Slashdot Mirror


E-Voting Reform Bill Gaining Adherants

JeremyDuffy sends us to Ars Technica for a look at an e-voting bill making its way through Congress that is gaining the support of the likes of Ed Felten and the EFF. Quoting: "HR 811 features several requirements that will warm the hearts of geek activists. It bans the use of computerized voting machines that lack a voter-verified paper trail. It mandates that the paper records be the authoritative source in any recounts, and requires prominent notices reminding voters to double-check the paper record before leaving the polling place. It mandates automatic audits of at least three percent of all votes cast to detect discrepancies between the paper and electronic records. It bans voting machines that contain wireless networking hardware and prohibits connecting voting machines to the Internet. Finally, it requires that the source code for e-voting machines be made publicly available."

131 of 161 comments (clear)

  1. How to refute the proprietary "rights" argument by Beryllium+Sphere(tm) · · Score: 5, Insightful

    Even if democracy didn't trump trade secrets, the commercial interests of the vendors are safe. If a competitor steals their precious source code, well, the competitor has to publish too and will get caught.

    1. Re:How to refute the proprietary "rights" argument by UbuntuDupe · · Score: 1

      Well, then they'll probably just go for the "but we need security by obscurity" defense ... (not endorsing that, OBVIOUSLY)

      And maybe it's just me, but the worry about someone stealing your "innovative intellectual property" has always seemed hollow. It's a vote tabulation program for heaven's[1] sake!

      [1] I mean "heaven" in the secular sense.

  2. That's "Adherents" by BarnabyWilde · · Score: 2, Informative

    Yes, it matters.

  3. Re:Good, but so what? by badboy_tw2002 · · Score: 1

    Its not just national politics - the election has to be pretty close and have a pretty far reaching collusion of districts to really make a difference. Its also state & local politics, where fraud at one precinct or county can really make a difference in the outcome of the election.

  4. Re:Good, but so what? by unclethehornet · · Score: 2, Interesting

    If you want a real e-democracy that can make a difference....

    http://www.blognow.com.au/edemocracy

  5. Congratulations, you just killed it by ericfitz · · Score: 3, Interesting

    By requiring that the entire platform be open source, the well-intentioned legislators just killed the bill. Do you think Microsoft and Sun are going to sit by and watch a market opportunity vanish? Do you think Linux advocate lobbyists are going to show up at Congressmens' doors with campaign checks?

    This is a case of sacrificing the good by demanding the perfect. If the bill had instead required that only the voting software installed on the voting machines be open source, then the bill would not have alienated so many parties with enough money to kill it.

    Yes, I did RTFA and I read the relevant text of the bill (section 247(C)9). The languange doesn't differentiate between platform software and software specific to the e-voting task.

    1. Re:Congratulations, you just killed it by Anonymous Coward · · Score: 3, Insightful

      This is a case of sacrificing the good by demanding the perfect. If the bill had instead required that only the voting software installed on the voting machines be open source, then the bill would not have alienated so many parties with enough money to kill it.

      Well then the bill is toothless, because the vendor could install 'backdoor' patches into the os and nobody would be the wiser.

      A voting machine vendor can just al easily load a version of linux with wine (though maybe clunky) to run their voting machine app. The difference they save on MS licenses can be used for a programmer to do the necessary program.

      Really, there is no reason at all to not have any part of not be open source. Of course, congress whores itself out to lobbyists, so who knows.

    2. Re:Congratulations, you just killed it by zarozarozaro · · Score: 1, Insightful

      By requiring that the entire platform be open source, the well-intentioned legislators just killed the bill. Do you think Microsoft and Sun are going to sit by and watch a market opportunity vanish?
      Yes, if there is enough pressure from the people to have fair elections, we can prevent Microsoft and Sun from choosing our government for us.

      This is a case of sacrificing the good by demanding the perfect. If the bill had instead required that only the voting software installed on the voting machines be open source, then the bill would not have alienated so many parties with enough money to kill it.
      This isn't about money, its about fair elections.
    3. Re:Congratulations, you just killed it by Checkmait · · Score: 4, Insightful

      Perhaps they reduced its support slightly, but no more than a very tiny bit. What good would the source do to anyone? Remember that there is nothing stopping the vendor from copyrighting the source code and adding a provision to the license which says that no one may make derivative works: all the vendor must do is make the code publicly available.

      So a competitor can't really gain anything from the code--it can't be overly complicated (this is a voting machine) and even if they do, the moment they release their machine onto the market, their source must be published, and certainly a competing vendor would notice such striking similarities in code.

      Of course, who knows, Diebold might sue Congress for a law which they were not expecting..... :-)

      --
      "All you need is ignorance and confidence; then success is sure." -- Mark Twain
    4. Re:Congratulations, you just killed it by paeanblack · · Score: 1

      Yes, I did RTFA and I read the relevant text of the bill (section 247(C)9). The languange doesn't differentiate between platform software and software specific to the e-voting task.

      I read the bill too. All it did was remind me of this old automobile law:

      The Locomotive Act 1865 set a speed limit of 4 mph in the country and 2 mph in towns. The 1865 Act also provided for the then famous "man with a red flag". Walking 60 yards ahead of each vehicle, a man with a red flag or lantern enforced a walking pace, and warned horse riders and horse drawn traffic of the approach of a self propelled machine.
      http://www.nationalnumbers.co.uk/number-plate-hist ory.htm

      While most of the requirements listed by the bill seem like good ideas, I get the impression the actual purpose of this bill is to make deployment of e-voting machines sufficiently onerous to make the whole idea pointless. Once you enforce the hobbling every potential advantage an e-voting system may have, you can rest secure with any existing investments you may have in the companies manufacturing existing machines. The pessimist in me wonders if Mr. Rush Holt has already planned for that exact scenario.

    5. Re:Congratulations, you just killed it by SCHecklerX · · Score: 1

      How can you trust a voting system if yo udon't know how it works? This is actually the bad part about electronic voting. The general public, even if the source code is available, won't be able to understand what happens to their vote. Not that they understand the backend with other schemes, but at least there is no question when they punch a hole or mark a box with pen and paper.

      I can read code, and I didn't know what happened with my vote this past election. Who knows what those machines do? I was given an RFID card, which I used to cast my vote, and then returned that card when I left. It didn'tleave me feeling especially confident.

    6. Re:Congratulations, you just killed it by adrianmonk · · Score: 1

      By requiring that the entire platform be open source, the well-intentioned legislators just killed the bill. Do you think Microsoft and Sun are going to sit by and watch a market opportunity vanish?

      What makes you think Sun sells an operating system that isn't open source?

      (Actually, they do: when you buy x86 Sun hardware, you have your choice among three operating systems: Solaris, Linux, and Windows. And of course one of those operating systems isn't open source. But by offering two open source alternatives, it seems like they'd be OK with this requirement.)

    7. Re:Congratulations, you just killed it by TheGreatHegemon · · Score: 1

      I honestly didn't rtfa. But, what prevents companies from paying people for their votes directly, and watching as they vote?

    8. Re:Congratulations, you just killed it by MobyDisk · · Score: 1

      Are you suggesting that Microsoft or Sun would make voting software, release the source, and then someone else would take that source code and sell it to the government as their own? Yeah... and nobody would notice that.

      Of course, Microsoft would never write such code anyway. Voting machines are probably profitable for the maintenance contracts, not the hardware or the software.

    9. Re:Congratulations, you just killed it by Workaphobia · · Score: 1

      Why does requiring open source kill market opportunities? You do realize that open source does not equal free software, so when it says the source code needs to be publically available, that doesn't mean competitors are free to steal code for their own devices.

      --
      Evidently, the key to understanding recursion is to begin by understanding recursion. The rest is easy.
    10. Re:Congratulations, you just killed it by sjames · · Score: 1

      Yes, I did RTFA and I read the relevant text of the bill (section 247(C)9). The languange doesn't differentiate between platform software and software specific to the e-voting task.

      Nor should it. The OS can do absolutely ANYTHING to the userspace code including patching it in memory while showing a debugger entirely different code and register values. When it comes to trustability (I don't mean Trusted Computing which is actually a marketing term for the opposite of trustable computing), if the OS is a black box, there can BE no trust.

      Consider a simple blob of code in the OS that sets a breakpoint at the beginning of a verification function. When the breakpoint is triggered, stuff a true value in the return register and reset the IP to the end of the function. No amount of examination of the userspace program's source OR BINARY would reveal that verification doesn't happen. Even dumping the program's core wouldn't reveal the problem. The whole thing could probably be accomplished in about 20 bytes of machine code.

  6. Luddites oppose robotic death machines! by Anonymous Coward · · Score: 5, Insightful

    "Disability rights advocate Harold Snider compared opponents of e-voting to Luddites and chastised them for their lack of faith in technology."

    Because it's better to vote and not have it count than to.. er.. get help voting and have it count?

    I really hope that line from the article was a flawed summary from the reporter. If it's an accurate characterization, Snider is missing the point entirely.

