Slashdot Mirror


Avi Rubin and More on Electronic Voting

jgo writes "Johns Hopkins Computer Science professor Avi Rubin, posted his experience as an election judge on his website. It's an interesting read and exposes some potential security problems with electronic voting. At one point he held in his hand the five memory cards containing all of his precinct's votes." Rubin had posted his experience in the primary election earlier.

22 of 404 comments (clear)

  1. There problem is more than the machines by nerd256 · · Score: 5, Insightful

    "At one point he held in his hand the five memory cards containing all of his precinct's votes"

    whats keeping him from replacing one/all of them with doctored records. He complains that the voting machines could be tampered with, but there needs to be more safeguards than just the code.

    How hard is it to add a little printer? it would be much more conspicuous replacing a four-foot stack of receipts with ones from the back of your van.

    1. Re:There problem is more than the machines by bheading · · Score: 5, Insightful

      I keep hearing this argument that electronic voting machines should have a paper trail. Apart from the fact that it is meaningless (any programmer knows that the printout doesn't have to match the vote that was recorded internally) there is a more fundamental problem.

      By adding a printer, you're conceding that the electronic voting machine may not innately be able to provide complete confidence in the result.

      By conceding that the electronic voting machine's results cannot be trusted, you're saying that you have no basis upon which to reject a request for a recount of the paper receipts. In other words, you're back to hand-counting paper votes each time.

      The belief that electronic voting (or indeed automated vote counting of any kind) can work or deliver any kind of benefit is a serious mistake. A huge amount of cash need to be spent to test it, get it working and provide some degree of confidence that the result isn't wrong, and even then you can never be 100% sure. What's wrong with a pencil, a piece of paper, and a count process to which the candidates (and their lawyers) can be invited to ?

    2. Re:There problem is more than the machines by Anonymous Coward · · Score: 5, Insightful

      Or you're just designing a system with a layer of redundancy.

      Do you say the same thigns about the redundant systems on an aircraft, a nuclear power plant, cruise missiles, nukes? No? Ok then.

      In the case of something improtant, no matter how well you've designed the system, you always have layers of redundancy. In this case, it's leaving a paper trail.

    3. Re:There problem is more than the machines by nerd256 · · Score: 5, Insightful

      I take it you don't like to run test cases on your code.

      (1) the paper trail advocates argue mostly for the post-electoral controversy. The voter will confirm that his/her paper ballot matches the intended vote before it falls into the receipt bin. Thus, afterwards, if a hacker/act of god changes the electronic vote, one can verify them with the paper ones. It is much harder to inconspicuously change the paper printout.

      (2) The votes would only be checked on seeing a noticable anomaly or severe difference of votes than one would expect.

      (3) "you have no basis upon which to reject a request for a recount of the paper receipts." True, however, not if a politician knew this was futile, he would not sacrifice the time and sanity of people by asking for a recount. Case in point: Kerry steps down to Bush though he could have easily pressed legal action.

      Electronic voting is not perfect, but with the right safeguards it can become a practical alternative to the time-consuming sole-paper methods.

    4. Re:There problem is more than the machines by jbr439 · · Score: 5, Insightful

      In Canada we take a piece of paper, mark an X on it, go home, and wait for a bunch of people to count the results. It doesn't get much simpler than that.

      Canada does any number of things wrong, but I've got to say, the US fixation on a high-tech solution to a low-tech problem is mind-boggling. There must be lawyers involved somehow.

  2. Voting machines are prone to human failure by asadodetira · · Score: 5, Funny

    Human mistakes could affect results in voting machines.
    The voting machines should be supervised by robots...with shotguns

  3. Doubts by base_chakra · · Score: 5, Insightful

    From Professor Rubin's account: "If we continue to use the kind of insecure DREs that were used in this election, it is only a matter of time before somebody exploits them. And the worst part is that we may never know it." [emphasis added]

    It seems that no one really wants to come forward and raise this as a serious concern for this election, despite the fact that it's entirely plausible. Unfortunately, it seems highly unlikely that anyone who dares cast doubt on this election will be regarded as objective.

