Researchers And Registrars Debate E-Voting
Paper Trail writes "There's a fascinating discussion going on right now over at SiliconValley.com.
A group of computer scientists, journalists, voting activists, and county registrars are discussing the e-voting mess in an online forum that runs all this week. The panel is a who's who of e-voting: Avi Rubin, David Dill, David Jefferson, and registrars from San Bernadino and Riverside, CA. They've even got Scott Ritchie from the Open Vote Foundation. The question they're hoping to answer: "What's your assessment of the risks related to the use of electronic voting machines -- in the areas of verifiable voting, errors, recounts and manipulation -- not in the computer lab, but in a real-world setting? And how do those risks compare with current voting systems and other low-tech options?""
Would somebody please tell me what exactly is wrong with the lever operated mechanical machines still largely used in my state (New York)? The machines are sealed and verified by comparing counter numbers that are tamper-obvious. At the end of the voting day the machine is sealed by the poll workers who write the numbers down and send them to the Board of Elections, who later collects the machine itself.
They are next to impossible to tamper with (it would be glaringly obvious), they work if the electric fails (try that with your touch screen), they keep voters from overvoting just as effectively as a touchscreen does and at the end of the day they can be tallied in a few minutes. What is so wrong with the concept behind these machines that we need to all rush out and buy touchscreen systems? What advantage does a touchscreen offer? It is a closed-source solution that's infinitely easier to rig then a mechanical counting system.
Isn't this one case where we don't need to reinvent the wheel people?
I want peace on earth and goodwill toward man.
We are the United States Government! We don't do that sort of thing.
There's a fascinating discussion going on right now over at SiliconValley.com
Not anymore. You should have atleast waited till the discussion was over. Cue all the trolls.
Don't be surprised if the new discussions includes FP, Frossttyy Pissy, GNAA, Troll your mama, Natalie Portman, grits and SCO is teh ghey!!! OMG. LOL!!
Great..... Evoting.... just another thing that 13 year old kids can hack... "Oops, mommy, i didnt know that what i did would place 30,000 votes for nader!"
-ND
Simply mark and remove a finger joint from each voter at the polls and after approximately 28 votes, you get a free pair of mittens.
It's the people who hate democracy:
See here for more
And yes, I know it's a partisan site, but it's just collecting news stories, look past the commentary.
Has anyone forgotten what happened in Florida? Granted that recount was a great big cluster, but what happens if the data is lost? No paper copy means no recount...everyone would have to vote again, and that could mean changed votes, fewer votes, etc. If it ain't broke......
Who needs a lever-operated machine when pencils are available? (I've been told before that US elections often involve casting about 20 ballots at once for everything from municipal dog-catcher to President, but I don't see how hole-punches make counting easier or quicker than with pencils).
Even if the worst FUD claims of the anti electronic voting crowd are true electronic voting is no more vulnerable to tampering than paper ballot voting. Where ballots can (and are) lost (or "lost") and there are dozens of opportunities for workers to mess with or change things.
I've voted touchscreen twice and it was great, I got to vote in advance of election day (when it was convenient for me). Though there was a LOT of pressing "next page" for the CA Recall election to sort through the >100 candidates. :)
Like any new system it will no doubt have it's own issues that will need to be worked out. That's the price for progress.
What I'm waiting for is the opportunity to vote online.
What's your assessment of the risks related to the use of electronic voting machines
The risks come not from electronicness or mechanization, but from the people who design evil systems and implement them in the name of democracy.
Voting from a PC at home is a bad idea because it unfairly gives people with money a chance to vote easier than without.
I guess this is obvious, but had to be said.
Another way to get around saying "cluster f**k" in polite company is to call it a "Charlie Foxtrot". Ex-military will probably recognize the term and most civilians will assume Charlie is a person.
I want to drag this out as long as possible. Bring me my protractor.
Mechanical/lever machines are associated with the Kennedy voting fiasco in the 1960 race between Nixon and Kennedy.