    Opposition to electronic voting is not blanket opposition to use of electronics in voting procedures. It's opposition to secret devices that follow hidden procedures and proclaim an official result -- without the ability of anyone to verify the correctness of the procedures or the result.

    1. Re:Luddites oppose robotic death machines! by theodicey · · Score: 1

      Snider represents the National Federation of the Blind.

      The National Federation of the Blind sold their integrity to Diebold for $1 million dollars. They do not deny that there was a quid pro quo, although they have issued a vague, non-denial denial.

    2. Re:Luddites oppose robotic death machines! by ISurfTooMuch · · Score: 1

      A couple of years ago, I viewed a local e-voting demonstration presented by a disability advocacy group. I have no reason to believe that these folks were bought and paid for by a company, but they were solidly behind the idea. I kept bringing up the need for a paper trail, and, to be honest, I'm not sure if the guy fully grasped the significance of what I was talking about. I finally got him to say, yes, this machine could be hooked up to a printer to produce such a trail, but it wasn't easy to drag that assurance out of him.

      Here's the thing. Many disability activists are strongly in favor of electronic voting because they see it as a way to allow people with disabilities to vote without assistance. And, yes, these machines can allow for that. I stood there, closed my eyes, and was able to navigate the system and vote without being able to see a thing. Bearing this in mind, we need to make these people aware of the risks that e-voting can create when it isn't implemented properly. As someone else said, what's worse: getting assistance to vote a ballot that will count or being able to independently vote one that may not count?

  7. There is no Excuse for laziness. by Irvu · · Score: 4, Informative

    Yes, this bill will not solve every problem with our political system but what kind of an excuse is there for whining? By your reasoning we shouldn't have bothered with the Clean Air act because it didn't address water pollution or the Clean Water Act because it didn't address air pollution, nor should we have bothered with the endangered species act because it did nothing about outsourcing.

    This bill will not fix every problem that plagues our election system. It will fix some of the problems. Is that sufficient reason to pass it? Oh Hell Yes!

    1. Re:There is no Excuse for laziness. by Seumas · · Score: 2, Insightful

      No, by my reasoning we shouldn't enact legislation when it's just for show and has no actual benefit. Perhaps I will change my tune when there is some challenge made and all of these paper receipts somehow prove useful in changing an unfair outcome.

    2. Re:There is no Excuse for laziness. by Irvu · · Score: 1

      At present the places without paper receips (vis Sarasota Florida, Maryland, etc) are the ones with real problem. States like New Mexico which had up to 10% vote losses among minorities during the 2004 election have switched to optical scanners with audits and have not looked back. Are they perfect? No. Are they a whole hell of a lot better off than they were? Oh yes.

    3. Re:There is no Excuse for laziness. by Anonymous Coward · · Score: 1, Interesting
      Frankly, it's amazing that it even took this long to get a bill that's at least partly decent, since the previous electronic voting bills (both passed and proposed) were so weak on common sense and good functionality. Like LBJ said,

      You [should] not examine legislation in the light of the benefits it will convey if properly administered, but in the light of the wrongs it would do and the harm it would cause if improperly administered.
      This bill at least reduces a lot of the possible bads.
    4. Re:There is no Excuse for laziness. by aztracker1 · · Score: 1

      Personally I like Arizona's older visual scan (scan-tron like) system... the print is reasonably large, the sheets are physically marked, and don't "get stuck" like punch ballots. Are electronically scanned and tabulated, with a physical record for recount/audit if needed. Also, a scanned system allows for the setup of 100+ booths to one scanner at a polling place, which means less lines.

      I don't think this, or anything from the federal level is requiring the switch to a computerized eVoting system, but at least some level of federal requirements for said systems is a good thing.

      I'll continue to use the fill in the oval voting as long as it is available. I feel the biggest issue with the eVoting machines is that it will create longer lines, as well as much larger hardware costs.

      --
      Michael J. Ryan - tracker1.info
  8. A step in the right direction by zarozarozaro · · Score: 5, Insightful

    This is the sort of law that we need. I urge all Americans who read /. and care about our democracy to write their representatives and tell them to vote for this bill. Voting machine companies like Diebold and Sequoia will surely be lobbying against the bill, so we really need to show them that we care about this issue. This bill is also a great way to find out what your representative is all about. It is often surprising to find which congressmen and women support open source elections. This is certainly an issue that will NOT break down to party affiliation.

    1. Re:A step in the right direction by poopdeville · · Score: 1

      Linky, for your convenience.

      --
      After all, I am strangely colored.
    2. Re:A step in the right direction by Anonymous Coward · · Score: 1, Funny

      Unfortunately my congressman has already voted against this bill 315 times.

    3. Re:A step in the right direction by nadamsieee · · Score: 1

      You might want to read all of the pertinent information about HR811 first hand before contacting your representative about it.

  9. Ed Felten's comments. by Irvu · · Score: 3, Informative

    Ed Felten's comments on the bill can be found Here.

  10. Platform software by Kuroji · · Score: 5, Insightful

    For such a specialized task, it shouldn't be hard to whip up some custom-coded OS that doesn't include all the bells and whistles that, say, Vista includes. Or XP. Or Win3.11, even.

    But if only the program is transparent and the rest of the code on the machine is not, what's to prevent (for example) Steve Jobs for running for president and including a line of code that tells the MacOS voting machines that he always wins at least 50.1% of the vote?

    1. Re:Platform software by pjrc · · Score: 1
      But if only the program is transparent and the rest of the code on the machine is not, what's to prevent (for example) Steve Jobs for running for president and including a line of code that tells the MacOS voting machines that he always wins at least 50.1% of the vote?

      The bill requires an automatic audit of 3% of the required voter-verified paper output, and also required signs encouraging all voters to check the paper copy before leaving.

      So if that hidden line of code in the OS steals votes, it either will or won't also steal the printed paper output. If it causes the paper to be printed incorrectly, at least some voters will certainly notice and complain and the fraud will be exposed. If it only changes the electronic count and prints the paper according to the voter's wishes, that discrepancy will almost certainly be noticed during the audit of 3% of the paper. Either way, the fraud will become apparent.

      Reviewing the source will make such fraud much more difficult to hide, but in all likelyhood, public source review will most likely combat unforeseen security holes and unintentional bugs... which are also important issues. The paper trail and automatic audit will also expose such problems, but only after the fact. Source review can potentially prevent problems before the election, which is why it's such a good idea.

  11. voting machines waste of money by Anonymous Coward · · Score: 4, Insightful

    So if paper is going to be the final word, why waste the money on voting machines in the first place?

    KISS anyone? No, because then there are no kickbacks and bribes to take.

    (lol verify word is "paranoia")

    1. Re:voting machines waste of money by Chirs · · Score: 1

      Because in the vast majority of cases no recount will be necessary, so it will be much faster/cheaper to use the electronic records than if you had to manually count each vote by hand.

    2. Re:voting machines waste of money by Ungrounded+Lightning · · Score: 1

      Because:

        - The voting machine result can be used whenever the particular precinct's results are uncontested, leaving all the advantages (except the "advantage" of being able to invisibly rig an election) intact.

        - The auditability of the result will virtually eliminate any utility in rigging the machines (while bringing to bear draconian penalties for attempting to rig them and getting caught), greatly improving the reliability of the machines' results - to the point that they CAN be used without creating the appearance of rigged elections.

      --
      Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
    3. Re:voting machines waste of money by Ungrounded+Lightning · · Score: 1

      However, why again do we need spend millions of dollars on these voting machines and training and maintenance, etc. jacking up my taxes just so I can play with some new shiny object?

      Because your elected lawmakers decided that you would.

      Accessibility for the handicapped was a major driver. Issues with previous balloting systems were another.

      As usual the legislative solution wasn't well thought out and had unintended consequences. Now we have to fix the fix.

      Given the importance of visibly accurate elections (which is how republics avoid civil war) it's vitally important to get this done.

      Given that reverting to pure paper balloting would regress the improved handicapped access, complete elimination of the electronic voting aids is not an option. (Note that some jurisdictions that have decertified the Diebold mahchines - such as Alameda County CA - still allow their use for handicapped voters until a better solution can be deployed.)

      --
      Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
    4. Re:voting machines waste of money by JayBat · · Score: 3, Informative

      so it will be much faster/cheaper to use the electronic records than if you had to manually count each vote by hand.

      False dichotomy. Oregon doesn't use touch-screen machines, we use fill-in-the-bubble paper ballots and machine counters. Works great, and much faster during heavy turnout elections (where from an outsider's POV, touch-screen states just never seem to have enough of those glorified PC's around).

      Oregon is vote-by-mail also, but that is an orthogonal issue.

      All the same source-inspection criteria should apply to ballot-counting machines also; they are, in general, made by the same corporations that make touch-screen machines.

      -Jay-

    5. Re:voting machines waste of money by X-rated+Ouroboros · · Score: 1

      Voter 1 needs a ballot for District 13 in Portugese. Voter 2 needs a ballot for District 7 in English. Voter 3 needs a ballot for District 3 in English. Voter 4 needs a ballot for district 3 in Spanish for the Vision Impaired. With a fully realized electronic voting system, all of these people can be served by the same machine, at the same polling station, with the same basic procedure.

