that the current results are very close to each other (think Gore-Bush) might have an influence on who decides to actually go voting later in the day.

      And then there's the argument that E-Voting will make it easier for people to vote and thus more people will vote. But on the other hand there have been studies showing that when people had to make more of an effort to go cast their vote, turnouts actually increased.

      That being said, www.free-project.org is a good source of pro and contra arguments regarding E-Voting.

  5. California is on the right track... by tinrobot · · Score: 4, Interesting

    To hopefully fixing this problem. This week, the state mandated that all voting machines print a human-verifiable paper ballot. This is good, but the regulation is supposed to take effect in 2006.

    While it's a step in the right direction, it's also ridiculous. A voting technology that is unacceptable in 2006 is also unacceptable today. I certainly hope they push up the deadline to before the 2004 election. There's plenty of time to fix it by then.

    If you live in California, please bug the appropriate government officials about this.

    1. Re:California is on the right track... by BrynM · · Score: 4, Insightful
      "If you live in California, please bug the appropriate government officials about this."
      The problem is getting to the elected officials. The capitol in Sacramento has been locked up tight now that we have a celebrity in office. Bug an official too much and your liable to get a "talking to" by the authorities and still never get to the official. Most of the e-mails and letters are tallied as simply "for" or "against" by some clerk and any insight or message from the writer is lost in the process. The binary for/against, democrat/republican, good/evil and patriot/traitor attitude in our governmental process all the way up to the federal level is genuinely frustrating and I don't know of any way to remove it without the populace becoming more educated and outraged - which is fleeting and hard to accomplish.
      --
      US Democracy:The best person for the job (among These pre-selected choices...)
  6. As much as traditional voting... by toupsie · · Score: 3, Insightful
    Its not the method of voting that matters, its those that manage the polling booths. Vote fraud has a long history that precedes even influence of computers on our society. If the people we intrust to count our votes, be them paper or electronic, are corrupt, the method makes no matter.

    Frankly, I am not as concerned about electronic voting as I am getting Americans to actually vote in the first place.

    --
    Strange women lying in ponds distributing swords is no basis for a system of government.
  7. Can America Trust Electronic Voting? by morelife · · Score: 3, Interesting

    Yes, if the greedy corporations are removed from the process, and an OSS solution based on an openly auditable platform like Linux or FreeBSD is adopted. We are not too far away from this eventuality.

  8. Re:The real question is by Evil+Adrian · · Score: 3, Insightful

    Most people I know vote straight Democrat or straight Republican, and rarely actually do any homework about "the issues" or what the candidates they are voting for actually represent.

    Obviously, my own experience isn't necessarily reflective of the whole of the US voting pool, but I have trouble believing that the majority of people actually do research every candidate before a vote...

    --
    evil adrian
  9. I think its pretty clear by Timesprout · · Score: 4, Funny

    I think its pretty clear that there is a lack of faith in e-voting and also some mistrust of traditional forms of voting after Florida. I therefore propose that all voting be scrapped and the adoption a Supreme Leader to rule. Since its my idea I will be the first leader. My aides will be dilligently selected for their intelligence and integrity, if that just happens to be my old mates then so be it.

    Obviously leadership is a great honour and a burden which I feel I can best fulfill if resident in a luxurious villa on a tropical island paradise surrounded by nubile native girls, with regular entertainment provided by Britney, Beyonce, Kylie etc. and a large collection of expensive playthings (Gulfstreams, Ferraris, Merc's, helicopters, speedboats etc).

    My first order of business will the public execution of the SCO board of directors in a very public and painful manner.

    And remember, we all love the Leader and are dedicated to his happiness.

    --
    Do not try to read the dupe, thats impossible. Instead, only try to realize the truth
    What truth?
    There is no dupe
  10. Now, really.. by NegativeK · · Score: 4, Interesting

    Granted, I'm not going to vote electronically without an open source system in place, but this _really_ isn't that hard.

