OSS Election Systems Desired, but Not Ready
An anonymous reader writes "Even though many American voters are ready for open source systems at the polls, Newsforge (a Slashdot sister site) has an interesting story about why open source may not be ready for the polls. From the article: 'The only open source e-voting effort that Rubin [an e-voting expert] noted was the Open Voting Consortium (OVC). "I don't agree with everything they are doing, but they are all about transparency and open source," Rubin said. OVC President and CEO Alan Dechert says it would take a large investment of time and money to provide an alternative to traditional e-voting systems vendors, but he says an effort known as Open Voting Solutions (OVS) is looking to do just that.'"
You know, I am an OSS guy as much as most of the people on Slashdot. I would love all software to be free, but then companies wouldn't make any money.
But if closed source polls can't get it right, what makes us think that OSS polls can? Again, I'm a big OSS advocate, and I would love to see OSS in the role for everything under the sun.
I don't think the public would know, however, if people were using OSS polls or a closed source poll. Nor do I think they would care...
but I would be willing to be that they would be more secure than their closed counterparts
I know i have read somewhere of someone hacking a voting machine..
But it all falls back on the basis of all software problems. The (software|hardware) is only as smart as the person operating it.
I think that if open source software is used in elections, it will reduce ballot stuffing, political party bias by contribution, and possibly make elections fair for all involved, from candidates to voters.
What's wrong with paper ballots? They work great in Canada. We even have election results within a few hours, at most. As far as I can tell the only "downside" is that paper ballots are hard to rig elections with.
Religion for nerds. Stuff that really matters
Here in Australia we have a system that works, and has been used already.
http://www.softimp.com.au/index.php?id=evoting
Common sense is not so common
Oh, right. Hackers putting together beige-box PC's running Linux and this simple software are going to get to install voting machines. Riiiight. And monkeys might fly out of my butt. Nice idea, but pretty damn silly, nonetheless.
I don't respond to AC's.
1. Open source. We need to be able to trust these systems and how can we do that without being able to examine the code behind them?
2. Paper records kept for the government. Just in case there is a trust issue, this is a backup method for the recount.
3. Paper records for the voter. Worst case, every voter has a copy of their own vote. Hard to use for a recount, but could help identify irregularities.
So easy. I am all for having the convenience and speed of electronic voting, but I cannot for the life of me understand why we must give up the benefits of paper ballots at the same time, and even improve on them (as in the paper copy for the voter).
"Successful open voting systems that are cheaper, easier to manage, and more transparent than proprietary systems can be found in Australia, Canada, Estonia, and other places."
Perhaps the author meant to say:
"no American vendor offers open source software and systems that are ready for voting."
EVACS started open source under the GPL - but closed the source at a later point.
http://www.elections.act.gov.au/EVACS.html
It is made in Australia, and I was of the impression has been used in elections already.
LetterRip
I've voted in every election held since I turned 18,but the only reason I do that is avoid hearing "If you didn't vote, you can't complain", which is an assinine theory, given I pay taxes and served in the military, but hey, it's always funny when I get asked why I was flipping a coin while voting.
Can anyone explain me how can I trust OSS running box more than the one running closed software? How can I verify that the software running in the box is the same I verified? How can I be sure the cpu isn't mangled by some foreign goverment? (Since most hw is now made on taiwan..) What's wrong with paper ballots?
I don't care how "open" or secure a system is, I want a paper trail.
We make photo kiosks. Every time someone places an order, we print a receipt. The receipt printer is one of the most reliable pieces of equipment on our systesm. We have about 60 employees. If we can do it, I see no reason why you could not have a voting machine print a paper receipt with your voting selection on it along with a unique, encrypted number. On the way out, the voter places the receipt (or paper ballot, if you will) in the drop box. Once the election is over, if everyone is satisfied with the results, the paper ballots are discarded. If there is a challenge, the paper receipts are counted and compared to the digital count. There should not be much of a difference. If the difference is enough to change the outcome, I'd say go with the paper count. However, if voting fraud is an issue, it will not be a small margin. It is doubtful that someone will try to fraud for only a couple of votes and there should never be more pieces of paper in the box than digital votes cast.
This will allow for a challenge, investigation, and is the only way to provide for a recount.
There is no "I disagree" mod for a reason. Flamebait, Troll, and Overrated are not substitutes.
by saying many do you mean the 250 many who run linux on the desktop?
I haven't really read how this e-voting works, but if it means you can log on to a website and vote from home, wouldn't that make your vote not anonymus? What would happen with the log of your IP, your vote could be traced back to you.
I like paper ballots because they don't get traced back to you, once you put it in the box you have no identity.
All voting machines should be open source and the systems should be utterly transparent. All machines should provide a paper receipt and ballot, to allow individuals to easily verify their selections and in the event that a manual recount is needed, for whatever reason.
Our elections are at the foundation of our democracy. If they are broken or flawed, our entire system of government is flawed. Reforming our elections to do everything humanly possible to make it so the system accurately reflects the will of the elecorate should be one of our nation's very highest priorities.
It's cheaper to count them by hand. A full county wide voting machine system costs a lot of money, a lot of money that could buy a lot of ballot counting labor hours.
I love a technofix as much as the next geek, but computerized voting machines are not the technology for now.
Start Running Better Polls
VOTER: "Okay need to vote...here we go...."
....
........