      The statistical skew from top balloting or voter fatigue can be eliminated by displaying to voters equivalent ballots with the order of candidates and/or races/measures/referenda presented randomly.

      A lot of things become enabled by removing the burden of generating and distributing physical ballots.

      --
      Simple Machines in Higher Dimensions
    6. Re:voting machines waste of money by StikyPad · · Score: 1

      Right.. this whole thing is idiotic. Aside from the redundancy, you have the problem that a paper printout doesn't necessarily reflect the stored vote. I mean, if I compromised the system, I'd just have it print out Bush while secretly recording a vote for Gore. Secondly, a paper recount would never work. You sure as hell can't count the voter's record because he may change his vote ex post facto, unless it printed out two copies: One copy for the voter, and another for safe keeping, and the voter would have to verify that they match. Of course, it would be no less vulnerable to tampering than a regular paper system, so all we're doing is introducting MORE vulnerabilities to the system.

      Here's an idea, if you really want to introduce electronics. Make a modern touchscreen front-end that creates punched ballots (OMG punched card ponies), have the voter examine the ballot, and turn it in. No electronic counting, no crazy hanging chads, no butterfly daisies with extra sprinkles.. just a card with holes in it, like this:

      1 2 3 4 5
      O - - - - 1. Bush 2. Gore 3. Kim Jong Il 4. Nader 5. Yoda
      - O - - - 1. Gonzales 2. Mouse, Mickey
      O - - - - etc..

  12. France ... by koxkoxkox · · Score: 4, Interesting

    If only the French government did the same thing ... In France, electronic vote will be used for the next presidential elections, without any of these guarantees and without any open debate with the citizens.

    A lot of people are against this evolution, as shown by a petition on the Internet : http://www.recul-democratique.org/About-us.html, and they demand approximatively the same requirements. People have to trust completely the result of the elections and they can't rely on the report of a private expert claiming that the program is secure. So it means open source for the computer scientists originating this petition and paper trail for the vast majority of the population who don't feel completely safe about the whole dematerialisation process.

    Excuse me for any spelling or grammar mistake, or correct me in french. :o)

    1. Re:France ... by ScrewMaster · · Score: 1

      Trust me, your English is a hell of a lot better than my French.

      --
      The higher the technology, the sharper that two-edged sword.
  13. An even better bill? by ziegast · · Score: 1

    Some people analyzed weaknesses in the bill and made recommendations for changes....
    http://electionarchive.org/ucvInfo/US/ChangesNeede d2HR811.pdf

  14. It is time for the /. community to act! by Irvu · · Score: 5, Informative

    This bill does many of the things that we in the /. community have argued for for some time now including open code inspection, reliable voting systems, and yes, reliable recounts and audits. Now is the time for the /. community to act on our endless snarky comments and help to move real change forward.

    The Bill's text and record are available at Thomas. While there you can peruse the list of 200 Cosponsors to see if your house rep is among them (and should be given a cookie for that) or not (and should be corrected).

    If you both support the bill and are a U.S. Citizen or Resident, you can go to the U.S. House of Representatives Website at www.house.gov, and Write your rep or contact them via their website (Recommended) to urge them to support the bill or thank them for already cosponsoring it.

    With time to spare you can head over to the Senate and urge your senators to back the forthcoming companion bill in the senate. Following that a stop off to contact The Executive Branch (va a aqui para Espanol) to urge signing of the bill wouldn't hurt.

    If you believe in any of the things this bill does then a few minutes on the phone or sending a polite e-mail shouldn't be too much. As cynical as we all can be about the influence of money on elections a groundswell is too costly to be overrun.

    1. Re:It is time for the /. community to act! by garcia · · Score: 1

      This bill does many of the things that we in the /. community have argued for for some time now including open code inspection, reliable voting systems, and yes, reliable recounts and audits. Now is the time for the /. community to act on our endless snarky comments and help to move real change forward.

      Yes, this *bill* does a lot. It doesn't mean that any of this will actually go through regardless of our contacting those in power.

      What I want to know is why there isn't a provision to allow there to be paper ballots for *EVERYONE* that doesn't want to use the pointless machines in the first place. Hell, why are we going to waste tax dollars purchasing these machines, training voting officials and the public to use them, and using additional power (which is such a popular topic these days) to drive these machines when the fucking paper ballots will be the official device used during recounts?

      Let's end the bullshit and just continue to use paper. It has worked for ~230 years and just because our society wants "instant reporting" doesn't mean it's a good idea to do this.

      No, I'm not a luddite (as many of you know) but there are too many opportunities for even more widespread voter fraud if they use this technology. Just because the source code is released doesn't mean that we'll ever be able to verify that it is actually the code being used when the votes are cast and counted.

    2. Re:It is time for the /. community to act! by cdrguru · · Score: 1

      Let's end the bullshit and just continue to use paper. It has worked for ~230 years and just because our society wants "instant reporting" doesn't mean it's a good idea to do this.


      The news media will report the results, real or imagined, instantly no matter what. The news media cannot be controlled by the government or blocked from reporting results based on exit polls and theories. We cannot choose whether or not such results are reported.

      We get to choose whether or not the results are real. Imagine if Kerry was the announced winner at 9:00 PM EST and the next night this was rescinded in favor of Bush.

    3. Re:It is time for the /. community to act! by CmdrSam · · Score: 1

      Thanks for the links. This was indeed a very straightforward process, and I've contacted my representative and both my senators. I hope other slashdotters do the same!

  15. Re:Congratulations: they made the right choice by erbmjw · · Score: 4, Insightful

    The bill shouldn't discriminate between the OS and the voting software. This is not a general purpose machine that requires an advanced OS -- it requires a bare minimum system that can count votes and print ballots! The machines that do these very limited tasks should not be something which Microsoft targets as a significant market for their standard operating systems.

  16. Re:Good, but so what? by zCyl · · Score: 5, Insightful

    Such as - you know - which assholes are accepted enough by the corporations, religious nuts and lobbiest groups in the first place to even become viable candidates.

    What good is a viable candidate if your vote doesn't count anyway? Accurate voting is an essential element of a democracy, and so it MUST be in place.

    If you want a better system, you need to support each component of that better system when it comes along. Sticking your head in the sand and waiting for everything to completely match your dream world isn't going to get you anywhere.
  17. Re:Good law! by MindStalker · · Score: 1

    You can be sure there will be pork added to pay for replacement machines. Possibly even pork added for the existing vendors even to pay for opening their source. Nothing leaves congress without a huge pricetag.

  18. More business by Anonymous Coward · · Score: 2, Interesting

    What else would Diebold want? If this bill passes it would invalidate all the machines they
    sold. They can then sell new machines to these customers.

  19. spoofing voting an election by Anonymous Coward · · Score: 2, Interesting

    I recently audited a local election in vote-buying prone Eastern Kentucky. Had I access to the voting machines, I could have pre-loaded the paper tapes with my desired results- all the observers would have signed off, seeing the printouts come out of the machines. In order to compare and count the voter sign-in sheet to the count generated by the voting machine, the candidate that lost the election would have had to spend thousands of dollars for a "re-count" (vs a re-canvass). One could not even count the signatures in the sign in sheets and compare that to the voting machine count under the "re-canvass" rules. Requiring a paper trail, and a statistical audit for each election would lower the risk of machine fraud. The recent Scientific American article on voting machines indicates that adding a headphone audio feedback to the e-voting paper trail reduces erroneous votes better than the paper trail alone. Clean elections are a good thing for us all. Support this bill!

  20. Re:Congratulations: they made the right choice by ScrewMaster · · Score: 4, Insightful

    The bill shouldn't discriminate between the OS and the voting software.

    Couldn't agree more, because the two together comprise a functioning embedded system. Auditing the application and ignoring the operating system is pointless, from a secure voting perspective. The Congressman has it right.

    Besides, this is not a supercomputer. This is not an accounting system. This is a goddamn electromechanical counter, a mindless device which could be implemented with vacuum tubes, or discrete TTL, or a BASIC Stamp! There doesn't need to be an "operating system", unless you need it to throw up your colorful corporate logo or justify your "Microsoft Vista ready" sticker. I mean, we aren't talking some incredibly complex technological requirements here, although there are those with a vested interest in making it appear so. For crying out loud it's been done for centuries using pieces of paper. Any corporation that manufactures these things that makes "intellectual property" claims about its "advanced software" is FULL OF CRAP and trying to keep the public from knowing what a shoddy job it did, or worse. If you aren't willing to open up your voting system to public inspection from the chips on up, then you shouldn't be allowed to sell them to our government. Any of our governments.

    More to the point, this is just the kind of system that should be only as complex as it needs to be ... and not one iota more. Every extra layer of "sophistication" adds more room for error, more places to hide something.

    --
    The higher the technology, the sharper that two-edged sword.
  21. Wow by Jonnty · · Score: 2, Funny

    It's almost like whoever wrote this bill had a clue.

