Evoting in India, Maryland
Anonymous Coward writes "EVMs are back in the news again. The BBC is reporting on the use of over a million Electronic Voting Machines (EVM) in India for Parliamentary elections in April. With a billion people and an electorate of 668 million, it is by far the largest democratic election exercise in the world. A picture of an EVM is provided." And Kierthos writes "An article on Yahoo! News mentions that Maryland's voting terminals will be wrapped in tamper proof tape, which 'just protects that malicious code physically', according to computer scientist Avi Rubin. Also mentioned are California's ongoing system of e-voting, as well as a point on whether Diebold should be banned in California after using uncertified software in last October's election."
If the "tamper proof" tape is what I think it is, that would only show if someone broke the seal. If this happens, does that mean all votes on that machine are thrown out as unreliable? That sure creates the possibility of someone, not liking how pre-election polls are showing their favored candidate, intentionally breaking the seal to throw a wrench as it were into the election. I must be missing something there.....
As far as the overall debate on e-voting, I like how they do it here in Alaska. It's the old "fill in the bubble" tests like you used to take in school. You fill in the bubble on the ballot, which the ballot itself is very well laid out, then when you're done you feed the ballot into an electronic counter which keeps a tally there on the spot. When the polls close, an election worker connects the machine to a phone line, the machine then dials out and reports the results for that precinct. Results are all in w/in ~2-3 hours of the polls closing, and there is defiantly a paper trail that can be followed, if need be.
Oh riiighht. All you have to do to prevent tampering with an on-line computer is to "wrap it in tamper-proof tape." Sure. Uh huh.
Everybody talks about electronic vote - just look at Brazil. I'm 30 years old, have been voting for 12, and have never voted on paper. They've been doing this for a long long time there, and did so in the last presidential election 2 years ago.
t acao_na_urna_ele.htm
This is how we vote in Brazil (google translate from portuguese):
http://www.tre-mg.gov.br/eleicoes/simulacao_de_vo
Somehow, none of the articles ever mention that the Wisconsin State Elections Board decertified unverifiable touchscreen systems after I convinced them a year ago. Too far ahead of the curve, I guess.
The Executive Director's report
Ben Masel: 51,282 votes for US Senate in the Wisconsin Democratic Primary
...everything's secure when you use Duct Tape!
This provides identical results at greatly reduced cost and time.
The problem is that they don't want to take any risk--in particular, they don't want to risk not getting reelected. They probably figure if they help Diebold get the contract, Diebold will help them keep their jobs--it's the bureaucratic "I scratch your back, you scratch mine" philosophy.
I found the meaning of life the other day, but I had write-only access.
True, true.
I'd say the difference is that electronic voting has the potential to make vote tampering that much easier and/or harder to track. Especially where there's no paper trail, you really have no choice but to accept whatever number the machine gives you.
Even assuming no fraud (unlikely) the severity of the mistakes varies....a mistake counting paper ballots might result in a small change in the final tally, but a typo in the program could reverse the results of the election.
Don't get me wrong; I'm all in favor of using computers to make things easier. (Otherwise, would I be posting to Slashdot?) But if we're going to move to e-voting, the systems need to have the strongest possible security and reliability...and so far, they don't.
Twenties Retirement
The specs for the Indian EVM. This is definitely going to be the most widely deployed and used e-voting machine in the history of mankind. Seems pretty secure, except for the lack of a paper trail. But with 600 million eligible voters, I guess the lack of a paper trail means a lot of forests have been saved. Besides most attacks against the election system tend to be pretty unsophisticated , ie, boot-capturing and voter initimidation.
Looks like this machine will definitely go a long way in ensuring the fairness of Indian elections. Maybe I'll even vote next time.
more about me
Before diving in to what kind of design we should be using, I think some time needs to be spend deciding the design parameters. The solution should probably:
The Nevada Gaming Board has been cited as a good example of the kind of extremely paranoid testing and auditing that needs to go into a system this important. However, for a voting system we've added some new and challenging criteria- anonymity, ease of use, and fairness. None of these individually are difficult, but when combined with the testabilty and auditability become particularly challenging. How do you ensure that individual votes are getting properly registered while still maintaining the anonymity of the votes?
Personally, I don't see how all of these criteria can be met in a "remote" (e.g. web) voting system. However, I think these problems are all solvable with our current technology, if we are careful. In fact, I think that if a system were designed carefully, we could even come up with a system where we can, if necessary, confirm (validate) a region or even nation's voting results by storing individual voting results on voter-owned smart cards.
Assume we set up a system where every voter is issued a voting smart card that they retain possession over. When you go in to vote you stick your smart card in the voting machine. You then vote, and it records your choices on the card. Audits could then take place after an election by having randomly selected voters come in and stick their smart cards into a seperate vote validation system that retallies the results and allows voters to confirm their vote selection. Using statistics, you can set a threshold for when the error level is too suspiciously high, and require revotes in the regions with anomalous results. By using different vendors to provide the voting machines, smart cards, and vote auditing system, you can greatly increase your assurance that no entity has tampered with the voting results. Apart from the influences of the media... and politicians... and education system... and religions.....
On second thought, forget the whole thing. :)
Election Commission of India is proposing Vote for nobody in this election.
Any idea how many democracies in the world give this option to the voters?