VOTER: "Huh, it's a command line terminal...Okay..."
Looks at people running the voting place
VOTER: "Excuse me. How do I vote....?...Uh huh...'ls'? Uh huh...'RFTM?' What does that mean...Oh I see. Thank you very much"
ls
VOTER: "Okay there's a file in here called README and INSTALL. I'll look at README first."
after some time...
VOTER: "Seams to be something about a pissed off guy named Richard and something he humps called a GNU...Okay. I'll take a look at INSTALL instead here"
VOTER: "Generic install instructions....something something something, configure....something something make? Okay worth a shot"
configure; make; make install
Checking for sed.....ok
Checking for awk.....ok
Checking for kernl...
30 mintues latter
Checking for libyourmom....ok
Checking for libkitchensick...Found Emacs....ok
Checking for ruby on rails....
ruby on rails not found...
ruby on rails not found.??
ruby on rails not found.??!!!!!!
RUBY ON RAILS NOT FOUND!!!!!!!!!!!!
Ruby on rails is the latest h4x0r dood!!!!!
Install Ruby rails AJAX0r!!!!
VOTER: "Son of a....!"
We've got an open source electronic voting system in the Australian Capital Territory, it's been used in two elections.
Details and code here.
'There is a Light that never goes out.'
If the choice is between a free, as-perfect-as-can-be, open source voting solution versus Diebold... who do you think'll get the job?
This is a human problem.
The worst part about OSS election software is that someone else runs 'make', you run 'make install', but the install process installs too much crap and trashes some of your local files.
Then, you try to 'make uninstall' but the process fails halfway through and so you're left with a system in an unknown state, with rogue files hanging out everyyear.
But as Thomas Jefferson said, it's doubful that your current system will remain stable forever. Every once in a while you need to Reinstall the Operating System.
94% of Repubs and 21% of Dems voted to renew the Patriot Act
Look. This is America. The nation that led the world in technological development for two hundred years, put men on the Moon a couple of times and invented the personal computer, and now we're saying that we can't even develop a machine that can count reliably???!!! Please. This is not, repeat not a technological issue. It is a political one, pure and simple.
The only reason that implementing a transparent, auditable electronic voting system is such a problem is because there are certain people that have a vested interest in making it a problem.
The higher the technology, the sharper that two-edged sword.
Black-box voting machines are complicated. Who knows if you can trust them? Who knows if your vote actually counts?
Canada has been using paper ballots for as long as I have been voting. I see no reason to change the system because it works pretty well. Fraud is still possible, but difficult. Using machines to vote and to count votes would only introduce new ways to subvert the system.
it's always funny when I get asked why I was flipping a coin while voting.
That's actually a bad idea, as random voting affects both main parties equally and hence is really a vote for the establishment.
A far more effective approach is to always vote for the opposition. This makes life very tough for politicians during the 50% of the time when they are most dangerous, ie. when they are in government, because they will spend a lot of time on the defensive to try to avert the turnaround at the next election. Thus occupied, they will have less time to perform their usual damage.
Always voting for the opposition is in effect a vote against the two-party system, and sends the message that politicians are shit and their actions entirely without merit --- which of course is exactly right.
"OVC President and CEO Alan Dechert says it would take a large investment of time and money to provide an alternative to traditional e-voting systems vendors, but he says an effort known as Open Voting Solutions (OVS) is looking to do just that.'"
How much capital does an originization really need to code up a secure counting machine? I just don't get where all these costs are coming from. The thing is just supposed to simply count. How hard is it? A couple of geeks should be able to do it in an afternoon in their free time, especially when they don't have to waste their time implementing all those backdoors.
"To lead the people, you must walk behind them"
A balloting machine has to be one of the easiest things to write period.
Each candidate gets a counter. When a vote is cast for a candidate increment counter by one. When the polls close, display the count for each candidate. Then the adminstrators go to each machine records the numbers and adds them together.
The ONLY part of the balloting proceedure that needs any speed up is the counting of the votes, that is the only part that is time consuming and error prone.
You don't need to network the machines to get an automatic accumulation of votes. That would actually be a bad idea.
The only non-trivial part of the entire electronic voting machine thing is the mechanical aspect that makes sure one voter doesn't vote more than once.
I didn't read the whole thread, but here are my suggestions for any kind of voting machine:
1) To prevent fraud, you must swipe your drivers license or other acceptable government issued ID to gain access.
2) To prevent tampering and uncounted votes, have sensors on the machine that will detect if a voter is leaving the booth. If he leaves without submitting his vote, save his session and dump the machine back to the login screen. Play an audible message and alert an election official to let the voter know what happened
I had a few more, but I can't remember them now.
Is closed source ready for the polls?
Paper is no good because we "need" to let people vote in 42 different languages. Understanding what the candidates promise is not a prerequisite for voting.
Paper does not self-validate. What if somebody messes up? They get disenfranchised! We "need" to ensure that every moron can just play with the ballot until it is valid.
More seriously, paper is hard to reprint when a candidate dies a week before the election.
Some people with poor eyes need HUGE letters.
Plus, e-voting is all high-tech, so it must be good.
Counting data is the most basic task a computer can perform, a VIC20 could do this more reliably than these guys can achieve.
Why does it need to run on an OS at all? Wouldn't it be more economical/stable/secure to run this embedded?
