Slashdot Mirror


Open Voting at OSCON

fmclain writes "The Open Voting Consortium (OVC) which has already been mentioned here will be demonstrating its open source voting system, which includes a voter verifiable paper trail, at this year's OSCON in Portland. The Mercury News (free reg.) describes this as the touch-screen holy grail. Given Diebold's troubles in California this can't come too soon. The OVC has already demonstrated a working system in Sacramento."

135 comments

  1. The Same News We Have Already Heard by pholower · · Score: 4, Insightful
    This is exactly what the voting system needs in order to become more accurate. A multi-system machine. Or multiple machines to record the votes. The primary machine to do it in real time through a computer, and the secondary machine to validate the votes to prevent fraud.

    Of course, that is exactly what I said here as well. But that didn't fly to well with the slashdotters then either.

    --
    -- johntracy.com, because everybody else is wrong.
    1. Re:The Same News We Have Already Heard by AuMatar · · Score: 4, Insightful

      What I've been saying for a while now is we need:

      1)Multiple ways of counting the votes (electronic, paper, OCR). One way must be paper.
      2)Different groups doing each count
      3)All methods MUST be counted
      4)All counts must agree within a small percent error, and the percent error must be less than the margin of the election. If they do not, revote.

      --
      I still have more fans than freaks. WTF is wrong with you people?
    2. Re:The Same News We Have Already Heard by pholower · · Score: 1, Redundant

      Bravo, somebody else gets it. In order to have an accurate voting system. It must have redundancy. And all fall backs must be check, how else would you know if it were inacurate or not?

      --
      -- johntracy.com, because everybody else is wrong.
    3. Re:The Same News We Have Already Heard by pangian · · Score: 3, Informative

      2) Different groups doing each count

      This used to be done by having representatives from each party there for the vote counting, corroberating the results. In some countries, in addition to party monitors, independent non-partisan groups check the vote count. In the U.S. however, we have been lulled into trusting the vote count and so as far as I know these efforts haven't been organized recently. Now electronic voting machines that don't produce any sort of auditable trail prevent citizens from exercising this level of oversight should they desire to. There are a few groups talking about non-partisan election monitoring this November. I'm aware of VoteWatch, and perhaps the League of Women Voters and the ACLU will organize monitoring in particularly vulnerable districts. Is anyone aware of other efforts?

    4. Re:The Same News We Have Already Heard by Anonymous Coward · · Score: 0

      Re:The Same News We Have Already Heard (Score:1, Redundant)
      Bravo, somebody else gets it. In order to have an accurate voting system. It must have redundancy. And all fall backs must be check, how else would you know if it were inacurate or not?

    5. Re:The Same News We Have Already Heard by Anonymous Coward · · Score: 0

      Outsource it to India. We have better technology and would never elect a chump like GWB. http://www.bel-india.com/Website/Asp/ProductDetail s.asp?CategoryId=65&ProductId=138

    6. Re:The Same News We Have Already Heard by Short+Circuit · · Score: 1

      Uh, shouldn't that mod have been "plus 1 Redundant"?

  2. Whew... by Anonymous Coward · · Score: 3, Funny
    Open Voting at OSCON

    For a second there I thought it said Open Voting at SCO.

    1. Re:Whew... by Anonymous Coward · · Score: 0

      I would prefer open season.

  3. Paper trail by 7Ghent · · Score: 5, Informative

    Of course, the most important aspect of this system is that it creates a voter-verifiable paper trail and thus more accountability.

    This is all implemented on a state level. Call your local representatives NOW. This is something you personally can get involved in. Chances are, particularly if you live in a backwater state like I do, that your state senators have never heard of open source. It's your responsibility to educate them.

    If you wanna make sure your vote doesn't get hacked, get involved!

    1. Re:Paper trail by Anonymous Coward · · Score: 0

      Agreed this approach should be propagated where possible

    2. Re:Paper trail by persaud · · Score: 3, Interesting

      The most imporant aspect of the voting computer is that it generates paper?

      Maybe we should have computers count paper instead of first counting votes and then generating paper.

      A real improvement in accountability would be a computer system that audited the *humans* who audit the *process*.

    3. Re:Paper trail by ActiveSX · · Score: 1

      I think the point is that a computer both does electronic counting and paper counting. There is a barcode on the printout that can be/is scanned back in later to check for agreement of the two sets.

    4. Re:Paper trail by persaud · · Score: 1

      That's equivalent to the difference between single sign-on and a mirrored database. You have (a) increased system complexity, (b) doubled the risk of failure (two fraud targets instead of one), and (c) paid the opportunity cost of not improving voter registration and authentication.

    5. Re:Paper trail by ActiveSX · · Score: 1

      Nay. You would have to mess with the results of both the paper and electronic tallys. If you hit only one, the difference from other would raise a flag, and a repoll would be required. If there was only one vote path, there could be no such check.

    6. Re:Paper trail by persaud · · Score: 1

      Recounts have to be requested, they are not triggered by a difference between the two records. Recounts are typically only requested when the margin of victory is very small, otherwise the loser bears the political cost of appearing to be a sore loser. This produces an incentive for fraud to create a large margin of victory in many places and a tiny margin in 1 or 2 places for a media-distracting recount.

      If a recount is triggered and a difference is found between the two records, which record do you take as correct? The paper one? Why?

      If the paper and electronic records are both being protected by the same humans, then the humans' protective attention has been diluted for no gain.

      If the paper record is stronger than the electronic record, it should be the primary count, not the secondary count (which would only be consulted during a recount).

      We are demoting the stronger record (paper) in favor of a weaker one (electronic) and comforting ourselves with the illusion that we have a "strong" backup which will almost never be checked.

  4. Who Gets the Profit? by Mikkeles · · Score: 2, Insightful

    If it isn't a crony corporation of the government, can this even fly?

    --
    Great minds think alike; fools seldom differ.
    1. Re:Who Gets the Profit? by muel · · Score: 4, Insightful

      More importantly, who will adopt this 'improved' electronic voting system? Very few. Potential consumers:

      1) states/regions that have already spent millions on Diebold machines,

      2) states/regions that don't have the budget to overhaul the paper voting systems already in place.

      The groups seeking electronic 'improvement' have, for the most part, already tanked their money into Diebold systmes, so you'll be hard-pressed to find a city council / state legislature in those respective areas that will willingly devote more of their budgets to MORE electronic voting machines. Constituents in these communities won't stand for that kind of spending because the information about the faulty machines has been kept too well under wraps to raise popular concern.

      Ultimately, however, if these machines can get into even one voting district in this nation in the place of Diebold, then I'll count it a success. However, I doubt the machine producers will feel that giddily about such a small profit margin.

    2. Re:Who Gets the Profit? by persaud · · Score: 3, Interesting
      Diebold is one animator away from being a cartoon villian. Gerrymandering is at least equally destructive to democracy. From America as a One Party State:

      "... We are at risk of becoming an autocracy in three key respects. First, Republican parliamentary gimmickry has emasculated legislative opposition in the House of Representatives (the Senate has other problems). House Majority Leader Tom DeLay of Texas has both intimidated moderate Republicans and reduced the minority party to window dressing, rather like the token opposition parties in Mexico during the six-decade dominance of the PRI.

      Second, electoral rules have been rigged to make it increasingly difficult for the incumbent party to be ejected by the voters, absent a Depression-scale disaster, Watergate-class scandal or Teddy Roosevelt-style ruling party split. After two decades of bipartisan collusion in the creation of safe House seats, there are now perhaps just 25 truly contestable House seats in any given election year (and that's before the recent Republican super gerrymandering). What once was a slender and precarious majority -- 229 Republicans to 205 Democrats (including Bernie Sanders of Vermont, an independent who votes with Democrats) -- now looks like a Republican lock. In the Senate, the dynamics are different but equally daunting for Democrats. As the Florida debacle of 2000 showed, the Republicans are also able to hold down the number of opposition votes, with complicity from Republican courts. Reform legislation, the 2002 Help America Vote Act (HAVA), may actually facilitate Republican intimidation of minority voters and reduce Democratic turnout. And the latest money-and-politics regime, nominally a reform, may give the right more of a financial advantage than ever.