Simplifying greatly, the people who tabulated the votes from the lever-operated machines were pro-Kennedy. Vote tabulation was done by opening the machine up, and reading numbers off a little odometer-style readout. When the numbers were written down, the Kennedy numbers were written as higher than the machine recorded, and the Nixon numbers as lower.
However, the Democrats weren't the only people rigging that election. Downstate Republicans did their share of double-voting, including many people from conservative St. Louis hopping across into Illinois to vote in that state, as well as their home state.
The fundamental difference is that paper ballots and other old school systems leave physical evidence.
There has been some degree of fraud in many paper ballot elections over the course of the nation.
Do you think the fraud will be decreased by removing physical evidence?
Any layman can look over the shoulder of anybody doing anything with the current system, and know at a glance whether the work is being performed correctly.
I have a degree in computer science, and I can't look at an electronic voting system and see that it is working in the correct manner.
This is why I don't think electronic voting systems can ever replace a manual system.
Our county uses optical scan ballots, and they work fine. They are fast to count. There is a physical backup that can be hand counted if need be. They require no fancy equipment and the polling place. And, if you can't figure out how to mark them correctly, you really are too stupid to have your vote counted.
I am totally at a loss to understand this rush to some sort of electronic voting. I regard voting as the one, true sacrament of citizenship. I have no problem with it taking a little bit of time. After lying to pollsters for months, the ritual of going into the booth and casting my secret ballot is very satisfying.
Remember, voters are citizens; all others are residents.
Some mornings it's hardly worth chewing through the restraints to get out of bed.
it would be great if the machines said "is that your final answer"....i might get out and vote then, for now at least i can say "you can't blame me, i didn't vote"
I'm using a proxy ... so I guess your heavy-handed tactics aren't all that effective in the end, eh?
Well, they are effective in annoying the crap out of me and dozens of other people. Aren't you proud?
Now I am submitting redundant stuff on your forum just because I am extremely pissed off on behalf of myself and my coworkers. I would be posting something worthwhile if I were calm, but I am not at present.
Reconsider your inane banning regulations now!
P.S. The MD5 of our SubnetID is "09f78530e96631543b1806ad71d8d840" ... now do something with that for Chrissake!
sworn to uphold a scared trust
Best... typo... EVER!
The touch-screen system do sound more convenient, however they lead to some major questions and issues that would need to be resolved. Namely the following -
What type of fail-safes does the touch-screen system have in case of system failure (i.e. Hard drive dies, power goes out, ect) in which you can quickly recover from something unexpected happening? My understanding is that the touch-screens in the booths feed the data into a central computer that tabulates the results, so what if something happens to that central computer (say the software crashes) and some of the data is lost - are those votes just flat out lost, or are they stored in more than one place.
Which leads to the next question - what is there to ensure that my vote is counted and is not 'replaced' with a vote for a different candidate? There are several places where the vote could be changed with out any real means of determining if that did in fact occur. With most of the current systems there is some way to tell if someone tried to tamper with the vote, but with these systems you have to pretty much trust the companies system.
It should be error-free, but, in our local election last week, the machines somehow managed to count 11 more ballots than were cast. That's where the paper ballots come in: they're human readable, and humans are auditing and handcounting them right now.
See what I've been reading.
Here's the link to the Business 2.0 article talking about his new system which he claims is "the first electronic mechanism that ensures both integrity and privacy."
We will bankrupt ourselves in the vain search for absolute security. -- Dwight D. Eisenhower
Diebold, Diebold, and Diebold
...Scantron. Complete the arrow with the marker, you've got a paper trail and instant electronic tally's.
Ahh, my old arch-enemy and perfect foil: Websense. Online forums are filtered here. Grrr!!!
