Slashdot Mirror


Avi Rubin and More on Electronic Voting

jgo writes "Johns Hopkins Computer Science professor Avi Rubin, posted his experience as an election judge on his website. It's an interesting read and exposes some potential security problems with electronic voting. At one point he held in his hand the five memory cards containing all of his precinct's votes." Rubin had posted his experience in the primary election earlier.

98 of 404 comments (clear)

  1. There problem is more than the machines by nerd256 · · Score: 5, Insightful

    "At one point he held in his hand the five memory cards containing all of his precinct's votes"

    whats keeping him from replacing one/all of them with doctored records. He complains that the voting machines could be tampered with, but there needs to be more safeguards than just the code.

    How hard is it to add a little printer? it would be much more conspicuous replacing a four-foot stack of receipts with ones from the back of your van.

    1. Re:There problem is more than the machines by bheading · · Score: 5, Insightful

      I keep hearing this argument that electronic voting machines should have a paper trail. Apart from the fact that it is meaningless (any programmer knows that the printout doesn't have to match the vote that was recorded internally) there is a more fundamental problem.

      By adding a printer, you're conceding that the electronic voting machine may not innately be able to provide complete confidence in the result.

      By conceding that the electronic voting machine's results cannot be trusted, you're saying that you have no basis upon which to reject a request for a recount of the paper receipts. In other words, you're back to hand-counting paper votes each time.

      The belief that electronic voting (or indeed automated vote counting of any kind) can work or deliver any kind of benefit is a serious mistake. A huge amount of cash need to be spent to test it, get it working and provide some degree of confidence that the result isn't wrong, and even then you can never be 100% sure. What's wrong with a pencil, a piece of paper, and a count process to which the candidates (and their lawyers) can be invited to ?

    2. Re:There problem is more than the machines by Anonymous Coward · · Score: 5, Insightful

      Or you're just designing a system with a layer of redundancy.

      Do you say the same thigns about the redundant systems on an aircraft, a nuclear power plant, cruise missiles, nukes? No? Ok then.

      In the case of something improtant, no matter how well you've designed the system, you always have layers of redundancy. In this case, it's leaving a paper trail.

    3. Re:There problem is more than the machines by nerd256 · · Score: 5, Insightful

      I take it you don't like to run test cases on your code.

      (1) the paper trail advocates argue mostly for the post-electoral controversy. The voter will confirm that his/her paper ballot matches the intended vote before it falls into the receipt bin. Thus, afterwards, if a hacker/act of god changes the electronic vote, one can verify them with the paper ones. It is much harder to inconspicuously change the paper printout.

      (2) The votes would only be checked on seeing a noticable anomaly or severe difference of votes than one would expect.

      (3) "you have no basis upon which to reject a request for a recount of the paper receipts." True, however, not if a politician knew this was futile, he would not sacrifice the time and sanity of people by asking for a recount. Case in point: Kerry steps down to Bush though he could have easily pressed legal action.

      Electronic voting is not perfect, but with the right safeguards it can become a practical alternative to the time-consuming sole-paper methods.

    4. Re:There problem is more than the machines by Redrover5545 · · Score: 3, Interesting
      What is the problem with counting paper ballots? In Canada, we use paper ballots where the voter checks off his preferd candidate with a pencil.


      We always get our results in a timely manner and, to my recollection, there have never been any problems with the vote counting.

    5. Re:There problem is more than the machines by pipingguy · · Score: 2, Interesting


      What's wrong with a pencil, a piece of paper, and a count process to which the candidates (and their lawyers) can be invited to ?

      Because that would be, like, so untechnological. If ever there was a thing that *should be* untechnological, it'd be voting.

      The US, in its wisdom and reliance on expensive stuff, thinks that plain old paper is not good enough.

      You deserve what you allow the computers to get away with.

    6. Re:There problem is more than the machines by jbr439 · · Score: 5, Insightful

      In Canada we take a piece of paper, mark an X on it, go home, and wait for a bunch of people to count the results. It doesn't get much simpler than that.

      Canada does any number of things wrong, but I've got to say, the US fixation on a high-tech solution to a low-tech problem is mind-boggling. There must be lawyers involved somehow.

    7. Re:There problem is more than the machines by Anonymous Coward · · Score: 4, Insightful

      Personally I don't think that electronic voiting is reliable enough. No matter how hardened the system is there will be potential for tampering. Voting is one of the more important things American citizens do. I think we should keep the paper ballots. If we mangaed the polling places a little better and design the paper ballots a little better there should be any problems.

      And as far as hooking up a printer, it is just a layered bit of redundacy. And again, voting is important enough to have redundacy.

    8. Re:There problem is more than the machines by bheading · · Score: 2, Insightful

      Thus, afterwards, if a hacker/act of god changes the electronic vote, one can verify them with the paper ones.

      Respectfully, what I'm trying to say doesn't seem to be getting through, but I can't see how I can make it clearer. Think out of the box. This is not about test cases or paper trails.

      Given an electronically recorded vote, how can anyone say that a hacker or act of god changed the vote ? Presumably what you have in mind is a panel (we'll assume for the sake of argument that it is independent and bias-free). What criteria does that panel look at to decide whether the paper ballots should be checked or not ?

      The electronic vote machine spits out a number at the end of the vote declaring the results. On what basis do you look at those results and say "hmm, we need a recount" or "I'm happy with that, we don't need a recount" ?

      The loser says "I'm not happy with that result, let's recount based on the paper trail". On what basis can this argument be reasonably rejected ?

    9. Re:There problem is more than the machines by cookd · · Score: 4, Insightful

      The same way we decide about a recount in any other situation. Whether electronic voting machines are involved has nothing to do with it. If (we need a recount) { do a recount; } The type of vote tabulation system doesn't enter into the equation, unless the system doesn't allow for recounts, which is a Bad Thing(TM).

      There are laws about how to determine the value of (we need a recount). Generally, if one of those laws applies, a party can sue for a recount, and if the judge agrees that the law applies, a recount is ordered.

      Current methods of determining (we need a recount) include:

      -- Was the vote sufficiently close that the margin of error in the vote tabulation system might have been enough to swing the vote? (Most systems have a reasonably well known margin of error. A few tenths of a percent of bubbles don't get read correctly by the bubble-sheet scanners, a few percent of holes don't get read correctly on punch cards, etc.)

      -- Were the results of the vote significantly different from exit polls or opinion polls?

      -- Was there evidence of fraud?

      --
      Time flies like an arrow. Fruit flies like a banana.
    10. Re:There problem is more than the machines by j1m+5n0w · · Score: 4, Insightful
      redundancy is simply completely unnecessary.

      Redundancy is necessary to prove that the votes were not tampered with. Let's say we had a voting proceedure something like this:

      Each voter fills out a ballot and places it in a box. At the end of the day, an election official takes the box into a locked room, counts all the votes, then puts all the ballots in a shredder, then burns the results. That person comes out of the room and reports the results, which everyone is expected to accept as perfectly trustworthy.

      This is what electronic voting is like, if there isn't a paper trail.

      If everyone insists on having a manual recount afterwards...

      And why shouldn't we do a count of the paper ballots in all cases? It's not that much work, given that someone already has to manually verify the identity of the voters and look them up on a list as they come in.

      ...given that the existence of the paper trail confirms that the electronic vote cannot be inherently relied upon in all reasonable circumstances...

      The untrustworthiness of the electronic vote should be apparent with or without a paper trail. The paper trail lends credibility to the electronic vote (or at least it does if they match).

      ...why bother with the electronic count to begin with? What purpose is the electronic count serving?

      Electronic interfaces can be friendlier and mor e accomodating to people with disabilities, and they allow a rapid (and accurate to the extent that it hasn't been tampered with) count.

      -jim

    11. Re:There problem is more than the machines by mpe · · Score: 2, Interesting

      What do you mean paper failed in Florida ? I think the combination of the machines and people's non-understanding of how they can be appropriately used had a lot more to do with it. If people can't do that how do you expect them to operate an electronic machine correctly ?

      Also the ballots here were intended to be counted by machine.

      When I say "paper" voting I mean a piece of paper which the voter marks using a pencil in some discernable way next to the candidate of his/her choice. You can't get any simpler than that.

      Thus the ballots are easily human readable. You could use a machine to help count them, but it dosn't have to be an especially complex machine or one which contains knowlage of what the marks on the paper actually mean.

      Obviously votes are rejected if the mark hasn't been made properly, but you're not going to get too far in life if you can't use a pencil...

      Even illiterate people can manage to use such a system.

    12. Re:There problem is more than the machines by plastik55 · · Score: 3, Insightful

      You can duct tape a Timex onto an atomic clock but that doesn't make it a redundant system.

      It's simply false that redundancy is an indicator of reliability. Did you know that the rate of deaths in twin-engine aircraft is an order of magnitude greater than the rate of deaths in single engine craft?

      In the cases of aircraft, powerplants, and weapons, the designers of the system have carefully considered the failure modes of their system, and ensured that if there are redundant systems, that they are effective.