    As an example implementation.. When you register, you get a plastic card with a magnetic stripe on it. It has two 32-bit numbers on the card, with your name, picture, and address. One of the 32-bit numbers is your personal identifier, and the other is your signing key.

    Now, for the ballot, every candidate also has a 32-bit number. When you want to vote for your candidate, you swipe your card, then select the candidate on the screen. Your pid is appended to the end of the candidates pid, and then it is hashed with your signing key. At the same time, a publicly available signing key from the government signs the 32-bit pid of the candidate. Two slips are then printed out, both with one barcode indicating your hash of the candidate + your pid, and a barcode with the hash of the government signed pid.

    One slip is given to the poll people, and you keep the other. Also, a copy of the slip is sent over some network to the vote counting place. If you doubt that your vote has been tallied correctly, all you have to do is search for your signed 64-bit candidate + personal id in some government database.

    Paper trail. Verifiability. Randomness. What am I missing? Was t overly complicated? Input, please!

    P.S.: Want to vote for someone not on the ballot? Do a write in. They're rare enough that counting by hand isn't an issue.

    --
    This statement is false.
    1. Re:Now, really.. by jtcampbell · · Score: 5, Insightful

      There's one problem with this scheme, namely lack of anonymity. Also if you give a receipt it opens the door to bribery, since an outside party can verify who you have actually voted for. Anyone with access to the database can also see who you voted for.
      Voting has to be anonymous.

    2. Re:Now, really.. by Aguila · · Score: 4, Interesting

      The absentee voter system already opens the door to bribery. I am not a resident of California, but I believe that you can register to be a permanent absentee voter in CA, for no grounds beyond you feel like it. So, if I were a CA resident and wanted to sell my vote, I would register to be a permanent absentee voter. Then, I would fill out the absentee ballot, show it to the person buying my vote, and then drop it in the mail while they watch. They get one confirmed bought vote, and I get my cash...

      Therefore, bribery is equally possible under the current system. I don't even need the California law I cited, it just makes it easier to sell my vote election after election instead of having to obtain absentee voter status for each election.

    3. Re:Now, really.. by swillden · · Score: 3, Insightful

      Unfortunately, I can't see a method of verifying that your hashed vote is still there without having someone else be able to beat you up and do it... Same thing with paper voting, though.

      Locked metal boxes with a slot into which you drop your ballot, with oversight from all the major political parties whenever the box is closed, opened, transported or stored.

      These problems were very well-solved ages ago.

      Given locked-box technology, your scheme is needlessly complex. Just print a ballot with both human-readable and machine-readable versions of the voter's selections, and also store an electronic copy of the vote. None of these should be personally identifiable in any way, or even timestamped. Hashing and signing are unnecessary. The voter drops the ballot in the box.

      At the end of the day, the electronic votes are tallied, and that's the result. If anyone wishes to contest any part of the vote, that voting district's ballots can be machine-counted. If anyone wishes to claim that the machines are in error, the ballots can be hand-counted. Just for good measure, election officials should randomly select a set of districts for machine counting, with the results to be compared against the electronic totals. Significant discrepancies should invoke a system-wide recount. Also for good measure, election officials should randomly select a set of ballots (making sure there are some from every district) and both hand and machine-count them. Discrepancies should cause a thorough review of the system to determine where/how they originated, and might indicate the need for a system-wide hand recount.

      Technology never provides security. Process is always the source of any security that exists; technology is only a means of making the process more convenient and cost-effective. Note that this is even true of the locked boxes, where the technology is only a means to make the oversight process more manageable.

      For security, focus on process first, technology second.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
  11. Re:absolutely not by toupsie · · Score: 5, Insightful
    In the last election, Bush won by fraud.

    According to all the "media recounts", Bush won the election unless you counted the votes against methods prescribed by Florida law -- much like Johnny Carson's Carnac. I don't know if you understand US Presidential Elections, but our President is elected by the Electoral College not by the popular vote. Bush won by 2% in the Electoral College.