    1. Re:Doubts by EyeSavant · · Score: 5, Interesting

      It seems that no one really wants to come forward and raise this as a serious concern for this election, despite the fact that it's entirely plausible. Yeah, that worries me a bit too. A wrinkle is the fact that all the early exit polls pointed to a Kerry victory, the republicans were depressed, the democrats estatic. Then when the real results started coming in the situation was reversed. Especially when you have the president of Diebold a very strong Repubican. There is probabally nothing in it, and for whatever reason the exit polls were wrong. Normally they are pretty accurate though. It is probably for the best to try to forget about it, and make sure that these stuff is fixed for the next election. The other huge problem is the amount of gerrymandering that goes on. You really need to get the partisan officials OUT of the redistricting. The house of representitives elections are becoming insane, with a lot of stupidly safe seats. only something like 10% of house seats are competetive, and that is really really bad for democracy. If the only way you can lose your seat is if you get deselected by the party faithful, then it polaizes the politics, and noone moves to the centre, and it becomes a real mess.

    2. Re:Doubts by lawpoop · · Score: 5, Interesting
      "Unfortunately, it seems highly unlikely that anyone who dares cast doubt on this election will be regarded as objective."

      Time to put the tinfoil hat back on, you paranoid pinko!

      Seriously, someone has cast doubt. Blackboxvoting.org blanket the country with freedom of information requests on election night. They currently need $50,000 to complete the audit. I gave $100. Let's see what we can do together as slashdot.

      --
      Computers are useless. They can only give you answers.
      -- Pablo Picasso
  4. Gotta Love That Electronic Voting! by djaxl · · Score: 5, Interesting

    Glitch gave Bush extra votes in Ohio.
    Franklin County's unofficial results had Bush receiving 4,258 votes to Democrat John Kerry's 260 votes in a precinct in Gahanna.
    Records show only 638 voters cast ballots in that precinct.

  5. Distribute the load -- count manually by tinrobot · · Score: 5, Insightful

    When all of the votes are on one machine, one person can contol the votes. We need checks and balances.

    With a manual system, it takes hundreds of people to count the vote. Sure, it takes more time, buit I can wait. Sure there may be a few people with nefarious intentions, but those few people might be able to throw a precinct, not a whole state (or country!) Usually when hand counting, two or three people count anyways, so there's even more checks and balances built into the system. Our country is built on checks an balances. We need that in the voting system as well.

    I truly belive voting problems are the number one issue facing our country. If can't trust the vote, then we don't have a democracy. If one election can be stolen, the next one will be stolen as well. Very slippery slope.

  6. Black Box Voting by cardmagic · · Score: 5, Interesting

    Please watch this free 30-minute film about black box voting machines.



    We have all been scared about Diebold and other black box voting machines, and for good reason. Apparently one of the central machines from Election Systems & Software Inc. tallied 115 votes for Bush in a certain county, while another machine tallied 365 votes for that same county. Which one was right? There is no way to tell, because "it is too hard" to add a printer to a counting machine. It is not like they have been doing that for 30 years. But who needs to do a recount when the machines are infallible, right?



    Most infuriating of all is that Republican Senator Hagel, the former Senate Ethics Director, resigned after admitting that he owned Election Systems & Software! That's right, the same voting machine maker that 60% of ALL VOTES in the U.S. are counted on, the same one that provably miscounted votes in Ohio and other states, and the same one that refuses to print receipts to recount these votes. No wonder legislation trying to require printers on voting machines is taking so long to get through congress when congressmen can vote themselves into office without a paper trail.

  7. It seems to me... by rkww · · Score: 5, Interesting
    It seems th me that the most constructive thing to do would be to publically, physically destroy a voting machine (or perhaps just the memory card) after the votes are in, and focus the public on the fact that there is no backup.

    There is a question, of course, about how long you might be locked up for doing so.

  8. Re:A Suggestion by macdaddy357 · · Score: 5, Insightful

    None of these high-tech whizbangs is trustworthy, and all of them are too expensive. Marking paper ballots with No. 2 pencils is a simple and effective solution. If the scanning whizbangs screw up human eyes won't.

    --
    How ya like dat?
  9. Re:What the hell ever happened to honesty? by Why2K · · Score: 5, Insightful
    But, we should get receipts showing how we voted for our own records.

    No, we shouldn't. This would cause more problems that it would solve. Being able to prove to someone who you voted for would make it possible for them to buy your vote. Right now, you could take their money and then still vote for someone else, since no one will know who you vote for. This makes it much more difficult to conduct this kind of fraud.