      Third, the federal courts, which have slowed some executive-branch efforts to destroy liberties, will be a complete rubber stamp if the right wins one more presidential election.


      Those federal courts? They have a little something to do with copyright law (see other stories on Slashdot today).
    3. Re:Who Gets the Profit? by garyok · · Score: 1

      More importantly, who will adopt this 'improved' electronic voting system? Very few.

      In Britain we have the Sale of Goods Act where, if the products weren't of merchantable quality when they're sold, you get to get your money back. Now as it's been proved that Diebold provided uncertified machines and a number of failures have occurred why can't Californian election officials just return the machines and ask for their cash back? Then they'd have plenty of money to implement the OSV systems. Even if they didn't get all their money back they might get enough to cover the costs of the new system.

      And would Diebold fight California in court, pretty much guaranteeing zero sales of the machines to other states for the rest of ever? I doubt it.

      Maybe making a huge loss out of the e-voting thing is what it'll take for companies like Diebold to get out of the e-voting market and start letting people with a stake in functional democracies provide the systems.

      --
      One of the penalties for refusing to participate in politics is that you end up being governed by your inferiors - Plato
  5. I'm all about some technology by thebra · · Score: 4, Funny

    but there are so many ways this can go wrong. I think that we should just stand in a big crowd and raise our hands.

    1. Re:I'm all about some technology by bobej1977 · · Score: 1

      Disenfranchising people would sure be a bloodier affair...

      --
      The meek shall inherit the earth, in 3 by 6 plots. - Lazerus Long
    2. Re:I'm all about some technology by Anonymous Coward · · Score: 0

      Ach! My hands! *panic* Where did I put my hands!? I don't have any hands!

      Thank you! I'll be here all we(*!@&$(@|*^$#*&@!NO CARRIER

    3. Re:I'm all about some technology by Dolentron+3030 · · Score: 1

      On an episode of the West Wing, they proposed doing a poll of representative sample of the US population to determine who the people wanted to elect. They TV told then told me that it would be more accurate and I think that it'd probably be easier to carry out than our current system. However, it seems like I forsee some unforseen problems arising.

    4. Re:I'm all about some technology by adamofgreyskull · · Score: 1

      Or better, if you want to vote for one party, you go to the east coast, and the other, you go to the west coast.Scientists(tm) then measure the change in displacement of the continent at each side. Simple!

  6. Whoop de do by Kelz · · Score: 1

    Until pressing a button is as secure as writing (or punching) your vote on paper and dropping it in to a box, e-voting won't be mainstream. You can't hook up a wire to a box to change all the votes inside can you?

    1. Re:Whoop de do by Jtheletter · · Score: 1
      You can't hook up a wire to a box to change all the votes inside can you?

      You can't hook up a wire to a box and change the paper trail either, that's the point.

      --
      -- I'm not a pessimist, I'm a realist. It's not my fault that life sucks so much. --
    2. Re:Whoop de do by koreth · · Score: 5, Insightful
      Until pressing a button is as secure as writing (or punching) your vote on paper and dropping it in to a box, e-voting won't be mainstream.

      So India's 100% electronic general election, underway as I type this, is just a figment of South Asia's collective imagination? How much more "mainstream" than the entire electorate of a democracy three times as populous as the US can e-voting get?

    3. Re:Whoop de do by Kelz · · Score: 1

      So India's 100% electronic general election, underway as I type this, is just a figment of South Asia's collective imagination? How much more "mainstream" than the entire electorate of a democracy three times as populous as the US can e-voting get?

      Ok, why aren't we using India's system?

    4. Re:Whoop de do by hInstance · · Score: 1

      For the answer, read today's slashdot
      (The info about India is down towards the bottom of the story summary).

    5. Re:Whoop de do by cynical+kane · · Score: 1

      We used to use it, but then it was outsourced to India.

  7. Condorcet's Method by Anonymous Coward · · Score: 0

    Is true democracy. (If you don't know what it is, inform yourself. I'm busy.) Perhaps with these machines we could vote with Condorcet's method.

    1. Re:Condorcet's Method by Frigid+Monkey · · Score: 2, Informative
      Here is some information on

      Condorcets Method

      But I am not sure you are sufficiently informed on the nature of our great United States we are a Democratic REPUBLIC and the although I agree Condorcet's method may remove some of the "You wouldn't want to throw your vote away" syndrom that influences so many voters there is still the electoral college and even worse, as the last election demonstrated, it just doesn't matter.

      I agree with you on one point: How we count our votes does not equate to voteing reform. We must fundamentally change the methods used in the election of our leaders if this is to be a truely free Democratic Republic. Now try and explain that to the people who have the power to change it. They are the ones the current system put into power eg: the least likely to suppot change.

      -FM

      --
      "It's all just meme meme around here"
  8. Questions... by spiritraveller · · Score: 1
    OKay, actually, just one.

    I'm all for open source... love it.

    And I don't trust Diebold anymore than the next guy.

    But is open source really appropriate for this situation? Especially for a voting system that works on "very inexpensive PC hardware".

    Wouldn't it be very easy for someone to patch the software in a bad way and recompile it before installation?

    I assume this has been thought of already, but I can't figure out how to prevent that kind of danger.

    1. Re:Questions... by happyfrogcow · · Score: 2, Insightful

      well at some point you probably have to have real life security. maybe that means a certified, then locked in a vault until voting day computer, or a computer that boots from a trusted source like a certified and locked in a vault until voting day bootable cdrom. i dunno... i just think there has to be human security checks as well as technological security checks. you can't rely only on one.

    2. Re:Questions... by pholower · · Score: 1

      Yes that would be possible, but also consider this.. The voting booths have to be verified just before the poles open. No longer than 24 hours in my neck of the woods. The systems are then locked down. I would suppose that it is possible for somebody to "patch" or change the code, but the person would have to be experienced with the code and also would have to bypass the second machine which is counting the ballot that was printed. This makes it much harder to do.

      --
      -- johntracy.com, because everybody else is wrong.
    3. Re:Questions... by ignorant_newbie · · Score: 3, Funny

      >Wouldn't it be very easy for someone to patch
      >the software in a bad way and recompile it
      >before installation?

      yeah, because of course no one's worked out a way to tell that a binary is the one you think it is <cough>checksum<cough>, since this whole open source thing is so new that no one's ever installed it in a security critical place before <cough>nsa<cough>.

      you're right, we should run out and install windows right away, since we can trust billg to tell us that our systems are safe.

    4. Re:Questions... by Kenja · · Score: 3, Informative
      "Wouldn't it be very easy for someone to patch the software in a bad way and recompile it before installation?"

      Wouldn't someone be able to do this with a closed source app as well? Closed source is not the same as no source.

      --

      "Have you ever thought about just turning off the TV, sitting down with your kids, and hitting them?"
    5. Re:Questions... by ignorant_newbie · · Score: 2, Interesting

      >I assume this has been thought of already,
      >but I can't figure out how to prevent
      >that kind of danger.

      1. design the system to run from a cd ( knoppix ?).
      2. have the bios checksum the cd during boot, display te result on the screen
      3. the poll-workers verify that the check-sum is correct
      4. profit!

    6. Re:Questions... by Anonymous Coward · · Score: 0

      Nah, there's only REAL profit in selling out America's vote to the dominant politicos.

      LOSER.

    7. Re:Questions... by spiritraveller · · Score: 1
      you're right, we should run out and install windows right away, since we can trust billg to tell us that our systems are safe.

      I was asking a question not making a statement. Please forgive me for offending your sense of obviousness.

      SMARTYPANTS... Splplpplpl!

    8. Re:Questions... by spiritraveller · · Score: 1
      would have to bypass the second machine which is counting the ballot that was printed

      Can the second machine cross-reference the bar code AND the text? Maybe only random intervals would be enough to insure nothing funny going on.

      I am thinking about righting my Secretary of State about this.

    9. Re:Questions... by Anonymous Coward · · Score: 0

      "you're right, we should run out and install windows right away, since we can trust billg to tell us that our systems are safe."