    Bush and his government do not listen to the UN, detain prisoners with no charges, and therefore do not believe in democracy.

    The UN does not dictate to the United States because we are a sovereign country. It would unconstitutional for President Bush to allow the UN to dictate to USA. The US does not detain "prisoners" without charges. We do, however, place into detention terrorists that have attacked or are plotting to attack the US or its military. It is very simple not become a guest of Gitmo, do not conspire with terrorist organizations that threaten to cause mass casualties. We do believe in democracy in America and brought it to many nations around the world. Two shining examples are Germany and Japan.

    I understand that it is vogue in many minority "clickish" groups to engage in vitriolic hyperbole in regards to our President. Those that have underestimated our President's intelligence or will have found themselves on the losing side of not only elections but of history. There are many complaints that can be brought up about our President such as his love of big government programs but it is rare to ever hear valid ones from his foes, much to their electoral peril. President Bush main strength is that he is constantly underestimated and overly mocked.

    --
    Strange women lying in ponds distributing swords is no basis for a system of government.
  12. the real point by mrsev · · Score: 5, Insightful

    Most people are missing the point. An election must not only be fair but it must be seen to be fair.

    I have no idea why the US has such problems with their voting. In the UK everyone votes on paper..... with a fucking pen. (No dimpled chads crap!) It is counted by hand and is never out by more than 10 votes in 30,000. We also have the result by the early hours of the morning.

    The point is if you want to go and count all the votes yourself you can. The whole idea of an election is that it is open. For this there must be a paper trail. Why complicate the matter? The other point is that it is secret. Who I vote for is none of anyones bussiness. I would always be nervous with electronic voting for two reasons. I want to know that my vote has really bean counted and I want to know that I am anonymous.

    As regards election fraud it is easier to imagine someone messing with an electonic count than someone turning up with a few suitcases of paper and trying to stuff them into a ballot box in fron t of the election officals.

    .

  13. ATM Analogy by BrynM · · Score: 4, Interesting
    From the article:
    "Dollars and cents are 'commensurable.' A bank doesn't care if it loses $200 to a hacker who makes unauthorized withdrawals, so long as it gains back something more than $200 in cost savings from using the ATM that the hacker attacked. There is no difference except in amount between the dollars lost and the dollars gained. Their value is commensurable.

    But there is no such commensurability between the false vote tallies that electronic voting systems might yield when things go badly, and the benefits of speed and efficiency that they might offer when things go well.

    So the ATM analogy fails."

    I don't think that this analogy fails. From my experience, banks tend to think of the money they hold as "their money". Their business is to use the money that they hold to generate income (fees/investments/interest charges on loans). To me this is the major danger of the voting companies. Do they consider the votes they process as "theirs"? Just look at what O'Dell wrote. To me the issue is control and the ATM analogy fits that well. Ever try to prove a fraudulent transaction to a bank? Were they evasive and controlling of the situation? Did they deny culpability? Did they deny a weakness in their process?

    I think that the voting companies will eventually lobby to regulate out any scrutiny of their process. Will every attempt to investigate the security of such systems by an average citizen be dealt with as a "hacking" crime eventually? With today's fear of the "terrorists" exploiting things, the time for this type of legislation is ripe.

    How's the weather in Ontario? Is rent cheap?

    --
    US Democracy:The best person for the job (among These pre-selected choices...)
  14. Except he was not appointed by Anonymous Coward · · Score: 5, Informative

    "Bush is by far the worst president ever appointed by the Supreme Court. --maddox.xmission.com "

    Whether or not he is the worst president, you are accepting someone's lie as fact. The Supreme Court did not appoint him. The Electoral College did, however, through the usual process of election.

    All the Supreme Court did was refuse to bother with a frivolous appeal filed with them. They in effect did nothing and let the real results of the election stand.

    1. Re:Except he was not appointed by Mr.+Slippery · · Score: 3, Informative
      The Supreme Court did not appoint him. The Electoral College did, however, through the usual process of election.

