Slashdot Mirror


E-Voting Firm VoteHere Discloses October Break-In

linuxwrangler writes "In the ongoing saga of electronic voting 'security,' eVoting company VoteHere is the latest to reveal that they were the victim of a computer break-in. According to VoteHere founder, Jim Adler, the concern isn't about their source code which they plan to reveal 'eventually,' anyway, but is about the possible release of salary and other HR data. Astoundingly, the 'hot poll' associated with this story has (as this is being posted) 28% of respondents saying they would trust their vote on the internet and 41% saying 'not now, but maybe soon.' Feel free to cast your vote." Reader nSignIfikaNt points to the Assocated Press' article as carried by CNN.

172 comments

  1. See? by Shky · · Score: 5, Funny

    Problems with voting are clear and simple proof that fascist dictatorships are the only way to go.

    E-Communism and E-Oppression would be far more successful, no doubt.

    --
    CC Licensed Serialized Story and Podcast: Ingenioustries
    1. Re:See? by wirelessbuzzers · · Score: 2, Interesting

      Problems with voting are clear and simple proof that fascist dictatorships are the only way to go.

      We knew that before. Haven't you heard of Arrow's theorem?

      --
      I hereby place the above post in the public domain.
    2. Re:See? by Anonymous Coward · · Score: 0

      Problems with voting are clear and simple proof that fascist dictatorships are the only way to go.

      E-Communism and E-Oppression would be far more successful, no doubt.

      Mmmmmm.... DMCA
    3. Re:See? by Anonymous Coward · · Score: 0

      Does that mean we shouldn't fight back the accusations of open source being associate with communism? Is that the way to succeed? Microsoft sure belongs to the E-Oppression category...

    4. Re:See? by Anonymous Coward · · Score: 0

      Internet Voting : Vote Early, Vote Often.

  2. Measure the Slashdot Effect! by c0dedude · · Score: 5, Informative

    Neato! I caught this story right when it went on slashdot's main page, 0/3 comments and got the vote tally, we can safely say that this is pre /. effect. Now, I think I know which way most slashdoteers are going to vote, and we've already seen vote skewing here when a sig told people to vote no on Verisign all through September and October (it got around 5000 votes at the end of the month as I recall), let's see how slashdot affects a slightly larger traffic/voting site:

    So here are the current vote totals, pre /. effect:

    24692 Responces
    27% Yes
    41% Not today, but maybe soon
    29% Never (Likely to spike? Let's see!)
    2% None of the above

    --
    Since when has this country used intellectual elite as a pejorative term?
    1. Re:Measure the Slashdot Effect! by focitrixilous+P · · Score: 1, Redundant

      I agree, and cannot see my vote going o'er the internet anytime in the future, but we (as a slashdot collective) are forever hopeful that our beloved Linux/BSD will find a way to do just about anything. While current e-voting has been massivly flawed, surely some enterprising devloper will come up with something about the problem someday. Until then, I'm content to make the trek out to a polling place once a year.

      --
      SAILING MISHAP
    2. Re:Measure the Slashdot Effect! by whorfin · · Score: 4, Interesting

      But isn't participating in this poll itself a form of 'voting' ?

      --
      Laugh while you can, monkey-boy!
    3. Re:Measure the Slashdot Effect! by ewhac · · Score: 1

      Where's the entry for Hank, the Angry Drunken Dwarf?

      :-),
      Schwab

    4. Re:Measure the Slashdot Effect! by Anonymous Coward · · Score: 0

      25889 Responces 26% Yes 40% Not today, but maybe soon 31% Never 3% None of the above

    5. Re:Measure the Slashdot Effect! by arvindn · · Score: 1

      OK, so its now several hours since the story was posted and there's no "spike" in the percentages. Infact the difference of 2% could very well happen due to statistical variation even if it hadn't been slashdotted! Which clearly shows that /.ers don't read articles, but they just click them anyway just for the sadistic thrill of killing the server ;^)

    6. Re:Measure the Slashdot Effect! by mwburden · · Score: 1

      I think the main reason that "Not today, but maybe soon" is winning is the crummy selection of choices in the poll. I'll bet that if "Not until someone comes up with a good audit process and a way to hold the vendor responsible" was a choice, the results would be a bit different. I don't see that happening "soon" so "maybe soon" was definitely not an option for me.

    7. Re:Measure the Slashdot Effect! by gnu-generation-one · · Score: 1

      "Not a scientifically valid survey. Click to learn more."

      MSNBC says that their polls are not representative because people offer to vote rather than being asked. I would think that being asked to vote at the end of reading an article on the subject in question might also influence things. But they don't seem to mention the people with a list of transparent proxies, a copy of LWP, and no cookies. Apparently MSN is immune to that, to the extent that it doesn't merit a warning.

  3. If their internal network can be compromised... by Sikmaz · · Score: 5, Insightful

    Why should we trust their voting systems without auditing?

    1. Re:If their internal network can be compromised... by MikeCapone · · Score: 2, Informative

      Exactly.

      Lets not forget that these evoting corps seem to be doing everything in their power NOT to make it secure.

      More E-Voting SNAFUs.

      I just wish I remembered the news source that mentioned that the big 3 corps that made the voting material were big republican donators. Anybody has a link?

    2. Re:If their internal network can be compromised... by Beryllium+Sphere(tm) · · Score: 3, Insightful
      You can't trust anything important without auditing. You can't even trust paper without the opportunity to do independent recounts.

      There was something encouraging in the article, evidence that the company understands the concept of detection and response:

      "It's true that systems would always be compromised," he said. "The point is, you want to know about it. ... If you can detect when those things happen, that's what's vitally important. Any ballots that get compromised will get detected, and that's what's crucial."

      Not so good is that the article says their systems will allow voters to check their ballots after leaving the polling place. I hope the reporter misunderstood. Chaum's paper explains how you could verify that your vote got counted, was valid, and was what you expected -- but you don't want to be able to see what candidate the vote was for. That way lies intimidation and verifiable vote-buying.

    3. Re:If their internal network can be compromised... by Anonymous Coward · · Score: 0
      I just wish I remembered the news source that mentioned that the big 3 corps that made the voting material were big republican donators.

      Most people making over $40k/year outside of Hollywood and New York are Republicans so there's no conspiracy there. People want to keep what they earn and not have it taxed away by liberal Democrats to fund their "great society" socialism experiments. I will say though that the neo-con Republicans are doing a fascinating job of driving me even farther away from the party by spending us into a huge budget deficit. The point is to cut taxes and reduce spending morons, not cut taxes and increase spending. The defense department should've been cut to 10% of it's current size and the 400 billion dollar savings should've been applied as a tax cut. Nobody in the world wants America in their land so bring our troops home as a national defense force, lock down the borders, and stay the hell out of world affairs. The world hates us for interfering in their internal affairs so why rub salt on a wound? Let them fucking live in the 10th century if they want.

    4. Re:If their internal network can be compromised... by Anonymous Coward · · Score: 0

      ala the democrats in chicago.
      still today.....

    5. Re:If their internal network can be compromised... by Shakrai · · Score: 1
      Nobody in the world wants America in their land so bring our troops home as a national defense force, lock down the borders, and stay the hell out of world affairs.

      Yes, because isolationism worked so well the last time we tried it. Think 1930s. World did just fine without our help.

      Idiot.

      --
      I want peace on earth and goodwill toward man.
      We are the United States Government! We don't do that sort of thing.
    6. Re:If their internal network can be compromised... by alanb0 · · Score: 1

      Actually, what I meant (and what VoteHere intended) is probably basically what Chaum proposes: As I understand it, you would get a code you could match up against a second code, say, via telephone. For example, if you voted for Karenna Gore Schiff, you would hear the code "123," but if you voted for Jenna Bush, it would be "456." But only you would know which code corresponded with which candidate, so that you couldn't prove to someone else that you voted the way they paid you to vote (or told you to vote). I tried to shorthand it in the latest story, and provide a little more detail in this story. ... We also have Simson Garfinkel's Tech Review piece that provides an interesting take on the controversy...

      Best, Alan Boyle, MSNBC

    7. Re:If their internal network can be compromised... by C10H14N2 · · Score: 1

      Unfortunately, the "Great Society" experiment you so abhor exists in every advanced democratic country. It is distinctly not the solitary brainchild of Lyndon Johnson. Anyone who has stepped five feet across the border realizes that. Now about a trillion dollars of the budget (somewhere around 13% of GDP and nearly half the budget) goes to various health-related programs. That's not just welfare queen handouts, that's preventing your sorry ass from being infected with all manner of things that in the last two centuries made having a family of fifteen a necessity for anyone who wanted their children to outlive them--you know the bad old days when typhoid, tuberculosis, polio and all manner of nasties like e.coli and hepatitis were daily experiences. The fact that most people can reasonably expect to finish high school, go to college, make $40,000/year and not die of an infectious disease before they're 30 is almost entirely due to the various pieces of "Great Society" legislation. Did you think this stuff just came out of thin air?

      If you want to live without taxes you have two choices: move somewhere populated by those who need no support, like, say, Monaco, or move somewhere that has no government services like, say, Western Sahara. If neither of these options appeal to you, deal with the fact that someone, somewhere must pay for all the crap that makes an advanced democracy, well, "advanced." Also realize that 85% of the population earns less than $75k/year and that $75k/year is equivalent to $50k ten years ago and only about $34k twenty years ago. That just ain't alot of money, honey. It sure as hell isn't going to buy you a condo in Monaco. In the meantime realize that 85% of us need the sum of other people's taxes to live in this Great Society. Basically, you're on the dole, whether you know it and/or like it or not.

      As for the military, I totally agree, but, on the other hand, if we were to rapidly roll back the military to 10% we'd have 12 million people without a source of income. You want to talk about "Great Society" welfare, try dealing with 16% unemployment. Swords to plowshares, blah blah blah, the fact is if you just yank the rug out, you're going to send millions of people straight to the welfare office and not all military expenditures are for blowing shit up. A great deal of it is behind things like making Internets and vaccines and general aerospace and I'd much rather be paying the military to fund that than pay their employees for eating Cheetos and watching soap operas because we felt like canning them all en masse.