The New York City Council has a Government Operations Committee hearing scheduled for Tuesday, 10/26/04 (two weeks from yesterday) on HAVA oversight. The Help America Vote Act was passed after the 2000 Florida election travesty, funding states to upgrade their voting equipment, registration procedures and pollworker training. This unprecedented handout of Federal money (every American taxpayer's money) to states is creating public hearings in practically every state, and most big cities, about electronic voting machines. If you post eVoting positions to Slashdot, put your mouth where your "Submit" button is, and go say something with your neighbors at a hearing, where it actually matters. Or just go lurk at a hearing anonymously - only cowards duck the chance to see important nuts and bolts of their communities in action.
--
make install -not war
I've been through 3 ballot systems in 2 years...
Punch cards, which, despite the Florida "fiasco", seemed to work just fine for the 90% of people who could spell "clue." Also, the equipment was cheap and light enough that many small polling places could be had instead of one large center, which was nicer for people in that they could WALK to the polling place nearby and vote.
Optical bubble scan-ins which were the emergency "fix" to the punch card "problem"... Huge sheets, lots of complaints from people at the polling center about broken pens, and of course, the system they came up with to verify all this required one large polling place for all the workers, which now required a drive to reach. Also, it took about 30-40 minutes of line waiting to get to the booth to vote. I saw more than one couple just get tired of waiting ("Dinner is getting cold, lets go.") and walk off.
Finally, touch screens. Same problems of equipment and pollsters forcing a central polling place, but at least the line wait isn't nearly as long. Most voters are confused how the system works though, and it leads to a lot of uncertainty. The scancard they give you at the front table to start the process doesn't record your vote, just tells the machine your ID, so they throw the card into a bin afterwards to be reprogrammed, or sometimes just immediately reuse it. Lots of older people got pretty huffy when they thought their ballot was being thrown away. Oh well, at least where I was, they required a printer to be hooked up to each machine, and it printed out in a tape roll the record of what votes were being cast. Mind you they probably just threw the roll out, but the system to cover a paper recount was there.
"I've voted touchscreen twice and it was great, "
:)
Playing devils advocate: I could write an easter egg into the software, so that when I come along to the voting booth, I tap my finger on the screen in a few special unmarked places, and that machine then favours my chosen candidate.
Tell a few of my friends and we could easily do that with all the machines in a swing state.
The pre-checks wouldn't pick it up, the random machines taken out for testing wouldn't show the problem (because I wouldn't be activating my easter egg on those machines).
Whoever writes the voting software controls the election without the paper trail.
Its fine to make unauditable voting machines, just as long as I'm writing the software.
The New York City Council has a Government Operations Committee hearing scheduled for Tuesday, 10/26/04 (two weeks from yesterday) on HAVA oversight. The Help America Vote Act was passed after the 2000 Florida election travesty, funding states to upgrade their voting equipment, registration procedures and pollworker training. This unprecedented handout of Federal money (every American taxpayer's money) to states is creating public hearings in practically every state, and most big cities, about electronic voting machines. If you post eVoting positions to Slashdot, put your mouth where your "Submit" button is, and go say something with your neighbors at a hearing, where it actually matters. Or just go lurk at a hearing anonymously - only cowards duck the chance to see important nuts and bolts of their communities in action.
--
make install -not war
Many other nations make Election day a holiday. We should have election day as a Work & School holiday.It would solve problems:
Unitarian Church: Freethinkers Congregate!
What's the problem with using a pencil? All you got to do is mark an X next to your least disliked candidate and away you go.
the folks at blackbox voting did this with one of the major systems. i can't remember if it was ES&S, Sequoia, or Diebold, but i do remember vividly that they changed the outcome of an election with a 5-line piece of VBScript.
at least with paper ballots it took actual human hands to change each vote individually. now it's a script-kiddie job.
-I like my women like I like my tea: green-
all of your points are dead on.
the crux of the matter is verification. there NEEDS to be a paper trail. the ONLY reasons given against paper trails are 1) cost and 2) paperjams.