      I work in the medical devices industry--before we can bring a device to market, we must convince FDA that the design followed an accountable process and that the potential risks to patients from failure of the device are suitably small. The procedures for documenting the process and performing the risk analysis are fairly well established and work well. Similar sorts of standards are enforced by the FAA, DOE, and the military for the systems they deal with.

      The lack of such a standard for elections, and the complicit lack of a risk-management mentality, is glaring. But each of the aforementioned agencies seeems to have arrived at its procedures seperately and independently, after a spotty history of accidents, so it's not a big surprise that we'd have to re-invent the wheel yet again for elections. Multiply that by the fact that each municipality determines the standards for its own elections and there's a lot of re-learning to be done.

      Presumably the intent of a paper trail is to reduce the probability that votes are lost or falsified.

      So do the risk analysis: How likely is it that the electronic system will have its results lost or falsified? Now, what measures are in place for detecting a failure?

      How likely is it that IF the electronic system fails, then the failure will be detected? How likely will it be that a failure is indicated when no failure has actually taken place?

      Now how likely is it that if the failure is correctly detected, that the paper trail will provide useful results?

      Get in the habit of asking these questions and you soon realize, the mode in which the vote is implemented doesn't matter, it's the process. Two systems can be wed to provide a more reliable whole, but more often when you tie two systems together you just have a larger system that exhibits all the failure modes of its components, PLUS all the failure modes of their composition.

      At work I'm constantly shooting down hare-brained redundant systems. Typically we are considering some safety issue and a check that has been put into place to try to address it. Only problem is the mitigator is only effective in a very idealized case (oh teh noes!!! haxx0rs in teh yu0r voting boxxen!!!!1!!one), while a more typical falure takes out the mitigator as well. Considering the inherent unreliability of additional complexity, these schemes are less than worthless, and should be replaced with a proper design for the original system.

      I find it absolutely hilarious that the huge push towards electronic voting was motivated by the perceived unreliability of paper-based voting systems in the 2000 elections, yet the techno pundits are insistent on wedding them to paper records like some kind of magic talisman.

      --

      I have a positive modifier on Troll. When I mod someone Troll their karma should go UP!

  2. Voting machines are prone to human failure by asadodetira · · Score: 5, Funny

    Human mistakes could affect results in voting machines.
    The voting machines should be supervised by robots...with shotguns

  3. Doubts by base_chakra · · Score: 5, Insightful

    From Professor Rubin's account: "If we continue to use the kind of insecure DREs that were used in this election, it is only a matter of time before somebody exploits them. And the worst part is that we may never know it." [emphasis added]

    It seems that no one really wants to come forward and raise this as a serious concern for this election, despite the fact that it's entirely plausible. Unfortunately, it seems highly unlikely that anyone who dares cast doubt on this election will be regarded as objective.

    1. Re:Doubts by EyeSavant · · Score: 5, Interesting

      It seems that no one really wants to come forward and raise this as a serious concern for this election, despite the fact that it's entirely plausible. Yeah, that worries me a bit too. A wrinkle is the fact that all the early exit polls pointed to a Kerry victory, the republicans were depressed, the democrats estatic. Then when the real results started coming in the situation was reversed. Especially when you have the president of Diebold a very strong Repubican. There is probabally nothing in it, and for whatever reason the exit polls were wrong. Normally they are pretty accurate though. It is probably for the best to try to forget about it, and make sure that these stuff is fixed for the next election. The other huge problem is the amount of gerrymandering that goes on. You really need to get the partisan officials OUT of the redistricting. The house of representitives elections are becoming insane, with a lot of stupidly safe seats. only something like 10% of house seats are competetive, and that is really really bad for democracy. If the only way you can lose your seat is if you get deselected by the party faithful, then it polaizes the politics, and noone moves to the centre, and it becomes a real mess.

    2. Re:Doubts by lawpoop · · Score: 5, Interesting
      "Unfortunately, it seems highly unlikely that anyone who dares cast doubt on this election will be regarded as objective."

      Time to put the tinfoil hat back on, you paranoid pinko!

      Seriously, someone has cast doubt. Blackboxvoting.org blanket the country with freedom of information requests on election night. They currently need $50,000 to complete the audit. I gave $100. Let's see what we can do together as slashdot.

      --
      Computers are useless. They can only give you answers.
      -- Pablo Picasso
    3. Re:Doubts by bheading · · Score: 2, Insightful

      It is probably for the best to try to forget about it, and make sure that these stuff is fixed for the next election

      Huh ? This debacle happened in Florida 2000 and basically nothing was done. I can't believe Americans would argue that they can blindly trust the government to make sure that the means by which it acquires power is fair and balanced.

    4. Re:Doubts by CAIMLAS · · Score: 4, Interesting

      Probably nothing to it? Probably nothing to it, you say!

      Then I guess it's just a big coincidence that exit polls have been fairly reliable, up until the point that digital voting machines began to be used. Starting then, exit polls stopped being used as a 'reliable' predictor for the vote.

      --
      ~/ssh slashdot.org ssh: connect to host slashdot.org port 22: too many beers
    5. Re:Doubts by fwburton · · Score: 2, Interesting

      I tried to give $100 but their web form required an address with a US state name. Are their restrictions on donations from non-US citizens or from outside the US?

      I am a US citizen living in Canada, and I voted. I am happy to contribute to blackbox.org even if I don't get a tax break. Hopefully somebody will see this and fix things.

    6. Re:Doubts by drew · · Score: 3, Insightful

      Considering they filed the requests well before the actual result of the election was known (they may have had a good idea of the popular vote percantage, but the electoral vote was still definitely up in the air), I would say, yse they would have. In fact, I suspect thaat they were going to file the requests no matter what the outcome of the elections was.

      --
      If I don't put anything here, will anyone recognize me anymore?
  4. VIVA.... by ilikeitraw · · Score: 3, Funny

    ... CANADA ! I'm OUTTA here. Later suckers !
    (free weed, no guns (only laser warfare), and you can travel and not be hated... amazing).

    Laaaaaaaaaaaaaaaaaaaaaaaaaaaaaate !

    1. Re:VIVA.... by bitwiseNomad · · Score: 2, Insightful

      not just 60% like down here

      Wow. Only 60%? How lucky!

      It's like socialism without all the benefits of socialism.

      --

      Light is filtering down from above. Would you like to use DIVE?
  5. Electronic Voting == Trouble by DigitalRaptor · · Score: 4, Insightful

    With stuff like this already being detected, and such weaknesses in the system (one man being able to "lose" or otherwise destroy or alter all votes in an entire precinct), non-open source electronic voting is a dangerous situation.

    We're on the verge (or way past it) of the average citizen losing all power and control within their country, and electronic voting is just another step.

    The only hope is for citizens and groups to adamantly insist on open source, safety procedures, regular audits, and paper trails. Unfortunatley, I see few if any of those things happening anytime soon.

    --
    Lose Weight and Feel Great with Isagenix
    1. Re:Electronic Voting == Trouble by perlchild · · Score: 2, Interesting

      The problem it solves is that a paper ballot is great when you're only asking a few questions, but not when it's used to ask all the questions your government wants to ask you all at the same time.

      I saw earlier(trying to remember where it was exactly) a pretty reasoned explanation as to why the Canadian paper ballot solution couldn't be applied to the states. The consensus was that until the vote tally for the presidential election(and perhaps house/senate) became a federal responsability, it was unpractical, after that maybe.

      I'm wondering why so few people are interested from "Decoupling" the presidential elections from the local school board, any opinions?

  6. Gotta Love That Electronic Voting! by djaxl · · Score: 5, Interesting

    Glitch gave Bush extra votes in Ohio.
    Franklin County's unofficial results had Bush receiving 4,258 votes to Democrat John Kerry's 260 votes in a precinct in Gahanna.
    Records show only 638 voters cast ballots in that precinct.

    1. Re:Gotta Love That Electronic Voting! by Anonymous Coward · · Score: 4, Insightful

      Sure, because the results were way off. Now, a difference of, say, 1.5% in a few large counties, in a swing state ....

    2. Re:Gotta Love That Electronic Voting! by Skuld-Chan · · Score: 4, Insightful

      What I found funny about this article is they were quick to say no other counties were affected. How do they know? The only reason someone noticed this is because the machine gave Bush votes to 4000+ people more than the town had.

      Also - it isn't curious how the machine errored on the side of Bush?

      Plus there's no talk on what kind of bug could automatically enter in votes for Bush? I support point of sale software for a living, and despite the many bugs they do have I've never once, ever, ever, ever seen the programs I support enter line items automatically, or create invoices automatically - or even create more than one invoice when the user only wanted to create one.

  7. Just make sure people know you are from Canada by Anonymous Coward · · Score: 2, Funny

    ..as people from Canada still sound like yanks to the the rest of the world. Of course, we can tell you aren't when we notice you aren't arrogrant and don't sy things like "It isn't like this back home...".

    Also when you don't threaten to sue everyone we know you are from Canada.

    1. Re:Just make sure people know you are from Canada by Brandybuck · · Score: 4, Funny

      When I was in Germany I asked the people I was staying with how they could tell us Americans and Canadians apart.

      "Oh, that's easy! If I find you in the morning passed out in my garden, you must be Canadian."