  4. Um... Suggestion... by LordKazan · · Score: 1, Interesting

    Why don't we make a very small linux distro that works with small puters with touchscreens and make a secure voting system.

    Just to bite our thumb at them.

    --
    If you cannot keep politics out of your moderation remove yourself from the Mod Lottery.. NOW!
    1. Re:Um... Suggestion... by benjamindees · · Score: 1

      Such a distro would also be a great way of advertising the many Linux-based point-of-sale solutions available.

      In fact, (before they lost their minds), our buddies at SCO were touting a Linux POS distribution that would run on similar equipment.

      --
      "I assumed blithely that there were no elves out there in the darkness"
    2. Re:Um... Suggestion... by York+the+Mysterious · · Score: 2, Informative

      I don't think the problem is that these systems run Windows though that's certainly not helping the security situation. I believe the problem is more the secrecy these companies are taking as well and the inherent risk to the accuracy of the voting that comes with computerizing the process.

      --

      Tim Smith - Ramblings from Nerd Land
    3. Re:Um... Suggestion... by rifter · · Score: 1

      I don't think the problem is that these systems run Windows though that's certainly not helping the security situation. I believe the problem is more the secrecy these companies are taking as well and the inherent risk to the accuracy of the voting that comes with computerizing the process.

      Yes, and windows requires that secrecy. First off, the operating system is closed source and cannot be modified. Second, although open source apps have been ported to the windows platform by making use of gcc and alien toolkits (like GTK+), software made using Visual C++ and the Microsoft native libraries is not the property of the programmer, but of Microsoft, by virtue of the virulent nature of the license for the Microsoft header files, APIS, and associated libraries. MIcrosoft has repeatedly said that developing open source software using these libraries is a violation of their license and the license for Visual C++.

      The only hope is to use an open platform for this purpose.

  5. umm...ok by Savatte · · Score: 4, Insightful

    can you really trust voting results/percentages of an e-voting firm that was hacked?

    1. Re:umm...ok by BuckaBooBob · · Score: 4, Funny

      Any Company on the internet Can be Hacked...

      In Actuality MS could most likely come up with the Most Secure E-voting Software

      Voting Atendant: "Sorry all of our E-voting computers are plauged with a Blaster Worm variant and will not work.. Please use the standard Manual Process.."

      Where do you want to vote today?

      --
      Who needs WiFi when we can have Packet Over Sheep! http://datacomm.org/PoS-InternetDraft.txt
  6. Microsoft is responsible (really!) by the+man+with+the+pla · · Score: 3, Insightful

    I'm not trying to troll here...but hear me out: People simply don't trust electronic voting...as a geek this makes me very sad, because voting is something that could and should be more automated.

    Now, ask yourself, why is it that people don't trust comptuers?

    Answer: Microsoft's abhorent trackrecord with regard to security has an awful lot to do with it. It's not the only factor, but it is *huge*.

    All these windows bugs do effect us linux geeks: The perception of computers in general has suffered greatly.

    --
    Join Jihad against slashdot's editors. Join anti-slash

    --
    The linux hacker
    1. Re:Microsoft is responsible (really!) by MBCook · · Score: 4, Insightful
      That may be why the uninformed are affraid (can you blame them?), but that's no reason to not trust e-voting.

      E-voting is a reason not to trust e-voting. Slashdot just has story after story of how these big "trust us, our stuff is fair" e-voting companies have problem after problem after problem. Things are bad now, but imagine the kind of stuff that might come up if it was legislated that the 2004 Presidential Election had to be done on these systems. What happened in Florida (which was largly the fault of people who were too desperate to not loose to care about anything else, since the recounts and recounts didn't change anything) would look like a cakewalk compared to finding people who got to vote in 12 districts, those who's votes were counted 10,002 times, and the fact that anyone with a "A" or an "E" in their last name (BUT NOT BOTH) could only vote during odd numbered minutes of even numbered hours in districts that are prime numbers or some other rediculous things that at this rate seems it could easily turn up.

      I'm all for MS bashing when they deserve it, and they may be the number one reason people don't trust e-voting (allbeit indirectly); but there are REAL reasons why people shouldn't trust it, and if it were to get reported more, then people still wouldn't trust the things, it would just be for the "right" reason.

      --
      Comment forecast: Bits of genius surrounded by a sea of mediocrity.
    2. Re:Microsoft is responsible (really!) by nlinecomputers · · Score: 4, Insightful

      I'm not trying to troll here...but hear me out: People simply don't trust electronic voting...as a geek this makes me very sad, because voting is something that could and should be more automated.


      Why should voting be more automated? The only reason ballot counters are used is to rig the election. Several contries around the world conduct elections with hand marked and hand counted ballots and do just fine. Automation just makes it that much easier to rig the vote. Voting SHOULD be difficult, hard to quickly count, and should envolve lots of people in the process. When one person or a small group gets to count the ballot or gets to build an automatic system to count the ballots it is far easier to bribe or threaten that small group and rig the election. Any kind of automatic system should be questioned, be it scantron systems, pull lever voting machines, or computers. It is all designed to hide the vote from the public NOT make voting safer. I don't trust computers not because I am ignorant of what they can do because I know exactly what they are able to do and how easy it would be to rig an election.

      If it is not a paper ballot and the ballot isn't counted at the polling place in public view then you shouldn't trust that vote. Most places in the USA the ballots are not counted at the poll. They are hauled away to the court house and counted out of public view. No way to be certain that the ballot box is the same one that left the polling place and no way to have the public watch the counting. This is by design to aid in vote fraud. We haven't had a free election in most places in the country in years.

      --
      Slashdot, home of supporters of free software, free music, and free speech.Except for Moderators that disagree with you.
    3. Re:Microsoft is responsible (really!) by b0nes · · Score: 1

      I'm not trying to troll here...but hear me out: People simply don't trust electronic voting...as a geek this makes me very sad, because voting is something that could and should be more automated.
      Now, ask yourself, why is it that people don't trust comptuers?


      now ask yourself, why is it that the vast majority of voters use computers, if at all, with distrust? check the voting records out. does your father/mother use a computer much? if so, how much do you help them with it? my point being, how well do they understand it? understanding=trust

      Answer: Microsoft's abhorent trackrecord with regard to security has an awful lot to do with it. It's not the only factor, but it is *huge*.

      FUD. the majority of users do not even understand when they have been compromised, much less why. otherwise, M$ patch system may have worked reasonably well.

      All these windows bugs do effect us linux geeks: The perception of computers in general has suffered greatly.

      ahhh, the nub of your argument - linux rules, all else must be shite, especially M$. with all due respect to your beliefs, this is a non-starter as an argument. honestly, if linux gets up there in terms of usage, do you seriously expect majority of the users to understand it anymore than windows? remember, DOS and windows x were once relatively low-distribution programs as well, promoted by enthusiatic geeks.

      --
      simple is as simple does.
    4. Re:Microsoft is responsible (really!) by Anonymous Coward · · Score: 0

      Someone that spells as horribly as you should be careful about drawing conclusions. Stick to dot-to-dot.

      P.S. The recount showed Gore won.

    5. Re:Microsoft is responsible (really!) by benjamindees · · Score: 2, Insightful

      I think what he was saying is that it's the *implementations* that are faulty, not the concept.

      Perhaps the current incarnations are faulty because they involve insecure proprietary software made by inept, politically-motivated companies; but that doesn't mean that e-voting is inherently impossible to do correctly.

      There's a real feeling among "regular people" that computers aren't to be trusted. It will only hurt OSS and proponents of universal computing when Microsoft capitalizes on this mistrust (that they helped create) by introducing "Trustworthy" computers that only run Windows.

      The technologically informed must make it clear that the problems with e-voting (and secure computing in general) are not technical ones and will not be solved by blindly trusting faceless corporations or closed-source government voting booths.

      --
      "I assumed blithely that there were no elves out there in the darkness"
    6. Re:Microsoft is responsible (really!) by Overly+Critical+Guy · · Score: 1

      I'm not trying to troll here...but hear me out: People simply don't trust electronic voting...as a geek this makes me very sad, because voting is something that could and should be more automated.

      Oh, you're trolling.

      Now, ask yourself, why is it that people don't trust comptuers?

      They don't have the time to spend learning the operating system. It's that simple (and the reason why Linux is so less accepted right now...far too overly complex).

      Answer: Microsoft's abhorent trackrecord with regard to security has an awful lot to do with it. It's not the only factor, but it is *huge*.

      Of course it doesn't. People don't blame Microsoft for things like that. They blame the HACKERS.

      All these windows bugs do effect us linux geeks: The perception of computers in general has suffered greatly.

      Not because of any track record. Man, Slashdotters will turn ANYTHING into an anti-Microsoft post. This is about an e-voting firm!

      --
      "Sufferin' succotash."
    7. Re:Microsoft is responsible (really!) by obey13 · · Score: 1

      Whether or not Mircosoft is responisble for the publics mistrust of computers, an easy solution would simply to for the voting machine to make a print out as well as recording the voters choices. There would then be a double record of the vote(In case of any electronic problem), and the pice of paper would also make a mistrustful public less wary.

      --
      Oh my, I think Dave just turned into a bear.
    8. Re:Microsoft is responsible (really!) by man2525 · · Score: 1

      I don't trust computers not because I am ignorant of what they can do because I know exactly what they are able to do and how easy it would be to rig an election.

      So do others. Diebold even employs a computer programmer who was jailed for falsifying computer records.

      http://www.wired.com/news/evote/0,2645,61640,00.ht ml
    9. Re:Microsoft is responsible (really!) by swillden · · Score: 2, Insightful

      The technologically informed must make it clear that the problems with e-voting (and secure computing in general) are not technical ones

      Aren't they? Depends on your definitions, I suppose, but I would say the main problem *is* a technical one, and that it's intractable. The problem is that technology is inherently opaque, unless you have a great deal of specialized training, and even then you can never really be sure unless you're allowed to disassemble the device.