      At least we know Bill Gates' motive for writing software. What we don't know is the motive for people to contribute to open source voting software. The many eyes detects security issues has been shown to be bs, so how do you know there's no malicious code. A paper trail is a good thing. OSS isn't necessarily the answer though. See EETimes article on using Linux for military apps.

    10. Re:Questions... by hInstance · · Score: 1
      The many eyes detects security issues has been shown to be bs, so how do you know there's no malicious code. A paper trail is a good thing. OSS isn't necessarily the answer though.

      1. Of course there's no guarantee that "many eyes" will detect a given security flaw. But it's statistically more likely than "few eyes" finding it.

      2. A paper trail is one of the key features of the open source system in question (from OVC). In fact it's more than a "trail", it's the paper vote that counts, not the electronic one.

      3. In the case of voting systems, I have to absolutely disagree about open source not necessarily being the right answer. Even if we assume that closed source software would be equally secure from outside attackers, we have to know that we can trust the very people who are building the system to make it fair and impartial. And the only way this is possible is to make the code public to anyone who cares to look.

    11. Re:Questions... by Anonymous Coward · · Score: 0

      Sure they could rig the code. But you did notice that there is a 'paper copy' for you to inspect, right then, and hopefully you would notice if your vote for Bush became a vote for Nader..... right?

      And if it did, you could *maybe* go talk to someone (like the state Attorney General, the ACLU, etc.) about that? Someone will want to know - especially the guy you voted for.

      With Diebold's system, you vote for X, it can record Y, and you just go home and say, "Gee, my candidate lost."

  9. Voter registration fraud by persaud · · Score: 5, Insightful

    Is at least as important as a paper trail. Since we already have systems that have a paper trail (i.e. paper ballots), computers could be better used to improve the accuracy and reliability of the voter registration process. This would reduce tampering by hostile insiders *and* outsiders.

    1. Re:Voter registration fraud by DebianRcksLindowsLie · · Score: 1

      In California, there's the Motor Voter bill, which registers you to vote automatically if you have a driver license. This automatically makes every resident driver a voter, whether or not they are a US citizen. The voter registration process is majorly flawed.

    2. Re:Voter registration fraud by cluckshot · · Score: 1

      Mod this guy up! He gets the issue. Voting is a right of Citizenship. It should not go to non-citizens and or to persons of no account who have violated society and shown their irresponsibility to the health, safety and good will of their community. Such persons lack the right or the judgement to manage our society and should not pick its leaders.

      I live in Alabama. My Wife is a Philippine national. She applied for her learners permit took the test and after checking her passport and handing her the learners permit, the lady handed her an application to register to vote. I told her off! I told her in no uncertain terms that she had just seen the passport of this lady and voting was for CITIZENS not for everybody who passes by. The people of America had better wake up to this one.

      --
      Never Politically Correct ~ I prefer the facts If you don't like what I say, get a life, or comment yourself.
  10. Debian!# by Anonymous Coward · · Score: 0, Funny

    I hope it isn't running Debian. I don't think Debian even has printer support yet, so a paper trail would be tough.

  11. This is the perfect market open source by 91degrees · · Score: 5, Insightful

    Traditional software companies hate open-source software because no one owns it or collects royalties for it.

    sigh... They really don't get it. Unlike Windows XP, or Adobe Photoshop, voting software requires very limited runs, and typically needs to recover its cost on its first sale. There's no need to make revenue on a per copy basis. There is probably only going to be a single customer who will have precise demands. If it was closed source, the amount of work would be the same, and the amount and so that you could charge would be the same.

    Companies really need to get over the idea that because code costs money to produce, it must have value. Sometimes it is the case. Often it isn't.

    1. Re:This is the perfect market open source by cybermace5 · · Score: 2, Insightful

      Exactly, it's not like a voting system is going to contain any previously unknown revolutionary concepts in the code. Get input, store input. It should be pretty straightforward, and the only reason people want it open is so that they can make sure there aren't mistakes.

      --
      ...
    2. Re:This is the perfect market open source by laird · · Score: 2, Insightful

      "voting software requires very limited runs, and typically needs to recover its cost on its first sale. There's no need to make revenue on a per copy basis. There is probably only going to be a single customer who will have precise demands. If it was closed source, the amount of work would be the same, and the amount and so that you could charge would be the same."

      I agree with this point. I'll also point out that the _real_ value that a voting system vendor provides isn't the software system, it's the complete service. The states don't need someone to provide them software -- the states need someone to provide a complete solution, from training election workers to providing on-site technical support. Compared to the cost of providing tech support to thousands of polling locations, manufacturing and shipping hundreds of thousands of voting machines, getting your product certified in each state, etc., the cost of the software development should be fairly minor.

    3. Re:This is the perfect market open source by hInstance · · Score: 1

      When you put it that way, it sounds like a massive undertaking. So seriously, what are the chances of the OVC system being used anywhere in Novemember? And if they're not in place by November, will the impetus for improved voting systems be gone?

    4. Re:This is the perfect market open source by laird · · Score: 1

      It won't be in place by this November, because most states require systems to be certified a year before the election. What the Open Voting Consortium is shooting for is to get funding so that in 2005 the system can be certified by companies that are in the business of selling election systems, for use in 2006 elections.

    5. Re:This is the perfect market open source by hInstance · · Score: 1

      I was afraid you'd say something like that. :(

      I wonder how many counties will be left by 2006 that haven't already been forced to invest in diebold or similar untrustworthy systems.

    6. Re:This is the perfect market open source by laird · · Score: 1

      That's up to the counties -- the HAVA funding that's driving all of this is available until 2006.

  12. Has OVS attempted to get their system certified? by David+Hume · · Score: 5, Informative


    The Federal Election Commission has a FAQ About The National Voluntary Voting System Standards. The FAQ indicates that to meet the standards, an election system must satisfy either "FEC's voting system standards" or pass tests "by independent testing authorities (ITAs) designated by the National Association of State Election Directors."

    The National Association of State Election Directors has, among other things:

    (1) a List of NASED Certified Systems;

    (2) an Updated List of NASED Certified Systems; and, most importantly,

    (3) an Overview of the Certification Process.

    Has the Open Voting Consortium made any attempt to get their software certified?

  13. hack our way to freedom by Doc+Ruby · · Score: 5, Informative

    It's too late (200 days left) to manufacture new voting machines for the 2004 election. We're probably stuck with the touchscreens peddled by Diebold, SIAC, Sequoia and ES&S, all of which have had severe field problems (some of which seem deliberate). But we've got enough time to install OSS voteware on these machines. And to test them as deterministic, reliable and accountable by paper trail.

    Now you can help, in standard "Open Source Community" fashion. Email stories about this OSS voteware, and the serious problems with the proprietary voteware it replaces, to your local newspaper, TV station, and elected representatives. Keep your tone serious, professional, and no-nonsense about your intolerance of votefixing in the status quo. You have about 75 days left in which to be heard - after that, there's no time to do anything but whine. And soon after that, even whining will be out of the picture.

    --

    --
    make install -not war

  14. Thank you. by Anonymous Coward · · Score: 0

    We at Diebold appreciate the efforts of those that have created OVC. We plan to release version 2.0 of our voting system next month, for a nominal upgrade fee. Diebold Electronic Voting System 2.0 will be based entirely on OVC.

    Thanks again. Suckers!

    1. Re:Thank you. by fmclain · · Score: 2, Insightful
      Thank you Diebold! That's what we intended all along. We appreciate your cooperation.

      I hope you intend to open source version 1 as well.

  15. Um..... by MoneyT · · Score: 1, Interesting

    If we have a voter verifiable paper trail, that means a vote can be traced back to the person. Wouldn't that sort of defeat the purpose of voting in private?

    --
    T Money
    World Domination with a plastic spoon since 1984
    1. Re:Um..... by koreth · · Score: 1

      "Voter verifiable" means you, the voter, look at the paper and verify its correctness before you put it in the box. Doesn't mean your name is on the paper.

    2. Re:Um..... by Mikkeles · · Score: 3, Informative

      No, because the paper ballot is deposited into the ballot box after the voter receives and verifies it.

