Slashdot Mirror
Super Tuesday Not So Super For Electronic Voting
October_30th writes "It's Super Tuesday in 10 states (including California, New York and Ohio) and various reports are coming in that the equipment built by Diebold and various other manufacturers is proving more troublesome than previously anticipated."
This quote from the article demonstrates the comeplete lack of attention to security that runs throughout the products:
Among their surprises: all of Maryland's machines had two identical locks, which could be opened by any one of 32,000 keys or be easily picked.
Few members of the general public seem to have any concerns about electronic voting, but every computer professional I know thinks this is a lousy idea.
There are some things that computers are good at, and some that they aren't. Just because something is newer doesn't make it better.
It's expensive, insecure, and complicated (and thus prone to failure).
Whose idea was this anyway?
Who is the genius putting Windows on these things?? If ever there were a place for a custom operating system, this should be it. Normally I would even promote Linux (SELinux), but even it is way too mainstream in this application. Windows????
I'm a Diebold basher as well. They've completely screwed the pooch, so to speak, on electronic voting and public trust.
However,
It's not so much the company 'Diebold' that is at fault as the small company they bought out that was doing electronic voting development. And had started the shit that has been hitting the fan.
Diebold is a lock and security company that happened to buy a terrible, untrustworthy little company for a forray into electronic voting.
For what it's worth.
RD
I voted today in greater Cleveland. We had punchcard ballots, which was good, since the power was flickering all afternoon.
Excuse me, but even listeners to the BBC (British Broadcast Corporation) are assumed to know what "Super Tuesday" means... are Americans more ignorant about the American politcal system than Europeans?
"Freedom means freedom for everybody" -- Dick Cheney
With all this talk about potential election fraud, with these electronic voting machines, I was wondering whether a certain idea could work:
When you fill in your voting form you get a receipt with a record of your voting and a unique number (generated on the spot). At any time you could visit a validation web site, where you would type in the number you were given and check whether the entry matches what you have. Sure you could type in a random number and see someone else's record, but since its not tied to any personal info, it wouldn't be much of an issue. If at any time there is an inconsistency, you have proof in your hands.
Jumpstart the tartan drive.
I've been listening to talk radio, and poll troubleshooters are calling in. I didn't realize it up to now, but the machines, at least in my city, are using Windows CE for the OS. Apparently a lot of the systems were booting to the desktop instead of the application (the app is on a flash memory card in the machine). I infer from the symptoms people are describing that some machines were allowed to sit unpowered and unplugged for a long period prior to the election, and the batteries ran down, erasing the script that would have executed the application when the machine was turned on. The poll workers aren't trained on what to do in this unexpected circumstance, and have to call the troubleshooters who were trained in how to get the app running. Naturally, the troubleshooters are inundated.
As usual, it's the physical security issues that pose bigger issues than electronic security. At my High School in San Francisco, CA, which is a polling place for all elections, including this one, voting machines are delivered to the school about two weeks before each election, and simply left in a small alcove off of a main hallway. See this for further details on this problem In short, I (or anyone else who enters the unlocked school building) have had many opportunities to simply wheel the entire kit out the door and to bring it back in some time later (this would of course violate state law, so it is left as an exercise to the reader).
Cities need to take basic physical security precautions with their voting equipment as well.
Forget the machines, the ballots, whatever. My voting experience scared me and I don't even have to mention electronic voting.
I arrived as a Non-partison voter. Three people manned the booths. I waited in line to get my electronic voter card, and the person in front of me was asked "what affiliation are you?" They responded "neutral". OK, so that sounds like me, I guess that's what I'll say (I didn't know to say specifically "non-partisan"). My turn comes up, I'm asked what affiliant and I say "neutral" too.
I put in my card, and of course the ballot screen is in plain view of everyone, but whatever I don't really care (yet). My choices come up, and I was dumbfounded. I didn't recognize any of the names, I couldn't make any choices or anything. I scanned the screen thoroughly -- the eballots themselves are simple but the interface obfuscates certain important things -- and finally noticed at the top that it said "Natural Party Ballot." Holy shit, they gave me the wrong ballot!
But wait a second, they gave the person in front of me the wrong ballot too, then! And sure enough, that person had already gotten themselves 3 screens deep into an electronic keyboard to try and type "Kerry" (I could see her screen, bogus) because none of the choices allowed her to.
Summary: the guy who gave me my voter cards must be a moron. Oh my god, this can't be an isolated occurrence. But wait, there's more.
I finally get my card settled and go vote. This time I recognize some of the names, but again I couldn't vote on the democratic primary. What gives? I flip open my voter booklet and on the second or third page it stated something to the effect of: "non-partisan voters can vote in 3 of the 7 party primaries, just request a ballot to do so".
So I requested the ballot. Moron #1 had no idea what I was talking about, asked me if I'd voted, I said "yes of course but" and he cut me off and said "well then you're done." No I'm not, look right here in YOUR BOOKLET, SEE? "Gee, I don't know anything about that." OK, done with you, let's try door #2.
The second guy was a little bit more intelligent but still had no idea. "But it's right here in the voter registration booklet, and the details take up this entire page, how can you guys not know what this is?" He still had no idea, but at least he had the good sense to ask person #3.
Person #3, the youngest of the three, was outside taking a cell phone call and came back in to help me. She at least was willing to consider that I and my voter pamphlet might be right. Rummage rummage rummage, shuffle shuffle, oh, the directions state he can vote a paper ballot. Moron #1 insists "we ain't got any", starts looking around. A short period of chaos ensues, the line stops moving forward. A box under Moron #1 contains something; he insists they aren't ballots. Person 2 gets the box, Person 3 opens it and whoa! Look at that, paper ballots.
But they're still uncertain, and it's freaking me out. Well, they reason, I must be allowed to fill out a paper ballot if that's what the booklet says. Huh??????? You guys don't *know*? WTF?
I fill out the paper ballot and hand it back to the 3rd person, who seemed the most intelligent and most aware of what was going on of the three. Of course, she took the ballot from me and folded it, put it in a corner and that's the last I saw of it. It didn't go into a box, it didn't go into any safe place. Who knows what its eventual fate might be.
Now listen, I understand that the electronic voting systems have vulnerabilities and problems and (for the most part) whackjob morons designing them. But you know what? After my experience today I am *really* more concerned about the process, the training, and the people.
They're volunteers, and man thank you, the world could use more of a helping hand in general. But they were soooo ignorant! Where did my paper ballot go? Was that even the right ballot to fill out? And the electronic one? WTF happened to
1. The person must be able to select the name of the person they want to vote for. (check)
2. Now count which person received the most votes. (check)
3. Announce a winner. (check)
You missed a step:
4. Prove the system counted the votes correctly. (Oops!)
To do this you need:
1a) The machine must make a hardcopy record of how the voter voted.
1b) The voter must be able to check that the hardcopy is accurate.
1c) The hardcopy must be preserved (along with the hardcopies of the other voters' votes), until the recount opportunities have expired.
4) When the loser says "I don't believe it!", the hardcopies must be manually counted, under the eyes of the loser's teammates, to prove that the loser really lost.
1a, 1b, 1c, and 4 are all missing from the Diebold system (along with most of the others).
Instead they have:
1d) Fiddle with the database to move votes from one candidate to another.
along with other possible problems.
Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way