1) the cost of running an election in democracy shouldn't be an issue. it'd be a lot cheaper and more efficient if we just got rid of elections alltogether.
2) a paper jam is an inconvenience that costs a little bit of time but doesnt destroy a record of votes cast. but a magnet or other "feature" (read:bug) could wipe out the entire vote count. that is slightly more than an inconvenience.
there is NO valid argument against a voter-verified paper trail.
just because I don't care doesn't mean I don't understand!
...the elections by the globalist elite, you know, the folks who think most of humanity consists of "useless eaters". It REALLY is that simple. People are hip enough to see if you have a one party state that it's a dictatorship. With two parties it gets harder to see and it's easier for folks to stay in comfortable denial about it, and computerised voting is a great way to KEEP it a two for one party sham election.
We've always had election fraud to some degree, but perots and naders and buchanans campaigns scared the socks off of the elite globalist goons, they needed a way to outright insure that the international bankers/corporate party candidate always won, in ANY race if that is what it took. The internet has started to break the back of the controlled propoganda press, people CAN find out there are other viewpoints and other candidates, so combining scam e voting with controlling the "debates" and who gets on the ballot and with gerrymandering, etc, etc, they can be sure to always get their puppet doofus in no matter what else happens.
You can go back and research this, it's origins. Several good whistleblowers out there were discovering the higher level truth of the tallies 20 years ago, this newest dodge is just an extension of what they have been doing since then.
Last time I voted with a diebold machine I checked the results later, MY vote was never registered in the official tally near as I could ascertain, and with no way to check it, you have no case to prosecute. They can hack these machines in advance, or on the fly during the election, with modems or whatever, inserted cards. They've been busted already, yet we still have them. That should be enough of a clue right there.
From my observations of the recent California elections, the optical ink system that has replaced the punch card is much more error prone than old Mr. Chad. I've found that several times when I thought I was making a proper mark the pen failed to do so, and if I had not been attentive I would have had several undervotes. So I say, I want my chads back!
(Posting anon because Slashdot isn't working for non-anon right now).
"This makes the IMO unreasonable assumption that a single individual writes code for the machines without any checks or oversight by at least one other person, and that the malicious coder is willing to become a fugitive or go to jail when (not if) the easter egg is discovered"
It surely takes only a single coder to code such an easter egg. To get it past code review *may* take another. So we're talking about a tiny conspiracy required to do it.
The reward is control of the most powerful nation in the world, so the reward for doing it is huge. Once you control the executive branch + Congress who is there to arrest you?
"I'm personally distrustful of paper records as they rely on humans to read and interpet them"
I'm distrustful of paper ballots too, everyone is. That's why they're sealed in boxes and monitored and the count is monitored by all parties. Nobody trusts paper ballots, they don't have to, because they're easy to monitor and hard to fake.
In the same way, nobody should be forced to blindly trust that electronic ballots don't have easter eggs. Nobody should have to trust Diebold et al. haven't put an easter egg into their machines.
(Copy of my anon posting, now that Slashdot login is working again).
"This makes the IMO unreasonable assumption that a single individual writes code for the machines without any checks or oversight by at least one other person, and that the malicious coder is willing to become a fugitive or go to jail when (not if) the easter egg is discovered"
It surely takes only a single coder to code such an easter egg. To get it past code review *may* take another. So we're talking about a tiny conspiracy required to do it.
The reward is control of the most powerful nation in the world, so the reward for doing it is huge. Once you control the executive branch + Congress who is there to arrest you?
"I'm personally distrustful of paper records as they rely on humans to read and interpet them"
I'm distrustful of paper ballots too, everyone is. That's why they're sealed in boxes and monitored and the count is monitored by all parties. Nobody trusts paper ballots, they don't have to, because they're easy to monitor and hard to fake.
In the same way, nobody should be forced to blindly trust that electronic ballots don't have easter eggs. Nobody should have to trust Diebold et al. haven't put an easter egg into their machines.