As it is, cities and big states suck up money for expensive pet projects. Political candidates mostly ignore the middle of the country. The electoral college system helps fight this.
(and no, it isn't right or good, because this perpetuates and increases the inequality)
With the electoral college, your vote is MORE likely to count. ("count" being that it tips the scale, such that voting the other way would have changed the result) This is a matter of math.
What we really need to do is break up a few of the largest states and perhaps merge some of the smaller ones. Split California 8 ways, Texas 5 ways, etc.
If I recall right, the number of electoral voting regions should be much higher. About 8000 (the square root of our population) is probably best, assuming you stick to one level.
"Trusted computing" might be a bad idea for desktop PCs (where the user should have total control of the software running on it), but it might be a really good idea for voting machines (where the entire software stack must be kept under very careful control from the moment the machine is configured and certified right up to election day).
I wrote this all out in notepad without spell check of any kind. I barely even proofread it.
This is my idea of a reform:
---
electronic balloting system:
user arrives at poll place
receives magnetic card with one-way hash of ssn.
user swipes card in cardreader at ballot box
this initiates the voting. touch screens or pushbuttons, etc
no records are kept at all at the ballot box.
Votes are immediatly printed twice via a standard receipt printer in human readable format.
There is also an XML translation of the vote with a checksum at the bottom.
A barcode uniquly identifies the vote.
Another barcode uniquely identifies the voter. (but not personnally identifiable)
User retains one copy of the vote and submits the other copy.
Both copies are identical and either (but only one) can be submitted.
Submitted papar-vote's barcodes are scanned to make sure that this voter has only voted once.
Voter is capable of making several paper ballots. All ballots would have same voter barcode, but different vote barcodes.
Voter is only allowd to submit one ballot, even if several were made.
At no point, other than receiving the voter mag-card is the voter identified by name or social security number.
At poll close, ballot is optically scanned (the entire ballot, on a flatbed scanner).
The ballot is electronically recognized (OCRed) and the XML section is decoded.
If the checksum matches, the ballot is electronically counted.
If the checksum does not match, the ballot is rejected electronically and must be manually entered by unbiased election officials.
All paper ballots must uniquely identify the voter without revealing who the voter is
All paper ballots must be individually uniquly identified in the event of a manual recount
All ballots also contain a date and time of when the ballot is printed.
Manual recount:
Because one voter can create multiple ballots (in case they change their mind, to prevent voter intimidation, etc). The ballots are uniquely identified. The voters are also uniquely identified. All ballots have two id barcodes on them.
If the results are disputed, the first step is an electronic recount.
The next step is a manual recount.
When fraud is charged such that the ballots in possession of the election officials cannot be trusted, the copies that the voters retains can be photocopied and mailed to the election officials. Only the copy that was submitted at the polling place should be submitted because an electronic record of submitted ballots (identifying the voter id and the ballot id) exists and the ballots will be checked upon receipt. If the paper-vote that is mailed has a different vote id than the record of the vote id, the voter is notified and may (if needed) recast their ballot.
Voter responsibilities:
It is the voter's responsibility to check the printed ballot against the vote they made on the ballot box. If they differ, they should try again, posibly with a different machine.
It is also the voter's responsibility to make sure the ballot's barcodes are scanned when submitted and afterward inserted into the ballot bin that is eventually sent to election officials for certification.
Missing paper ballots:
When ballots are submitted, the barcodes printed on them are scanned. This creates a record on an offsite database that contains ONLY the following information: The voter id, the ballot id (unique to voter, not globally unique), the date/time submitted (set by the offsite database), the polling place, and the station number. Each station is operated only by one worker per shift, the station must be logged into and out of by the worker.
(Based on a particular station)
In the event of a missing ballot, the ballot is ignored.
In the event of several missing ballots, the ballots are ignored and the poll worker responsible is fined.
In the event of a large number of missing ballots, ALL voters at that particular polling place are asked to photocopy and mail in their cop
This message brought to you by Jack Schitt's Previously Shat Shit
A blind citizen given a paper ballot has to get someone to help, raising problems of confidentiality and trust.
A computer UI can, in principle, be made easier to follow than a crowded piece of paper. Googling for "butterfly ballot" will get you an example that turned out to be important. A computerized ballot can do validity checking and spare the counting system from having to divine "voter intent" from a double-voted or unreadable ballot.
Those are the only real advantages I've ever seen mentioned.
According to Google, whom we all know never lies --
/.er could tell you is that the population differential is actually 9.080123935, not 10. But of course these numbers are based on statistics, and are prone to error, so YMMV.
USA Population (via cia.gov) - 295,734,134
Canada population (via stat-can) - 32,569,394
caveat - I don't have Flash6 so this number is actually the projection for July 1
What this means, as any
In the 2006 Canadian election of the Prime Minister, preliminary results indicated that 64.9% of registered voters cast their ballot.
Based upon 2000 census figures, 42.45% of the U.S. population voted in the 2004 election. Note that this is a percentage of the entire population, not of just eligible voters. Now of course, this opens an other can of worms, because while this number claims to be inclusive of the entire population there must be tens of thousands (or hundreds of thousands, or more) of un-accounted-for illegal immigrants, but that's a minor issue -- I only raise it to reinforce the point that the 42.45% figure is not exactly accurate. All that as it is, it would seem to be the highest voter turn-out in decades, but you might just chalk that up to ballot-stuffing and not actual living people casting their personal single votes... Who's to say with the hodgepodge of various voting standards and closed-source electronic voting systems in use throughout the States.