      --
      Don't blame me, I didn't vote for either of them!
  8. A Suggestion by 26199 · · Score: 4, Interesting

    How's this for a way of safely conducting electronic voting...

    Give everyone a GUID, a complete random key of sufficient length that you can't simply guess and get a valid GUID. Mail it to them.

    When a person votes, their vote is stored against their GUID, in a publically accessable database. Anyone can check that their vote has been correctly counted by looking up their GUID in the table.

    Voting would effectively be pseudonymous instead of anonymous. (With a new pseudonym for every election).

    1. Re:A Suggestion by macdaddy357 · · Score: 5, Insightful

      None of these high-tech whizbangs is trustworthy, and all of them are too expensive. Marking paper ballots with No. 2 pencils is a simple and effective solution. If the scanning whizbangs screw up human eyes won't.

      --
      How ya like dat?
    2. Re:A Suggestion by bitwiseNomad · · Score: 2, Interesting

      Voting is anonymous for a reason.

      People lose information like this quite frequently. My ability to vote should not be dependant upon whether or not I can keep track of a slip of paper for 2 years.

      And most importantly, we shouldn't need to impose a system such as this in the first place. We should have secure, open machines with a procedural protocol so that there is little room for a malicious person to tamper in the first place.

      This idea tries to patch up problems caused by eVoting machines, but it only attacks the symptoms, not the cause.

      --

      Light is filtering down from above. Would you like to use DIVE?
    3. Re:A Suggestion by Moofius.the.Cow · · Score: 2, Funny

      Yeah. And we all know how No.2 Pencils are secure against that evil terrorist weapon - the Eraser.

  9. Distribute the load -- count manually by tinrobot · · Score: 5, Insightful

    When all of the votes are on one machine, one person can contol the votes. We need checks and balances.

    With a manual system, it takes hundreds of people to count the vote. Sure, it takes more time, buit I can wait. Sure there may be a few people with nefarious intentions, but those few people might be able to throw a precinct, not a whole state (or country!) Usually when hand counting, two or three people count anyways, so there's even more checks and balances built into the system. Our country is built on checks an balances. We need that in the voting system as well.

    I truly belive voting problems are the number one issue facing our country. If can't trust the vote, then we don't have a democracy. If one election can be stolen, the next one will be stolen as well. Very slippery slope.

    1. Re:Distribute the load -- count manually by Whyte · · Score: 2, Informative

      There are hundreds of thousands of ballots still uncounted. Many of them in many counties, will clearly show that Kerry had a much larger number of wins than Bush in many states. Added all together, Kerry had quite a few more electoral votes than our corrupt media would have you believe.

      What are you talking about? You honestly have no idea how voting works in this country do you?

      First off, Kerry conceding doesn't mean anything. If the final STATE CERTIFIED VOTE TABULATION showed that Kerry actually won over 270 electorial votes, he would retract his concession speach much like Gore did in 2000. His concession does not preclude him from office if he were the actuall winner...

      Secondly, the media was very careful this time not to forecast the vote unless it could statistically back it up. Kerry and the DNC have their own people doing this same thing.

      With 99-100% of the precincts in a state reporting their totals to the state's election body, they can easily tell whether or not the KNOWN number of absentee/provisional ballets would be enough to overcome the KNOWN vote deficit need for a specific canidate to win.

      At time you made your post, very few people doubt the state of the electorate. Not that it matters, the electorial college hasn't even "met" yet. They will do that after each state certifies its vote and exercises their state's electorial distribution laws. The media has nothing to do with it.

      How did you even come up with your opinion? Did someone tell you that, or did you come up with that on your own?

      --
      -- No matter how great your triumphs or how tragic your defeats, approximately one billion Chinese couldn't care less.
  10. Black Box Voting by cardmagic · · Score: 5, Interesting

    Please watch this free 30-minute film about black box voting machines.



    We have all been scared about Diebold and other black box voting machines, and for good reason. Apparently one of the central machines from Election Systems & Software Inc. tallied 115 votes for Bush in a certain county, while another machine tallied 365 votes for that same county. Which one was right? There is no way to tell, because "it is too hard" to add a printer to a counting machine. It is not like they have been doing that for 30 years. But who needs to do a recount when the machines are infallible, right?



    Most infuriating of all is that Republican Senator Hagel, the former Senate Ethics Director, resigned after admitting that he owned Election Systems & Software! That's right, the same voting machine maker that 60% of ALL VOTES in the U.S. are counted on, the same one that provably miscounted votes in Ohio and other states, and the same one that refuses to print receipts to recount these votes. No wonder legislation trying to require printers on voting machines is taking so long to get through congress when congressmen can vote themselves into office without a paper trail.

    1. Re:Black Box Voting by aronc · · Score: 3, Insightful

      Please read the article you cite. You did not read the article, or you do not understand English. The article said that one machine had obviously malfunctioned in reporting its totals. They were able to check the machine and determine that Bush got 115 votes on that machine, not 4008 votes on that machine. With its report corrected, the total for the machines together was 365, not 4258. The report on the Ohio vote was about one machine, not two.

      As has been pointed out, if one malfunctioned how can you trust the other? Or any of the rest? Yeah, we caught these two errors, since they cast thousands of votes more than were even possible but then how many errors were there that were not stupidly obvious? As the main article we're all talking about says - the scary part is we have no idea and now way to check.

      --

      jello.
      aka aron.
    2. Re:Black Box Voting by mdfst13 · · Score: 2, Informative

      "They were able to check the machine that had malfunctioned"

      No, the memory card malfunctioned. The machine worked fine. They know (as best they know for any of the machines) that the machine was correct because its vote totals add up with the paper sign up record...unlike those on the memory card. The issue is more that if the machine had malfunctioned, then it would have sent the wrong total to the memory card and *both* would have been wrong. If that had happened (or if there weren't two records, as happened in North Carolina), then it would have been major news, as the data would not have been recoverable.

      The actual situation is bad enough. No need to dilute the point with FUD. Every time you do that, it allows opponents to point out the hole in the FUD rather than talk about the real issues.

      Btw, I would be careful about using the term "printout." The Ohio machine does produce a printout (as required by Ohio law): of the summary results. The problem is that there is no vote by vote print out that is reviewed by voters as they cast their votes. Only the Sequoia machines offer that option. Even the Sequoia machines are not ideal, since they partially compromise privacy by retaining vote order on a per machine basis (it's a scrolling printout). They are simpler better than the ES&S and Diebold machines.

      Votes need to be correct (cast as the voter intends); verifiable (i.e. the voter needs to be able to check the final form of the vote; no purely electronic system cannot do this, as the voter can't view the bits); and private (no one, not even the voter, should be able to verify that that voter's vote was cast later; otherwise, it allows vote selling, which is every bit as bad as fraud or miscast votes). This is all quite possible (the optical scan ballots can be used this way now; eVoting only needs the addition of individual ballots printed from machines).

  11. We can't summon the will and the money... by nusratt · · Score: 3, Insightful

    ...for standardized, reliable, secure, auditable national voting procedures & infrastructure --

    but we have plenty to use for Pentagon studies on psychic teleportation.

  12. What the hell ever happened to honesty? by brxndxn · · Score: 4, Interesting

    We walk into a grocery store and usually buy stuff instead of stuffing it in our pockets and running. We know it's wrong to leave without paying.

    Why do votes need uber security check technology? Whatever happened to scrutiny by peers?

    IMO, paper ballots are best because it is just tougher to destroy them. But, we should get receipts showing how we voted for our own records.

    But, trying to turn the entire election process into zero possibility of error or fraud undermines the election itself and goes against the ideals of our society. People in general are honest - and those that aren't get caught eventually by honest people.

    Suggesting that 'one person' should not be able to hold an entire precincts' votes just doesn't make much sense. People are often responsible for others. I suppose twenty people should all carry a piece of the nuclear football too..

    --
    --- We need more Ron Paul!
    1. Re:What the hell ever happened to honesty? by Why2K · · Score: 5, Insightful
      But, we should get receipts showing how we voted for our own records.

      No, we shouldn't. This would cause more problems that it would solve. Being able to prove to someone who you voted for would make it possible for them to buy your vote. Right now, you could take their money and then still vote for someone else, since no one will know who you vote for. This makes it much more difficult to conduct this kind of fraud.

    2. Re:What the hell ever happened to honesty? by bitwiseNomad · · Score: 2, Interesting

      we should get receipts showing how we voted for our own records.

      We should absolutely not. Voting is supposed to be anonymous - that means that there can be nothing that links any of your identifying information to the vote you made.

      What should happen is that after voting it prints a reciept that you get to see. After making sure everything is correct on the reciept, you can press a button, which puts your reciept (with no identifying information) into a box with the reciepts of the people who voted before you.

      This solution is good since each voter gets to verify that their vote was counted correctly and we don't have to worry about there being ambiguity like what happened in Florida. I would add a system that would automatically take a pile of reciepts and read each one, tallying the votes. Like a scantron system. Of course, anywhere technology is involved, the firmware and hardware should be open and viewable by anyone so that we can see for ourselves that voting fraud is not occuring instead of having to trust a company that has consistently ignored warnings about vulnerabilites in their machines for what, four years? Longer? That simply will not do.