Of course you should trust them.
It's not like the chief executive of Diebold has promised to deliver the votes the George Bush. Or. Darn!
Without the Internet, these things would pass us by, but with the engagement of the people, we'll overturn this scam.
But I'm not so sure about some of your reasons. You seem to only value the "intelligent" and "professional" citizens of America, while type-casting the working class and younger demographics as comically bumbling members of society. I think some of your reasons are good, however, if you keep the demeaning statements out you make a much more solid argument. One over-riding factor prevents this though and that is that in our Uber-capitalist, every-second-means-more-money-so-I-can't-value-any thing-more-than-the-dollar, economy people are very unwilling to close businesses for the sake of anything, especially something like a voting day. While your idea is noble, and I agree with it, the feasability of this action is entirely utopian.
I think the best solution to the electronic trail is to simply have your e-voting machines two things:
When you're done voting, the record is added to the database. And the computer spits out two copies of the voting record:
One copy goes to the voter, with an outline of how he/she voted.
Another stays with the computer and is used to verify the e-voting tallies if neccessary.
Both printouts are bar coded and have a user/id pin combo that the voter can, after the election verify that his/her vote has been tallied as intended.
This way you get both a paper and electronic audit, and the voter is assured his/vote is counted as intended.
neonfrog wrote a fairly long and heartfelt piece taking issue with my tagline, "Voters are citizens; all others are residents."
neon, you wrote that the implication is that voting somehow makes me better than non-voters or gives me some enhanced status in society. I don't see it that way at all. I see citizenship as a series of obligations; a social contract. I see voting as an obligation that is part of good citizenship.
If you see no difference in the Presidential candidates, and none are to your liking, fine. I am certain that in your home town, there are many more offices on the ballot where your individual vote really does count and where the outcome affects you personally, to say nothing of initiative referenda. Local school board seats, water district board seats, town council, local judges are all elected in most places, and unless you live in a really big city, it doesn't take more than a few votes to change the outcome. The candidates are people you can meet personally, and their decisions matter where you live. If you leave a blank after "President" and consider it a vote for "None of the above", great. Voting in a contested school board election where only 300 total votes are cast matters much more.
I will cast a vote for President, even though the Electoral College system makes my vote meaningless when you consider the state I live in. I consider it a personal responsibility.
Some mornings it's hardly worth chewing through the restraints to get out of bed.
"They" just want an easier way to steal votes.
What will we say when the govt declares someone the victor ?
What will a Federal Judge supena , a hard drive ?
This is about the two usual suspects ; money and power.
Do both. Have a machine which generates two slips. One to have and one to share (put in a locked vote box). Make the slips have each recorded vote as well as a barcode. The barcode just represents the entry into the database.
The machine registers the vote electronically. The paper slips allow vote checkers to bring up each record without having to sort through the paper slips. (Just scan the barcode.) The printed paper receipt allows a visual check of the vote against what is recorded in the database.
The paper slip also allows the person to view what they voted for in the booth. A booklet (or several for that matter) of what questions were asked on a per screen basis could be provided so people can check to make sure their questions were accurately recorded. Since the person is given both slips of paper they have the chance to check and even change a ballot by just going back into a booth, put the paper slip under the scanner found there and bringing back up their vote. Once done the machine can print back out a new set of slips as well as update the database.
Each slip of paper would have the date/time prominetly stamped on it so voters would not (hopefully) become confused on which ones are the latest vote.
The voter votes, takes the slip to a lock box, puts one slip into the lock box, and takes the other one with him/her. Each machine has a private database which, after voting is through, transmits its information to the main database. The machine could also generate a CD/DVD with a copy of the database on it.
If there is a problem, it is resolved by: 1)Checking the database on each machine against the main database, 2)Checking the individual databases against the CD/DVD for that machine, 3)Checking the slips versus the database on each machine, 4)Checking the slips everyone has (requires a recall of everyone who voted) against the slips in the lock boxes.