      Sure, there are ways you can build systems that can be verified, and processes to verify them, but the costs are huge (I design and build secure systems for a living) and you'll *never* convince people as thoroughly as you will if you simply print a paper ballot that they can read and drop in a locked metal box.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    10. Re:Microsoft is responsible (really!) by AJWM · · Score: 2, Interesting

      understanding=trust

      Hell no it doesn't. A little understanding may equal trust -- which leads to all the sorts of horrors that are routinely chronicled in the RISKS digest, and the kind of crap that Microsoft puts out.

      The more experienced of us, with more understanding, know the many ways things can be screwed up (accidentally or deliberately) with a computer assist. As the saying goes, "to err is human; to really foul things up requires a computer".

      I've been programming for 30 years, and I've worked on (among numerous other things) banking systems. That's why I still pay everything with paper cheques that get returned to me along with the statement.

      --
      -- Alastair
    11. Re:Microsoft is responsible (really!) by b0nes · · Score: 1

      Hell no it doesn't. A little understanding may equal trust -- which leads to all the sorts of horrors that are routinely chronicled in the RISKS digest, and the kind of crap that Microsoft puts out.

      actually, a little understanding is the most dangerous thing of all. false courage results, false feelings of infallability. get a grip, and check out the other famous quote (OTQ)[possibly paraphrased]:
      " a little knowledge is a dangerous thing"

      --
      simple is as simple does.
    12. Re:Microsoft is responsible (really!) by Anonymous Coward · · Score: 0
      Now, ask yourself, why is it that people don't trust comptuers?

      Answer: Microsoft's abhorent trackrecord with regard to security has an awful lot to do with it. It's not the only factor, but it is *huge*.

      I fully agree. I have always been disgusted at the fact that we cannot vote on the web, but these companies won't get their heads out of their asses to do it right and quit using the most insecure platform on the planet for secure applications. I noticed that the article mentioned the company, VoteHere, got broken into. My first though was, "Yea I bet they are stupid enough to be running Microsoft software". I checked their web site with Netcraft, and sure enough, it is running on a Microsoft Windows platform like every other site I have checked after hearing they were broken into. Bad first impression!

      Then I browse around and find under the "More features & benefits" column that it supports Microsoft CE 4.x, Windows Supports Microsoft CE 4.x, Windows 95/98/2000/NT, and some embedded Operating Systems. Hmm, No mention of any of the BSD's, Linux, OSX, or any other system that is based on something other than a toy and has some real security background.

      So they cannot even keep their own site secure and they expect us to trust their software for the countries elections? As much as I want Internet based voting, I certainly would not trust our countries elections to be in the hands of a company that STILL has not learned the lessons about running a toy insecure platform riddled with thousands upon thousands of viruses.

    13. Re:Microsoft is responsible (really!) by benjamindees · · Score: 1

      I'm going to take the advice in your sig and pick your argument apart based on your poor presentation, rather than on it's merit, since I think we're mostly in agreement.

      Premise:
      I would say the main problem *is* a technical one, and that it's intractable.

      Assertion #1:
      technology is inherently opaque
      Rebuttal:
      unless you have a great deal of specialized training

      Assertion #2:
      you can never really be sure
      Rebuttal:
      unless you're allowed to disassemble the device.

      Straw man:
      there are ways you can build systems that can be verified, and processes to verify them
      Attack on straw man:
      the costs are huge
      Defense of straw man:
      The costs can't be larger than manual ballot-counting.

      Potentially valid assertions:
      1) Cost
      2) Voter confidence (or lack thereof)

      Valid assertions in support of premise:
      None

      Conclusion:
      No technical problems in sight.

      --
      "I assumed blithely that there were no elves out there in the darkness"
    14. Re:Microsoft is responsible (really!) by Anonymous Coward · · Score: 0

      Straw man:
      there are ways you can build systems that can be verified, and processes to verify them
      Attack on straw man:
      the costs are huge
      Defense of straw man:
      The costs can't be larger than manual ballot-counting.


      This defense is unsupported. Rather than just claim "Yes they are", let's look at this specifically: verification requires points you raised above. Namely:
      a great deal of specialized training
      and
      you're allowed to disassemble the device

      So, the cost of verifying an electronic system is that anyone who claims a great deal of specialized training must be allowed to disassemble any voting device he'd like at any time he'd like, in order to perform that verification. Therefore, you need not only to have enough voting machines for people to vote on, you must also have enough to lie around disassembled during voting-day-verification. You need not only to have enough staff to direct voters, but you must add staff to supervise the voting machine disassembly (or risk 'verifiers' altering the machines).

      Verifying punch cards requires that you check the number of cards against the number of voters (automated), and verify the seals on the ballot boxes.

      So how exactly can trustworthy, corruption free electronic voting be less expensive than punch-cards?

    15. Re:Microsoft is responsible (really!) by Shakrai · · Score: 1
      trusting faceless corporations or closed-source government voting booths

      As much of a Linux/OSS fan as I am, the problem with e-voting (I've said this about a dozen times -- as have others) is not that it's closed source. The problem is there is no way for the voter to verify his vote was actually counted in a way that can't be easily changed later -- short of printing a paper ballot for him to verify and drop into a lock box.

      Sure paper can be tampered with too, but not as easily as say 'vi results' (or notepad in the case of Windows) and editing the results after the election. The voting machine should be nothing more then a fancy interface to a printer. The ballots are read by OCR machines and/or Human beings (in the case of manual recounts).

      While I always prefer open-source software to closed-source software saying you can't trust closed-source solutions at all is just as silly as blindly trusting open-source solutions. Would you rather do your banking at a closed-source ATM that gives you a paper receipt with a bank that mails you a paper statement at the end of the month or a bank with an open-source ATM that does not print receipts (you can trust us we are open source!) or mail you statements?

      --
      I want peace on earth and goodwill toward man.
      We are the United States Government! We don't do that sort of thing.
    16. Re:Microsoft is responsible (really!) by swillden · · Score: 1

      No technical problems in sight.

      As I said, it depends on your definitions. Voter confidence is a key requirement of voting systems. Arguably it's a more important requirement than accuracy. I suppose there is a small leap in my logic in that I implicitly assumed that the only way to achieve voter confidence is through transparency, but if you allow that, then transparency is clearly a requirement of any voting system and therefore a technical challenge that must be met by any good e-voting system.

      I posit that the challenge is inherently insuperable, as long as the votes are managed in a purely electronic fashion. Do it on paper and you have a system that is easy to make transparent and verifiable in a way that everyone can understand. The technology to make that process secure, auditable and transparent is well-understood.

      The costs [of a verifiable system] can't be larger than manual ballot-counting.

      Oh, yes they can, especially in the short term. Tamper-reactive hardware and auditable and audited manufacturing processes are not cheap. Consider that such hardware currently costs over $2000 per unit, and that's without any I/O hardware. Weigh that against the cost of semi-volunteer ballot counters ("semi" because they are paid a pittance) and it will take several years to reach the break-even point.

      Take my voting district as an example. Approximately 1,000 people vote at each election, using five voting booths (and there are always lines -- people complain every year that we need more booths). If we optimistically suppose that the fully-loaded cost of a verifiable, secure, voting machine is $2000 for 10 years (including purchase, maintenance, periodic verification, auditing, storage, etc.) then the taxpayers have to spend $10000.

      OTOH, if we generously pay the vote counters $10 per hour and assume that counters work in pairs and can only count 60 ballots per hour per pair, then the annual cost for vote counting is $333, for a 10-year total of, say, $3400. In practice, vote counters are really volunteers and are paid far less than $10/hr. In many places they're unpaid. There are additional costs for secure transport and storage of the ballots, but they're shared out with other voting districts, which helps defray them. Call that another $100 per year. You also need to print the ballots, so add another $110 per year (10 cents per ballot * 1100 ballots). Total: $5500 for 10 years.

      And the manual option will be trusted by more of the voters.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
    17. Re:Microsoft is responsible (really!) by Anonymous Coward · · Score: 0

      Unfortunately, it is the concept that is faulty and the problems are technical but the entire idea is inherently flawed. There are already a number of excellent implementations out there (look at Australia for example). I would suggest that, as a society, we are too quick to see technology as a silver bullet. The GPL, for example, provides a non-technical solution to some of the biggest problems facing the technology industry.

    18. Re:Microsoft is responsible (really!) by Anonymous Coward · · Score: 0

      Assertion #1:
      technology is inherently opaque
      Rebuttal:
      unless you have a great deal of specialized training
      I have a great deal of specialized training and equipment. I maintain that, except for very simple systems that I have built by hand, some portion of every system I have worked on was opaque to me. Even so, if you consider my level of knowledge acceptable, I would also maintain that it would be prohibitively expensive to provide that training to every voter (or do you trust me to verify your vote.)

      Assertion #2:
      you can never really be sure
      Rebuttal:
      unless you're allowed to disassemble the device.
      Wouldn't this make elections rather slow? Also, when I dissassemble the device how do you guarantee the integrity of everyone else's vote

      Straw man:
      there are ways you can build systems that can be verified, and processes to verify them
      Attack on straw man:
      the costs are huge
      Defense of straw man:
      The costs can't be larger than manual ballot-counting.
      That's unsupported and a fallacy. Empirical evidence suggests that costs are in fact 2 to 10 times higher.

  7. Vote on the internet by soliaus · · Score: 5, Funny
    Astoundingly, the 'hot poll' associated with this story has (as this is being posted) 28% of respondents saying they would trust their vote on the internet and 41% saying 'not now, but maybe soon.' Feel free to cast your vote.

    So what, your telling to vote on the internet to tell them that I dont want to vote on the internet? Quite astounding indeed...

    --
    Speaking at Defcon 12 - Credit Card Networks Revisted: Pen
  8. Trust In E-Voting? by MBCook · · Score: 5, Interesting
    Am I the only one who is ready to never trust e-voting ever again? I was a little worried before I knew anything about it. The more I learn, the more terrified I get. With everything that goes on in the computer world, e-voting is SCARRY.

    Let's ignore hacking and break-ins. Those are too easy. Vendor bugs are bad enough. There have been bugs that cause automatic medicine dosers in hospitals to give out too much medice and almost (or completely) kill a paitent. I'll go vote for candidate Ham Sandwich, but how do I know some bug won't cause every vote for his oppoent, Mr. Mayor, to be counted 100 times? These things just seem to happen more and more.