      --

      Light is filtering down from above. Would you like to use DIVE?
    3. Re:What the hell ever happened to honesty? by bheading · · Score: 2, Informative

      We're talking about politicians here. You're saying you believe they're basically honest ? Respectfully, I think you need to see a bit more of the real world. Why do you think governments and laws exist in the first place ?

      The reality is that a lot of people - not all or most, but a lot - are basically dishonest, and checks and balances need to exist in order to keep them at bay. That means you need to have an electoral system which as far as possible reduces the number of possible loopholes that can be exploitable people.

      The best way to do this is exactly as you suggested - paper ballots, marked and counted by hand at a public count. If the candidates are paranoid about the state trying to swing the result, they can visit the polling stations and can put their own seals on the ballot boxes, and can confirm that the seals are present when they visit the count room before the counting starts. Tell me how you do that with any kind of counting machine, electronic or otherwise, paper trail or not.

      [Sure the officials counting can be corrupt, but they'll have to be in a risky mood to try anything while the candidates and their legal advisers are observing the progress of the count... ]

  13. It seems to me... by rkww · · Score: 5, Interesting
    It seems th me that the most constructive thing to do would be to publically, physically destroy a voting machine (or perhaps just the memory card) after the votes are in, and focus the public on the fact that there is no backup.

    There is a question, of course, about how long you might be locked up for doing so.

    1. Re:It seems to me... by ratsnapple+tea · · Score: 2, Insightful

      I don't see what this proves. How would this be any different from taking a flamethrower to a paper ballot box?

  14. Undetectable tampering by FiReaNGeL · · Score: 4, Insightful

    The scary part isn`t the stuff that you can trace back (i.e he exchange some of the memory cards for some containing results in favor of Candidate A or B), but stuff you can`t nor detect, nor trace back.

    Remember, NO LOGS of the voting process are kept on these machines. Think of "Irregularities" in the code that add a vote for Candidate A when a certain vote pattern is met. Or as Mr Rubins said, physical tampering allowing you to "one could change a few bytes in the ballot definition file and votes for the two major Presidential candidates would be swapped. In that case, none of the procedures we had in place could detect that votes were tallied for the wrong candidates."

    Great. Maybe this time no one abused the system. But think long-term; in 50 years, when e-voting will be predominant and everyone will be confident in it...

  15. If you think America is a democracy ... by 2TecTom · · Score: 3, Insightful

    then you are simply naive, imho. It seems clear to me that no matter who you vote for, the powerful remain in control and the powerless carry the costs.

    --
    Words to men, as air to birds.
  16. I hate to say it, but this is one problem by PotatoHead · · Score: 4, Insightful

    that Open Source is not going to be able to address.

    The reality is that electronic records of the vote require the humans trust the machine. Open Source or closed, the binaries on the machine can not be directly examined, rendering the nature of the code used a moot point.

    Voting by machine is voting by proxy. We must trust the proxy and cannot observe its operation. Subtle manupulations of the vote will go unnoticed, unless we keep paper records and perform mandatory audits.

    This means the only electronic solution is one that records the vote on a ballot that both humans and machines can read. Those ballots can be machine counted and audited as we have always done.

    What's the point really? Why not just use paper ballots and make them easy to use and read by both machines and humans and spend the money reforming the process to make it fast, taking humans into account.

    Remember, there are plenty of old folks willing to do their civic duty. We can get fast and trustworthy results with a far smaller investment than we have made on electronic solutions to date.

    This is not a hard conclusion to come to. The fact that it is ignored means those in power WANT IT TO BE THAT WAY.

    It's wrong and we need to demand change continiously until we get it; otherwise, we lose our democracy.

  17. No more machines by tinrobot · · Score: 4, Insightful

    I'm as much of a geek as anyone here, but there are some problems that cannot be solved by technology. I don't care if the voting machine is open source, voter verified, paper backup... whatever, when the votes are counted on a machine, there is more chance for abuse. Single point of failure,

    I am a voting Luddite. Vote on paper, count on paper. Distribute the load.

  18. Ever hear of Quality Control? by evilquaker · · Score: 5, Insightful
    I keep hearing this argument that electronic voting machines should have a paper trail. Apart from the fact that it is meaningless (any programmer knows that the printout doesn't have to match the vote that was recorded internally) there is a more fundamental problem.

    The idea is that the voter can verify that the printout matches their wishes. The printout is the master copy, not the internal count. The latter is just more convenient -- for the voter and for the tallier.

    By adding a printer, you're conceding that the electronic voting machine may not innately be able to provide complete confidence in the result.

    No piece of non-trivial software can ever be considered bug free, and therefore, no software ever deserves complete confidence. For that matter, hand-counting shouldn't have your complete confidence either. People make mistakes; shit happens. That's the whole reason for QC.

    By conceding that the electronic voting machine's results cannot be trusted, you're saying that you have no basis upon which to reject a request for a recount of the paper receipts. In other words, you're back to hand-counting paper votes each time.

    You should have no basis upon which to reject a recount. The paper ballots are the masters. If there is a serious challenge, then they should be recounted. But in any case: you should verify a selected sample of the machines' votes in every polling station to make sure that they are giving reasonable numbers. This is just the application of industry-standard quality control procedures to voting machines. It boggles my mind that electronic voting was ever considered without them.

    --
    To within half a percent, pi seconds is a nanocentury. -- Tom Duff
    1. Re:Ever hear of Quality Control? by bheading · · Score: 2, Insightful

      No piece of non-trivial software can ever be considered bug free, and therefore, no software ever deserves complete confidence.

      100% correct, and that is why I am arguing that software (or any kind of machine) should not be used to count votes.

      For that matter, hand-counting shouldn't have your complete confidence either. People make mistakes; shit happens. That's the whole reason for QC.

      Hand counting is not infallible, but at least a layman can go and watch the people doing the counting. How do you determine whether your voting machine is working or not ? You have to employ an engineer ($$$), and then you have to trust that he's not lying to you or incompetent when he tells you it's working just fine. Why bother ?

      You should have no basis upon which to reject a recount. The paper ballots are the masters. If there is a serious challenge, then they should be recounted.

      Define "serious challenge". I double-dare you.

      But in any case: you should verify a selected sample of the machines' votes in every polling station to make sure that they are giving reasonable numbers.

      Who gets to decide which sample gets tested, and how can we be sure that they don't tip off any would-be vote riggers ? And what if your sample finds problems. What do you do then ? Stop the election ?

      This is just the application of industry-standard quality control procedures to voting machines. It boggles my mind that electronic voting was ever considered without them.

      I don't want industry standard QC procedures applied to my voting. I don't want any automatic machines used to count my votes at all. I want a transparent, public count process easily understood by the layman with as near as possible to zero potential for any candidate or interest to interfere with the vote. No automated vote counting system can provide this.

    2. Re:Ever hear of Quality Control? by evilquaker · · Score: 2, Interesting
      Hand counting is not infallible, but at least a layman can go and watch the people doing the counting.

      Big deal... I can watch the guy count. I can understand what he's doing. Without actually recounting it myself, I can't make sure he's actually counting it correctly. The fact that it's simpler to understand doesn't make it simpler to verify.

      How do you determine whether your voting machine is working or not ? You have to employ an engineer ($$$), and then you have to trust that he's not lying to you or incompetent when he tells you it's working just fine. Why bother ?

      There's no need for an engineer that costs a lot of money. You just hand recount the ballots. The proof of the pudding is in the eating. In the end, it doesn't matter if the machine is working properly or not. It only matters that it produces the right numbers.

      Define "serious challenge". I double-dare you.

      I meant "serious" in the sense of formally asking for a recount. If it is asked, my belief is that it should be granted. But full-scale recounts aren't the issue, because you're going to pay the time & effort to hand-count them whether the first pass is done with machines or hand-counted. Your argument that every politician is going to demand a recount is simply not credible. How many politicians demanded a recount in this last election?

      Who gets to decide which sample gets tested, and how can we be sure that they don't tip off any would-be vote riggers ?

      This isn't a hard problem: you randomly select a few and throw in the outliers in the Republican/Democrat/Independent distribution. You can also allow challenges to certain machines if observers have any questions about them (i.e. there appeared to be 3K votes already on the machine before the polls opened). You have an independent group of observers to do this, so it's not the same people running the machines as testing them.

      Another option is just to recount all of the machines by hand. Then in order to rig the election, a worker would have to rig the electronic machines and rig the recount. This is still a time saver because now you only have to hand-count the ballots once.

      Your question about how to avoid collusion in order to rig an election is a tough one. But you have the same problems happen with paper ballots, so it's not a problem with e-voting specifically.

      And what if your sample finds problems. What do you do then ?

      Then you check everything. That's why you have a paper trail in the first place.

      I want a transparent, public count process easily understood by the layman...

      It's a machine that counts votes. How hard a concept is that to understand?

      ...with as near as possible to zero potential for any candidate or interest to interfere with the vote. No automated vote counting system can provide this.

      Hand-counting doesn't provide this either.