Now, when it comes to how many poll workers there are in each system, I admit my ignorance. You seem to be claiming some expertise on the matter, so please, do enlighten us!
No matter how you cut it though, if you assume an equal per-capita number of poll workers to eligible voters, it would *seem* that perhaps the States does in fact have an edge over Canada, so why can't they produce accurate and uncontested voting results as rapidly as Canada? That, sir, is a question for someone else to answer, because frankly, I don't give a rat's-ass.
And for a final matter, you seem to be referring to me as a resident of the States, but I am, as far as I can tell, living in Canada, sir. Shall I conclude that "you people" jump to conclusions? (where-ever-the-hell-you-are-from?)
Be who you are and say what you feel, because those who mind don't matter and those who matter don't mind. - Dr. Seuss
So long as we are all understood that the government copies must not contain any indication of who cast the vote.
However, I am still concerned about the potential for observation. If there are electronics in operation, there is an increased risk of an observer having some kind of receiver capable of decoding the waste radiation from the voting box.
I know that tiny cameras and mirrors could theoretically be placed to catch the inside of voting booths, but there is an order of magnitude more probability of discover using those kinds of tools.
Sexy as electronic voting is, I think it's one of those great ideas that should not be implemented, period.
On the other hand, we should be able to afford ballot counters at every polling station. That might be something to consider, since it would reduce the opportunity for lost ballots on the way to the county or parish offices. If the voting judges run the counter in small batches, they could even spot check some batches by hand.
Am I completely out to lunch or could a 100% bug free e-voting system be written in half an hour and 100 lines of PHP?
I just don't get what the holdup is. I'll help out whoever wants to build one and write up the functional specs:
1. Present list of choices
2. User picks one
3. Present confirmation
4. Print paper copy for confirmation #2 and recount purposes.
A simple, scalable, system.
Anarchists never rule
These are a bit trickier than just building a machine that can add 1 to a column, but not THAT much harder.
I would ascribe every digital ballot paper with a hash value that uniquely identifies that paper and would be hard to forge. eg: Have each ballot paper marked with a serial number, then digitally signed by the electoral authorities.
Each voter's voting card would have a totally random public encryption key on it, plus a number. On going to the voting machine, the card would first tick the person off on the list of people who had voted. After casting the votes, the machine would encrypt the ballot paper with the encryption key, then it would append the number to the end. The electronic ballot paper would then, after a random delay, be sent back to the central repository via an SSL connection. The machine would keep no tallies and no records whatsoever. Nor would the local office. It would all be central. (The local office could count votes cast, though, as it would be useful to compare against votes decoded.)
The central system would use the number to select a relatively small set of private keys. It would try each key in turn until it found the key that unlocked that ballot paper. That private key would then be deleted. The unlocked ballot paper would be placed into a secure database. The number of valid votes identified would be counted and publicly published in real-time.
Just to be absolutely certain what is meant here, the database must be write-only from the central system and must be in a tamper-proof environment. Once all ballots are uploaded, it will then perform the count and download the results, ALL of the decrypted ballots and ALL of the encrypted ballots.
That way, anyone can perform a recount and although it would be a monumental task to validate the votes, it could be done. This system is pseudo-anonymous, not truly anonymous, using a VERY large base to make anonymity effective. The upshot is that if a random sample of voter cards were gathered (anonymously!), it would be possible to show that each of those cards matches to exactly one encrypted vote and one decrypted vote.
This shouldn't be necessary, as most of the avenues for fraud have already been eliminated. The effort to fraudulently enter a vote in this system would be extraordinary, as it would require breaking the ballot paper generation system, the encryption key system AND the decryption system, in order to be transparent. Failure to break all of these would result in the votes being rejected by the unbroken component.
I don't think an actual voting system need be this complex, but that's not the point. The point here is that it is possible to imagine a system that is (a) Open Source and (b) so damn-near impervious that it would be cheaper to just buy the person who'd been elected than rig so much as a single vote.
Has this been done? Probably not. Could it be done? Sure. Give me a couple of weeks, a few smart-cards, readers, kiosks and a tamper-proof computer case. There should be no difficulty in writing a system that would be close to iron-clad for the next 50-100 years, with so close to zero chance of tampering that it's just not going to happen.
If an OSS election system group has the hardware and would like to play with this scheme, I'd be happy to write it for them.
It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
It really is not the problem. It's what can be done while the counting is in process, and whether or not a non-technical person can confirm the count, and such.
3. Paper records for the voter. Worst case, every voter has a copy of their own vote. Hard to use for a recount, but could help identify irregularities.
The only way this would be viable is if you were to be able to hand carry the paper output (in something to conceal the choices, of course!) over to a locked ballot box within the area after examining it in the machine - just as done with paper based voting. When the day is done, you count both totals separately, with the electronic count performed separate from the paper count, with full transparency. No personally identifying information on the printouts, just the selections made as it was done before electronic voting.
A third record in the form of a printout would be retained as it is currently done with electronic voting for the current purpose. This would be kept separate from all other records and only used in a recount. Not perfect, but the idea is that you're going raise the bar high enough to increase the visibility of any attempts, and the amount of resources to pull anything off. You arent going to stop the dedicated, but you'll certainly be able to find a lot more low-hanging fruit.