    So what WILL have me trust it? Let's set it up like a slot machine is set up. It has it's software burned into some ROM. It should be thouroughly tested by independant labs, the code should be available for me to look at, and I should be able to read the ROM chip after the elections are done so I know that it's got what it's supposed to on it (not that many people would do this, but it should be an option). When I'm done voting, it should print out a paper punch ballot that I can look at to see that it voted the way I told it to. The voting commisions can use the electronic results, but a random 5% of all districts every election should check the electronic counts against the paper ballots to make sure nothing weird is going on there. And most importantly of all (and like a slot machine), YOU SHOULDN'T BE ABLE TO CHEAT. Shock it with 10,000,000 volts to make sure it doesn't mess up and let me vote twice. Punch it and kick it and do anything possible (and then some) to make sure it still functions correctly, just like a slot machine. Slot machines go through all that because they might be responsible for millions of dollars. My vote should be worth more than that, and there for should have TOUGHER standards behind it.

    In short, I don't trust e-voting. The only way I'd LIKE to see e-voting is that you choose your candidates on the computer, then it prints out a punched ballot (with names and all, so I can see it did things right) that I turn in, and THAT'S my ballot; the machine is nothing more than a ballot punching tool and holds no results of it's own. I should be able to do it all by hand if I want. This is the only way I'd like to see e-voting, and the description above is the only way that I'll accept it.

    --
    Comment forecast: Bits of genius surrounded by a sea of mediocrity.
    1. Re:Trust In E-Voting? by Anonymous Coward · · Score: 0

      Theylve never let you print a ballot at home.

      That would allow people to sell/buy votes. You could meet whoever was buying your vote outside the polls, show them your preprinted ballot, then take it in.

      Although.. hrm.. I suppose you could print out one ballot matching what the vote buyer wanted, and print a second one and fold it up in your pocket. Thatd work, unless they trucked people in to vote, strip searched them before bringing them there, then provided them prepared 'ballots' to take in.

    2. Re:Trust In E-Voting? by Barto · · Score: 2, Informative

      I don't have a problem as long as the program used is open source, and the program running on election day is verified to be that same program.

      You can take steps to keep track of, record and back up electronic votes if something goes wrong. Remember, bad things can happen with paper voting too (eg vote counting buildings catching fire, flooding). There isn't that much difference with e-voting, PROVIDING you take equivalent digital precautions.

      Here in Canberra, our voting machines run Linux, with GPLed e-voting software. Find the code at http://www.elections.act.gov.au/evacs.tar.gz

      Barto

    3. Re:Trust In E-Voting? by Anonymous Coward · · Score: 0

      Am I the only one who is ready to never trust e-voting ever again?

      [Obligatory 2000 election whoring]

      The real question: Am I the only one who is ready to never trust voting again?

      [/Obligatory 2000 election whoring]

    4. Re:Trust In E-Voting? by MBCook · · Score: 1

      I wasn't suggesting that, although I do like the idea of just sending an absentee ballot to every registered voter and forgetting polling places all together. There are some good resaons to do this (doens't clog up places like school which causes all sorts of problems, increases voter "turnout"), but also has it's problems (icreases voter "turnout", so more idiots who know nothing and would never vote would). I think there is somewhere in the US that does this, maybe Oregan?

      --
      Comment forecast: Bits of genius surrounded by a sea of mediocrity.
    5. Re:Trust In E-Voting? by Anonymous Coward · · Score: 0

      I think one of the major problems with mandatory absentee ballots would be people leaving it on their desk to do later and then forgetting about it until CNN announces who the next president is. Voting that way would seriously fuck over the procrastinators of this country. :)

    6. Re:Trust In E-Voting? by niko9 · · Score: 1

      There have been bugs that cause automatic medicine dosers in hospitals to give out too much medice and almost (or completely) kill a paitent.

      Can you back up this fact with a link to an article? Most medication errors are due human error, i.e., poor handwriting, which results in the misunderstanding of common medical abreviations, that results in a medication error.

      Most elctromechanical medication dispenser (morphine pumps/ IV infusion pumps) are built to rigorous standards, have failsafe checks, and have to be checked out at the Bio-Med dept. every six to 12 mos.

      The only problem with medication pumps, is that they--just like computers--do exactly what they are told by the nurse entering the drip rate.

      --

    7. Re:Trust In E-Voting? by stripes · · Score: 1
      In short, I don't trust e-voting. The only way I'd LIKE to see e-voting is that you choose your candidates on the computer, then it prints out a punched ballot (with names and all, so I can see it did things right) that I turn in, and THAT'S my ballot; the machine is nothing more than a ballot punching tool and holds no results of it's own. I should be able to do it all by hand if I want. This is the only way I'd like to see e-voting, and the description above is the only way that I'll accept it.

      You are a bit more hard line then I. I'm fine with the computer counting the votes, but having paper ballots available for recounts and spot checks for verification of the computer tally.

      I think computer voting can work, but without some sort of checks the temptation to "throw the vote" (either by the makers of the boxes, or by someone exploiting crappy security) will be too large. With a human verifiable backup and real spot checks the temptation will be signifigantly lessened (because the chances of getting away with it will be signifigantly reduced).

  9. Eventually by BooRadley · · Score: 5, Interesting
    The CEO of this company says he doesn't want to politicize the break-in. That's great. But to say they are going to eventually release the code to their app is not very useful to his cause, unless the code itself may be a source of embarrassment, and he's doing some sort of damage control.

    Someone probably rooted their linux mail server with a cracked account, and took the code for their app in the process.

    Anyone want to bet they are in violation of the GPL, and we might just see the code itself under posted to the net any day now?

    --

    -- lk t lv ll th vwls t f wrds. T svs lts f tm t wrt bt ts pn n th ss t rd nd mks m lk lk cmplt dpsht.

    1. Re:Eventually by Anonymous Coward · · Score: 0
      You kidding? If a Linux server got rooted, the press would be all over that--Linux security hole jeopardizes democracy.

      ~~~

    2. Re:Eventually by inode_buddha · · Score: 1

      Ummm, IIRC the CNN article mentioned that something similar happened at Diebold. Yes, damage control happens. (Shit happens...) How much does anyone here want to bet that the same individual/organization is responsible? I'm not normally *that* paranoid, but 2x the same type of event is more than coincidence in my book. Especially when it comes to the types interested in tipping national/global power. Comments, anyone?

      --
      C|N>K
    3. Re:Eventually by zCyl · · Score: 1

      Especially when it comes to the types interested in tipping national/global power. Comments, anyone?

      Electronic voting is one step closer to internet voting. Internet voting opens up a new category of voters. I'm sure someone out there has already calculated which direction these new voters will swing. College age people, for example, make up a huge portion of the population, tend to have liberal views, and tend to not vote. How many more would vote if they could do it over the internet? Similarly, there might be a collection of conservative businessmen who can't find time in their schedules to make it to the polls.

      When it comes time to seriously debate internet voting, there will be a lot of alternate agendas brought to the table.

  10. Not only NO, but HELL NO! E-Voting sucks. by politicalman · · Score: 0, Troll

    Internet voting is a very bad idea.
    People have died (are dying) for this right.
    To have it taken away by a successful technocrat is unacceptable.
    Real paper ballots that need to be counted and can be stored
    (and found in some deceitful persons trunk)
    are much better than the arguments that will emerge after every single election
    when even a hint of hacking (cracking) has appeared.

  11. Poll? What poll? Vote? What vote? by shanen · · Score: 4, Insightful

    The poll has apparently been closed already. Not sure what to make of that, but perhaps yet another political slant. At least CNN isn't as imbalanced as Faux News.

    Anyway, on the substantive issue of reliable voting, computer security is NOT a done deal. This networking stuff is great in many ways, but there's a big problem when everything is connected together. You hack into one part of the system, and you've exposed various other parts to attack. The old idea was to make a secure perimeter with firewalls and DMZs and so forth, and you could keep something safe inside, but that's called the "eggshell model" now--turns out to be relatively easy to breech and you still need strong security for EVERY machine with ANY sensitive information on it. Someone in the office took his notebook computer home for the weekend, and you can never tell what Trojan backdoor is inside your network now.

    Of course, the BIG threat here is abuse of power. No one needs to be protected from weakness, but powerful people often want MORE. Not an independent event--that greed is usually part of how they got there in the first place. Consider the recent example of Arnold in California and the selection in Florida in 2000...

    If our votes are to have ANY meaning, they must be protected, and it is very clear that some people will play ANY game that will win more power. Voting machines as secret slot machines? Would you trust Las Vegas THAT much?

    Simple. Print the ballots. Let the voters LOOK at what the ballot says, and save it. It's convenient that the machine can also report the results quickly--but NOT convenient that any computer can be hacked.

    --
    Freedom = (Meaningful - Coerced) Choice != (Speech | Beer^2), and sad sock puppets' bad mods avail them naught.
    1. Re:Poll? What poll? Vote? What vote? by Anonymous Coward · · Score: 0

      The poll has apparently been closed already.

      The poll is at the bottom of the MSNBC article.

      Pity that fact gets in the way of your rant.

    2. Re:Poll? What poll? Vote? What vote? by Anonymous Coward · · Score: 0

      As if the poll being open or closed has anything to do with his posting except the first sentence. Big whoop-dee-doo.

    3. Re:Poll? What poll? Vote? What vote? by Dachannien · · Score: 1

      He or she predicates several other sentences in the post on the concept of political greed and conspiracy (note the smearing of right-of-center establishments such as Fox News, Arnold Schwarzenegger, and George Bush). That concept was suggested by remarking that the poll was closed, and that some political conspiracy could be at work here.

      So, the entire post (sans the paragraph on network security) *does* have something to do with the poll being open or closed.

    4. Re:Poll? What poll? Vote? What vote? by Anonymous Coward · · Score: 0

      Bullshit. If you're an example of someone who buys into the fox news mindset, then its clear those viewers are just more mainstream dittoheads. Don't believe me? Read the entire post, sans the first paragraph. It loses nothing in impact, meaning or point. Go home paranoid little boy.