      --
      Great minds think alike; fools seldom differ.
    3. Re:Um..... by steveha · · Score: 3, Insightful

      If we have a voter verifiable paper trail, that means a vote can be traced back to the person.

      It helps to read the article. Go ahead and read it now; I'll wait here.

      The computer records the voter's choices, and then prints out a paper ballot, which includes a bar code. If you are not blind, you inspect the ballot with your eyes. If you are blind, you can take the ballot to a bar code reader, and put on headphones, scan the barcode, and listen as it reads back your votes to you.

      The vote can't be traced back to the person, because the person verfies the ballot at the polling place, and then deposits the ballot in the ballot box. Since the voter doesn't write his or her name on the ballot, or any other identifying information, it's exactly the same as current paper-based systems of voting.

      Note that if you try to steal the election by tricky programming in the poll computer, the inspection of the ballots reveals your plot. If you try tricky programming of the official ballot-counting computers, you can be found out in a recount with different computers.

      This system is way better than a black-box "just trust us" e-voting computer.

      steveha

      --
      lf(1): it's like ls(1) but sorts filenames by extension, tersely
    4. Re:Um..... by MoneyT · · Score: 1

      So then it's not really a paper trail, it's just a level of complexity to the punch cards. This will solve problems how?

      --
      T Money
      World Domination with a plastic spoon since 1984
    5. Re:Um..... by steveha · · Score: 2, Informative

      0) It's way easier to use than punch cards. Press buttons on a touch screen.

      1) It's way easier to verify than punch cards. Just read it.

      2) No hanging chads. Inspecting a ballot does not alter the ballot.

      3) No hanging chad jokes.

      steveha

      --
      lf(1): it's like ls(1) but sorts filenames by extension, tersely
    6. Re:Um..... by MoneyT · · Score: 1

      0) As opposed to poking a hole in a piece of paper?

      1) As oposed to looking to see that you indeed put a hole in the right spot

      2) Would be solved if people actualy did 0 and 1

      3) There will always be hanging chad jokes.

      --
      T Money
      World Domination with a plastic spoon since 1984
    7. Re:Um..... by steveha · · Score: 1

      0) As opposed to poking a hole in a piece of paper?

      Perhaps you have used a different punch card voting system than the one I used. The one I used you need to concentrate carefully to make sure you are punching in the right place.

      1) As oposed to looking to see that you indeed put a hole in the right spot

      Now you are just trolling. Which is easier, verifying that a small hole was punched on number 36 and not on number 37, or reading the names you voted for printed on a sheet? It's a lot easier to just read the names.

      2) Would be solved if people actualy did 0 and 1

      Don't you remember, after the Florida debacle, the Democrats claiming that lots of people really meant to vote for Gore but were too stupid to figure out how to use the punch-card voting system? (They didn't use the words "too stupid" but that's what it boiled down to.)

      Don't you remember how chads could fill up inside the punch voting machine, making it harder to punch a chad completely out, making it harder to vote?

      I'm amazed you seem to prefer punch card voting.

      If you just want a simple system that works, I like the one where you fill in a circle next to the name of the person you are voting for. That's easy to do and easy to verify. This new system is better for blind folks, though.

      steveha

      --
      lf(1): it's like ls(1) but sorts filenames by extension, tersely
    8. Re:Um..... by MoneyT · · Score: 1

      I prefer a system which is more secure. I'm sorry but computerized systems are not going to solve this problem. And it will add new problems. What happens when someone votes twice? Why did they vote twice, because they didn't vote right the first time. The problem is they did, but now they've put in two votes. That's the problem if you use the paper for the votes. If you use a computer, well, you know the deal

      --
      T Money
      World Domination with a plastic spoon since 1984
    9. Re:Um..... by steveha · · Score: 1

      I prefer a system which is more secure.

      Paper ballots are about as secure as voting gets. You need to be able to do a re-count. You need to make it harder to steal an election, so it's good that a bag full of ballots is a big thing that is hard to hide (as opposed to votes stored on a hard disk in a black-box voting machine). You need to be able to check the system, so it's good that you can feed the same ballots into different counting machines to make sure the count is the same, and it's also good that human eyes can read the ballot to verify it.

      What happens when someone votes twice?

      Null question. There is nothing about this voting system that increases or decreases the odds of someone voting twice.

      If you punch two ballots in a punch voting system, you vote twice. What happens then? Same problem.

      steveha

      --
      lf(1): it's like ls(1) but sorts filenames by extension, tersely
  16. Modest proposal: Run it on Diebold's hardware? by Ungrounded+Lightning · · Score: 5, Interesting

    One of the arguments against adopting this in some states is that they've already dumped a bunch of cash on proprietary systems, notably Diebold's.

    But Diebods's system appears to be based on a hardware/OS platform that, at its core, is Wintel. No doubt the same is true for many, perhaps even all, of the others. (Even if they're not, Linux and the GNU toolset already has ports to many other processors/platforms, including essentially all commonly available current-generation processors.)

    Perhaps it might be possible to port the Open Source voting software to the Diebold and/or other voting machines that have already been purchased?

    The bulk of the machines you need are the ones in the booths. Plug an off-the-shelf printer into a Diebold and you're all set there. (No security issues on the printer itself, beyond making sure it's working.)

    For the remainder, you only need one (plus maybe a spare) with a working OCR reader, sound card, and modem - for the blind readback and the uplink scan. Put that scanner on the exiting voting machine with the modem (as Diebold does on one of the machines for doing the final uplink to the state's database). Or put it on a cheap desktop, since the touchscreen is not necessary.

    (Heck: Put the software for THAT machine on a bootable CD-ROM and you don't even need a special machine. Just borrow one from the school library for election day. Even if some BIOS-based malware managed to get activated and save the data, there's no confidentiality issues with what is on that machine. Any corruption of the data by malware would be detected in a manual recount, just like corruption in any other part of the total system.)

    For future instalations you could go with generic touchscreen systems - or stick with the major vendors if their prices come down into the sanity range or if you want to pay a premium for ironclad hardware (like byers of "True Blue" PCs from IBM). The voting machine vendors could even make money as vendors of ruggedized commodity hardware if they don't have to maintain all that proprietary voting software.

    --
    Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
  17. Geek Voters by LordHatrus · · Score: 3, Funny

    This might be enough to make millions of geeks to leave their CRTs and LCDs, and go vote.... just to check out the new system :)

  18. Exactly Appropriate by thelen · · Score: 3, Insightful

    When it comes to something as critical to the welfare of the public and to our form of government as the assurance of fair elections, open source software should be encouraged vigorously.

    Software does not become more secure by hiding the sourcecode, and election results are not made more secure by entrusting the results to a corporation. These facts, compounded by the rampant infiltration of corporate interests in the US government, and, at the same time, the vast amount of public scrutiny sure to be given an open source voting system like this one, make the choice IMO a no brainer.

  19. Paper votes aren't always secure either by feepcreature · · Score: 5, Insightful
    Until pressing a button is as secure as writing (or punching) your vote on paper and dropping it in to a box, e-voting won't be mainstream. You can't hook up a wire to a box to change all the votes inside can you?

    True, you can't change paper votes by wire, but there are lots of traditional methods for interfering with paper votes:

    • replace the ballot box with "one I prepared earlier"
    • steal the box altogether
    • manually stuff lots of extra votes into it
    • nobble voters
    • register extra voters
    • don't register some real voters
    • impersonate real voters (especially dead ones still on the register, or sick or apathetic ones)
    • etc...

    A fair and free vote requires confidence in the mechanism, but also in the count, and the officials, and the register, and lots of other parts of the process.

    In some countries, hacking electronic machines might be one of the harder ways to steal an election :-(

    --
    Paul "Say no to feeping creaturism"
    1. Re:Paper votes aren't always secure either by Anonymous Coward · · Score: 0

      "nobble voters"

      I had to look that one up. It had a naughty sound to it, but it fits the list perfectly. Now I know a new word. Thank you.