    --
    Any grammatical or spelling errors above are for comic effect, and do not signify imperfection in the writer.
  22. Who cares about OS e-voting software anyway? by Alwin+Henseler · · Score: 5, Interesting

    In all these discussions about e-voting, I don't really understand why the emphasis on Open Source software for voting computers. Why? The whole problem with e-voting is in transparency of the process. Does Open Source inside such a machine change that? How?

    Can you see what compiler was used to turn source into binary? Can you verify that published source/binaries are the same as what's inside the machine in front of you? Can you verify that the hardware is the same as what the software is expected to run on? Can you verify that the hardware works as intended (like, no memory errors etc)? I expect that for most (or all) of these questions, the answer will be: no, not really.

    That's the whole point of a paper trail. Essentially, it makes the counting black box irrelevant (as long as the paper trail is considered the authoritive result, that is). Wrong vote stored on flash? Who cares, as long as the correct vote is written on the paper output (and the voter can verify that before leaving).

    At that point, what's inside the black box doesn't matter much anymore, and basicly serves to make voting easier, or help to get a quick (preliminary!) count of what the end result might look like. Closed source software, or unknown hardware inside? What's the problem as long as the correct votes are printed on dead tree, and verified by the voter?

    But also at this point, the 'added value' of a voting computer becomes a mystery to me. Why not just ditch them? If you want quicker results, organise better or get more people to count votes. Good organisation (and paper!) is really all you need for elections that are both fair, and with quick results.

    1. Re:Who cares about OS e-voting software anyway? by CastrTroy · · Score: 3, Insightful

      The problem with that, is that the numbers coming out of the black box are considered official, and recounts are hard to get done, especially complete recounts. And paper trails sometimes get thrown out. I'd rather just keep it all pen and paper like it currently is in Canada. No complex machinery to get messed with, and if you're worried about your votes not getting counted properly, well there's people watching the actual counting from all involved parties to make sure nothing is getting miscounted.

      --

      Anthropic principle: We see the universe the way it is because if it were different we would not be here to see it.
    2. Re:Who cares about OS e-voting software anyway? by plover · · Score: 1

      The whole problem with e-voting is in transparency of the process. Does Open Source inside such a machine change that? How?

      There is a little more to an electronic voting machine than simple tabulation. There's the presentation of each individual election, and the presentation of the candidates. What if the Demopublican party's candidate's picture was shown colorful and vibrant, while the Republicrat candidate's picture was washed out black and white? What if the major parties get their candidates on giant buttons, while the Yellow party's candidate is in 8-point font?

      Imagine a hotly contested state where voter turnout is expected to be the deciding factor in a Senate race. If enough people turn out, it's likely the Demopublican will win; if few people show up the Republicrat will probably win. A Republicrat sympathizer sneaks in and "changes" the code so that the presidential race is displayed first, followed by the house representative, followed by the governor, then the state house, the state senate, then a dozen district judges, the mayor, the city council, the watershed manager, the dog catcher, and finally the senatorial race. On the bottom of each slate is a giant "I'm done, no more voting for me" button. By the fourth judge nobody's ever heard of, lots of people give up and stop filling out their ballots, or they repeatedly hit "next", "next", "next" until they see "done", then grab their ballot and rush off to work because they're already late. By changing the order of the slates, the Republicrat has affected the outcome of the election, yet the tabulation is 100% accurately counted.

      That's why Open Source is important.

      --
      John
    3. Re:Who cares about OS e-voting software anyway? by M.+Baranczak · · Score: 1

      The whole problem with e-voting is in transparency of the process. Does Open Source inside such a machine change that? Of course it changes it. Open source doesn't guarantee transparency, it's just one of the basic prerequisites for having transparency. You still have to verify the DB against the paper trail, audit the software that was used to compile the code, audit the hardware, etc.
    4. Re:Who cares about OS e-voting software anyway? by zippthorne · · Score: 1

      Interesting. Based on your comment, I think there should be, close to the end but not at the end. One additional ballot question. "I wish to have my ballot counted." If that's not checked, "yes" then no effort needs to be expended actually tallying the rest of the choices.

      --
      Can you be Even More Awesome?!
    5. Re:Who cares about OS e-voting software anyway? by plover · · Score: 2, Insightful
      That's dangerously close to literacy testing, used to disenfranchise the black voters during Jim Crow. Theoretically, pictures of the candidates could reduce the need to ask an election judge for assistance in voting by someone who is illiterate. And an electronic ballot could ease language issues, especially on non-candidate questions such as constitutional amendments.

      But on the whole, I actually agree mostly with the top level poster in that pencil and paper are perfectly adequate to the task of recording elections. I just listed the only advantages I can think of with electronic voting booths over paper and pencil. Otherwise, electronic solutions are trouble-prone, controversial, and will always be suspect. Speed of reporting results to the news media is not guaranteed by the Constitution -- that's why it provides for two months to elapse between the election and the candidate taking office. Last minute candidate changes are similarly not guaranteed -- the secretaries of state are responsible for distributing ballots, and are typically given a month or more by statute in which to do it. The old system is not broken, and does not require electronics to fix.

      --
      John
    6. Re:Who cares about OS e-voting software anyway? by trianglman · · Score: 2, Informative

      Can you see what compiler was used to turn source into binary? Can you verify that published source/binaries are the same as what's inside the machine in front of you? Can you verify that the hardware is the same as what the software is expected to run on? Can you verify that the hardware works as intended (like, no memory errors etc)? I expect that for most (or all) of these questions, the answer will be: no, not really.

      Actually the answer is, in general, yes. The software vendors must turn over "source code, object code, and executable representation of the voting system software for use in an election" (from the bill). And where the answer is no (hardware) it will be tested by NIST. I have dealt with the NIST and they are nothing if not AR.

      For once, I have read a technology bill that actually make sense and is well written. What will happen to it in committee and beyond is any body's guess, but as it stands right now, this is a good bill.

      As far as your complaints about a paper trail, the point of the paper trail is to have a physical back-up in case of a dispute. In general, the electronic vote is what will be considered. However, at least one precinct per county (plus any disputes) will be audited at random with the results made public. This means that both have their place, the electronic voting machines for easier voter use and verification (the voter has to check the paper ballot and make sure its accurate), and the paper trail, mixed with auditing, to make sure those results are accurate. If this piece of legislation goes through, it will remove the 'hanging chad' issues we saw in Florida, while at the same time giving the people the ability to make sure that their votes don't just go into a black box with the hope that it will come out the same on the other side.

      --
      Clones are people two.
    7. Re:Who cares about OS e-voting software anyway? by ppanon · · Score: 1

      If you want quicker results, organise better or get more people to count votes.
      A good idea, and how we do it in Canada (and many other western developed nations). The problem is that you live in the United States of Apathy.
      --
      Laissez lire, et laissez danser; ces deux amusements ne feront jamais de mal au monde. - Voltaire
    8. Re:Who cares about OS e-voting software anyway? by neomunk · · Score: 1

      1:Can you see what compiler was used to turn source into binary? 2:Can you verify that published source/binaries are the same as what's inside the machine in front of you? 3:Can you verify that the hardware is the same as what the software is expected to run on? 4:Can you verify that the hardware works as intended (like, no memory errors etc)? 5:I expect that for most (or all) of these questions, the answer will be: no, not really. I added some numbers to save myself some cutnpaste... :-)

      Alrighty, one at a time...

      1: Yes. There are plenty of open source compilers available. But what about the compiler THEY are compiled with? Okay then, lets go back a few decades and start compiling up open source compilers in as many steps as you need to compile a compiler for the language(s) that you're writing the voting software in, starting with some old copy of Bell Labs C or something, where the original binary compiler is assuredly not compromised in any way pertinent to the voting software. Do this once, openly, transparently and get a lovely golden and truely sacred copy of gcc or whatever.

      2: Yes, with a little LCD screen with the binary's MD5 or something. It can be done if you really want actual VOTER verification of the binaries. Of course, this is not very hard to verify at the factory, or even at startup by administrators that can follow directions.

      3: Yes? I don't understand this question exactly. Yes, you can know what machine the software is running on by designing a voting machine and writing software for it. Can the voter verify this? Well, no, not directly. Well maybe, but that would be complex. BUT, the same goes for tabulation of the vote with paper ballots, although the transparency isn't in the hardware, but the room itself. See, you don't necessarily get to watch them count it (at least not here) but a representative of both of the 2 biggest parties do, if I understand correctly. Now, knowing that there is SOME trust involved, you could have a couple of partisan or independant engineers look it over. If you're talking modification on the level of fake processors and such, well, that level of conspiracy will find a way to infiltrate ANY election more complex than a 'raise your hands'

      4: Yes. The vast majority of hardware errors are caught in any reasonable production line. Those that are not are usually very evident if the machine undergoes a good burn-in test battery. The probability of a random hardware error changing the outcome of your vote is ridiculously near zero. Papaer ballot doesn't print? Swap in a new printer, like at the grocery store. You have to vote over again (and any decent software will cancel your vote and TELL YOU LOUDLY THAT IT HAS DONE SO (like that, but with bigger letters, flashing red text and maybe even sound!) at the first sign of problems) but that's not asking too much.