  12. Salary data! by magarity · · Score: 3, Funny

    the concern ... is about the possible release of salary and other HR data.

    Mobilize the national defence! The management salary figures have been compromised!
    What, vote tampering? So?

  13. Slash editors by BigDumbAnimal · · Score: 0, Offtopic

    What is Timothy thinking with linking 2 article to a common slahdot story?
    How can the other editors post a dupe?
    What has happened to slashdot!

    Where will the dupes we all depend on come from now?

  14. If you're not trying to troll ... by Anonymous Coward · · Score: 0
    I'm not trying to troll here...
    Then claiming allegiance to Anti-Slash is a funny way to back it up. I notice your post is first on Anti-Slash begging for upward mods.

    For those who aren't familiar with the Anti-Slash mandate, here's the extract from their FAQ:

    When not directly exposing the flaws of slashdot, jihadis strive to lower the singal to noise ratio in slashdot comments. This serves to turn the slashdot readership away to sites with better content. We host many tools to aid in the lower of S/N.
  15. You know the vote was hacked .. by cfuse · · Score: 3, Funny

    When Natalie Portman of the hot grits party is elected.

    1. Re:You know the vote was hacked .. by Anonymous Coward · · Score: 0
      I'll be more suspicious when President Neal occupies the Oval Office.

      ~~~

    2. Re:You know the vote was hacked .. by strike2867 · · Score: 1

      Not necessarily, I would vote for her anyway.

      BTW she goes to Harvard and is smart as hell, but this is obviously not why I would vote for her.

      --

      Vote for new mod!!! Score:-2,Imbecile
  16. Whoa--the spin! by Anonymous Coward · · Score: 0
    The same individual may be tied to the theft in March of internal documents from Diebold Election Systems of Canton, Ohio.

    "I have no problem debating the merits of electronic voting with anyone, but breaking and entering is not an appropriate forum for technology debate," Adler said.

    They're trying to paint the opponents of black box voting as electronic terrorists. Transparent to us, but it'll work on the sheeple.

    ~~~

    1. Re:Whoa--the spin! by alfredo · · Score: 1

      How can you steal something posted on an unprotected FTP site?

      --
      photosMy Photostream
  17. EFF.org petition for electronic voting standards by USAPatriot · · Score: 5, Informative

    The EFF is organizing a petition to encourage IEEE to set trustworthy standards for electronic voting. Read about it and join the petition here:

    http://www.eff.org/Activism/E-voting/IEEE/

    "EFF supports the IEEE in taking on the issue of setting standards for electronic voting machines. We also support the idea of modernizing our election processes using digital technology, as long as we maintain, or better yet, increase the trustworthiness of the election processes along the way. But this standard does not do this, and it must be reworked."

    --

    Slashdot Moderation: From positive to terrible in 2 "insightful" posts.

  18. My Submission Was Better by tealover · · Score: 5, Funny

    I questioned whether it was Alanis Morrisette-like irony or real irony that a company charged with securing internet voting had their servers hacked and also alluded to the possibility that the 2004 presidential election will make us all remiss for the stability of the 2000 elections.

    It was actually one of my better submissions. It was funny and yet pithy. It had pith. Real pith.

    ...

    But this submission is ok, I guess...

    --
    -- You see, there would be these conclusions that you could jump to
  19. So what's new? by dejinshathe · · Score: 5, Funny

    From the little I hear about US elections (and let's face it that's gonna be all the cock-ups & bad press) I wasn't aware that people a) voted much, or b) had much faith that the votes were fairly counted and apportioned anyway...

    Then again, perhaps I need to find an alternative to Michael Moore as my sole window into US POlitics.

    --


    "It is the prerogative of fools (or noobs) to utter truths that no one else will speak."
    1. Re:So what's new? by Photon+Ghoul · · Score: 1

      Switch to Chomsky.

    2. Re:So what's new? by h4rm0ny · · Score: 1

      Switch to Chomsky.

      Sort of fresh Tortellini with Four Cheese compared to Moore's Alphabeti Spaghetti, but still of the pasta family.
      Still, I prefer pasta to a McMurdoch bullburger so I'm not complaining.

      --

      Aide-toi, le Ciel t'aidera - Jeanne D'Arc.
  20. Am I missing something here? by Maclir · · Score: 4, Interesting

    Why the love affair with "technology assisted" voting? What is wrong with the good old paper "secret ballot" that is counted by hand. Canada can do it. Australia can do it (and actually invented the "secret ballot").

    No chance of dodgy software. No hanging chads. Automatic audit trail. Either number the candidates in your order of preference (automatic runoff style / preferential) or simple tick the person you prefer (or hate the least).

    1. Re:Am I missing something here? by Anonymous Coward · · Score: 0

      Where's the money to be made in paper ballot voting?

    2. Re:Am I missing something here? by dejinshathe · · Score: 1

      Oh, there's no money in it.

      All you get is the government you voted for. Or so goes the theory, anyway...

      --


      "It is the prerogative of fools (or noobs) to utter truths that no one else will speak."
    3. Re:Am I missing something here? by KjetilK · · Score: 1
      Because counting correctly is hard. Either you spend many weeks doing it, verifying with a number of independent counters, or you do it in one night, and you have a few percent errors. Like:

      Mr. Tallyman: 345, 346, 347, 348, ...
      Supervisor: Mr. Tallyman, what's your count?
      Mr. Tallyman: damn, where was I? Uhm, it was 384, yeah, that was it! 385, 386, 387, ...

      Seriously, there are a whole bunch of errors that could be made, verification is not so strong that fraud is very hard.

      As one of the Diebold memos said, it's not rocket science, tallying votes in a machine is easy and can be extremely accurate. But people have to let go of the notion that you can have corporations (whose primary responsibility is value for their stock holders, not the quality of the voting procedure), doing it an make money from it.

      With machines doing it right, following the basic requirements of democratic voting, full disclosure, and proper oversight of every step in the process by elected and highly qualified officials, and the possibility for every voter to verify for example a checksum of the software to see if the it is the same as he inspected himself, I would see no reason why one wouldn't go for voting machines.

      --
      Employee of Inrupt, Project Release Manager and Community Manager for Solid
    4. Re:Am I missing something here? by wfberg · · Score: 1

      Australia can do it (and actually invented the "secret ballot").

      I think Athens beat you to the mark some thousands of years earlier ;-) (Which is not to say there were no secret ballots cast in Mesopotamia, I'm just more familiar with the black/white marble-in-a-vase system used in Ancient Greece).

      --
      SCO employee? Check out the bounty
  21. How can we trust this company? by sllim · · Score: 4, Insightful

    Securing HR data and salaries is basic, basic stuff. I would have some sympathy if Joe Schmoes Pizza barn had there salary and HR data compromised, after all they make pizzas, IT is way down the line for these people.

    But lets face it, if you want to manufacture eVoting technology then securing the network is a crucuial part of that technology.

    If THEY can't secure there own HR and payroll data then how am I supposed to trust them to handle evoting competently?

    1. Re:How can we trust this company? by Moderation+abuser · · Score: 1

      You might be surprised at the number of HR systems which are easily accessible and have no additional security beyond the trivial. It's an additional cost you see.

      As a systems and database admin I've had query and update access to employment records, salary information all the way up to the CEO in the HR databases at several companies, it's only my personal ethic which has stopped me looking. In fact, I was almost fired at one company after pointing out fairly forcefully that their HR system was insecure.

      --
      Government of the people, by corporate executives, for corporate profits.
  22. Nice by Anonymous Coward · · Score: 0, Flamebait

    If Bush is reelected next year with this technology, he'll be happy to announce that he won with 194% of the votes.

  23. An Even Bigger Issue by tealover · · Score: 0, Flamebait

    Aren't many of the companies in the e-voting business heavily funded and/or backed by Republican interests?

    Republicans in the U.S. will basically do anything to preserve power. Let's not forget that Katherine Harris, the Florida Secretary of State charged with making sure the Florida election process was fair was the Florida co-Chairperson of the Bush Electtion team.

    She swears she put the interests of the voters ahead of Bush's. She is now a congressperson contemplating running for Senator (thanks Jeb!)

    Also, a cousin of Bush's, working at Fox News and head of the projection team charged with calling the states callled George Bush Jr. 5 times the evening of the election.

    He swears he didn't give Bush any information. That wouldn't have been "Fair and Balanced", would it?

    <hides from Fox legal>

    --
    -- You see, there would be these conclusions that you could jump to
    1. Re:An Even Bigger Issue by Alan+Hicks · · Score: 1
      Aren't many of the companies in the e-voting business heavily funded and/or backed by Republican interests? Republicans in the U.S. will basically do anything to preserve power.

      Oh please. Yes many of them are funded/backed/owned/whatever by Republicans. What difference does this make? Your paranoia may be well founded, but so far there has not been a shred of evidence that any illegal tampering with the voting system has been done specifically to give one party or another an advantage. I won't say it hasn't happened, but neither will I go around spouting off conspiracy theories without a shred of non-circumstantial evidence.

      She swears she put the interests of the voters ahead of Bush's.

      Again, can you prove otherwise? Do you have any non-circumstantial evidence, or are you simply assuming some one did something illegal because it was convienient?

      For the record I am not a Republican, though as a conservative I typically vote that way. What you are doing, it quite simply spreading FUD. Fear that crooked republicans are fixing elections. Uncertainty that they can be trusted. Doubt that they should ever be elected. You have not offered any proof to support your claims.

      Darl, is that you?"

      --
      Slackware, what else when it must be secure, stable, and easy?
  24. In four years... by Anonymous Coward · · Score: 1, Funny

    ...they'll ask:

    "Hey, did you vote for Arnold this time?"

    "Yeah, man. Six times!"

  25. Probably by anti-NAT · · Score: 4, Insightful

    The only valid reason I've heard of for e-voting is to purely speed up the counting of the votes, so that the result of the election can be known much quicker than via hand counting.

    Commonly people seem to assume that this means replacing paper votes, or rather, more specifically, replacing an auditable paper trail.

    So we have a additional-efficiency model verses a replacement model.