    2. Re:Paper votes aren't always secure either by Anonymous Coward · · Score: 0

      I caught CSPAN coverage of e-Voting issues a few weeks ago. One of the things I picked up that I didn't known before was that systems have been devised which would allow the actual paper ballots themselves to be cryptographically signed in such a way as to be able to detect when they have been manipulated.

      Hmm, where did this sequence of 1000 votes go?

      Where did these extra 20000 votes come from that don't match the expected cryptographic signature sequence?

      Hmm, why are ALL of the ballots from Precinct X missing?

      While this doesn't address all of your points, it does meet quite a few of them. It seems to me that traditional vote fraud could be engineered out of the system.

      Thats a good thing. Right?

    3. Re:Paper votes aren't always secure either by Anonymous Coward · · Score: 0

      The EVM2003 takes care of:

      replace the ballot box with "one I prepared earlier"

      (and)

      manually stuff lots of extra votes into it.

      ---

      The paper ballots should match the totals collected electronically from the voting machines (on CDR and/or USB memstick), AND the paper ballots have a watermark (printed by the printer on standard paper) of a type and registration that is unique to each precinct (and not publicly known before the election). Also, all paper ballots contain a serial# (privacy-compliant) that can be traced back to a specific voting kiosk.

      System sounds great to me ... too bad there's not more time before the election.

    4. Re:Paper votes aren't always secure either by pangian · · Score: 2, Insightful

      In some countries, hacking electronic machines might be one of the harder ways to steal an election

      Its interesting that you mention this. A year ago I was working with groups trying to ensure the integrity of [non-electronic] voting in Nigeria. My boss, who was also working on the project, mentioned that in his conversations with Nigerians many expressed greater confidence in a computerized election.

      The argument could be made that this is due to naivite and blind faith in computers... indeed it's telling the many of the greatest skeptics of e-voting in the U.S. are the people who know the technology best. But it is also true that in many places elections are most likely to be stolen at the local level. Computerizing elections may in some ways make it more difficult to alter election outcomes at the polling station level. By requiring a larger conspiracy to affect the outcome they may make some sorts of fraud less likely. Not saying there aren't plenty of problems with e-voting as it is being implemented in the U.S.(in fact I've said the opposite on several occasions), but it is an interesting point.

  20. Ha ha. by Anonymous Coward · · Score: 0

    You are funny! Due to the high-security requirements of our customers, we at Diebold do not release the source code to any of your ^h^h^h^h our software. We appreciate your enquiry as well as your software.

  21. The CA problem was garbage in - garbage out by Anonymous Coward · · Score: 0

    "Given Diebold's troubles in California this can't come too soon."

    This system isn't any better than Diebold's if you tell it to use the wrong ballot. That's what happened in CA because volunteers weren't properly trained. This isn't to say that Diebold systems don't have flaws, but using the CA election is a bad example.

    1. Re:The CA problem was garbage in - garbage out by ivanmarsh · · Score: 2, Informative

      That's NOT what happened in California.
      The software itself didn't work.
      Diabold has now admitted it didn't work and apologized for it.
      California should sue Diabold.
      Cruz Bustemente should sue California and the governator should be recalled.

  22. getting there... by dnamaners · · Score: 1

    This seems more usable than that Dibold thing. The added security of paper is very appealing. After all it was all this chad crud that started the mess. Should not the improved version be way to make an easy to scan and tabulate ballots in a way that cant be mis-cast so easily. This method is exactly what is needed, paper ballots and realtime electronic tabulation followed by a comparison check with an automatic counter. Now the real question is is this the system to do it.....

    The new features...... Bush [ ] Kerry [ ] Random [ X ] Go with the flow [ ]

  23. Diebold *BLOCKED* in California by KefabiMe · · Score: 4, Informative

    Article Here

    http://www.washingtonpost.com/wp-dyn/articles/A3 4424-2004Apr22.html

    Pretty much, California's Voting Systems and Procedures Panel decided by a UNANIMOUS vote of 8 - 0 to block counties from using Diebold machines for the November elections.

    I'm normally very cynical when it comes to politics, but it's nice to see my state get (somewhat) of a clue.

    1. Re:Diebold *BLOCKED* in California by KefabiMe · · Score: 2, Informative

      Sorry for replying to my own post, but I forgot to quote this nugget from the article:

      Panel members also recommended that a secretary of state's office report released Wednesday, detailing alleged failings of Diebold in California, be forwarded to the attorney general's office to consider civil and criminal charges against the company.

      "I'm disgusted with the actions of this company," said panel member Marc Carrel, an assistant secretary of state.

    2. Re:Diebold *BLOCKED* in California by Mikkeles · · Score: 2, Informative

      According to this article at Verified Voting this only applies to Diebold's TSx paperless electronic voting system. Apparently:

      "The Voting Systems Panel did not recommend against continued use of the Diebold TS electronic voting machines or use of optical-scan voting machines. The GEMs software is also not affected by this decision."

      --
      Great minds think alike; fools seldom differ.
  24. Or... by mdfst13 · · Score: 2, Insightful

    Or we could just go back to older methods, e.g. paper ballots. These may be harder to count, but they are absolutely reliable.

    We do not have time to make the current machines have valid paper trails without sacrificing either security or anonymity, since their printers suck.

    1. Re:Or... by Doc+Ruby · · Score: 1

      Yes, California has decided to use their paper/scanner "backups", as the tocuhscreens have "prefailed". Paper is not "absolutely reliable", but it's better than these Deibold eFiascos.

      --

      --
      make install -not war

  25. there is no ONE TRUE METHOD by feepcreature · · Score: 3, Informative
    But which concordet method is the right one? Concordet is sometimes ambiguous, which is not ideal in an election.

    All electoral methods (indeed most forms of government) represent a tradeoff between different considerations.

    For voting methods, criteria of "goodness" might include this list [wot I mostly nicked]:

    1. The voting system should always give a result
    2. If a voter improves the ranking of a particular option, that option should not be disadvantaged (monotonicity criterion)
    3. Removing a candidate should not change the winner of an election unless that candidate is the winner (independence of irrelevant alternatives)
    4. Every possible outcome should be achievable
    5. Non-dictatorship (i.e. more than one person's vote matters)
    6. The number of seats won by any party should be in proportion to votes cast (Proportionality)
    7. Simplicity of process, and accessibility to largest range of voters
    8. Speed of election and count
    9. Reduction of potential for dispute after the fact
    In fact, Arrow's impossibility theorem has shown that the first 5 of these cannot be simultaneously met if there are more than . So pick one with disadvantages you can live with.

    See this interesting Wikipedia article for further discussion of these ideas...

    --
    Paul "Say no to feeping creaturism"
  26. Great! by Anonymous Coward · · Score: 0

    Now all we need are people you care enough to vote!

  27. Re:Paper trail (Maine Legislature ROCKS) by Mark_in_Brazil · · Score: 5, Informative

    I'm not sure if it's because of me (a /.er who's been doing a "Chicken Little" impression about electronic voting for a couple of years now) or because of Ben Cohen's (as in "Ben," the founder of Ben & Jerry's, tho' he's no longer working there) organization, True Majority, which has been sending her e-mails about e-voting, among other issues, but my mom has gotten into this issue. She lives in Maine and sent me an e-mail about an act recently passed in the Maine Legislature entitled An Act to Ensure the Accurate Counting of Votes. Note: navigation is a bit weird on the linked site-- if you go to the text of the Act, the whole text of the bill will not appear on a single page. You will have to use the arrows at the top and bottom of the pages to navigate around through the Act. You can also download a copy in M$ Word format.
    Oh yeh-- there's an amendment. To see it, click on the "Amendments" link on the "Bill Text and Other Docs" page, or click here.
    This is a sweet little piece of legislation. My favorite parts: it prohibits networking the voting machines, requires the voting machine software to be open source, and requires the voting machines to print paper ballots that are inspected by the voter and then placed into a ballot box. I am deeply impressed with this, and with the sponsor, Maine State Representative Hannah Pingree.
    Here's a question: does anybody other than the OVC have a product that meets the criteria specified in the Act?
    Responding to the parent post, I'll say that Maine can be considered a "backwater state," and its legislature has produced what appears to me to be a kick-ass piece of legislation on e-voting that explicitly requires open source software. Do big, rich, important states like California have such good legislation? I think not. Score one for the backwater states!