      --
      To within half a percent, pi seconds is a nanocentury. -- Tom Duff
    3. Re:Ever hear of Quality Control? by tsm_sf · · Score: 2, Interesting

      Big deal... I can watch the guy count. I can understand what he's doing. Without actually recounting it myself, I can't make sure he's actually counting it correctly. The fact that it's simpler to understand doesn't make it simpler to verify.

      We're really talking about finding a technological solution to a social problem. Until the nation as a whole acknowledges in their heart every citizen's right to cast their vote and have it be counted, we're screwed.

      Here's a simple low-tech step in the right direction: Keep the polls open for a few days.

      --
      Literalism isn't a form of humor, it's you being irritating.
    4. Re:Ever hear of Quality Control? by symbolic · · Score: 2, Insightful

      boggles my mind that electronic voting was ever considered without them.

      And is still being considered. That's what happens when you get self-serving politicians making very unfortunate decisions. After all that's been said about Diebold, security, the dangers of having proprietary software govern the voting process, and the lack of quality control, I can't believe that ANY government in the US is still buying. But they are.

      Actually that would be an interesting OS project - voting software.

    5. Re:Ever hear of Quality Control? by TheFlyingGoat · · Score: 2, Insightful

      Keep the polls open for a few days? That does nothing to help the problem. You realize that in many areas of the country they're struggling to get the required election inspectors at each polling station? You realize that these people already give 12 hours of their day, and that many of them are senior citizens? You can't ask them to work three 12 hour days in a row, and you can't find the workforce to fill in where needed.

      The nation as a whole already acknowledges every citizen's right to vote, hence the creation of absentee ballots, ballots for prisoners who don't have a felony conviction, and ballots for homeless citizens.

      The solution to the problem is to have an electronic voting machine that produces a voter-verified paper slip that is placed in a locked box in case of a recount. Slot machine inspectors in Las Vegas have recommended them for Nevada, which is sufficient recommendation for me.

      Another solution to many voting problems is the creation of a national identification card, and require that it be shown when voting, but most people on Slashdot will complain about potential privacy issues. Did you know that you don't need to show photo ID to vote? You could easily vote multiple times, just as a Marquette student did in the 2000 election. He wouldn't have gotten caught if he didn't brag about it.

      --
      You have enemies? Good. That means you've stood up for something, sometime in your life. --Winston Churchill
    6. Re:Ever hear of Quality Control? by Chandon+Seldon · · Score: 2, Interesting
      The base procedure for a US presidental election would be the following:
      For each precinct:
      For each voter:
      - Voter is looked up on the list
      of registered voters.
      - If they are on the list, they are
      given a paper ballot.
      - The voter fills out the ballot,
      and it is put in a ballot box.
      After the voting:
      - The ballots in the box are
      counted by hand using some procedure
      to minimise the possibility of fraud.
      - The totals are called into the
      town/county/state tabulation centers
      and totalled there. The intermediate
      numbers are kept for later analysis.
      Once all the totals have been reported to the
      central state tabulation center, it's a simple
      matter to compare the results.

      If there is any challenge to the numbers, the
      paper ballots are re-counted. The intermediate
      results from the initial count are available
      to help track down any fraud.
      That procedure works fine, but since it's possible to optimise out some of the slow parts in the general case using computers, people want to do that.

      Here's a procedure using electronic voting machines that has a better average-case time to results:
      For each precinct:
      For each voter:
      - Voter is looked up on the list
      of registered voters.
      - If they are on the list, they are
      given a paper ballot.
      - The voter inserts the ballot into
      a slot in the front of an available
      voting machine.
      - If the ballot looks real to the voting
      machine, it lets the voter vote.
      - The voting machine stores the vote
      in memory, and prints it on the ballot.
      - The voter verifies the vote printed
      on the ballot, and puts it in a ballot
      box. The ballot box keeps a count of
      the votes.
      After the voting:
      - The number of ballots handed out, votes
      stored on voting machines, and ballots
      put in the ballot box are compared.
      - If these numbers differ, votes from
      the precinct will be counted manually.
      - If the numbers agree, the votes totals
      from the voting machines will be used,
      at least initially.
      - The totals are called into the
      town/county/state tabulation centers
      and totalled there. The intermediate
      numbers are kept for later analysis.
      Once all the totals have been reported to the
      central state tabulation center, it's a simple
      matter to compare the results.

      If there is any challenge to the numbers, the
      paper ballots are re-counted. The intermediate
      results from the initial count are available
      to help track down any fraud.
      The key points in both protocals:
      - Each voter saw a paper ballot with his vote go into a ballot box.
      - The first intermediate numbers are at the precinct level - this allows for an easier audit later, and isolates any issues to as small a pool of votes as possible.
      --
      -- The act of censorship is always worse than whatever is being censored. Always.
  19. Process already started to add paper trail by daveschroeder · · Score: 4, Interesting

    H.R.2239 and S.1980, discussed further here, will amend the Help America Vote Act (an act designed to ensure consistent voting systems that meet certain standards be available to ALL voters in ALL jurisdictions), such that there is "a voter-verified permanent record or hardcopy" attached with each and every ballot cast by every voter.

    Please, simply support this legislation.

    Additionally, the electronic voting manufacturers, such as Diebold, already have the ability to add permanent, individual voter-verified paper audit trails to their products .[1] Don't believe people who make it seem like companies like Diebold are resisting. They aren't. They'll build - and sell - whatever municipalities will buy.

    The roadblock, as it turns out, is often local election boards. First, the new paper verification systems NEED to go through the government certification process - remember, it's the e-voting watchdogs who are chastising non-certified patches/updates being put into place; the paper audit systems need to go through the same certification process. Further, many municipalities can't understand why they should be forcing paper audit trails; after all, they think, they are just getting away from paper ballots - why should they be arguing for paper ballots (and all the headaches that go along with them, ON TOP of the headaches they already have from learning to deal with e-voting), so why should they go back to them?

    Folks, so many people are involved in elections at so many different levels that there is literally no way that any central entity could rig an election across an entire state. Experts dealing with e-voting don't even have this on their radar. Their concern is more errors and failures. E.g., most of Ohio is still punchcard as it is (the majority of the 35 counties moving to e-voting pushed off the transition until AFTER the election because of problems), and someone like Diebold doesn't even have access to this equipment after the fact. Yes, an unscrupulous election official or enterprising hacker might be able to breach individual machines and potentially even a county - it's possible. But the likelihood of something like that happening on any significant scale, ESPECIALLY without being caught (the articles we're talking about here actually prove that the audit processes, be they what they are, do work) is very, very low.

    That said, we absolutely should be ensuring that there is a permanent, voter-verified, paper record. It is absolutely critical to our voting process, even if the software is still proprietary on these systems (though it, too, should be open for public inspection). But the permanent voter-verified paper record alone eliminates the chances for any widespread fraud with the counting process itself, and at the very least makes any fraud easily reversible and/or detectable.

    Contact your representative and senators, and urge them to support the above bills. It will be a lot more productive that imagining fantasies about Diebold "handing" Bush the election. (If ANYTHING remotely like that happened, there are a shitload of professors, campaign staff, scholars, journalists, and researchers who know a LOT more than you do who would be all over this in a heartbeat. Kerry's $300 million, two-year campaign didn't just roll over for no reason. Bush won, whether anyone likes it or not, and it wasn't because electronic voting handed anyone anything. The POINT here, is that instead of inventing wild conspiracy theories, we should be ensuring that there is voter verification and a permanent paper record for all future elections, because HAVA will require a shift to electronic voting for everyone - before that happens, we should make sure that it's veri

  20. You're missing the point. by melquiades · · Score: 4, Informative

    The machine doesn't just print out a paper record internally; what voting rights groups are asking for is a voter-verifiable paper trail: the voter can inspect the paper record of their vote. This paper record goes into a ballot box, just like a normal ballot. If the result is disputed, it's possible to have a paper recount.

    Of course, this is still subject to security problems -- e.g. what if an election judge discards some of the paper receipts? -- but they are problems shared by traditional paper balloting. The thing is, it's a lot harder to get a corrupt election judge in every precinct than it is to get one corrupt programmer in every voting machine company, so widespread rigging is more difficult and easier to discover.

  21. Re:Electronic Voting == Trouble PLUS by alfredo · · Score: 2, Informative

    They want electronic voter sign in. The books will be replaced by an electronic sign in. This will be connected to the voting machine. So much for a secret ballot, so much for comparing the number of voters to the number of votes cast.

    BTW, the owners and main programmers for Diebold are not just Bush pioneers, but are also Dominionist. Google the goals of the Dominionist.

    --
    photosMy Photostream
  22. My experience with electronic voting by discontinuity · · Score: 3, Interesting

    I voted on an electronic machine here in Atlanta, GA. Previously, I have voted using mechanical machines in NY and Pennsylvania. One big difference: less privacy with the electronic machines. It's not a particularly big deal to me, but some might feel weird about that. Especially if they intend to vote for a candidate that is very unpopular in their district.

    I felt the process and UI was fine (clear, minimal opportunity for human error, etc.).