    For some reason, the model that has been adopted (and maybe encouraged by the "US" governement aka GWB) by these E-voting companies is the replacement one. Who knows why, although the conspiracy theorists would suggest Florida 200(? - I'm Australian, don't know exactly when the last US election was).

    Of course, as all slashdotters know, under the replacement, electronic only model, security and accountability are a lot harder to do. All these e-voting security stories, such as this one, are evidence of that.

    --
    The Internet's nature is peer to peer - 20050301_cs_profs.pdf
  26. This just in. by Stonent1 · · Score: 4, Funny

    The future of E-Voting to be decided by an E-Vote.

  27. So, how is this worse than non-electronic voting? by Justice8096 · · Score: 5, Interesting

    About fifteen years ago, when last I checked, there were many dead people voting in Philadelphia - however, it was found that roughly as many dead people voted Democrat as Republican, so neither party bothered to invalidate the vote.
    It is also only within the last few decades that states have inacted laws to keep campaigners away from voting booths where they could "help" people choose whom to vote for.
    Voting in the United States has long been wrought with fraud and inaccuracies, and as long as that fraud is equal on both sides, the system has worked.
    Now, if there were more than two viable parties, then it might be a problem. But since there aren't, I will consider my vote as secure electronically as it is non-electronically.

  28. Why are businesses being trusted? by rsilvergun · · Score: 2, Interesting

    Isn't it painfully obvious that any for profit company will be wide open to corruption when stakes this high are involved? Even in the absense of corruption the drive to keep costs down and profits up means tons of security gliches like this. After all, all too often by the time $hit hits the fan the boys in charge have already deployed their golden parachutes.

    Why does everyone assume a private business has to or should be involved anyways? I'm not saying kicking private interests out would solve all the problems, but it would certainly help.

    That said, until people stop voting based on what TV tells them to this is all moot. I know ardent supporters of George Bush who depend on government programs he's actively trying to eliminate. People don't vote rationally, and I don't see any reason why they're going to start.

    --
    Hi! I make Firefox Plug-ins. Check 'em out @ https://addons.mozilla.org/en-US/firefox/addon/youtube-mp3-podcaster/
    1. Re:Why are businesses being trusted? by h4rm0ny · · Score: 1

      Why does everyone assume a private business has to or should be involved anyways



      A private company seems good at first because the government would be tempted to meddle and preserve itself. It only takes 1x10-34 seconds however to realize that putting it in a private company will only move the problem to one degree away.

      Ultimately, the only safe solution is if the voters have the ability to scrap a given voting system if it fails them. For this, they must have access to all the relevent information and the power to address any failings. Neither government nor private interests will be sufficient without this.

      For the public to be sufficiently aware and responsible enough to address any failings however, they need to be educated and to believe that they can change things. You'll be fighting the government itself if you try to bring that about though.

      --

      Aide-toi, le Ciel t'aidera - Jeanne D'Arc.
    2. Re:Why are businesses being trusted? by Anonymous Coward · · Score: 0
      Why does everyone assume a private business has to or should be involved anyways?

      I don't think anyone does, but what are the alternatives? A government group, so the incumbents can define the system under which they will be re-elected? A non-profit organization, whose directors will certainly be politically aware, and more likely to have a political adgenda? Free Software people-could you trust everyone to play fair and to resist six or seven figure donations?

      Is there another kind of organization that could put together the massive undertaking of replacing all the voting machines in the US?

  29. details of intrusion? by iescope · · Score: 1

    is there any? e-voting aside, it'd be nice to know how it was done for the rest of us interested in securing our networks.

  30. Real problem with iVoting. by wirelessbuzzers · · Score: 3, Interesting

    The real problem with internet voting is not that people could hack it. That is an important concern (more that someone could hack voters' PCs, rather than the vote talliers), but it is not the most important. Vendor hacks/bugs could be circumvented by open source. Supervision wouldn't be much harder than it is with current voting systems.

    There are a couple more important concerns. One is social engineering... most people have no intuition for computers, and this opens up an avenue of attack much worse than the whole Florida butterfly ballot scandal. Second, the possibilities of coercion, blackmail, bribery etc go WAY up if you can watch someone, or grab server logs, or use a remote desktop, or the like.

    --
    I hereby place the above post in the public domain.
  31. Re:EFF.org petition for electronic voting standard by Anonymous Coward · · Score: 0

    Brought to you by the makers of WEP and WPA...

  32. Don't worry, be happy! by flacco · · Score: 4, Funny

    I, for one, welcome our new President, Kevin Mitnick.

    --
    pr0n - keeping monitor glass spotless since 1981.
    1. Re:Don't worry, be happy! by zummit · · Score: 1

      I, for one, welcome our new President, Cowboy Neal!

  33. My take on this: unconvincing -- and listen up.. by BevHarris · · Score: 5, Interesting
    Obviously, that a company which specializes in encryption gets hacked is rather idiotic. If that's true, they need to step out of the arena for good, because the product they were offering was encryption to "protect" our votes.

    Now, what many of you might not know is that the VoteHere source code has been used in entrapment attempts. Specifically, with me, and I documented the entrapment effort at the time. Pure retaliatory crap designed to find a way to get activists to shut up.

    Next, it is not surprising they will try to link it to the Diebold files. But that's bullshit, too, and here's why:

    The FTP site wasn't hacked, it was sitting there. Look in any user manual and you'll see the address.

    The memos weren't hacked either, they were obtained with an employee ID number.

    Now, are you ready for this? I've had dealings with both the Diebold memo leaker and this supposed "VoteHere" hacker. The second person is NOT the same as the first, and I find it extremely interesting that VoteHere is trying to claim it's the same person. I am dead-certain it's not.

    This "VoteHere" hacker tried to dump the VoteHere source code on me; it was simply dumb; first of all, VoteHere was supposed to be going public with its source code, so who in their right mind would want to steal it. I certainly didn't want to touch it.

    Then this "VoteHere" hacker agreed to a telephone interview with me. He made some claims about who he was, but was unaware that I had additional information from inside sources that would allow me to test the veracity of his claims. The first question I asked was a test question; he put me on "hold" and then came back and offered a lame-ass guess which immediately caused him to fail the ID contest.

    I believe this is going to turn into an entrapment scheme. Some activist somewhere is going to get nailed, probably that's already in the works. That's because they were running around offering this honey pot and, unfortunately, some naive activist probably bit on it.

    By the way, I asked the supposed "hacker" point blank how hard it was to hack into a company that specializes in encryption. Every time I asked a tough question, he had to put me on hold and go ask someone what to say. His answer was totally unconvincing.

    The voice on the phone was quite distinctive, and matches another voice I've heard on the phone. I will be only too delighted to share what I know with the authorities. Just hope I get an honest cop.

    The timing on this is very interesting. The chairman of VoteHere, Ralph Munro, is former Washington State Secretary of State and a few things are starting to pop in relation to the use of unauthorized voting software under his watch, and an ethics complaint that's being filed, or has been filed.

    I'll be on the Mike Webb Show at 11 p.m. tonight (Pacific time) and will discuss this at more length.

    Bev Harris
    Black Box Voting

  34. Hold would-be vendors feet to the fire. by abulafia · · Score: 3, Interesting
    A simple method, when sourcing products that are difficult to verify, is to demand a contract that is extremely punitive in the event of failure. This works well when combined with random auditing.

    So, in this case, if for some (non-apparent, to me, at least) reason we really, really need paperless voting, the proper framework would look (as an extremely naive first pass) like this -

    Potential vendors are made aware that some unknown number of elections, districts, machines, and people would be audited via unknown means.

    Potential vendors would be forced to put up a large bond that would be forfeit if a flaw was found that compromised the voting record. (Yes, I mean the whole record - these are infallible counting machines, right? Operator error would be a contractual issue to hash out.)

    Any dispute between government purchasers and vendors would be decided via arbitration in full and complete view of the public which is employing the machines, no exceptions.

    Anyone who wished to vend would be welcome to.

    I will bet you there will be takers. I know I'd be excited to at least have a shot at this.

    --
    I forget what 8 was for.
  35. The reliability of internet polls? Ha! by geoswan · · Score: 3, Interesting
    This is laughable.

    If you think internet voting is unreliable, you really shouldn't trust internet polling. There is no authentication to make sure the poll isn't being spoofed.

    Some years ago the provincial government here in Ontario decided to force the six municipalities that made up Metropolitan Toronto to amalgamate. The municipalities decided to hold a referendum. An widely publicized internet poll was conducted predicting that the public would vote strongly in favour of amalgamation. When the referendum was held, the public voted 4 to 1 against amalgamation.

    I can't remember exactly how wildly off the poll favoured amalgamation. I think it was something like 2:1. So, the poll was off by a factor of 8. Wildly off.

  36. Trust by ucblockhead · · Score: 1
    I wouldn't trust any OS with voting. I don't care what OS. I've worked on far too many systems, and seen how easy it would be to tamper with any system.

    Voting is one thing that should not be automated. Sometimes simpler (and manual) is better.

    --
    The cake is a pie
  37. people will sue by ArchieBunker · · Score: 1

    Because someone who can't read or doesn't have arms will sue them under the national disability law. Now you can sue anyone for almost anything and win.

    --
    Only the State obtains its revenue by coercion. - Murray Rothbard
  38. What Slashdot didn't mention... by Anonymous Coward · · Score: 0

    Is that it was a secure Linux network guarding an internal Windows network. So much for that always-secure bullshit posturing Slashbots love to put up all the time (never mind the breaches of Debian, GNOME, Gentoo, and the two break-ins at GNU/FSF...go ahead, biased mods, mod me down for stating simple facts).

    1. Re:What Slashdot didn't mention... by pacman+on+prozac · · Score: 1

      Yea cos slash would never report anything bad about linux

      Go ahead biased mods, mod him down for being a complete donut.

      Maybe there should be a new mod, -1 googletarded.

      Searched pages from slashdot.org for linux exploit. Results 11 - 20 of about 1,580. Search took 0.39 seconds. (before you flame about 1/4 of these are duds/dupes, the rest still stand)

  39. Re:My take on this: unconvincing -- and listen up. by shanen · · Score: 2, Informative

    Bev Harris is one of the leading activists on this issue, and has written extensively on it in various forums. I don't think she's technically that strong, and I was quite surprised to see her name here on SlashDot, but she knows a lot on this issue. Didn't know to include a link to her well-known Web site. I think this is the correct URL: http://www.blackboxvoting.com/

    Someone should mod her comments up even higher.