Twitter supports and protects racists - by smearing their critics with the "Hate Speech" label.
this poster is a fool; he knows not, yet he things he does - shun him, for he is dangerous
Seems rather strange that the richest and most powerful country in the world can't afford decent voting systems (whether free or not). There are plenty of really smart people in the USA, good in crypto, systems, architecture etc. So the talent is there.
;).
;).
As for the money: this is the same country that has spent BILLIONS in Iraq for dubious reasons (the official reasons kept changing, so they can't have been the real reasons).
I heard one of the US Gov's "reasons" was to have democracy/free elections in Iraq, but that can't be the real reason since the US Gov was very obviously not pleased when there was democracy/free elections in Palestine and Hamas got elected
I don't know what is really going on with the USA, but I doubt that the main issue is whether a voting system is OSS or non-OSS.
With all this "globalisation" being hyped as such a great thing, maybe the US should outsource their elections to India, and have UN observers for free to observe stuff.
After all India is arguably the world's largest democracy (1 billion citizens). I bet if they had results as ridiculous as "more votes than voters", "negative votes" heads would _literally_ roll. They somehow have managed to get a decent chap as Prime Minister ( Dr. Manmohan Singh seems to be well-respected by most).
If I were a US citizen I'd _demand_ that all the people involved in supplying or approving crappy election systems be charged for _TREASON_.
After all, the USA keeps saying democracy is so important etc.
Prove it with actions and not bullshit.
From the article:
Not only does maintaining "intellectual property rights" not preclude others from distributing copies of the software for a fee (as anyone who understands Free Software licensing already knows), merely inspecting the software is insufficient to get real work done in a way that is beneficial to the public.
I served on the Champaign County election equipment advisory board—an appointed board made up of representatives of businesses and political parties from Champaign County, Illinois. Over months in the past couple of years this board weighed a few machines from a variety of vendors so that we could make a recommendation to the elected County Board who would then make the final decision and sign the appropriate contracts. We were told at the first meeting that we were only to consider machines from "approved vendors" but in the end we learned that even the machines we were considering had not yet all been approved by the State of Illinois. It was just a means of narrowing the allowable debate, effectively excluding a variety of vendors who probably never knew we were seriously considering voting machines.
I knew early on (and did my darndest to convince my fellow board members) that we want complete source code to the machines we'd buy so that we could make repairs and improvements while enjoying the benefits of global competition. Locally we have lots of talented computer programmers, the University of Illinois at Urbana-Champaign is in this county. It is a shame to waste all the talent we have by getting into a monopoly.
Politically, there are good reasons to need the source code too: it's your machine paid for with your tax dollars, so you should not be restricted from getting it fixed when it breaks, running it any time you want, and not just inspecting what it ostensibly does. But we should also not constrain ourselves to the features the machine has today. Locally, we could switch from a first-past-the-post to some kind of ranked voting system (like instant run-off or some Condorcet system) for local elections. But so long as we can't get the vendor to do what we want and as long as we can't help ourselves because we're choosing to buy into a monopoly for support (which is what you do when you get proprietary software), we have an additional restriction to overcome with our voting machines—we can't switch to the voting system we want because the proprietor won't let us and we can't afford to simply switch to another set of machines.
I discussed Free Software voting machines on Counterpunch.
Digital Citizen
A polling application is just the kind of problem you could see in a programming competition. Why doesn't someone with some whoopass cred and some cash put together a competition. You'd get a bunch of people working towards a great goal (correct implementation of an important part of the democratic process), transparency and public input (after the functional framework is complete). I know that the software is only part of the problem, but perhaps a competition would stimulate a bit more public participation.
http://russp.org/GVI.htm
GVI, The Graphical Voter Interface, is a GUI (Graphical User Interface) for voting, suitable for use in private or public elections. Although it could be adapted for online voting, it is currently intended only for conventional "precinct" voting. For security reasons, GVI does not require that the voter have access to a keyboard. It can handle write-ins and multi-language elections, and it can automate voting along party lines. GVI can be used for Condorcet Voting and Instant Runoff Voting, which allow voters to rank the candidates in order of preference. It can also be used for Approval Voting, which allows voters to select more than one candidate.
And it's FREE in every conceivable way!
I watch Brit Hume on Fox News
Belgium is a small west-european country where every person over 18 must vote.
The major part of the votes since more then five years have been entered electronically.
The majority of the systems are made by Steria (formally, Integris, a part of Bull) http://www.steria.be/
The system consits of PC running some old M$ DOS version (4.5 I think) with a pen-screen and a magnetic card reader.
Secrecy of vote + audit trail: each voter gets one anonymous card. The card is writtten using the voting computer (in a ballot box) and is then dropped into a drop-box vault. You see the parallells with paper-and-pencil voting I suppose...
Counting happens afterwards and recounting remains possible (untill the cards are wiped for the next elections)
Open-Source: Even though the software is written by a commercial company (Steria) the software is open for scrunity (by any citizen) at the Interior Ministry. Before last elections, Steria's source was examined by a professor and he detected one weak point (regarding the use of a random generator using the PC's BIOS) but it requires physical access to the voting card (in the vault) and it only couldcompromises secrecy of the vote (if you manage to track the order in which cards have been written).