      And the Supreme Court - acting in violation of federal, state, and international law, as well as judicial rules of procedure - selected Florida's electors.

      All the Supreme Court did was refuse to bother with a frivolous appeal filed with them. They in effect did nothing and let the real results of the election stand.

      Your recall of events is hazy. If they'd done nothing, the recount would have continued.

      The "real results" are that:

      --
      Tom Swiss | the infamous tms | my blog
      You cannot wash away blood with blood
  15. Electronics is not the untrustworty part. by Zaphod-AVA · · Score: 4, Insightful

    Why can we trust computers to handle hundreds of billions of dollars in international business, but not voting?

    The problem in the equation is the involvment of our government, who have failed to earn our trust in the last few decades, not the concept of electronic voting itself.

    -Z

    1. Re:Electronics is not the untrustworty part. by Effugas · · Score: 4, Insightful

      Because anonymous financial transactions are a difficult and vaguely illegal proposition, while anonymous votes are a mission-critical top priority line item.

      --Dan

  16. USA makes a fool of themselves. E-voting IS mature by Anonymous Coward · · Score: 3, Insightful

    Hi all,

    With more and more surprise I am reading all those articles about how the USA (nr 1 in IT in the world) is struggling with E-voting.
    I am 30 years old now, the first time I voted was when I was 19 or 20 yo (first chance), and that was electronical. I have never casted my ballot on paper, ever. At the time, we are talking 1990, about 50% of The Netherlands was using voting machines, a few years after it was 100%. The first machines were installed in 1985.
    Agreed, no fancy touch screens (how would that work?? 15 parties, up to 40 candidates per party - that can never be shown on one normal touch screen, thereby giving an advance to the party first shown of course), though a reliable, robust, and secure way to vote it is. It uses a panel with a huge number of buttons (one per candidate), a display to tell which candidate you are about to vote for, and a "Vote" button. That's all. No Internet connection (what is that good for other than allowing hackerse to access the machine). Never, ever has there been a dispute on voting security with these machines.They work, everyone is happy with it, and they are a great improvement on the paper voting.

    USA is making a true fool of themselves.
    How come they can not even design something simple (not easy, but simple as in few functions needed) as a voting machine? How can we ever trust their electronic "smart bombs" and whatnot? And their computer based aeroplanes? And more computer software which has to be tamper-proof and absolutely safe.

    Electronic voting is not rocket science. Ask the Europeans about it, there the technology can be bought in from the shelf. Not fancy, though tested in several elections and found good.
    Maybe they need another election disaster like Bush to realise it is time to have a look across the border and see how a real election is held.

    Wouter.

  17. Re:The real question is by BrynM · · Score: 3, Insightful
    "Obviously, my own experience isn't necessarily reflective of the whole of the US voting pool, but I have trouble believing that the majority of people actually do research every candidate before a vote..."
    I can concur. Most Americans' only source of voting information is the mass media, which quickly becomes a "who's more scandalous/popular" competition led by new anchors just happy to be involved with "powerful people". Thus, the process feeds itself and no one addresses any issue in depth. "Senator _________ is anti-________ and pro-________, but look at his wonderful family, dog and high profile charity donations... Wouldn't you like to be rich/popular/powerful like him?" kind of bullshit that never addresses how Senator _________ plans to support those political positions or legislate them.

    You know, I passed the Crest Theater here in Sacramento the other day when they had the citizenship swearing-in scheduled. There was a line a block long of immigrants excited to become US citizens and in a way I felt bad for these people. How many do you think would turn back if they saw how much people born here took it for granted and, in doing so help create the corruption they always complain about?

    --
    US Democracy:The best person for the job (among These pre-selected choices...)
  18. Re:absolutely not by jtriska · · Score: 3, Insightful

    We dont live in a democracy though. The vote of the people is only considered by the electoral college.

    The electoral college votes are really the only ones that matter. They dont necessarily have to "agree" with the peoples choice.