    --
    Freedom = (Meaningful - Coerced) Choice != (Speech | Beer^2), and sad sock puppets' bad mods avail them naught.
  40. slashdot confirms it by Anonymous Coward · · Score: 0

    GNAA is dying. No big loss there.

  41. Honestly by iamdrscience · · Score: 3, Interesting

    Honestly, as much as I'm concerned by this and "e-voting" in general, I'm really glad that they're willing to say that they were broken into. Furthermore, it's good that they were planning on disclosing the source code, even if they never really put forth a definite date.

    E-voting has a lot of problems and the way it's being executed has just as many, but this is definitely a step in the right direction when compared to the problems of Diebold.

  42. A Good Use For The Internet by Dark+Bard · · Score: 3, Insightful

    Where the internet would be useful is in making registration and obtaining absentee ballets easier. I work a lot of hours, as do most of us, and find registration a pain. It's rediculous to have to register months before an election. I was buried in work and found out late at night it was the last day to register for the last Presidential election. If we could register on-line and obtain ballets it would definately make things more accessable. Verifying identification is an issue but most aren't checked for ID as it is and none of those are verified. As far as electronic voting, I'm against National ID cards but most of us have drivers licenses with magnetic strips. An ATM system that uses those as verification could improve security. The system would only use the drivers license to access an electronic form. It would record that the individual voted but not which form was used. Any system can be hacked. The only way to largely avoid that is to network the voting machines at each location by firewire. An electronic count could be sent but would have to be verified by a verbal number given over the phone by some one at the polling location. A print out of totals could act as a third verification. It doesn't prevent tampering before the fact though. One possible way to avoid pretampering would be to have name order assigned on the day with more than one person required as in nuclear sites. Any pretampering would not know which name was being represented by any given code number. No system is foolproof but there is a fair amount of tampering already. Can you say Florida?

    1. Re:A Good Use For The Internet by JimBobJoe · · Score: 1

      An ATM system that uses those as verification could improve security.

      Magnetic stripes are easily read, magnetized and remagnetized. This does indeed happen with credit cards, less often with ATM cards (since the person would have to have the PIN to pull it off, hence fake bank machines being setup to capture both stripe and PIN) and it does happen with licenses (someone under 21 goes to a bar with a magnetic card reader...often they don't check age on the card, they only care what the reader says.)

  43. So much for another vendor by Anonymous Coward · · Score: 0

    So a company that can't secure its own corporate network is charged with creating a secure means of people to vote in elections?

    Next thing you know, they'll get someone like Paula Abdul to be a judge of other people's singing talent.

    Oh, wait.

  44. Not trying to troll, but... by Loki_1929 · · Score: 1, Insightful
    Seriously, folks; trusting an internet vote to determine new leaders for the world's most powerful nation?

    27% Yes

    40% Not now, but maybe soon

    Fucking idiots. That's about all I can really say in response to this. I'm just too disgusted for words.

    --
    -- "Government is the great fiction through which everybody endeavors to live at the expense of everybody else."
    1. Re:Not trying to troll, but... by Anonymous Coward · · Score: 0

      Poll responses like these make the elite's contempt for the masses justified.

  45. Netherlands by webhat · · Score: 1
    In the Netherlands we have electronic voting and I trust it as much as I would a paper ballot and an internet FORM. As soon as it's out of my hands I can't be sure it's not being tampered with.
    A funny thing here is that you can't anonymously make the Brewsters Millions choice: NONE OF THE ABOVE! For that you have to walk up and publicly say you want to be taken to the vote counter to register your empty vote, you get to see the number of votes cast go up by your one.

    You really see you actually voted, in as much as I trust any voting anyway...

    --
    'I am become Shiva, destroyer of worlds'
  46. Politically motivated? by fname · · Score: 3, Insightful

    Boy, these guys have a lot of nerve. The guy at VoteHere claims that the break in might be politically motivated. ("We feel that it may have been politically motivated,"Adler said.) But when asked to elaborate, he defers and says he doesn't want to politicize the situation. ( "I don't want to necessarily politicize this," he said. "This is just a crime.")

    Waaa??

    So he impugns activists pointing out flaws in his system, then claims to be taking the moral high ground. And the cowardly reporters don't even question him about this blatant double-talk. Shame on VoteHere. Shame on MSNBC. Shame all around. When people lie, they need to be called to the mat for it.

  47. If you saw current poll methods... by MoggyMania · · Score: 4, Informative

    As somebody that worked as an Inspector for my area (that is, the person present and in-charge of a voting site) back in 2002, let me tell you: if more people volunteered and got to see what a chaotic mess ballot-handling is *now* most of them would be all for computers.

    The Inspector position requires a grand total of *two hours* of training, during which we sit watching a few lectures and quick run-throughs. That includes everything from what time you show up, how to set up booths, all the way down to tallying votes after the poll closes and where to bring the materials afterwards. Officials working with an Inspector can show up for training but don't have to. This means that at any one polling place, you might have *one* person that *might* know WTF is going on and *might* be there.

    My location alone had problems with volunteers not paying attention, marking things wrong -- we at one point were HUNDREDS of votes off in the tally because of one person screwing around -- misplacing things...people showing up and trying (almost successfully) to intimidate pollworkers into letting them vote twice or without an ID...there's no doubt in my mind that half my team could have easily been bribed for very little money, as they were only there to supplement their income.

    Overall, the day was a real eye-opener for me. The assumption that having it all done by hand means it's being controlled by professionals, or that public "paid volunteers" are automatically going to be more trustworthy than a trained force is from what I saw simply inaccurate...anybody certain that it's a great setup needs to spend a day volunteering as Inspector to find out what things are *really* like before assuming computers are inherently less reliable, believe me!

    1. Re:If you saw current poll methods... by natrius · · Score: 2, Insightful

      So shouldn't we try to fix the system we have in place already? The biggest problem with electronic voting is that if you can alter one vote, you can alter lots of votes. When it's done by hand this isn't the case. Having competent poll workers and changing the system to one in which the ballots would be counted in public instead of carted off to a courthouse would result in a much more secure system.

      I'm not trying to say e-voting shouldn't be done at all, but if there is no paper trail, then the potential for mass voter fraud still exists. A previous post suggested a system in which an electronic input system would print out a marked ballot for you, which you could then verify before submitting it. This would increase the ease of voting while still maintaining, if not increasing security.

  48. can't vote if you don't use a microslop browser... by potsmaster · · Score: 0, Troll

    there's democracy in action!

    --
    REPORT ALL OBSCENE MESSAGES TO YOUR POTSMASTER
  49. Re:My take on this: unconvincing -- and listen up. by Anonymous Coward · · Score: 0

    Bev, you might want to consider changing the "Big Story of Today" section of your website to include a reference to this story.

  50. Stark difference... by ca1v1n · · Score: 2, Interesting

    When Diebold got their source stolen, it was a big deal. Why? Because it's shitty software whose correct operation is impossibly to verify. VoteHere, on the other hand, isn't worried about the leak of their source code, because even if someone found an exploit in it, everyone would know right away, because their system is designed to expose fraud, rather than conceal it.

    Of course, security problems at electronic voting companies are always an ominous sign, but at least VoteHere had the forethought to realize that security is bound to be breached somewhere in the chain from development to election, and designed a system that's armored against it.

  51. dear bev.... by yaar · · Score: 1

    neato post, i guess.

    we get that you have secret special info and that you will be presenting said info on secret special info talk show, however, would you mind too terribly much detailing the same here?

    this entire blathering post smells like that guy on the bus who is kind enough to explain how stephen king murdered john lennon.

    --
    "Nothing in education is so astonishing as the amount of ignorance it accumulates in the form of inert facts." - Henry A
    1. Re:dear bev.... by Anonymous Coward · · Score: 0

      Dude, STFU.

    2. Re:dear bev.... by Anonymous Coward · · Score: 0

      ou have secret special info and that you will be presenting said info on secret special info talk show

      Re-read what she wrote. She said she knew more info about the Diebold memo leaker than the man who was pretending to be him knew, therefore in all probability that man was not the memo leaker. She also said she thinks she may have recognized the voice, however. Finally, she will elucidate this matter later tonight on a radio program.

      That said, what "secret special info" are you refering to?

      this entire blathering post smells like that guy on the bus who is kind enough to explain how stephen king murdered john lennon.

      Being caustic merely for the sake of appearing cognizant and witty does not achive those ends.

    3. Re:dear bev.... by Anonymous Coward · · Score: 0

      Finally, she will elucidate this matter later tonight on a radio program.

      Her post was timestamped Dec 29 @ 11:37pm (EST). My guess is that she was actually on the Mike Webb show LAST night. I think we missed it.

      Being caustic merely for the sake of appearing cognizant and witty does not achive those ends.

      Perhaps not. However, I got a chuckle out of it. :-)

    4. Re:dear bev.... by Anonymous Coward · · Score: 0

      Kudos to Yaar. Guess we must not be in the secret decoder ring club to understand this gibberish.

  52. This isn't a valid argument by Anonymous Coward · · Score: 0

    I have to take issue with the claim that voting should be difficult and difficult to count quickly. The objective of voting security is to prevent fraudulent voting, not to slow down the process. If we wanted, we could mandate that all votes must be impressed on wet clay with a wedge, baked in a kiln and allowed to cool before being turned over to the polling booth. This would slow things down but do nothing to increase security. Speed is irrelevant; what's needed is 3 elements: privacy, transparancy, and verifiability. Privacy means that each individual vote takes place without being observed by anyone else. Transparency means that everybody gets to see the votes being counted, if they want. Verifiability means that each individual voter can verify that his/her vote was recorded correctly, and also that the count happened correctly (i.e all valid votes were counted and all invalid votes were not). If all these criteria are met, there's no reason not to vote electronically.