      5: Well, that's a whole lotta yeses on the board. It's a bit late, and I don't know if I explained myself right, but I think it's about right. Paper ballots are great, except when some court tells you that it doesn't matter that you haven't gotten the same count twice, it's close enough. When the e-voting get to the point (like this law could likely take it) that it displays the ballot correctly, prints the paper correctly, and counts the votes correctly (with the paper ballot counts *gasp* MATCHING the e-votes) you'll find that paper seems to be the stuff that doesn't matter so much anymore... Still though, I'd like to keep it around, err on the side of caution and all that.

      Frankly though, paper ballots have their own problems, mostly due to human corruption. With a proper e-voting machine we could make their bastardly jobs much MUCH harder.
    9. Re:Who cares about OS e-voting software anyway? by lonecrow · · Score: 1

      Ya, I've never really understood this drive towards e-voting in the US. In Canada we know the results of the election before going to bed. Isn't that fast enough? Its not as if society is going to be any better off if it takes half the time to count the votes. I guess my question is who is leading the charge for eVoting and why? (other then the election machine companies themselves I mean).

    10. Re:Who cares about OS e-voting software anyway? by TempeTerra · · Score: 1

      Even if the source code for the voting machine and code for the toolchain are audited, and the hardware is audited too, you just can't be sure that the 'clean' code and machine are what is actually in front of you when you vote. It's just a little bit more difficult for the vote falsifiers. Electronic voting will always suffer from a few people having too much control - the guys who designs the hardware, the guy who assembles the hardware, the guy who delivers the hardware... a conspiracy of half a dozen people could conceivably subvert the entire voting process.

      Frankly, I still think that e-voting is a (poor) solution looking for a problem. Just ask all the other democracies that still use paper ballots.

      --
      .evom ton seod gis eht
    11. Re:Who cares about OS e-voting software anyway? by Threni · · Score: 1

      > Actually the answer is, in general, yes. The software vendors must turn over "source code, object code, and executable
      > representation of the voting system software for use in an election" (from the bill).

      Unless you can take their source and compile it yourself into *exactly* the same - byte for byte - executable, using a publicly available open source compiler, then you can't trust the executable.

      See: http://www.acm.org/classics/sep95/

    12. Re:Who cares about OS e-voting software anyway? by aztracker1 · · Score: 1

      Well, in this case, I don't think it has to conclude that having the source code available implies "Open Source" as defined by OpenSource.org ... but it is a good thing to have it available for public review.

      I feel that it also doesn't relieve copyright on the source, though it would prevent any "trade secrets" on any of the process. With regards to eVoting, the process should be completely open, and systems should be allowed to inter-operate with each other.

      I feel that there should be provisions for stiff penalties for any blantant copyright infringement from one system to another... yes, if somewhere along the way, you implements a somestring.Substring(...) in a language, then that line isn't a copyright infringement, but if you have a method that has the same name, and identical content, and verbage from one system to another, that one of the two probably cheated.

      More than this, it would allow for new systems from competing vendors to work with existing systems for expansion and replacement. Preventing a single vendor from having a lock-in for a particular state.

      --
      Michael J. Ryan - tracker1.info
    13. Re:Who cares about OS e-voting software anyway? by StringBlade · · Score: 1

      There's the overlooked aspect of environmental impact. How much new or old growth forest is used in making the millions of miles of paper tape used in voting machines? With e-voting (and no paper trail) you use less paper.

      Granted, e-voting with a paper trail is rather a step backwards environmentally because now you're not only using up a lot of paper, but you're using a lot of electricity as well. In general though, electronic machines can be made to run more efficiently as their design improves. Electricity can be generated more cleanly as technology improves. Paper cannot be made with the same amount of reduction in trees as technology improves (though possibly less of the tree is wasted).

      I would like to see a completely open e-voting system without a paper trail. To some degree the critics are right that we're acting like a bunch of luddites demanding paper trails. But I think that's more due to our distrust of the vendors and politicians more than it is of the technology itself. Once the technology can be proven to be 99.999% tamper-free, then there will be no need for a paper trail.

      --
      ...and that's the way the cookie crumbles.
    14. Re:Who cares about OS e-voting software anyway? by yuna49 · · Score: 1

      People who live in parliamentary democracies like Canada and Britain often express puzzlement at the drive toward e-voting in American elections. That's because voting in parliamentary elections usually consists of casting one vote for the local MP candidate. In US elections, there are often a dozen or so different offices being voted on, not to mention a variety of referenda, so the ballot is necessarily more complex.

      Moreover ballot "reformers" at the end of the nineteenth century pressed for the introduction of the "office-block" ballot format, where the race for each office is presented separately. At the time "party-list" ballots were much more common and allowed someone to vote for all the candidates of a single party by checking one box. This enabled parties to mobilize less well-educated voters, many of them recent immigrants, since party-list ballots didn't require a careful reading of multiple offices in order to cast a party-line ticket. Much of this reform effort reflected nativist sentiments among the more prosperous American middle class who feared the transformation of politics that might take place if European immigrants with "dangerous" social ideologies might take power. Party-list ballots are used in many parliamentary democracies, particularly those with proportional representation systems, but aren't at all common here in the US.

    15. Re:Who cares about OS e-voting software anyway? by Sczi · · Score: 1

      Open source doesn't guarantee transparency, it's just one of the basic prerequisites for having transparency.

      QFT

    16. Re:Who cares about OS e-voting software anyway? by xappax · · Score: 1

      There's also the valid concern for the rights of disabled people, who have been put (willingly or not) at the forefront of the US e-voting drive. The problem now is that people who are blind, physically impaired, or otherwise unable to carry out the act of filling out a ballot independently are forced to bring an assistant into the voting booth with them, who guides them through filling out the ballot and possibly does it for them.

      People in the US have a pretty strong, well defined right to cast their vote in private, with nobody being able to find out who they actually voted for. It seems trivial, but it's an important part of the democratic process - the right to vote privately protects people from persecution and intimidation based on who they support, and the requirement to vote privately renders the practice of paying people for their votes almost impossible.

      So it does suck that disabled people are being effectively disenfranchised when it comes to voting rights when a computerized ballot could help. Personally, I can see the benefit of having 1 or 2 computerized voting machines at each polling place, which allow audio (using headphones) and video output, as well as voice, touchscreen, and some other type of tactile input (i don't know what's easiest for people with certain disabilities). The machine can print a hard-copy ballot, printed in large text and braille, which the person can confirm. They then have it delivered to the ballot box like any other ballot.

      This method would address all the concerns of the disabled lobby, while still preserving a reliable, verifiable paper trail. True, it would require some way of reading braille while counting the ballots (perhaps the braille could consist of machine-readable holes punched in the ballot?), but that doesn't seem insurmountable, especially since it'd be a very small percentage of ballot which actually came in this way.

      A system like this is not what the e-voting proponents are looking for, though. Nobody can get a clear answer about what's so incredibly important about voting on computers that necessitates billions of dollars to be spent, but we can be sure that they feel it's more important than verifiable and reliable elections, because the considerations for these issues has been token at best.

    17. Re:Who cares about OS e-voting software anyway? by trianglman · · Score: 1

      You may not be able to trust, blindly, the executable, but if you are presented with the binary, and everything else, you are able to test it to see exactly what it does. You can, if you want, watch as it changes the buffer, registry, etc. You can then watch the same information on a voting machine and verify that it is doing the same actions. Memory locations will obviously change, but if you have the source code you can make sure that the differences match what should happen. Yes, there are ways to mess with the code in a very obfuscated way, but contrary to what the other poster said, it will take much more than half a dozen people to hijack an election.

      I still hold that, for all of its possible flaws, if implemented properly, as this bill does, electronic voting can be more secure and accurate than punch cards or optical scanners.

      --
      Clones are people two.
    18. Re:Who cares about OS e-voting software anyway? by tbannist · · Score: 1

      The Open Source software is just one step of many. If you don't know what the machine is supposed to be doing, then you can't tell if it's doing that.

      Verifying the compiler should be a little easier, since the source is open and it should be using a standard compiler it should be possible to create a checksum using the same compiler and verify the compiled binaries match. This is dependent on the source code being open. Without the open code, no external agency would be able to create a checksum. They don't have the source code, and likely wouldn't know which compiler was used either.

      Frankly, I think it would be much harder to create a hardware based tamper system, most of these vote terminals seem to run on fairly standard computer hardware. All of the hardware is supposed to be tested before it is used. Of course, nailing that down so that all hardware is tested and securely stored is an education and procedures problem that may need to be addressed in the future. But certification of hardware is already required by existing laws, it's just not done very well.