    --Mark

    PS: if you're near a Ben & Jerry's scoop shop, go there next Tuesday, April 27, and take advantage of Free Cone Day!!!

    --
    "It is nice to know that the computer understands the problem. But I would like to understand it too." --Eugene Wigner
  28. Re:Modest proposal: Run it on Diebold's hardware? by Anonymous Coward · · Score: 0

    The EVM2003 Spec states: "The resolution of the touchscreen hardware will be exactly 1280x1024"

    which makes sense if you look at their sample ballot in a 1024x768 window -- not pretty.

    Anyone know the hardware specs on the Diebold kiosks?

  29. Smart cards! by Bohemoth2 · · Score: 1

    How about using smart cards with a gpg or some other key pair system? this key would just be used for voting. once the voter swipes the card a server or servers then authenticate and sends the appropriate ballot based on that users precinct. Two keys, the voters key and say a judges key could be used to generate a third key to encrypt or sign the ballot. this key could then be stored for ballot verification purposes while preserving anonymity. I would rather have the ballot printed out encrypted. This would force them to scan it in using OCR and decrypt it using the key eliminating any possibility of skullduggery.

    1. Re:Smart cards! by zcat_NZ · · Score: 2, Insightful

      Errr.. what?

      Any kind of voter-verifiable trail needs to be simple enough that the ordinary person can understand and trust it.

      Barcodes, encryption, etc all fail this test, no matter how untamperable they might be. If you want the paper trail to be machine readable, you want a list of names in plain text with a big black machine-readable DOT next to the name they voted for.

      A human-readable paper vote, placed into a locked box, and counted under the scrutiny of multiple volunteers is the only system of voting I'll ever trust.

      --
      455fe10422ca29c4933f95052b792ab2
  30. Re:Modest proposal: Run it on Diebold's hardware? by Mokurai · · Score: 1

    Perhaps it might be possible to port the Open Source voting software to the Diebold and/or other voting machines that have already been purchased? We could, but it wouldn't do any good because the Diebold machines don't have page printers. Running the code for paper ballots and then not printing the ballots would leave us up the creek, and a few cards short of a deck besides. *%-{]}}}

    --
    "A knot!" said Alice, ever ready to be useful. "Oh, do let me help to undo it!"
  31. Oh, yes, I will repeat myself over and over... by hummassa · · Score: 5, Informative

    Till these topics die.

    I live in Brasil. We have had voting machines in the last 12-14 years (yes, twelve to fourteen -- it depends the size of the city you are in). Brazilians here: the first election here in Belo Horizonte to use the machines were the mayoral (and city council, state representation, governor, house and senate) before FHC was elected (as I count it, 2 years + 8 years + 1 1/2 = 11,5 years). I know it, because I was "mesário" (election "table" official? election "clerk"? what is a good English translation?) in the previous election, and in the two subsequent elections). IIRC, there were electronic ballot boxes in Rio and Sao Paulo in the election before that (the only two cities larger than Belo Horizonte).

    Our voting machines are mainly of three different (internally) models: (a) the old ones, that use VirtuOS (*) as the OS, (b) the new ones, that use WinCE as the OS, and (c) the newest and deprecated ones that have the second printer to print your vote, show it to you inside a clear acrilic case, and mix it with others inside the machine.

    Externally, all of them look roughly the same: a box similar to the old "portable computers" of the eighties, with a 5-6" diagonal LCD and a big numerical keypad in the right side of the screen, that has, besides the 0-9 keys, "confirma" (ok), "erro" (cancel), and "branco" (white).

    The electoral process (from the point of view of the voter) begins ... when you get your first job. If you are a mandatory voter (literate person from 18 to 65) you have to go to Electoral Court and register to vote. In the process of registering, you receive the "Título de Eleitor" (voter id), in which you have the number of you voting section. To change jobs, and specially to get a government job, you have to prove you are a registered and regularized voter (you voted in the last election, or regularized your voting situation after it).

    In the election day, you scan the newspapers (or the Superior Electoral Court website), search for the address of your section, and go there. No, there is no transit vote, you can only vote at that address. If you can't get there, you'll have to "justify" your absence.

    At the section, you will present your voter id to one the "mesários", and if you don't have it on you, you can still vote (you can show other valid id), but will be delayed. The mesário will search for your name in the vote-ticket sheet, and annex it to your id while you vote. You will sign a receipt in a sheet, and proceed to the voting "booth". Another "mesário" will type your voter id # in a remotely connected keypad, setting the machine in the "ready to vote" mode.

    The voting "booth" is really only a desk with the voting machine over it, facing nobody else in the room, and sometimes with a cardboard "cover" around it. You will "dial" the numbers of the candidates, in order. when you dial all the digits of one candidate, a star-trek-like chime rings, his/her face will show up in the screen, and if you digited it right, you hit "ok". otherwise, you hit "cancel" and start over. After typing all the candidates, you hit "ok" one last time, the machine chimes again, and goes to "stand by" mode. You have voted. If you don't want to vote for nobody, you can hit "white" instead of the candidate ## (accounted as a "white vote", or "none of the above" -- this is the equivalent of putting your paper ballot in the box without marking anything), or if you really want to protest you can type 9999 or other non-existent-candidate-#, and your vote will be accounted as a "null vote", or "I'm really pissed of" (the equivalent of drawing pictures or writing "improper expletives" in a paper ballot)

    Then, you get your id back, your ticket (keep it together with your voter id!!), and you go home. Ah, bars do not open (theoretically) in the election day, so hope you have bought your beer in the day before).

    From the point of view of election officials, things are more complicated. The machines

    --
    It's better to be the foot on the boot than the face on the pavement. ~~ tkx Kadin2048
  32. Re:Modest proposal: Run it on Diebold's hardware? by Ungrounded+Lightning · · Score: 1

    We could [run the software on Diebold machines], but it wouldn't do any good because the Diebold machines don't have page printers.

    But do they have a serial or parallel port, or any kind of expansion connector for a printer? Even internally?

    I had heard that they do have provision for adding one of their own printers. If the interface for that is standard one might come up with a cheap adapter to bring out a cable for an off-the-shelf printer, suitable for use with your software. (Unlike the machine itself, the printer interface doesn't have to be bulletproof because the voter checks the result.)

    Also, according to one of the stories I've seen on them, at least some of them have a modem, to upload data after polls close. If that's standard, rather than an extra cost option present on only a few of the machines, it might be used to feed a printer - or a plain-paper fax machine!

    --
    Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
  33. Free and Open elections.... by james_in_denver · · Score: 0

    Diebold is trying to hide the code AND the vote, this system is open, isn't that what elections are all about?.... This system is open, and free, err, kinda like beer?

  34. Paper Audiot? Even Better... by Anonymous Coward · · Score: 1, Insightful

    Has anyone ever considered that we can bipass the dangers of electronic voting entirely by using electronic voting machines only as a rough estimate? There is no reason why a complete and total hand count can not be required. Elections do not need instant results (only the Network News channels need "instant results" so that they have something to report). There is no reason why votes cannot be counted by hand with human supervision at each polling place, results combined and processed only after they have been hand verified. Sure, use OCR scanning or something similar to give an instant rough estimate, but don't ever use those totals for a definitive result. Democracy is too important to allow any black box to be involved.

  35. Liberty Day by otis+wildflower · · Score: 2, Insightful

    This is neat and all, but IMHO what this country really needs is a new holiday, the first tuesday in November, so nobody has any excuse not to show up and vote.

    Granted, I probably won't vote for the president, but I may vote in my local congressional and state/local races, if I can get home from work in time.

    Then again, what this country needs is a TON more holidays ;)

    1. Re:Liberty Day by fucksl4shd0t · · Score: 1

      This is neat and all, but IMHO what this country really needs is a new holiday, the first tuesday in November, so nobody has any excuse not to show up and vote.

      And if election day is November 8th, by your system we're screwed.