    Main complaint (other than security concerns): the potential of the electronic machines was not realized. For example, there were several initiatives on the ballot here. One was a widely publicized gay bashing, er, I mean, marriage protection ammendment. Another was a lesser publicized amendment relating to judicial jurisdiction. (Both described here) I knew a great deal about the gay bashing measure, but hadn't heard of the proposed amendment about the courts. All they put on the ballot was a yes or no to the following statement: "Shall the Constitution be amended so as to provide that the Supreme Court shall have jurisdiction and authority to answer questions of law from any state appellate or federal district or appellate court?" Um, how about maybe?

    It would be great if a more clear explanation could be added to the ballot. The electronic medium makes this crazy easy. It's no more expensive to do. The website linked above even has a very clear description that could have been used. (Of course, this opens up questions about potential bias that can be worked in to the description. However, I think something is almost certainly better than nothing.)

    I think electronic voting will be a good thing if the security concerns are worked out. Will they be? That's hard to say. In the near future will most Americans think they are? Yes, almost certainly.

  23. In Arkansas... by Mr.Sharpy · · Score: 2, Interesting

    In Arkansas, your ballot is numbered and the number of your ballot recorded next to your name in the voter registration book. They can look at will to see how you voted. Entirely unamerican if you ask me.

  24. What a cool name by CdBee · · Score: 4, Funny

    Avi Rubin. The only thing more perfect would be if he'd given this report to an online TV station, it could be Rubin.Avi then.

    I'm gonna change my name to Mpeg Smith in honour of him.

    --
    I have been a user for about 10 years. This ends Feb 2014. The site's been ruined. I'm off. Dice, FU
  25. eVoting BAD by shubert1966 · · Score: 4, Interesting

    Why are we introducing the chances for errors into our most important civic institution? This is insanity! As another poster wrote there is no reason that a printout will accurately reflect how the machine handles your input, it's only showing you what was sent to the printer. We have so many other obfuscating problems as well, like magnets and code tampering and using phone lines to transmit results.

    The real problem is taking the physical stylus out of the hand of the voter. I would only consider eVoting for disabled persons, and I would think the majority of them have few problems.

    1) To avoid fraud, why not submit the ballot into more than one ballot box. One for each candidate on the ticket. If democrats and republicans have their own ballot box - they'll likely have the same number of votes - the incentive to cheat is removed without duopoly.

    2) Allow all candidates nationwide to be on the ballot if they garner .5% in the polls. It'll be 10 people and 10 ballot boxes per precinct - tops. Wood is not expensive so don't go there.

    Here's a nice page to Federal Contact Information http://www.eff.org/congress/ - tell them what you think - you're on /. so you've got more insight than most folks.

    --
    Stuff that matters.
  26. Terminate this! by benhocking · · Score: 2, Funny

    And once Govenor Schwarzenegger wins the presidency and these shotgun toting robots refuse to listen about a little thing called the constitution, what then? :)

    --
    Ben Hocking
    Need a professional organizer?
  27. Re:My Idea for non-electronic voting by tinrobot · · Score: 5, Insightful

    Paper Ballot

    Ink pen

    Ballot Box.

    Cheap, reliable, fair, honest.

  28. Re:My Idea for non-electronic voting by HillBilly · · Score: 2, Informative

    Thats the way we do it in Australia too, works well.

    But some people have a "need" to apply technology to everything.

    --
    "Go into the hall of mirrors and have a bloody hard look at yourself" - HG Nelson
  29. A student's experience as an election judge by fubob · · Score: 2, Interesting

    Avi's not the only election judge recording his experiences. So are his minions: http://cs.jhu.edu/~mgreen/election_judge.html

  30. Joseph Stalin once said by melted · · Score: 2, Insightful
    It doesn't matter how you vote, it only matters who counts the votes.

    The man knew what he was saying. While US election system is more robust to fraud than, say, popular votes in other countries (fraud can only occur on state level) with electronic voting this may change. One CIA agent will be enough to affect the vote of the entire states. Heck, CIA agents may not even be necessary, because there just may be a secret fragment of code in software which will basically go:
    if(democratWins())
    {
    throttleDemocratVotes();
    }
    Look at countries which merely have electronic vote counting systems (even though the ballots are actually paper), like Russia. Whoever controls the system wins, always, repeatably, with predetermined percentages.

    In the US correspondingly whoever controls the companies that make voting machines will win. Right now these companies are controlled by Republicans. Democrats, take note.
  31. These aren't the votes you are looking for by Ranger · · Score: 2, Insightful

    It's ironic that some are paranoid that their purchases are tracked electronically, but that others are also paranoid that their votes cannot be tracked electronically.

    Move along. These aren't the votes you are looking for.

    --
    "You'll get nothing, and you'll like it!"
  32. How redundancy can contribute by benhocking · · Score: 4, Interesting

    Let's assume the worst-case scenario (from an effort point of view, not from an accuracy point ov view) and say that the votes are challenged every time and the paper ballots end up having the final say. How has the electronic counting helped?

    Given that computers are less prone to make careless errors (OK, they don't make careless errors), even if they might be more prone to systematic errors, they give you a number to compare against. Let's say that the computer told you it had printed out 2,523 votes for Bush and 2,427 votes for Kerry. When the vote-counters counted it, however, they counted 2,525 votes for Bush and 2,425 votes for Kerry. The first thing that one should assume is that the vote-counters miscounted, and should recount. If a second recount (by different people) got the same result as the first human count, then we have a problem. The error could be: (1) the computer mis-counted, or (2) the computer mis-printed. Unfortunately, either one is possible. However, since the voters would be encouraged to look at their ballots prior to them entering the box, it would seem more likely that the computer mis-counted, in which case the human count should trump the computer count.

    However, notice that the computer count still helps. It gives us a number to compare against. If the human count on the first count matched the computer count, there is little reason to suspect that both counts are wrong. (Although, theoretically, the computer could still have mis-printed and mis-counted in a matching way. This would be an unlikely accidental error, and a very risky deliberate hack since the voters can verify their votes before they go in the box.

    Of course, this only works if the printed version can be viewed by the voter prior to it going in the box.

    --
    Ben Hocking
    Need a professional organizer?
    1. Re:How redundancy can contribute by bheading · · Score: 2, Insightful

      I don't see what the contribution is. If the requirement is to have X counts to achieve a confident result, you can just get X sets of people to count it. No need to bother with the computer.

      In the UK and Canada where hand counts are the norm, debates like the one we're having about the accuracy of the count itself never arise, because none of the candidates or the electorate including the losers see the need to challenge the vote. That situation would change quite rapidly if automated vote counting was brought in.

    2. Re:How redundancy can contribute by bheading · · Score: 4, Interesting

      Right. Just look at what happened this year. Nearly all of the losing politicians demanded recounts. Oh wait, no they didn't. So your argument is simply wrong.

      The reasons why the losing politicians (I assume this means the Democrats) aren't demanding electoral change is a matter for themselves. However the media are certainly reporting instances of severe problems with the count in some areas; and many people I know in the US are unhappy (anecdotal I admit). With that in mind, how many other areas could have had problems which were not severe enough to appear on the radar but still serious enough to swing the result ?

      This is a matter of the government endorsing a black box voting method and people going along with it without stopping to question it or the interests who are pushing it; I can't think of anything more obvious which completely flies in the face of American values.

    3. Re:How redundancy can contribute by PPGMD · · Score: 2, Insightful
      Why bring humans into the loop if you don't have to. Have the computer print out human readable receipts, that are also electro-optical readable.

      Then if an automatic recount is trigger, simply scan the ballots, you will have a recount much more quickly (it hurts the stock market for the count to be in limbo for so long), and it's unlikely that two independent systems would fail, but at worst case, you can always hand recount.

    4. Re:How redundancy can contribute by superpulpsicle · · Score: 2, Insightful

      That's right. Evoting is discussed everyday on slashdot. It doesn't freaking matter. Every system the US deploys is corrupted. We know democrats won in 2000 and now 2004 again. And the 20-30 year old citizens are blamed every election for not showing up, thus allowing republicans to win. There are just too many conspiracies going on. Way too many to bring up.

    5. Re:How redundancy can contribute by bheading · · Score: 3, Interesting

      I don't mean to sound like a conspiracy theory nut, nut the reason why there is no resistance to electronic voting is probably for the same reasons why there is no resistance to (for example) the electoral college - those people either support it knowing that they may at one point benefit from the problems, or they simply don't understand. It's the same way during the 1950s and 1960s the UK government told us that nuclear fission power was going to be too cheap to meter. Everyone just believed them and there was no resistance.

      E-voting can have advantages over hand-counting paper ballots, in both speed and accuracy.

      "accuracy", what do you mean - the voting machines are not a HAL9000 "incapable of error" behemoth. An "accuracy" claim in these circumstances is either dishonest or ignorant of how voting works in practice, with a huge number of non technically savvy people using the system. On top of that, automated vote counting (particularly electronic voting) introduces a whole stack of new points of failure that do not exist with a pen and paper (programmer error; programmer maliciousness; several different kinds of voter error; several different kinds of electoral official error; electrical power failure; insufficient storage capacity for votes; the list of things that can go wrong or which can be done wrong is stupendous. How anybody can claim on the basis of a few tests that the result will be "more accurate" is frankly ridiculous.