There is also a competitor with some (similar) voting computers, but they represent a minority and that same professor called their coding "very bad spaghetti code that is impossible to understand"...
One big difference with the rest of the world: like I said, every adult citizen has to vote, meaning that the number of vote(r)s is perfectly known. Also, since it is a nation wide occurence there is only one voting day. The benefit of this is that the effort of actually organising the vote, including the counting (there are still votes on paper!) can be perfectly predicted.
There are some communues that (in last elections) still voted on paper.
In those communues the time allowed to vote is much shorter (only untill noon often), and still the results of those communes are the last to come in: electronic voting really does have major benefits here: longer opening hours of the polling stations and faster results.
120 chars is not enough!
more like OV$
snap!
Paper trails can easily be added to existing voting systems. Rolls of adding machine paper are cheap, about 55 cents for a 150' roll at Staples. I am sure they can be had for cheaper if bought in bulk. The adding machines and the ink are cheap too. How much are we paying Diebold and the others for thier voting kiosks?
The trick is to print the vote out and let the voter see it as it prints. The voter will not be able to touch the vote, only see it. Before the voter leaves the booth the vote gets rolled up. No one sees the vote except the voter. The vote can't easily be tampered with since it will be very hard to erase the ink printed by the adding machine. Also, paper cannot be torn and attached back together without some sort of obvious tampering like tape.
There are more pluses to this method. The adding machine printers are LOUD and someone will be able to hear everytime a vote is made. If you can fit 5 votes per foot you can fit 750 votes on one of those paper rolls. A city the size of San Francisco would only need about 1000 of these rolls for the entire city. Given each roll only waying a few ounces, The total number of votes per district and all together could easily be estimated by physically weighing the votes (one person could probably carry all the votes).
Adding such a device is trivial to the windows based systems that exist. Besides every grocery store clerk in the world knows how to load those paper rolls.
QUIT FUCKING LIEING!!!!!
ELECTRONIC VOTING SYSTEMS ARE NOT DESIRED.
You can not validate every fucking piece of the system from the power supply through every resistor, capacitor, logic chip, cpu, down to where the paper drops out of the printer tray.
NONE OF IT CAN BE TRUSTED. ALL OF IT CAN BE CRACKED.
1. Remove the electricity
2. Remove all digitized data
3. Remove all networks
If you do not do this, we are no longer a constitutional republic. And the better question is just what have we become because of this infestation of treasonous electronic voting equipment.
You people need to Bust your Local Secretary of State's Balls before there is cival war.
Back in the day it was probably never seen as important; because everybody understood exactly how a pencil, paper and a wooden box with a slot in the top -- which are still used in many countries, and for exactly this reason -- worked.
Requiring Open Source Software to be used is a good step in the right direction, but it does not go far enough. The requirements of democracy have not been satisfied if only a minority of the population is actually capable of verifying election machinery. Therefore, I would go so far as to say that: Without this restriction, it would be too easy for manufacturers to bamboozle voters with technology. Everybody must be allowed to play with -- and try to break -- genuinely representative samples of the equipment used in elections, and the ability to understand how it actually works is crucial. Even if it means that counting votes becomes a labour-intensive process, this is a fair price to pay for democracy.
Je fume. Tu fumes. Nous fûmes!
25 Problems with Printed voter reviewed logs:
0) Its just less flawed, its a false sense of security.
1) Recounts are done from a paper log you can't review; multiple printouts. (1 voter, 1 official, 1 for election officials)
2) How many people can read the small print?
3) Will you have time enough to read it scrolling bye?
4) Will you see the last person's? (tons of white space + shield)
5) Will a bug or miss-configuration cause it to scroll past the viewable area?
6) What happens if the printer gets low on ink? or fails?
7) What happens if paper runs out? (see 2004)
8) Provisional ballots are made for screwing you. You can't get them counted. (see 2004)
9) Will it be complicated and hard to read? (think how you'd do it, without small print)
10) It is known science that a % of people will misread the result because in their mind they expect to see something else! (now go back to 9)
11) Anybody can print out LOGs and possibly switch them to change the record. (especially IT)
12) What about Error Corrections? Modications have to be logged as well; otherwise, whats the point of review?
13) Exploit error correction logging to change votes
14) Insert an extra line inbetween votes (so its covered by the privacy shield on the printer) that adds or subtracts from log totals
15) Legally don't give paper logs any stand against the electronic record, so a court/political battle can happen
16) Attack the validity of the paper record, with a conspiracy theory--just don't use the keyword 'conspiracy'
17) Attack the validity of HUMAN recounting of the paper record, do FUD, don't put in a real plan, etc. rerun 2000
18) Use/Require Optical readers to count the paper record, buy them from the same vendor.
19) Errors that print out invalid log entries, lowering the validity of the paper, also causing sections to be removed.
20) Use thermal transfer paper, store in a hot location.
21) Don't allow public review of the log, especially if the printer puts out watermark (like all the color ones do today)
22) Create a signature/watermark on printouts, then have bugs in it. Forget to use any special paper as well.)
23) Create pre-printed logs, load those into the machines on election day (think of the white space)
24) A % of voters will not review the paper, know what it is, or care enough to raise a fuss when they see a problem.
25) Make printouts shared between machines, making most of the above problems bigger
Democracy Now! - uncensored, anti-establishment news
Paper ballots are just as easy to rig elections with than electronic voting. Been there, done that. The only thing that keeps ANY election clean is levels and more levels of checking and rechecking.