  10. Ever hear of Quality Control? by evilquaker · · Score: 5, Insightful
    I keep hearing this argument that electronic voting machines should have a paper trail. Apart from the fact that it is meaningless (any programmer knows that the printout doesn't have to match the vote that was recorded internally) there is a more fundamental problem.

    The idea is that the voter can verify that the printout matches their wishes. The printout is the master copy, not the internal count. The latter is just more convenient -- for the voter and for the tallier.

    By adding a printer, you're conceding that the electronic voting machine may not innately be able to provide complete confidence in the result.

    No piece of non-trivial software can ever be considered bug free, and therefore, no software ever deserves complete confidence. For that matter, hand-counting shouldn't have your complete confidence either. People make mistakes; shit happens. That's the whole reason for QC.

    By conceding that the electronic voting machine's results cannot be trusted, you're saying that you have no basis upon which to reject a request for a recount of the paper receipts. In other words, you're back to hand-counting paper votes each time.

    You should have no basis upon which to reject a recount. The paper ballots are the masters. If there is a serious challenge, then they should be recounted. But in any case: you should verify a selected sample of the machines' votes in every polling station to make sure that they are giving reasonable numbers. This is just the application of industry-standard quality control procedures to voting machines. It boggles my mind that electronic voting was ever considered without them.

    --
    To within half a percent, pi seconds is a nanocentury. -- Tom Duff
  11. Re:My Idea for non-electronic voting by tinrobot · · Score: 5, Insightful

    Paper Ballot

    Ink pen

    Ballot Box.

    Cheap, reliable, fair, honest.

  12. It could just print out a ballot by chip33550336 · · Score: 5, Insightful

    It seems like the major benefit of the electronic voting machines is that they provide a good user interface. Much better than your standard ballot. I think you could just have an interface that prints out a ballot. Then the voter could validate the ballot if they wanted to. Then have another machine do the counting.

  13. There are rules for recounts by ProfDumb · · Score: 5, Insightful

    You are arguing that the existance of a paper record would result in all elections being recounted. This is false. The point of an electronic system with paper ballots is to provide very quick results in most cases while still allowing for recounts and audits in special cases. At least one state requires electronic machines with paper ballots, and it works well, so your concern is misplaced. There are rules for recounts and audits, they don't just happen.

    But without paper ballots, a significant fraction of the population will lose confidence in election results. (Go over to the dailykos blog if you don't believe me.)

    With paper ballots, false concerns about elections can be rejected as false and this increases confidence in our democracy. What is do bad about that?

    1. Re:There are rules for recounts by mpe · · Score: 5, Insightful

      You are arguing that the existance of a paper record would result in all elections being recounted. This is false. The point of an electronic system with paper ballots is to provide very quick results in most cases while still allowing for recounts and audits in special cases.

      Paper based ballot systems are actually quite quick to count. Certainly quick enough for governments where the results of the election take effect within hours of the polls closing. It is also perfectly possible to operate paper ballot systems in ways which make fraud very hard. (To the point where any kind of "vote rigging" would require hundreds of people to conspire in ways against their own interests).
      Why should speed be considered more important than accuracy. Especially somewhere like the US where there is actually several months to count the votes.

  14. the problem with any computerised balloting.. by zogger · · Score: 5, Insightful

    ..is obvious. The tally is not human readable. It has to be filtered through the computers programming. Programming can make any output reflect any input. The amount of money and power that is represented by controlling the US government is simpy staggering. It is the largest potential jackpot a criminally bent individual or group can approach. The temptation is overwhelming,and now *they* have the complete technical ability to achieve that goal and to get away with it, the perfect crime.

    A traditional paper ballot in a locked box is human readable/countable by anyone who can count at the end of the day. It requires very little in the form of specialised skills or hardware. It is very inexpensive. Challenges can be mounted and results verified quickly and transparently. Once you get into machine reading, whether tabulated bubbles or punched out cards or pure digitial like with the diebold machines-then you have your potential problems, and with the last few elections we can see we have new problems, and they look a lot more like "on purpose" troubles than accidental. They especially look on purpose given the revelations of what was found on diebolds website and published, and with other anecdotals showing some rather distrubing intent as to election honesty. The consortium pushing electronic closed source computer voting is a who's who of the mega-profits from tax money and governmental contracts military industrial complex. This is three serious alarm bells to anyone really thinking about this subject.

    The old way had it's faults, but computerised has introduced faults above and beyond that can not be addressed without trusting what is inherently untrustworthy by it's design criteria.