      Secondly no metric is available to determine the accuracy of a given electronic vote. To do that you would have to back up every electronic vote with a paper vote and compare the two, and you'd have to make assumptions about people's honesty over whether the paper vote matches what they really did put into the machine. By the time you do that the costs of running the whole exercise have ballooned so much the whole thing would be a complete waste of time.

    6. Re:How redundancy can contribute by gartogg · · Score: 2, Interesting

      There is a simpler reason that the democrats don't want people too involved in looking at the returns; almost 400 precints had an anamolous 100% turnout that was democratic. Compare this to less than 20 such districts on the other side. A bit weird, it seems. I haven't done any checking about exactly what percentage of these were using electronic voting machines or had democratic officers in charge of the polls, or what those places previous voting record was like. It may be that's it's on the up-and-up. I would lay money against it, though. (check out the stats: http://www-personal.umich.edu/~mejn/election/)

      --
      I'm a concientious .sig objector.
  33. It could just print out a ballot by chip33550336 · · Score: 5, Insightful

    It seems like the major benefit of the electronic voting machines is that they provide a good user interface. Much better than your standard ballot. I think you could just have an interface that prints out a ballot. Then the voter could validate the ballot if they wanted to. Then have another machine do the counting.

  34. There are rules for recounts by ProfDumb · · Score: 5, Insightful

    You are arguing that the existance of a paper record would result in all elections being recounted. This is false. The point of an electronic system with paper ballots is to provide very quick results in most cases while still allowing for recounts and audits in special cases. At least one state requires electronic machines with paper ballots, and it works well, so your concern is misplaced. There are rules for recounts and audits, they don't just happen.

    But without paper ballots, a significant fraction of the population will lose confidence in election results. (Go over to the dailykos blog if you don't believe me.)

    With paper ballots, false concerns about elections can be rejected as false and this increases confidence in our democracy. What is do bad about that?

    1. Re:There are rules for recounts by mpe · · Score: 5, Insightful

      You are arguing that the existance of a paper record would result in all elections being recounted. This is false. The point of an electronic system with paper ballots is to provide very quick results in most cases while still allowing for recounts and audits in special cases.

      Paper based ballot systems are actually quite quick to count. Certainly quick enough for governments where the results of the election take effect within hours of the polls closing. It is also perfectly possible to operate paper ballot systems in ways which make fraud very hard. (To the point where any kind of "vote rigging" would require hundreds of people to conspire in ways against their own interests).
      Why should speed be considered more important than accuracy. Especially somewhere like the US where there is actually several months to count the votes.

    2. Re:There are rules for recounts by OldManAndTheC++ · · Score: 2, Interesting
      Paper based ballot systems are actually quite quick to count.

      True, but it takes much longer to do a recount than to do the initial count. That's because most jurisdictions which use paper ballots count them at the precincts, which are staffed with workers who are already performing other duties. It's quick because there are hundreds (sometimes thousands) doing the work. Keep in mind though, that some elections have many contests (races for judges, propositions, party committees, etc) which can slow things down considerably. Electronic systems have an edge when the ballot is complex.

      When it's time for a recount, those workers have long since been paid off and have gone back to their normal lives. So the election administrators must hire them back, or pull people from their regular staff. They do not have the funding to hire as many workers as they had on election night, so the process is much slower (though presumably more accurate).

      Election administrators are under enormous pressure to deliver results quickly, even though the law gives them plenty of time to make their final official canvass. That pressure comes from the news media, who are hungry for a story, and from candidates who obviously have a lot vested in the outcome. So the timeliness of results is a large factor in the decision to purchase counting systems.

      I don't think that election administrators view speed as more important than accuracy, at least not the ones I have worked for, however they are very sensitive to the desires of their constituencies, and the "need for speed" is a big consideration. I do think that some jurisdictions have been seduced by the "wow" factor of touchscreens, and have been blinded to their faults.

      Personally I prefer optical scan ballots, which are easy for the voter to use (one of the big selling points for touchscreens), relatively quick to count, and which can be recounted, since the ballot is the official record. Touchscreens on the other hand have an intermediate layer between the voter and the record of his vote, and what is worse, adding a paper trail creates two separate sets of records, neither of which is directly created by the voter.

      --
      Soylent Green is peoplicious!
  35. Bad solution by commodoresloat · · Score: 4, Funny

    Shotguns are prone to failure. Then people will demand a re-shoot. The only verifiable solution is to equip the robots with laser beams. Frickin' laser beams, of course. On their heads.

  36. Re:Their problem is more than the machines by Keybase · · Score: 3, Interesting

    Also in Canada.

    This only works where there is one thing to choose on the ballot. It would take many hours to tally votes for many positions as I assume is done in the USA. I am custodian in a school that has been used for federal, provincial, and municipal elections. It takes a couple of hours after the polls close to hand count the 'choose one candidate' ballots and finsh the paperwork.

    For the municipal election in Edmonton, where we vote for mayor, councillors, public or separate school trustees and any plebicite issues, I feel we have an excellent system. The ballot is paper and your choice is marked by filling a gap in a 1/8 inch wide arrow with a sharpie marker. The ballot is in a privacy sleeve and is immediately fed into a counting machine. The paper ballots are there for verification. After the polls close the machine provides immediate results for the election officials, scrutineers (candidate representatives), and the media - to be compiled at a central location for the official results. The ballots and the voting machine are handled by separate people and transported separately to reduce the likelihood of tampering.

    I think it is a simple and elegant solution and it has been used for several elections here.

    --
    Do what is right. You will please some and astonish the rest. --Mark Twain
  37. First you let machines vaccuum the floor... by jayveekay · · Score: 2, Funny

    Second you let machines count the votes...

    Third you give the machines shotguns...

    Fourth you give the machines control of SkyNet... ...and the next thing you know you're strapped down in bed in a permanent dream state virtual reality with an army of robots harvesting your nervous system for energy!

    That's the not the future I want. (Unless I'm rich and the chicks are all hot in said virtual reality.:)

  38. stats & charts by Anonymous Coward · · Score: 3, Interesting
    There's the surprising pattern of Florida vote here and a related plot of votes for a party president versus the number of voters registered to that party, or the side-by-side chart of exit polls and tallyed votes with paper ballots versus electronic voting.

    Your mileage may vary.

  39. Will it scale with the US system? by don.g · · Score: 2, Informative

    In New Zealand we have party-appointed scrutineers looking over the shoulders of our (human) vote-counters; as a result, we're pretty sure that our votes will be counted correctly. And they're all counted by the end of election night -- no dimpled chads :-)

    But our election system is much simpler than that of the US. I've seen your ballots - they've got vast numbers of choices on them, and this makes manually counting the votes much more difficult. Here, and I suspect in most other countries where votes are counted by hand, there are just two votes per ballot, so manual counting is relatively easy.

    --
    Pretend that something especially witty is here. Thanks.
  40. I am confused... by Ambient_Developer · · Score: 2, Interesting

    Why are there these cards at all? Shouldn't the electronic voting machine contact a local district with results via phone line. Make it work much more like a fax machine (transmit results to a location). If the phone line is dead then should a AUTHORIZED person only be able to remove data from the device..

  41. From someone that works at an election company... by bwilliam13 · · Score: 3, Insightful

    What everyone doesn't understand/get: 1. The paper receipt is there as a justification tool against what's on the memory cards or electronic storage media. It doesn't guarantee though that the vote hasn't been tampered with. It could very weel be tampered with while the person is pushing the "vote" button. 2. The purpose of the DRE (touchscreen), is to prevent over and undervotes. Overvotes *confuse* optical scan machines. Remember the standardized tests back when you were in grade school? This is why they told you to darken ONE oval...the machines are intelligent enough to determine what's what...so if someone darkens two ovals for the same candidate, it doesn't count either...it records it as an error--in this case an overvote...so that vote doesn't count. DRE's prevent this from happening. You can only choose Kerry OR Bush...you can't choose both. 3. You can't just take the memory cards out and change the ballot or the results. It doesn't work that way. Different companies use different ways of encryption and verification. Basically, if that key on the memory card doesn't match one on the aggregating machine that also programmed those memory cards, as well as every file validity check --depending on the company, this could be CRC, PGP, MD5, and the list goes on--but the files just aren't there waiting to be modified/deleted/replaced. The machine/process ceases to work if one file is changed/deleted/modified in any way...period. That's how at least two company's technology works. One thing I find funny, is that since all this proverbial shit has hit the fan starting a couple years ago, Avi Rubin in one year has all of a sudden become it seems the world's expert on voting machines. There are very talented programmers who work on this stuff every day...and have worked on this every day for the past 20 years. And before you can understand the issues that may plague an election system, you have to understand the laws in whatever jurisdiction those election systems will be deployed in. And that's one HUGE issue that no one wants to address or take the time to learn. I'm pretty confident Avi Rubin doesn't know why some Florida laws prevent touchscreens from being used in say, Texas...and vice versa. Any jackass can get on 60 minutes and say "This sucks, that sucks, it all sucks, and my vote isn't secure." But it takes a person of a little bit more intelligence to understand why it is that way. Example: I hear arguments all the time (from Computer Science people like Avi Rubin) that say that relational databases and other technology like that should be used to validate votes vs voters coming into the polling place. Wrong. The whole democratic system in the USA is based upon the fact every voter should be able to remain anonymous in the polling place regarding what/who they voted for. Introduce a database to keep track of voter and their ballot results and you've just violated the very law/premise that our democracy stands on. My message to everyone including Avi Rubin and anyone else in Academia who thinks they are an election system expert after one year: Learn every state law...then try to build an election system that conforms to every single state law with the same piece of software. If anyone can do that within 5 years, I'll be very impressed... If you want a system that can't be electronically compromised, do it like the jurisdictions in the UK. They scan all the paper ballots electronically, then recount them by hand until the numbers match. That's the only way to ensure they aren't electronically altered, and that no over/under votes are incorrectly counted.