      Also as the Republicans have amply demonstrated it's not just about changing vote totals directly. Imagine if you will, a voting program that includes an additional 10 second wait every time someone votes for a Democratic candidate instead of a Republican candidate (but only on Nov 2nd). This is enough to feel slow but not enough for the voter to go seek help. The effect would be longer lines in Democratic strongholds and shorter line in Republican strongholds. If the longer lines deter 1 in every 100 Democratic voters, that could be enough to swing a close election. Throw in a few more tricks, like fake voter registration drives (so people have to register at the polling place eating up the time of the volunteers) and undersupplying voting terminals so the lines are even longer, and you could theoretically switch a 50-50 dead heat into a 44-50 victory without actually changing one vote result.

      --
      Fanatically anti-fanatical
    19. Re:Who cares about OS e-voting software anyway? by Rich0 · · Score: 1

      As long as there is mandatory auditing of a voter-verified paper audit trail I think that computer-tallied votes are fine.

      The problem with paper ballots is the need to determine voter intent. Suppose you have two boxes checked for one office, but otherwise a straight-party ballot - did they intend to vote straight party across the whole ballot? How about a small line in one box and a big one in another. How about a check with an X over it in one box, and a check with a circle in the other? If the race comes down to 5 votes, this will be a big problem.

      The advantage of computers is that the ballot can be validated while the voter is standing there to fix errors. If they click on one candidate, another candidate will be automatically unchecked, and so on. Go ahead and print to paper, but let the computers do the part they do well...

    20. Re:Who cares about OS e-voting software anyway? by eonlabs · · Score: 1

      I hate to agree with you, but there's an important point in what you're saying... http://linuxreviews.org/dictionary/Backdoor/ It is possible to write a compiler that is capable of recognizing a piece of code to allow for the insertion of a backdoor. It has been done, it isn't that hard. Heuristics would allow it to recognize patterns of code similar to that. Compilers have been written that allow a person to compile the compiler's source, which in turn injects the code to both infect itself if it recognizes itself, or infect a target program if that is compiled. In this way, users can see generations of clean code, and still not see the actual faults. The up-side is that legislation like this is a step in the right direction. More important than anything else, it's recognition that there is the possibility for non-verifiable voting records to get hacked and go completely unnoticed. With a paper trail, there's at least a means for verification. The reason that computerized systems are nice are that IF the system is actually functioning properly, it doesn't require teams of people working for hours on end shuffling through endless amounts of identical strips of paper trying to count little dots. It simplifies the equation, and allows what many people are looking for: instant gratification. That's the point of technology. That's the same reason we have robots in car factories. People break down when asked to perform the same task millions of times. Ideally, this bill gets put in place, people fight it, and the issue will be discussed, contemplated, and eventually solved.

      --
      I wouldn't consider the mad hatter mad. Just reality impaired. He sure can make a mean cup of tea.
    21. Re:Who cares about OS e-voting software anyway? by CastrTroy · · Score: 1

      If you can't put an x in exactly one box, then your vote doesn't get counted. Call it an intelligence test for votes. If there are multiple issues being voted on, then each issue should be counted separately, so if you check 2 boxes on 1 issue, they still count the votes for all the other issues you didn't screw up.

      --

      Anthropic principle: We see the universe the way it is because if it were different we would not be here to see it.
    22. Re:Who cares about OS e-voting software anyway? by Rich0 · · Score: 1

      That sounds nice as a decree, and if you were dictator it would work fine (of course, we don't even need ballots of any kind then).

      The problem is that when the loser of an election loses by 3 votes by people who wrote checks instead of X's in his box, your utopian vote-counting system will face a court trial. Now, checks instead of X's is an obvious case, but now picture EVERY shade of gray imaginable - humans are VERY good at not following directions - unlikely computers...

    23. Re:Who cares about OS e-voting software anyway? by drwr · · Score: 1

      Huh. There are lots of better ways to reduce our paper usage. The amount of paper that would be consumed in this way for even one national election is absolutely nothing compared to the enormous mounds of paper that are used, for instance, to wrap all the Big Macs consumed across the country in any one day. If our goal is to reduce paper consumption, we've got a lot of work to do, and it doesn't make sense to start with our election system. (Besides, most states use paper ballots today anyway, so we're not talking about *increasing* paper consumption here--just keeping it at about the same level.)

      As to proving the technology tamper-free: first, we'll never be able to prove it tamper free to a 99.999% level; and second, even if we could, 99.999% isn't nearly good enough. (Though it's not quite clear what that number would mean, exactly. But if the tamper-resistance is not exactly 100%--and that's clearly impossible--then someone, somewhere can figure out a way to corrupt the system--and some desparate political candidate will find that person and hire him.)

    24. Re:Who cares about OS e-voting software anyway? by StringBlade · · Score: 1

      Methinks you believe our current system to be 100% tamper-free? Of course it isn't and I doubt it is even 99.999% tamper free (stuffing the ballot?), but it goes without saying that e-voting will be held to higher standards than traditional ballot voting simply because it's new and untrustworthy.

      I think with a sufficiently large sample size (say millions of votes) collected over a period of time from small elections that 99.999% accuracy could be proven.

      And I agree, the paper consumption is a very weak reason to move to e-voting, but it is still there (if you can eliminate the paper trail altogether).

      --
      ...and that's the way the cookie crumbles.
    25. Re:Who cares about OS e-voting software anyway? by sjames · · Score: 1

      Can you see what compiler was used to turn source into binary? Can you verify that published source/binaries are the same as what's inside the machine in front of you? Can you verify that the hardware is the same as what the software is expected to run on? Can you verify that the hardware works as intended (like, no memory errors etc)? I expect that for most (or all) of these questions, the answer will be: no, not really.

      Actually, yes. Take the published source and compile it using the environment the vendor claims to have used. Does the binary produced match the one on the machine? If no, there's a problem. If you understand the hardware through the source of it's firmware, you can write a memory verifier. While you can't be absolutely sure the hardware is exactly the same, you can make sure that the software samples the touchscreen ONCE for a particular input (meaning what it counts there will be what it prints, no dirty tricks where the samples disagree so the tally and receipt differ).

      The really sad thing is that there is so much resistance to this from Diebold et. al. Clearly, they understand the value of a receipt since every cash register and ATM out there produces one. Apparently they believe that democracy is LESS IMPORTANT than financial transactions. That in itself warrants suspicion. Considering that there is absolutely no rocket science in programming these embedded devices, there is no real issue of "valuable IP". It's just yet another case of a company that thinks it deserves a patent every time the CEO visits the toilet.

      I suspect but cannot prove that the REAL reason they don't want to submit to verifiability is that they fear a smaller less known company can take part of their market otherwise. They prefer that buying decisions be based on "they're a big company, they won't cheat". Never mind that it's not a logical conclusion, marketing can paper that over. If every vendor is subject to verification anyway, lesser known competition is less disadvantaged.

      In short, at best they will happily sell "truth, justice, and the American way" short for a minor marketing edge. Yet another reason why they are not to be trusted. It means that they would also likely push a flaky piece of junk out the door rather than spend the cash needed to fix the bugs. If there's no paper trail, they won't get caught.

    26. Re:Who cares about OS e-voting software anyway? by drwr · · Score: 1

      It's a question of scale. Our current system is surely tamperable, but only on a local level. A particular person with malicious intent would have to bribe or distract or otherwise compromise the sworn attendants at a particular precinct in order to stuff the ballots. Certainly possible.

      In order to influence the election on a larger scale, though, that person would need a *lot* of help, and it's hard to imagine that such a massive effort would not be noticed.

      On the other hand, with an electronic counting system, it's theoretically possible for a small number of people, working remotely, to influence the results of a large number of precincts at once. *That* is reason enough to be highly suspicious of black-box electronic voting systems. However, the simple presence of a paper trail is sufficient to reduce this danger to the current (low) level of risk.

    27. Re:Who cares about OS e-voting software anyway? by StringBlade · · Score: 1

      Except that it's quite impractical and unreasonable to expect voters to keep a copy of their voting receipt to do a full paper recount and since the paper rolls in the machine are as sequestered as the electronic count, the software could easily print the correct vote on the voter's receipt and the incorrect vote on the official tape and no one would be the wiser.

      --
      ...and that's the way the cookie crumbles.
    28. Re:Who cares about OS e-voting software anyway? by drwr · · Score: 1

      No, that's not the way it works. I've actually voted on one of these paper-trail voting machines, and really, it's quite elegant; and voting on it gave me warm fuzzies that my vote would actually be counted.

      The machine lets you pick your candidate via touchscreen, and performs basic sanity checking on your vote (it doesn't let you vote for two candidates, etc). When you reach the last page and touch "I'm ready to record my vote", it prints a paper receipt which it displays under glass, for you to verify. Then it rolls the receipt up for storage.

      The voter doesn't take a copy of the receipt home. But the key is that the paper has been printed, and now there is a paper ballot that exists somewhere. This makes the system exactly as secure as our current paper-ballot system: in order for someone to defeat this, he'd have to physically gain access to the precinct office and destroy printed ballots. Certainly it is possible to do so, but the point is that it's very hard to do this on a large scale.