    A true democracy elects its officials by the people. We, do not do that.

  19. A Christmas Wish by mcpkaaos · · Score: 3, Insightful

    I wish we were as concerned about who we vote for as we are how we vote for them.

    --
    It goes from God, to Jerry, to me.
  20. Supreme Leader by CleverNickName · · Score: 3, Funny

    Since its my idea I will be the first leader.

    I call next!

  21. Another good article... by dgreenwood · · Score: 3, Interesting

    at http://www.securityfocus.com/columnists/198

    Electronic Voting Debacle

    Grave concerns over the security of electronic voting machines in the United States means the heart of American democracy is at risk.

    [snip]

    "...The Big Issue: Security

    So, how do you know that the machine actually counted your vote? You don't! Oh sure, you may see a screen at the end of the process that shows you what you selected ... but how do you know that those choices are actually tabulated? The answer: trust the companies that make the machines. But that attitude, if it ever made sense, has been shown to be not just wrong but foolhardy in the past several months... "

  22. Re:absolutely not by Qzukk · · Score: 3, Informative
    I understand that it is vogue in many minority "clickish" groups to engage in vitriolic hyperbole in regards to our President.

    Yeah, too bad so much of this vitrol is true. Take a look at this article on ZDnet. Its about that guy at Intel that got arrested, and the "evidence" that let the US hold him for over a month in solitary confinement (check the date on the article and the date in the story). He was a Citizen of The United States. A citizen. You know, the people who make up this country, live here, and who are guaranteed certain rights such as due process, a speedy trial, and representation? You? Me? Note also the end of the article:
    A Washington Post investigation last fall said the Justice Department has imprisoned at least 44 people, including seven U.S. citizens, under the same law, with some held for many months and possibly over a year.
    So he's not an isolated case.

    According to what was released by the government (who has recently felt an unusual need to hide the truth from its people on a lot of things, such as trials, so its entirely possible they have other charges they're neglecting to let us know about) Mike's crimes were growing a beard after the sept. 11 attacks and visiting China during the same time that a group of other people arrested the year before had visited. Ah, sweet justice.

    Did you know that Bush said he doesn't read the newspapers? Yeah, thats right, he "trusts" his advisors to tell him whats worth knowing in the news. These are the same people that brought us nukes in the middle east, magical disappearing WMDs that nobody has found yet, and our current foreign policy of "piss everyone off".

    As for Bush's belief in "democracy", he'd rather be a dictator. Out of context? Joking? You decide.

    Nobody "underestimates" Bush. The fact is, the poor man is an idiot and a puppet for the people pulling his strings and whispering in his ear who we didn't vote for and who we have no control over. Your examples of Germany and Japan are great ones, too bad they shine brighter than the US right now.
    --
    If I have been able to see further than others, it is because I bought a pair of binoculars.
  23. Verifiedvoting.org - by Speequinox · · Score: 3, Informative

    The org is on the ball: http://www.verifiedvoting.org

  24. The yankees have it backwards. by Pig+Hogger · · Score: 4, Interesting
    You guys are having it backwards.

    Since 2000, municipal elections here are counted with a mark-sense reader.

    Voters get a letter-sized ballot, and they mark their vote with a sharpie. Then, they insert the ballot in a carrier-envelope.

    Each ballot has a detachable stub with a sequential serial number, which is initialed by the scrutineer. When the voter returns, he tears-off the stub, and hands it to the scrutineer; this way, everyone can be sure it's the same ballot that was given (instead of a telegram, where you put in a pre-marked ballot, and prove you did it by bringing back the blank ballot).

    The ballot is then passed though a mark-sense reader which tallies the counts, and drops into a sealed box, along with the other ballots.

    This way, the results are known within seconds when the polls close, AND you STILL HAVE the paper ballots to be recounted, if the need arises.

    The machines are not open-source, but starting tomorrow, I am pursuing the matter with the authorities.