It's better to be the foot on the boot than the face on the pavement. ~~ tkx Kadin2048
AKA the world's biggest democracy...
"Elections in India are events involving political mobilisation and organisational complexity on an amazing scale. In the 1996 election to Lok Sabha there were 1,269 candidates from 38 officially recognised national and state parties seeking election, 1,048 candidates from registered parties, not recognised and 10,635 independent candidates. A total number of 592,572,288 people voted. The Election Commission employed almost 4,000,000 people to run the election. A vast number of civilian police and security forces were deployed to ensure that the elections were carried out peacefully. The direct cost of organising the election amounted to approximately Rs. 5,180 million.
"Voting is by secret ballot. Polling stations are usually set up in public institutions, such as schools and community halls. To enable as many electors as possible to vote, the officials of the Election Commission try to ensure that there is a polling station within 2km of every voter, and that no polling stations should have to deal with more than 1200 voters. Each polling station is open for at least 8 hours on the day of the election.
"On entering the polling station, the elector is checked against the Electoral Roll, and allocated a ballot paper. The elector votes by marking the ballot paper with a rubber stamp on or near the symbol of the candidate of his choice, inside a screened compartment in the polling station. The voter then folds the ballot paper and inserts it in a common ballot box which is kept in full view of the Presiding Officer and polling agents of the candidates. This marking system eliminates the possibility of ballot papers being surreptitiously taken out of the polling station or not being put in the ballot box."
No, your children are not the special ones. Nor are your pets.
Some of us at the blackboxvoting.org forums may have discovered a simple system based on the idea of simply displaying OMR-able ballots after they're cast and letting all parties do a quick independent count...can also be used for reasonable oversight.
7 9.html?1141327589
It has the potential for being as fast as DRE's but as trustable as paper ballots and cheaper than both.
We just came up with it recently and we're working out the details.
We could use some fresh feedback. I'm thinking of calling it "Open Counting"
http://www.bbvforums.org/forums/messages/9707/177
Sorry, I heard about this slashdot story late
peace 2 u,
-anwar
Electronic voting systems haven't been around long enough to be called "traditional".
Traditional voting systems put up with the delays of moving physical ballots around and counting them by hand because the process is too important to be defined by the desire of TV networks to sell advertising on election night.
We'd be better off enacting a one week news blackout on election results than going to ANY kind of electronic voting system, even one that retained the essential primacy of the paper ballot.
I've posted on this before. Why do so many people have this fantasy that paper ballots can't be rigged? Ukraine uses paper ballots and the presidential election in November 2004 was widely considered to be rigged. I was in Ukraine just after the vote and I have no doubt at all that it was rigged.
The article makes mention of "Successful open voting systems that are cheaper, easier to manage, and more transparent than proprietary systems can be found in Australia, Canada, Estonia, and other places."
Could anyone elaborate on the Canadian system?
I'm a professional software developer, and my wife has a masters degree in political management and a lot of real-world experience in DC and elsewhere. Still I'm in no way qualified to write a requirements document for a voting system. Sure, the obvious things like "count the votes correctly" are easy, but there is a lot more to it. I'm sure there are all sorts of laws about the way the choices are presented, accessability regulations and laws, user interface concerns... These are all areas which traditionally open source projects struggle with.
The other problem is that elections are generally held by governments. The average coding geek doesn't have the alpha and beta test communities which are normally available to traditional projects. Open source is generally (but not always) and iterative model. Someone releases a solution which solves their specific problem, gets feedback from other users, and the solution gets enhanced.
Voting systems should not be made by a private company or by private citizens. The Federal government needs to pick the appropriate agency and develop a single, well-tested system. The system should be totally open source, hardware and software, but the people creating it should be aiming to "get it right" not "get it profitable"
The general public has the skills but not the knowledge.
Wow. It's a shame the whole thing is null and void from the get go.
Requiring photo identification to vote in the state of Georgia was fought tooth and nail, and it got called a modern-day poll tax because--according to those making the argument--certain communities are apparently unable to acquire or are scared of photo ID cards, even if they are distributed free by the government.
And you think they're going to tolerate a magnetic swipe card with a Social Security number on it? Not only would that get shot down in a hurry and called discriminatory, but your friends here at Slashdot would tear it to shreds too because it'd be a gross invasion of privacy. Expect a YRO topic about it, if it ever happened.
Oh, and since this is Slashdot, expect a dupe of it too.
Jack Johnson: I believe my opponent's 3% tax increase goes too far! John Jackson: And I believe my opponent's 3% tax increase doesn't go far enough!
"22 astronauts were born in Ohio. What is it about your state that makes people want to flee the Earth?" Stephen Colbert
Interestingly enough, I just voted for the municipal elections, here in the Netherlands. As far as I know, pencils aren't used anymore (Amsterdam was the last and there they just switched to computers).
0 4.doc
All the systems in use are in closed source. I think NEDAP, a Dutch company, is the market leader in the election systems here. And this company uses some old version of Windows with Office to produce the results.
The Irish did a review of the system:
http://www.electronicvoting.ie/pdf/ersreportmar20
(I assume the same system is used in the Netherlands)
Strange thing is, almost nobody bothers here in the Netherlands. It just isn't an issue at all!