      Just to be pedantic, election day is the First Tuesday after the First Monday in November. ;)

      --
      Like what I said? You might like my music
  36. Is anyone else as freaked out about this as I? by LS · · Score: 4, Insightful

    Any American who truly believes that democracy is highly important to this country should be worried about the trend in voting systems. The ballot box is where the rubber hits the road in a democracy. It should almost be sacred in a democracy. It should be easy to understand it's operation, and it should be implemented completely without involvement from special interests.

    I think it's almost ABSURD that a closed-source partisan company is building the ballot boxes. Even if there is no malicious intent, the system is totally open to malicious intent in the future.

    This is not a technical issue, it's an idealogical one.

    LS

    --
    There is a fine line between being a cultivated citizen and being someone else's crop. - A. J. Patrick Liszkie
  37. Re:Paper trail (Maine Legislature ROCKS) by 7Ghent · · Score: 1

    Wow, that's great. That's pretty much exactly what we're trying to get passed here in NM. Congratulations!

  38. Re:Modest proposal: Run it on Diebold's hardware? by laird · · Score: 1

    "I had heard that they do have provision for adding one of their own printers."

    Supposedly they all have a printer inside them. This is because the HAVA law reuires that they print out a record of the votes. Strangely, they decided that it was sufficient to print a total when the polls close, and not a continuous record of votes cast, so there's no way to prove that the total printed is correct, and thus no value in printing it.

  39. Re:Paper trail (Maine Legislature ROCKS) by Anonymous Coward · · Score: 0

    That's fantastic.

    Please, tell your mom, to let the League of Women Voters know just how important this issue is.

    Their leadership is all head-in-the-sand about it ("there are many more problems with our electoral system, blah blah blah..." Sure, but... this one kinda takes the cake, no? Speaking as a woman... it's downright embarassing. (Just as bad, if not worse, than the objections of the blind and handicapped about the re-lost privacy. I mean, yeah, sure your vote remains private... but if it just isn't counted...! Sheesh.))

  40. Just found Cringely's article on that, too. by Ungrounded+Lightning · · Score: 1

    "I had heard that they do have provision for adding one of their own printers."

    Supposedly they all have a printer inside them. This is because the HAVA law reuires that they print out a record of the votes. Strangely, they decided that it was sufficient to print a total when the polls close, and not a continuous record of votes cast, so there's no way to prove that the total printed is correct, and thus no value in printing it.


    I just found Cringely's March 11 Column which also says that, and suggests replacing the locked cover with one with a slot and using that to print a reciept. Several other documents available on the web (such as Maryland's report on the system) mention this printer without describing it as clearly as Cringely does.

    The printer in question is a "tape printer", printing on a roll of tape like that of a cash register reciept. (Likely it IS a cash register / ATM machine printer.) The roll, according to Cringely, is large enough to print reciepts for all the votes that might be cast on a single machine in a day of voting.

    So (in advance of obtaining replacements with a slot for the locking cover) just unlock the cover and print voter reciepts on the tape, as an initial emergency measure for the next election. They'd be too floppy to machine-recount, but they'd be more than adequate for a hand recount.

    There we have it: Yes, we COULD use the Diebold machines (or probably any other brands, since the printer is federally mandated) with the open source software and NO additional hardware (except eventually the cover-with-a-slot), obtaining the printed audit trail we want.

    --
    Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
    1. Re:Just found Cringely's article on that, too. by laird · · Score: 1

      "There we have it: Yes, we COULD use the Diebold machines (or probably any other brands, since the printer is federally mandated) with the open source software and NO additional hardware (except eventually the cover-with-a-slot), obtaining the printed audit trail we want."

      This is a good "stop gap" measure so that counties that already bought DRE's could improve them a bit, though I think that when you get into the details it's not what you would really want to use to vote on.

      For example, since the record would be printed after the vote is cast, there's no way to do anything about it if the printed vote isn't correct. They can't remove the vote from the machine, and they can't let the voter cast another vote.

      And there's no way to know that the vote recorded on the memory card is the same as the vote printed.

      But if a half-step is all that some county can afford, at least they'll be able to have some basic capability to audit.

    2. Re:Just found Cringely's article on that, too. by Ungrounded+Lightning · · Score: 1

      For example, since the record would be printed after the vote is cast, there's no way to do anything about it if the printed vote isn't correct. They can't remove the vote from the machine, and they can't let the voter cast another vote.

      Sure they can. (Remember: The tape is not staying in the machine. The voter is taking it to the ballot box.)

      Here's one way:

      - The voter registers his choice and says "print it".
      - The printer spits out the choices on the tape - but doesn't spit the final part.
      - The voter examines the tape while it's STILL ATTACHED TO THE MACHINE.
      - If he likes it he presses "accept".
      - The machine records the vote.
      - The machine finishes the tape with an OK flag.
      - The voter tears off the tape and takes it to the pollworker.
      - If he DOESN'T like it he presses "retry" or "cancel - change machines".
      - The machine discards the vote.
      - The machine finishes the tape with a VOID flag.
      - If he hit "retry" he goes back and fixes his vote. If he hit "cancel - change machines" the machine spits out the authorization card.

      Here's another way:

      - The machine records the vote on the smartcard. (If the smartcard memory is too small, it records an index of the vote and keeps the vote record in volatile memory. The machine can save 'em all or keep a cache of the last several.)
      - If the voter likes his vote he returns the ballot and the smartcard. The ballot is put in the ballot box and the smartcard reauthorized for the next voter.
      - If the voter DOESN'T like his vote he complains to the poll worker. The poll worker reauthorizes the smartcard with a "retry" status and puts the spoiled ballot in the discard box.
      - The voter votes again, preferably on the same machine. (Necessarily to the same machine if the card's memory is too small.) The machine deducts the voter's previous vote then goes ahead as if starting a fresh session.
      - At poll closing the machines discard any remaining per-voter memory.

      Note that if the smartcard holds the vote and the voter goes to a different machine, there's the possibility that the machine could end up with a negative vote total. This is OK. (As a check the machines can also keep a total of the number of initial vote and revote sessions, and no tally on any machine should be more negative than the number of revotes or more positive than the total number of vote/revote sessions, just as the sum across all machines should be non-negative and no greater than the number of initial vote sessions.)

      And there's no way to know that the vote recorded on the memory card is the same as the vote printed.

      There's NEVER a way to "know" that. That's the WHOLE POINT of having an audit trail and making the PRINTED tape the official vote - so you can catch it if the total is wrong.

      But if a half-step is all that some county can afford, at least they'll be able to have some basic capability to audit.

      This proposal has EXACTLY the same characteristics as the open voting system, except for the ability to MECHANICALLY recount the ballot reciepts (and any issues related to the voters having to tear off the tape manually).

      --
      Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
  41. Open Voting at OSCON? by clear_voting · · Score: 1

    I haven't seen the Open Voting Consortium listed on the OSCON site but I do know the Australian open source system from Software Improvements is on the Security agenda and they are presenting a paper on Confidence in Elections System Software. And a correction - OVC has not demonstrated a working system. They have demonstrated a concept demo of something they want to build if they can get funding. The Australian system has been in actual use since 2001.

  42. Oregon requires paper by Anonymous Coward · · Score: 0

    In Oregon, all recounts are required to be done by hand, as opposed to machine. Since you can't count electrons by hand then all voting machines have to produce a paper record. This I found out when listening to an interview of our Secretary of State the other night. Then again, here in Oregon, it would be rather hard to use computerized voting since we vote entirely by mail. Oregon has also gotten rid of all punchcard ballots. Our ballots now look more like standardized tests where we fill in the bubble next to the canididate we want to vote for. I really don't see why anyone would want or need to use computerized voting at all.

  43. And if they switch ballot boxes.... by darkonc · · Score: 1

    Yes, you can mess with the paper ballots, but that would leave you with one count in the computer, and an entirely different count in the ballot box, which would raise a huge red flag and initiate a big investigtion. People who like to stuff ballot boxes don't usually like to see things like that happen -- It makes exposure and identification that much more likely.