  42. Topical comp.risks post by Noksagt · · Score: 2, Insightful

    In the most recent posting on comp.risks, the lead article is a compelling summary of the issues surrounding evoting & contains a link to an extensive document that summarizes many problems from the past decades.

  43. VoterGate video by not_hylas(+) · · Score: 3, Insightful

    The elephant in the living room that no one will acknowledge:

    http://www.theinquirer.net/?article=10393

    Also:

    "Our video files have been attacked and taken out. Who doesn't want you to see this film? We are working around the clock to get the video files back online right away. Please check back soon."

    http://www.votergate.tv/

    http://www.blackboxvoting.org/

    --
    ~hylas
  44. the problem with any computerised balloting.. by zogger · · Score: 5, Insightful

    ..is obvious. The tally is not human readable. It has to be filtered through the computers programming. Programming can make any output reflect any input. The amount of money and power that is represented by controlling the US government is simpy staggering. It is the largest potential jackpot a criminally bent individual or group can approach. The temptation is overwhelming,and now *they* have the complete technical ability to achieve that goal and to get away with it, the perfect crime.

    A traditional paper ballot in a locked box is human readable/countable by anyone who can count at the end of the day. It requires very little in the form of specialised skills or hardware. It is very inexpensive. Challenges can be mounted and results verified quickly and transparently. Once you get into machine reading, whether tabulated bubbles or punched out cards or pure digitial like with the diebold machines-then you have your potential problems, and with the last few elections we can see we have new problems, and they look a lot more like "on purpose" troubles than accidental. They especially look on purpose given the revelations of what was found on diebolds website and published, and with other anecdotals showing some rather distrubing intent as to election honesty. The consortium pushing electronic closed source computer voting is a who's who of the mega-profits from tax money and governmental contracts military industrial complex. This is three serious alarm bells to anyone really thinking about this subject.

    The old way had it's faults, but computerised has introduced faults above and beyond that can not be addressed without trusting what is inherently untrustworthy by it's design criteria.

  45. Exit polls by mdfst13 · · Score: 2, Informative

    "A wrinkle is the fact that all the early exit polls pointed to a Kerry victory,"

    This would actually be expected in most voter models. Republicans should get the early advantage in people voting on their way to work (the first hour or so); then Democrats get the advantage as people out of work or in odd shifts vote (those same early exit polls also indicated that 60% of voters were women--the mid-day housewife bump); then Republicans recover in the evening as people get off work. This is more a problem with watching exit polls throughout the day.

    There is a similar problem with watching the actual results. Republican suburbs report first, then Democrat cities, and finally republican rural areas. Thus, for most of the election, Democrats are over counted.

    A more critical issue is that some feel that the *final* exit polls were more Kerry than Bush in a number of eVoting states. However, I have not seen independent support of this. CNN's exit polls agree with the vote count. It is possible that they may have adjusted them to better fit the actual voter profile.

    "The house of representitives elections are becoming insane, with a lot of stupidly safe seats. only something like 10% of house seats are competetive,"

    Becoming? They were always like that. In general, most races that involve an incumbent are safe (incumbents consistently win over 95% of the time, except in elections like '92, when only 92% of incumbents won).

    It is hard to overcome the three advantages of the incumbent: one, the voters have voted for the incumbent previously and it is difficult to make them change their vote (one of the reasons for negative ads is to break people loose from their previous vote choices); two, the incumbent gets to send postal mail at taxpayer expense (worth about $250,000 in money that a challenger must pay just to match the incumbent); three, it is more worthwhile to bribe (contribute to the campaign) of an incumbent who can definitely help you now (and who has a voting record that you can use to verify that helpfulness) than a challenger who might be able to help you (if victorious).

    Gerrymandering actually *decreases* the safety of seats. The point of gerrymandering is to move all the opposition votes into one safe district and to make as many seats as possible where you can be competitive. As practiced by Republicans, gerrymandering creates urban districts and suburban/rural districts. Gerrymandering will also frequently pit incumbents against each other to attempt to reduce the incumbents of your opponent, thus creating competitive elections where they would otherwise not exist.

    If you want to reduce the number of safe elections, look to term limits (reduces the number of incumbents), primary reform (eliminate the artificial separation between parties that keeps centrists from winning primaries--half their support is in the other party; this could allow two members of the same party to emerge from the primary; where the moderate would normally have lost), multiple candidate management (plurality voting favors the candidate with the largest minority in multiple candidate elections; it loses the secondary, etc. preferences; i.e. it forgets that the liberal prefers the moderate to the conservative and the conservative prefers the moderate to the liberal; plurality voting doesn't allow for compromise), and campaign finance reform (in particular, changes that allow a challenger to match the incumbent's finances).

  46. Re:What are the requirements? by AlinuxNCSU · · Score: 2, Informative

    Funny you should ask. My senior capstone is on this subject. There are six basic requirements of democratic voting.

    Anonymity - this is obvious. The vote cannot be tracked back to whomever cast it.

    Verifiability - the ability to go back and recount ballots.

    Reliability - the count is done the same way each time and accurately reflects the intent of the voter. Punchcards are unreliable because of chads. Processes like optical scanning give different counts when run mutliple times because of borderline ballots

    Usability - the design of the voting system reduces the likelihood of mistakes. Butterfly ballots are the obvious bad example here.

    Security - the system is secure from tampering, such as system hacking or stuffing the ballot box

    Accessibility - all of the above remains true for all demographics, such as the disabled. For instance, being blind should not mean that you can't vote anonymously

    No system as yet developed fits all of these for a scale such as a national election in the US.

    Other, less important requirements include cost,speed of tallying and administrative ease-of-use.

  47. It's all about "me, me, me!" by Animats · · Score: 2, Interesting
    That article has too much Rubin mouthing off and not enough about voting. Only a few paragraphs in that article actually talk about what happened at the November 2 election. He mentions seal issues, but doesn't tell whether they're numbered or signed. He says "some of the smart cards did not work very well", but doesn't say more about the problems. He mentions driving the smart cards with the totals to the Board of Elections office, but says nothing about what physical controls were applied then. As an election judge, this guy is a dud.

    This is too important an issue to become a vehicle for self-promotion.

  48. Votes not counted in counties with Minorities. by Fantastic+Lad · · Score: 2


    Spoilage Rates Are Most Prevalent In Counties With High Concentrations Of Minority Voters. Of the 100 counties with the highest spoilage rates, 67 have black populations above 12%. Of the top 100 counties with the lowest spoilage rates, the reverse is true - only 10 had sizeable black populations, while the population of 70 of the counties was over 75% white. There is also a strong correlation between uncounted ballots and black population; specifically, as the black population in a county increases, the uncounted ballot rate correspondingly increases.

    ---Full Story here

    155,000 provisional ballots were cast in Ohio. Probably Democrat, but not quite enough to close the 130,000 vote gap. (Because about half were cast in counties which went Kerry.) But just in case. . .

    The ballots aren't counted until after Election Day so officials can confirm the voter's registration and make sure the voter didn't cast a ballot elsewhere. [. . .] Secretary of State Ken Blackwell, the state's chief elections official, told county boards to adhere to a rule that provisional ballots cast by voters in the wrong precincts aren't to be counted - and legions of Republican lawyers were ready to make sure the order was heeded.

    ---Full Story here


    -FL

  49. Just to keep it real by wilec · · Score: 2, Interesting

    Just to keep it real, Nixon trounced McGovern (who btw was a highly declarated WWII vetran) with similar attacks on his ability to providea strong defense, McGovern choose to rise above the fray and lost horribly. But just remember only three years later Nixon had been impeached, due to his attempts to thwart the democratic process, and faced possible a prison sentence. Of course his veep Jerry pardoned him, a move that may have cost him the presidency. I say if anything can be proved let's impeach Dick Cheney first or at the same time. Matthew

  50. Re:Can someone explain what's wrong with an X? by cecirdr · · Score: 2, Interesting
    You need a computer if you want to skew votes one way of another without getting noticed.

    The powers that be in this country don't want a simple, understandable system. Fraud would be too easy to detect. We have long verbal wars about voting on TV news shows, but it never clears things up. It just makes things muddier. Why would the news and gov't want to make things so difficult? Why would they act like this is so hard to fix?

    Think about it.......