Another interesting note; the Secret ballot system in place in most republics today, including the US, was first called the Australian ballot.
IMHO it seems ideal to continue this tradition and look into the Aurtralian solution to electronic voting too.
Though I have nothing wrong with OSS, an open source voting machine just smells bad. There are tons of great and nice people out there willing to make the system better and help fix holes, but there are others looking for the holes and trying to exploit them. Though I am a techie, I would prefer paper ballots. Maybe a different method of paper ballots so no more "hanging chad" incidents, but paper none the less. Now we just have to work on getting people other than people that can't count higher than 10 to count the ballots.
Click Click Bloody Click PANCAKES!
Unless this was intended to be some really genius satire, am I missing something, or couldn't we just use old style voting machines or paper ballots?
Judges and senates have been bought for gold; Esteem and love were never to be sold.
I have a nearly ready-to-go voting system based on existing technology, with low hardware requirements, complete transparency and an obvious-in-retrospect UI and process that leaves an anonymous yet completely verifiable method to check your vote.
I'll let you know when it's being demo'd.
(I'm sure someone will mark this "funny", and you may well laugh, but you'll smack yourselves in the forehead if/when I get it out the door)
If we all look like we're taking part in a democracy, good things will happen...
re:If I were a US citizen I'd _demand_ that all the people involved in supplying or approving crappy election systems be charged for _TREASON_.
no, that's only if you get a blowjob. actual crimes against humanity are now simple misdemeanors.
-- it's ridiculous how many people misspell ridiculous... (damn, damn, damn...)
Any one of the voting machine vendors could turn their implementation into an Open Source one, simply by releasing source under an appropriate license.
The last election was so wrought with scandal. I don't trust the electronic voting machines (and I'm glad my state still uses paper!), and the news about them during the election only served to strengthen my distrust. I cannot be alone.
The outcome of our elections should not be determined by a Black Box. We need to be able to peek inside and know it can be trusted.
blog
For privacy concerns, replace one-way hash of SSN with some other form of guaranteed unique number to prevent a voter from submitting duplicate votes.
Why, btw, would it be a violation of privacy if the agency running the poll place ALREADY has your SSN?
No photo ID required. You show up, state your name and address, they look it up and you sign it, as normal. They then hand you a mag-card with a unique number on it. It doesn't have to be based on the SSN. It's just that SSN happens to be a convienient unique number that already exists and that the poll place already has your name attached too.
Privacy concerns would occur if the voter sign-in book PRINTED the SSN. Identify the person on name and address instead. There aren't going to be two John P. Does living at 742 Evergreen Ter. Unless they are Sr. and Jr.
This message brought to you by Jack Schitt's Previously Shat Shit
You missed a couple very important requirements:
The only systems that can possibly meet those requirements involve paper, lock boxes, and dual (or higher) controls. The security controls need to be similar to the controls that banks use on their their large piles of cash.
After all, a pile of ballots is effectively a very large amout of cash. Whoever wins the election gets to spend the taxpayers money.
they would have to be printed on very shiny paper.
It's also lunacy to try to sell an American government on a solution that is 1/100th the price: where's the pork in that?
Finally it is nearly impossible to meaningfully rig an election with the combination of modern communications and paper ballots.
Paper ballots also pose the problem that you've got to trust the collectors and counters. In many cases, nobody else will ever get to see the ballots themselves, so nobody else will ever know if someone has edited the figures.
I'm not saying paper ballots are a disaster, only that the existing paper ballots are vulnerable to fraud. In some cases, the parties have even been known to "collect" the ballots by mail and dispose of those for the "wrong" side.
These, again, are solvable problems but if ANY system is to be trusted, these problems will have to be solved. I'm less concerned with the "how" than with the "when". WHEN will we have trustable elections?
It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
Transparency Begets Trust - Expertise in niches, transparency in motives and thought process and owning up to mistakes publicly create a trust relationship" - Will Pate
The moral is obvious. You can't trust code that you did not totally create yourself. (Especially code from companies that employ people like me.)
From a really eye opening paper Reflections on Trusting Trust by Ken Thompson 1984
(mentioned earlier in this thread.
I have a Open Source Voting scheme http://www.mailclad.com/ that allow privace and yet all communications and source code are OPEN and do not require security. The results can not be forged.
It's based on the same schemes the Race Tracks and Vegas Casinos use for there gaming systems.
I am always doing that which I can not do, in order that I may learn how to do it. - Pablo Picasso
I agree, however the HAVA act wants an electronic voting system. This system I wrote about, while still electronics as per the guidelines, is basically the electronic equivelent of the old style voting machines (which I think are much better anyways).
If all of the components can be created with open source software, all we have to do is get some really low end PCs running some lightweight OS on them (I imagine Windows 2000 PE with no networking, but that's just from lack of imagination), a bunch of thermal receipt printers and a whole shitload of rolls of paper for them, a bunch of magnetic card readers, and a bunch of blank cards.
Then several batch scanners (probably with parts from a handscanner) and write some software from parts picked from various open source software. (This includes the OCR part as well as the DB part).
I'm thinking the whole software side of it (batch scanner, ocr, ballot box) would have sourceforge pages and major survey companies could use the software for their own purposes as well.
Unfortunatly, this is not a satire, though I wish it was.
This message brought to you by Jack Schitt's Previously Shat Shit