      If I, as a voter, notice that the machine didn't print what I voted, I'll make a fuss. If multiple people make a fuss in one precinct, that will raise alarms. It doesn't even matter if most people don't bother to double-check the printed ballot, since all that's necessary is that a sufficient random sample *does* double-check.

      See? It's no more corruptible than a box full of traditional paper ballots. On the other hand, a box that simply records my vote electronically is potentially *much* more corruptible than a paper-trail machine. If a hacker somehow gains access to the box and compromises the program inside, he can make it record whatever votes he likes, and there is absolutely no way to recover the original votes.

      That's the key difference. As long as all e-voting machines print a ballot like that, I'm all for the technology. But not having a paper backup is just asking for trouble.

  23. Fine by me. by Ungrounded+Lightning · · Score: 2, Insightful

    If this bill passes ... [Diebold] can then sell new machines to [all their former] customers.

    Or printer and software upgrades.

    If Diebold fixes the auditability problem I have no further gripe with the use of their machines. If buying an upgrade from them is 'way cheaper than replacing the machines outright, that's just dandy.

    "If it's worth doing, it's worth doing at a profit."

    --
    Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
  24. Doesn't give the source away. by Ungrounded+Lightning · · Score: 3, Informative

    By requiring that the entire platform be open source, the well-intentioned legislators just killed the bill.

    The version of "open source" required doesn't give away any copyright or patent protection, or transfer rights to USE the code to others - especially the competition. (It does puncture trade secret.)

    If the bill had instead required that only the voting software installed on the voting machines be open source ... ... it would have been ineffective against malware embedded in the operating system - by the OS developers or later black-hats.

    This is not a minor issue: With control of the US Government at stake a LOT of engineering effort can be profitably applied to attempts to compromise the system - by political, economic, or foreign governmental interests.

    --
    Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
  25. Released code != open source by Wordplay · · Score: 1

    I haven't read the actual law. Does it say the code needs to be publicly available for review, or that it actually has to be open-source? These are high-profile applications, and can be controlled strictly through licensing and audits of election equipment.

  26. Try a hard question... by raehl · · Score: 4, Insightful

    So if paper is going to be the final word, why waste the money on voting machines in the first place?

    Because not all paper ballots are created equal, and paper ballots filled out by humans are more prone to error than paper ballots printed by a machine.

    The current paper ballots involve things like hole-punches (hanging chads anyone?), filling in bubbles (fill in too many or too few or only partially), butterfly ballots, etc.

    It's the same reason your college professors wanted you to type your papers. The machine, by default, makes the paper much more legible than it would be if the paper were written by hand.

    Same with electronic voting. The machine makes the ballot much less likely to have an error on it than if the ballot is done by a human with a pen (optical ballots) or punch (punch cards).

    There are other features you get with electronic voting. For example, you don't need to print the ballots in advance. You can just load the ballot into the machine the morning of the election, and when people votes, the machine prints out the office and the selected candidate. So instead of having to 'lock' the ballot a month in advance to allow for the ballots to be printed, you might be able to reduce that lead time to a few days or a week. Then when a candidate dies three weeks before the election, or somebody wins/loses a lawsuit, you have more time to correct the ballot.

    You can also do neat things like randomize the order candidates appear on the ballot. One problem with elections is the candidate listed first tends to get more votes than other candidates. With electronic ballots, candidates can all be listed first an 'equal' number of times.

    Electronic voting also gives you the ability to accommodate more people with disabilities.

    1. Re:Try a hard question... by aldousd666 · · Score: 1

      Well, if the reason you have to have a paper trail is to prevent programming errors from having an effect, then ok, I can see that. But if it's to 'guaruntee that they aren't hacked' then that's ridiculous. If i'm clever enough to hack one memory location, then I'm sure i'm clever enough to hack two. if you don't know where I'm going with this, then, perhaps you need a paper trail to tell you that that's really coffee you're buying at starbucks and not just what someone told you is coffee... they might be lying, and we need a paper trail to verify!

      --
      Speak for yourself.
    2. Re:Try a hard question... by Rich0 · · Score: 1

      Uh, but in the case of voting the only thing that matters is the ballots. If they hack the paper record then they'll get caught when the voters look at the paper record and see that it is wrong. We're not talking about a paper tape in the bowels of the machine - we're talking about a printout in plain view - possibly behind glass, or possibly given to the voter to drop in a box...

  27. Re:Good law! by canUbeleiveIT · · Score: 3, Insightful

    Alas, that's probably true...but it's a bargain compared to not knowing if the election is rigged.

  28. One item this bill is missing.... by raehl · · Score: 1

    Voting machines must be allocated to voting districts in a manner proportional to the districts' populations.

    1. Re:One item this bill is missing.... by orgelspieler · · Score: 1

      Shouldn't they be allocated in a manner proportional to the registered voters instead of population? While we're at it, screw proportionality. There should be minimums based on previous voter turnout and desired throughput or maximum wait time. For instance, if there's some place that has mostly working-class people who can only vote outside of 8-5, they should get more machines than a district with the same population if they are retirees who can vote any time they want. Just an idea. Probably very hard to standardize and enforce, though.

  29. Re:Good law! by Anonymous Coward · · Score: 3, Informative

    Just a note about the sponsor and his central NJ district, which should explain how such a sensible bill came to be introduced. The district runs across the state from the Delaware River to within a few hundred yards of the Atlantic Ocean, encompassing Princeton University, and encompassing or abutting the telecom R&D community that had been centered around Bell Labs in Holmdel, including AT&T Labs, Avaya, Telcordia, Vonage, and many small companies founded by alumni of these companies. Also in the area are many civil servants and contractors for the Army's Communications Electronics Research Development & Engineering Command at Ft. Monmouth. In short, it's a real high-tech powerhouse.

    The Congressman, prior to his election, was on staff at Princeton University's Princeton Plasma Physics Lab. A popular sight on many cars in this area is a bumper sticker reading (on two lines): "My Congressman is a Rocket Scientist / Rush Holt."

  30. Audio interview with the sponsor of the bill by ntk · · Score: 3, Informative

    Here's an interview we conducted with Rush Holt, the congressman who has been pushing for this bill for years. It's about twelve minutes long, but a little more meaty than usual for a politician: Holt has a Physics Ph.D., so he has something of a scientific background, and walks through many of the problems with e-voting the proposal tries to solve (and is also fairly candid about why his bill took a while to catch on). We recorded it just before the last election.

    1. Re:Audio interview with the sponsor of the bill by Catbeller · · Score: 1

      So what happens if the cheating manipulates the margins smaller than that which would trigger a mandatory free recount? Already being done.
      The entire layer of computerized gadgets is not necessary by the accepted logic of keeping the paper ballots as a verified trail!
      And if the only way we can trust the magic boxen is to perform recounts by margin trigger or random (not so random, see last election) selection of districts to keep them honest, why then not eliminate the entire electronic cloud and simply count the votes by hand the way Canada does? They get the job done in three hours!

  31. Re:Congratulations: they made the right choice by Dachannien · · Score: 2, Funny

    There doesn't need to be an "operating system", unless you need it to throw up.

    Edited for brevity.

  32. I can see the newscast now by The+Monster · · Score: 1

    All we need to do is to have some ingenious hacker screw up an election by injecting viruses into the voting machines and having the results come back so absolutely outrageous its not even funny
    With 90% of the precincts of California in, we're calling the race in favor of the surprise write-in candidates "Heywood Jablome" and "Mike Hunt". Pollsters are at a loss to explain this phenomenon. Attempts to locate the apparent President- and Vice-President-elect have been thus far fruitless.
    --

    [100% ISO 646 Compliant]
    SVM, ERGO MONSTRO.

  33. Damn by quantaman · · Score: 1

    This bill identifies the specific problems and concerns with eVoting. It addresses them one-by-one in the logical manner suggested by the vast majority of people educated about eVoting. It is simply a well written piece of legislation.

    In other words it doesn't have a hope in hell of passing, couldn't someone at least throw in some ammendment about a program to train Arctic monkies to do the recounts so legislators will consider it?

    --
    I stole this Sig
  34. why not paper ballots? by swordgeek · · Score: 2

    First of all, understand that I'm looking at this from an outsider's point of view. That said, this is an excellent bill--it provides accountability and a barrier to ballot stuffing, the primary barriers to responsible electronic voting.

    The question I have is why not paper ballots?

    Much of the rest of the world (Yes, including the first world) uses paper ballots that are tallied by humans. Electronic ballots can only be secure from abuse by having a per-ballot paper trail, so what advantage does the electronic ballot provide at all?

    Honestly, I'm curious about why electronic ballots are a good idea at all, given the present state of the art.

    --

    "People who do stupid things with hazardous materials often die." -- Jim Davidson on alt.folklore.urban
    1. Re:why not paper ballots? by cdrguru · · Score: 1

      How long did it take to count paper ballots in the last election you are familiar with? When did the news media announce the winner - before or after the votes were counted?