    --
    Sometimes boldness is in fashion. Sometimes only the brave will be bold.
  44. Re:Who cares by bussdriver · · Score: 1

    Fireproof does not mean it can't burn. But making something from explosives makes the problem worse. Its fine if there is no fire...but if there is always smokers hanging around and few ash trays...

    Computers in elections are the same thing. They make the problem much larger should anything happen. Stuff DOES happen.

    I don't care if you open source and use military grade security. If its a computer and a party has billions of dollars of power on their side, like we have at stake in every national election in the USA...(both "sides") even if the system is not compromised in a few terms, it will be at some point by people within the party.
    And this is assuming you could even securely install the systems in the first place.

  45. Re:Paper trail (Maine Legislature ROCKS) by fucksl4shd0t · · Score: 1

    I just have to ask, what's the point? At what point are we deploying computers just for the sake of deploying more computers? How do these votes get counted? The same old-fashioned way?

    Computers are good at counting, and even storing massive records of votes. This is something they are good at, and in trying to avoid the system getting corrupted, we've now removed from the proposal anything and everything for which the computer is needed/wanted, and we're left with nothing but a glorified voting card.

    Save my tax-paying money, I'll just check a box with a #2 pencil. If our system is so fucked up that we can't deploy networked machines to tally our votes in a fashion that's at least as secure as our existing voting system, we've got bigger problems to worry about.

    --
    Like what I said? You might like my music
  46. Re:Paper trail (Maine Legislature ROCKS) by Anonymous Coward · · Score: 0

    If you do that, can I sell erasers to the government for hundreds of dollars a pop?

  47. Re:Modest proposal: Run it on Diebold's hardware? by Geoff-with-a-G · · Score: 1

    Not a bad idea, but don't underestimate the cost to make the changes. Just because its free software doesn't mean it's cheap to install. I work for a government department, and on large projects the cost of the hardware being installed is often less than the cost of the guys who go out and install it. You can't ignore what it would cost to have guys reconfigure every voting station, especially since you would want to make sure those guys are reliable to avoid uncertainty of tampering.

  48. Re:Paper trail (Maine Legislature ROCKS) by Mark_in_Brazil · · Score: 1

    The point is that there must be a "paper trail" to permit recounts, or you'll get situations like Florida 2000, where Al Gore's vote total went DOWN by just over 16,000 when the votes from Volusia County were added, and there's no way to do a recount because there's no paper trail in the Diebold machines used in Volusia County.
    Separate scanning machines could be used to read the paper ballots and count the votes, and I wouldn't have a problem with it, as long as the paper ballots are available for recount, and as long as there's a random testing program built in-- in 1% or a couple of percent of districts chosen at random at the last moment, a parallel manual count is done and the results compared to the electronic count. If there's a difference of more than some small pre-defined percentage, or if the root mean square percent difference is larger than the percent difference between the top two candidates, all the ballots for that race are then hand-counted, with the counting done with representatives of the top vote-getting candidates' parties or campaigns observing.
    All of this is to avoid somebody (a voting company, supporters of a candidate, or people wanting to disrupt the democratic process for whatever reason) invisibly modifying the vote count and subverting the will of the voters. This is something very easy to do with insecure, inaccurate, and completely un-auditable machines like the ones Diebold makes.
    Maine, with Hannah Pingree's really nice piece of legislation, and California, with Thursday's unanimous vote to block Diebold machines in a few California counties (with a vote on 10 more counties coming), have taken important steps to protect their voters' rights from potential tampering.
    Given all the security concerns of a single machine like Diebold's or Sequoia's, and given the many additional security concerns of having them networked, and given the danger of easily-hidden fraud or even of inadvertent errors in counting machines, it's just too risky to use no-paper machines and network them "just because we can." It may be blasphemy to say this around here, but more technology is not necessarily always better. In this case, using more technology (e.g., Diebold memory sticks instead of paper ballots, networking machines, etc.) introduces more possibilities for votes to be counted incorrectly.
    It's worth mentioning that a computer with a printer with a recently replaced toner or ink cartidge can produce a less-ambiguous ballot than a person with a pencil. That said, I'd be perfectly happy with using pencils to mark paper ballots, but Diebold, Sequoia, and politicians presumably salivating over the fraud opportunities have led the push for electronic voting machines. They use the problems from the 2000 presidential election as justification, but the fact is that electronic voting machines (that, as the parent post would have them do, record no paper trail and are subject to massive error and easy fraud) were part of the problem in Florida in 2000, not to mention in every other election where they've been used since.
    A great (awful?) example is the 2002 election in the US state of Georgia, where all the polls-- media-sponsored polls, polls from independent pollsters, Republican and Democratic internal tracking polls, and even the exit polls on the day of the election-- said the Democrats would win the Georgia gubernatorial and Senate elections. Unauthorized patches were applied to the Diebold machines in Georgia after the machines had been certified by Georgia election officials, and by some "miracle," the Republicans won.
    I want to be clear about one thing: I have cited an example where the Dem candidate had votes subtracted and one where two Repub candidates scored victories that even surprised their own pollsters and strategists, but I do not want to suggest that voting machine-based fraud is a Repub thing. In

    --
    "It is nice to know that the computer understands the problem. But I would like to understand it too." --Eugene Wigner
  49. Good Summary by handy_vandal · · Score: 1

    What I've been saying for a while now is we need ...

    Good summary. I like it so much, I've posted it to my blog.

    -kgj

    --
    -kgj
  50. Re:Has OVS attempted to get their system certified by clear_voting · · Score: 1

    They don't have a system to get certified yet - they have just built a prototype. If you went to the demo in San Jose or read the stories on them it becomes clear this is a proposal for a research project with the eventual goal of actually writing code for a system.

  51. Python strikes again. by KevinDumpsCore · · Score: 1

    But OVC's EVM 2003 system uses Python... I guess if you don't get your candidates names perfectly aligned, the whole ballot gets thrown out!

  52. Re:Paper Audiot? Even Better... by Teancum · · Score: 1

    If you want to get an idea why some mechanical/electronic system of voting takes place here in America, consider the history of the United States Census Bureau, and then compare the complexity of a typical ballot in the USA on a general election.

    To sum up the history of the U.S. Census Bureau, they took almost 12 years to complete the 1880 Census, the last U.S. Census done entirely by hand. The census of the USA is required by the constitution to be completed every 10 years, so they (the Census Bureau) knew they were in deep trouble. In fact, it was a result of trying to tabulate all of the information in the census that the Hollerath punch cards were invented (they were the size of a U.S. Dollar Bill at the time). Some of the very first Univac computers were purchased by the Census Bureau simply to count the number of people in America. I know they were used in the 1960 Census, but (somebody more knowledgeble than I am needs to confirm this) I think they may have even been used in the early 1950's as well. Some of the earliest computing systems were designed around 1900 (yes the date is correct) to help with the tabulation.

    While it is certainly interesting to be able to have the results available by midnight of the night the election is held, the real reason for mechanical/electronic voting is so the results can be in before January 20th (in the case of Congress and the U.S. President). I'm not kidding here either. The process of trying to count up all of the votes for as many as 40 different offices up for election, together with a pile of referendi, bond approvals, and sometimes simple "official" public opinion poll questions, it can be a huge mess for people trying to keep all of these individual "elections" (but the votes are all cast at the same time) seperated. Really, it is an amazing thing that it even gets done at all.

    I'm using the Census to show that even full-time professional counters can be overwhelmed with data, and the fact that the mostly volunteer election judges (my wife earns a whole $50 per election for sitting there for 12 hours + polling place setup & takedown + training meetings... not even minimum wage in the US) even are able to keep up with everything thrown at them usually is a remarkable testament that sometimes people know they are serving for a greater good.

    Going back to some of the experiences my wife had, there was a very simple municipal election with only two offices up for election and no other issues on the ballot, so the city decided to use strictly paper ballots. Our voting precinct has only about 1500 people, and that election had about a 25% turnout. It still took her almost 4 hours to count up all of the votes, and with three election judges independently counting the votes, they still couldn't come up with identical totals. They did a recount twice and gave up splitting the difference in the results because they were within three votes of each other. It didn't really inspire me that my vote counted that much.