I think this system would be fairly fool proof. Some may say it would be too expensive to run. Not so. The paper slips do not have to be specially made. There are lots of small printers which are currently used (Heck! Walmart, Home Depot, Loews, Krogers, and many other companies use standard registers to print lists of items bought with a barcode at the bottom so they can recall exactly what was bought. So how a person votes should not be a big deal here. These registers use the standard $1.50 roll of plain paper.), and one DVD per machine is not a lot of money being spent. (Personally, I think a CD could probably handle the entire dataset so a DVD writer would be overkill. Since CDs are now down around $0.10 each - I don't think spending $1.00 for ten machines is going to break the bank and even $1,000 for 10,000 machines [Which I think at that volume the state would probably get an even better price break on a per CD amount.].)
Just my $0.02 worth.
Someone put a black hole in my pocket and now I'm broke.
In order to get anywhere with Shakrai's question--which is a good one--we need to try to agree on the essential principles and desirable qualities for a system. A related point I'll make briefly is that it's worth considering the (de)merits of both the voting machines themselves, and the system that makes use of them. Good designs for each are necessary in order to get good results, so it's not sufficient to just evaluate the machines.
So here's a link to a short essay that I've written, in response to this post:
http://www.livejournal.com/users/jrtom/1007.htmfrom which a brief excerpt:
Tick the box next to your favourite candidate voting which is hand counted & hand scrutineered.
The trouble with the Yanks is they vote on a work day which means there isn't the availability of thousands apon thousands of volunteer scrutineers from the political parties to stand over hand counters' shoulders & watch them count.
I myself has said many times that simple, keep it stupid 'tick the box' paper ballots are best, but that's too simple & easy for those who like to wank off with unnecessary technology
Gez you can even do preferential voting the KISS way, 'number the boxes in order of preferance' is pretty self explanatory.
Plus hand counting scales fine.
The US holding an election would be no different than if Canada, the US, Oz, Germany, & Denmark etc all just held their elections the same day - now would the election system in Oz overload just because the UK is having an election too?.
Remember when the US has an election its actually just 50 seperate states having an election the same day, most smaller than Canada
I'll tell you how hand counting is done, many halls, standiums & conference centres are hired in the country & people are paid to count, with each counter having 2 scrutineers looking over his/her shoulder, one from the Labour party & one from the conservative coalition, simple aye. Problem is for some stupid reason the Yanks vote on a work day, meaning there just isn't the availability of party volunteers to scrutinise hand counting. Why they don't change to voting on a saturday like most people? Who knows?
Another problem for the US is that they hold so many elections on the same day. But there's no real requirement that state or local elections should be held the same day.
Well if hypothetically all fed/state elections are 4 year term elections, then the state elections could be held when the traditional mid term elections occured, then local elections at the same time as both the federal & state elections.
It's done in similar ways as that in many places. Being a saturday people just pop into the local school while out 'n about.
Also you just have a different ballot papers for each election on the same day. When people reach their spot they're given a ballot paper for the judge, another for the sheriff another for the senate, another for their congressional rep. The different ballets are colour coded - after ticking or numbering the preferances (if it's a preferantial election), one just sticks them in what ever box matches their colour.
Meaning 3 ballot papers in 3 different colours matching 3 different ballot box colours on federal election day (President/VP, Senate, House), 3 ballot papers in 3 different colours matching 3 different ballot box colours on state election day (Governor, State Senate, State House). Then one follows the same procedure for local positions that are being voted one, unless there's only one or 2 candidates running for different positions in which case you could merge some elections onto a sectional ballot paper.
That's how it's done in Oz (except we go through the added expense of having local elections on a different day, but that's only for councillors or maybe the mayor. depending on the council) & we useally know the election outcome the same (sat) night, with official confirmation the next day. Actually it's extremly rare in Oz for us not to know the outcome by monday morning at the latest