  53. Better percentage breakdown by segment · · Score: 0, Offtopic


    63% of Slashdotters chuckled at the Article without even reading it while 12% of Slashdotters (hardcore geeks) called it a travesty of justice and vowed to take MS' offer of tracking hackers for fun and profit. 10% of Slashdotters (black hatters) were searching for new exploits and the methods the original black hatters used while 8% of Slashdot trollers posted Goatsecx, Nigga, FP's, and similar posts. 5% of anonymous posters were part of the previous 2% of Slashdotters. And finally 2% of Slashdotters didn't give two rats asses

  54. Re:The reliability of internet polls? Ha! by azaris · · Score: 1

    Some years ago the provincial government here in Ontario decided to force the six municipalities that made up Metropolitan Toronto to amalgamate. The municipalities decided to hold a referendum. An widely publicized internet poll was conducted predicting that the public would vote strongly in favour of amalgamation. When the referendum was held, the public voted 4 to 1 against amalgamation.

    I can't remember exactly how wildly off the poll favoured amalgamation. I think it was something like 2:1. So, the poll was off by a factor of 8. Wildly off.

    Where does the factor of eight come from? If the online poll was 2:1 for and the referendum was 4:1 against, then the actual numbers were:

    Online: 2/3 for, 1/3 against
    Referendum: 1/5 for, 4/5 against

    If we assume the online poll attempted to accurately predict the outcome of the referendum, then the number of votes for was off by a factor of 10/3 = 3.3 and the number of votes against was off by a factor of 12/5 = 2.4. Multiplying these numbers gives a factor of eight, but since the two factors are not independent that makes no sense.

    Such disrepancies show that either the online poll sample size was woefully inadequate (by an order of magnitude) or somebody stuffed the poll.

  55. Re:Poll? What poll? Only in MSIE!!! by h4rm0ny · · Score: 1

    Oh the poll is there, but... oh this is great... it doesn't appear in some browsers. I went there with Opera 7.0 and got almost plain text. On a hunch though I told Opera to identify as MSIE 6.0 and *Wow* what a difference.

    Graphics, ads, and a poll. Amazing! That means the site has been deliberately designed to look bad in Opera. Possibly others too.

    Heh!

    --

    Aide-toi, le Ciel t'aidera - Jeanne D'Arc.
  56. E-Voting Break In by mholden8 · · Score: 1

    I also believe that E-voting is not ready for the mainstream. However, I was wondering does anyone know for certain the environment they were using. I doubt it was MS because if that was the case, then it would be mentioned in the articles. However, the OS is not mentioned in any of the articles regarding this.

  57. I Want To Stop Whining by occamboy · · Score: 1

    and do something about it. Are there any open-source voting initiatives out there that are getting critical mass? A quick search on SourceForge and Google didn't turn up anything that's far along - do /. readers know of anything that I overlooked?

  58. The political/demographics have changed... by Anonymous Coward · · Score: 0

    Dead people vote overwhelmingly Democrat now.

  59. Geez, when was the last time you voted, anyway? by sean.peters · · Score: 2, Informative

    Motor-voter registration (renewing your driver's license automatically registers you to vote) came into effect nation-wide years ago. And in many states, all you have to do, if you find that it's election day and you haven't registered, is show up at the polling place with ID and sign an affirmation that you are a legal voter in that election district.

    How much easier does it need to get?

    Sean

  60. It's not what they TOOK... by Anonymous Coward · · Score: 0

    It's what they left behind that matters.

  61. Netcraft is your friend by Anonymous Coward · · Score: 0

    http://uptime.netcraft.com/up/graph/?host=www.vote here.net

    The site www.votehere.net is running Microsoft-IIS/4.0 on NT4/Windows 98

  62. Open Source/Linux irrelevant, Web voting bad by AHumbleOpinion · · Score: 1

    Many of the posters are making the same mistake. They are accepting the false notion that electronic voting systems solves more problems than they creates. In the 2000 US Presidential election I actually used a touch screen. I liked it, I thought it was cool. A bunch of names appeared with boxes, I touched one box, all the others disappeared, I thought good feedback and pressed the next button. I left my polling place on a nerd high. In the following days my opinion completely changed. What if my county had some problem and a recount was necessary. Bits are too easy to manipulate on a large scale. What if a hard drive picked a bad time to die? A personal phobia, I had one die an hour before an important demo. The more I thought about it the more I liked my counties old voting system. They hand you a piece of paper and a pen. You fill in boxes. You return the paper and pen and watch the person drop the paper into a locked box. The papers are removed in a secure environment and fed into a machine for electronic counting. If something goes wrong the papers are also human readable. Electronic counting, yes. Electronic voting, no. It doesn't really solve the problem, it creates too many new ones.

    Web voting is a bad idea because now we have even more opportunity for wrong doing since the voting is not taking place in a secure environment. Who is standing behind that voter watching the vote?

    1. Re:Open Source/Linux irrelevant, Web voting bad by Sacks · · Score: 0
      Web voting is a bad idea because now we have even more opportunity for wrong doing since the voting is not taking place in a secure environment.

      I fully agree. In business, court rooms, and with any instance in which you have to prove what you did, what do they want to see - The paper trail. How can you provide the paper trail on electronic bits.

      I am one of those that do not believe that M$ is up to the task and do not shop on the internet for that reason (There are diligent admin's out there, but how do you know where they are/are not and I do not trust M$ so called security one bit).

      Take the last election in the US. It was a fiasco to say the least. How hard would it be for a person that is for the other party to "accidentally" move a storage device close to an electronic field so the information would be corrupt when the precinct was almost completely for the other party. There is way too much chance for the information to be messed with.

      Ealier in the month there was a story of how a Chinese businessman hacked a U.S. Navy ship and used it as a spam relay. How hard would it be for a foriegn government to crack into the voting system and alter the course of American Politic's?

      For me, give me the paper trail every time when I vote. In fact, start asking for a thumb print on every ballot. That should end the dead from voting in an election.

  63. Re:Voting by Anonymous Coward · · Score: 0

    Well without getting into it to deeply, my problem with voting at least in the san fran metro area is that some idiot decided to place ALL the fucking voting places in the god damn bario, gheto, and tenderloid, and they make it a royal pain in the ass to get to the poll place! (FYI the tender loin is a netoriously dangerous district of san fran). They also have some developmentally retarted people working for them, registering to vote at least in them parts is somehow an excuse to get spammed by the jeduciary deparrtment from every tom dick and hary lawyer out to make a buck. In the US in general it's an enormous hastle to vote or not: Lets see first I have to reg then find the pole then go to the pole, gime a break! Not to speek of some of the inane things put onto a ballet (For example: In s.San Fran they held a generall vote to vote if they need stop signs on certain corners).WTF is up with that shit? NO!
    Fuck voting in person I'll take a fucking evote any motherfucking day of the god damn week

  64. Nah, it would only be a marginal improvement by rynthetyn · · Score: 1

    While being able to examine the source code is better than not being able to see it, I believe it was Ken Thompson at Bell Labs back in the late 1970s who proved that you couldn't trust anything you didn't write--not even the compilier.

    Open source would allow us to find the most obvious nefarious schemes, but we still wouldn't be totally safe, unless we were the one to build the system from the ground up, including writing the original compilier in machine code to ensure that any compiler that we were to use didn't modify our code.

    Basically, anytime any other human is involved, we can't trust it completely.

    --
    Eagles may soar, but weasles don't get sucked into jet engines...
  65. LOL by Anonymous Coward · · Score: 0

    Christ, no wonder, they were using IIS! I mean, damn! That's almost as bad as using RedHat or something else insanely insecure, by default.

    I use Windows where appropriate and/or support it for my clients. Same with Linux (which I usually tend to upgrade to a more secure solution).

    Why don't they clue in, do the research and finally stumble accross the solution... Look here team, we found this site and this is the ultimate solution! It's called OpenBSD!

    www.openbsd.org

    Comes stock without bloat and a lot less 'hype'.

  66. TROLL ALERT by Anonymous Coward · · Score: 0

    Overly Critical Guy is a known troll and this is a troll post. Please mod accordingly.

  67. Slashdot effect ? by CmdrGravy · · Score: 1

    That poll doesn't seem to have been affected much by the hordes of /.ers voting no:

    Would you trust your vote to the Internet? * 27808 responses
    Yes.
    25%
    Not today, but maybe soon.
    40%
    Never.
    32%
    None of the above.
    3%

    There is a rise of 1% for the no's from 6 hours ago

  68. No Need To Object To E-Voting by osewa77 · · Score: 1

    There's nothing wrong with e-voting; I would gladly cast my vote online. Using the normal techniques of secure computing (HTTP-S, encryption, etc) once you get over the issue of being able to identify unique individuals online I see no reason why they can't cast their votes online. There is no reason why it shouldn't be more secure (apart from being cheaper to operate)

  69. Re:So, how is this worse than non-electronic votin by Lars+T. · · Score: 1

    And the fact that all companies making those electronic voting machines are active supporters of the Republicans doesn't bother you?

    --

    Lars T.

    To the guy who modded me down from perfect to terrible Karma - Apple haters still suck

  70. Re:So, how is this worse than non-electronic votin by Justice8096 · · Score: 1

    Do you really think that there would be that much difference if the developers were Democrat supporters?
    I used to think there was a difference, until I was taught the concept of "Safe Harm" legislation. Here is how it works: I write a bill to increase school funding for poor districts, "Safe Harm". Then I set an overall budget that doesn't increase funding for schools. The "Safe Harm" clause means that current funding can not be reduced for other areas, so since we can't reduce school funding to wealthier schools, the poor schools get the same amount of funding they did before. If I reduce the overall funding level, it means that I actually reduce funding for the poor schools, since I can't reduce the funding to the rich. Ah, but that was the fault of those dirty (fill in the party of your dislike), who reduced the funding I would have given your schools. So sorry. And if you change schools to military bases, you have see the same thing happen for the other side.
    And that, my friend, is how you can pretend to support causes, and not actually change a thing. There are a whole lot of loopholes out there that do the same.
    In short, no, it doesn't bother me. I don't see that much difference in actual results between both parties (ignoring the rhetoric on both sides). Besides, I'd suspect that there are more Democratic hackers out there willing to counter-balance the influence of the Republican control of the machines.