      In the US there will be a winner announced before the end of the night after the voting is done. The news media will do this and it can be based on exit polls or real results. Real results could be partial or complete.

      Electronic voting gets us back away from news media coronations. The last two presidential elections the news media came dangerously close to declaring the winner long before anyone was sure. And make no mistake about it, if the news media announced Kerry won and then the next day said they were just kidding, Bush won there would be violence in the streets.

      Do not believe the news media would care - they would just get better ratings for covering it.

    2. Re:why not paper ballots? by Catbeller · · Score: 1

      Canada gets its national elections counted by hand, to final announced totals, in about... three hours. By PENCIL.

      The US is slowed because we hold the election in different time zones, and we have to cycle people through, YES, loooonnngg lines to get to the damned machines. A card and a pencil can be used by an entire crowd simultaneously. We are also slowed by our weird voter verification process. More than slowed. Ground to a halt.

    3. Re:why not paper ballots? by The+Master+Control+P · · Score: 1

      Most of the rest of the world doesn't have to count a hundred and fifty million ballots covering dozens of issues in the shortest possible time.

      I agree that "in the shortest possible time" is logically bullshit, but this is what happens when TeeVee gives everyone ADD. The sad thing is that this should be the perfect application for computers, since it's literally nothing but adding 1 to selected counters. *sigh*

    4. Re:why not paper ballots? by BranMan · · Score: 1

      I guess the cynical answer is the best - instant gratification. We in the US have gotten used to the Elections being decided - and tallied - before we even get home from the voting place. In fact, early results are collected and suppressed as the early results were available so early they were affecting the Elections as a whole. If we used paper ballots and tallied them by hand it would take days if not weeks. And what fun is that? We need the huge swings, the states turning colors as we watch - the DRAMA of it all. Nothing less will do for the good ole US of A. We can't go to bed not KNOWING!!!

  35. It's time for mark-sense ballots everywhere? by MtViewGuy · · Score: 2, Insightful

    I think we should just forget the whole idea of electronic voting machines (which looks like it's just as faulty as the old mechanical voting machines used in much of the USA for many years) and go with mark-sense paper ballots filled out with permanent ink pens or markers.

    Not only is it machine-readable, but the ballots can be hand-counted quite easily in case of close elections.

  36. I just don't get it - THIS ISN'T HARD PEOPLE! by don_in_agoura · · Score: 1

    Why do people pretend like this is hard? I do design engineering for a living so I'm not just talking out of my ass when I say that this is kick-ass easy stuff. Paper requirements? Like that's hard. Confirming paper requirements... just get a damned optical scanner and you can crank though a toilet paper sized roll of paper in no time flat. ("OMG it'll take WEEKS to confirm all the paper backups!!!") Code that is code reviewed by the general public? Using off the shelf electronics (not ASICs) for easy electronics verification? Hash checks to make sure the code is correct? Stable non-volatile system for power outages and the like? It is 100 times more complex to build the stereo in your car than to develop a simple accurate voting machine and yet the whining that is involved with this is amazing. I just don't get it? What are people's ulterior motives in this? With this much BS propaganda flying around there has to be something. don

    1. Re:I just don't get it - THIS ISN'T HARD PEOPLE! by cdrguru · · Score: 1

      Part of the problem is certainly the old public arena requirements/specifications nonsense. But there are also other aspects that drive this. One is the US government is very reluctant to get into the hardware business, either for military or civilian purposes. Public access to the source code would pretty much require that the government take over design. Maybe manufacturing as well.

      The problem is that there is no "unique hardware" anymore. Patent protection isn't really going to work either. So someone builds the machine and spends two years developing the software that can be verified according to mil-spec rules. This is also known as "provably correct" and isn't trivial to write code like that. Nor is it easy to collect the requirements for something like that.

      OK, then the software is released for review. Two months later, you can buy the same machine for 1/10 the cost with identical software that passes the same reviews. Nobody is going to sign on for that kind of abuse unless the government pretty much guarantees a single supplier. Which would be a violation of so many federal and state laws it isn't funny. Forcing the supplier to be a US based company isn't going to fly either. Ownership rules probably wouldn't really matter. So, this would be a one-time gift to some Taiwanese or Chinese company. Not going to happen.

      So the government has to pay for the requirements gathering and the development process. They could then farm out the manufacturing (maybe) the way that tanks were made during WW II. The government provides the specifications and the manufacturer gets to make some small profit on each piece of hardware. Nobody in the US would touch it, but lots of Asian companies would jump on such a deal. Fine, they would get made.

      Only problem is the requirements phase of such a government project would probably take 10 years to complete. And it would be the most bloated over-specified piece of junk imaginable because it would embody the compromises needed to get every county in every state to sign on. Even if they got by that, it would still be some topheavy government project. Just like some other big goverment projects we know about for the IRS and FBI.

      This could only be done by a private entity that just rams the result down the thoats of the states and counties. Just like what we have today. Keeping the government out of the process as much as possible is where we are today and at least there is something to point at. With the government doing the work or running the show we wouldn't have anything at all until 2012, and it wouldn't see light of day until 2017 at least.

      Think I'm wrong? How many goverment projects have been on time and under budget?

    2. Re:I just don't get it - THIS ISN'T HARD PEOPLE! by Catbeller · · Score: 1, Troll

      eVoting is not designed to make things easy or verifiable. It is supposedly designed to solve a non-existent problem, lack of speedy vote counting. In the real world, the code is secret, easily modified by dispatched techs during the election, and the fact of its very existence during the act of voting or accumulation is forever unverifiable. The voting machine companies fought like rabid weasels for years to silence questions about their machines. They bought the regulators.

      Don't forget that changes can be made up the line at the accumulator boxen. Don't just suspect the touchscreen PCs.

      Amazing things happened during the last few elections. Votes swung republican in key counties in both 2000 and 2004 after a little visit from the company reps in Florida and Ohio. A major stockholder in Diebold ran against a Vietnam vet, Clelland, in Ohio and overcame a pre-election poll deficit of double digit proportions. Boys and girls, those machines are being used to cheat in big races that come down to a few districts. After all that I've seen since 2002, we've had Bush reinstalled through a little magic code.

      This legislation will not solve the problem, because automatic recounts were already fraudulently pre-selected by voting companies in the last election to prevent a manual recount. They also can manipulate the totals to *just under* the mandatory margin for a manual recount. Not a theory, its already done and few cared. The men who are making a giant mountain range of cash from this administration aren't going to give up because some paper is kept around. Paper has to be counted, and that takes a margin trigger or a very expensive recount by candidate request.

      Do it like the Canadians do. Count by hand, call it in to central offices, count those up by hand. Members of all parties present at all counts. They get their national counts done in HOURS, using pencils. And it doesn't cost them billions of dollars to do it. Techies are blinded by the wonders of their PCs. PCs can't do everything, and they aren't needed to do everything. When something infinitely malleable and secret is introduced to a simple, open process, it isn't done to make things easier or safer, but to hide cheating. QED

  37. WinCE will do. It's semi-open. by r00t · · Score: 1

    WinCE developers can get source code already. So the machine has to run WinCE instead of Vista.

  38. Re:Congratulations: they made the right choice by ScrewMaster · · Score: 1

    There doesn't need to be an "operating system", unless you need it to throw up.

    Edited for brevity.


    Edited for hilarity you mean. I say that as my graphics card just reset itself and Windows XP threw up all over me.

    --
    The higher the technology, the sharper that two-edged sword.
  39. Re:Good law! by trianglman · · Score: 2, Informative

    There is already, just for the hardware, $1 billion worth of funds allocated for this bill; to be used until it is used up (not tied to a budget year). There were other appropriations sections in this as well, auditing and dispute handling were the other two sections I noticed, also how to divvy it up among the states, but I didn't read those sections closely. As someone else has said, that price is worth knowing what is happening to my vote.

    --
    Clones are people two.
  40. That's odd.. by aero2600-5 · · Score: 1

    Hmm.. That's odd.

    I thought April Fool's Day was yesterday!

    ...

    Let's hope they manage to pass it. Common sense is hard to come these days.

    Aero

    --
    Please stop hurting America -- Jon Stewart
  41. standards for paper audit trail by msblack · · Score: 1

    Let's make sure that the paper ballots printed by these machines are not the heat-sensitive paper type. Sun, heat, fluorescent lighting, and age can degrade these ballots fairly quickly. The conspiracy theorist in me says that many big box stores switch to heat-sensitive receipts to reduce customer returns and warranty claims. Should you require a receipt for tax purposes, better keep a Xerox copy.

    Los Angeles County uses Ink-a-Vote which replaced those punch cards with ink blot bubbles. Nothing beats paper for vote recounts. The ink takes a few seconds to dry and if you don't hold the marking device completely perpendicular, it can skip marking the ballot.

    --
    signature pending slashdot approval
  42. Write your congressman! by caitriona81 · · Score: 3, Informative

    I shouldn't have to point this out, but if you feel strongly about this or other issues before the house, you can
    easily write your Congressman from the contact form on the House web site - http://www.house.gov/writerep/
    While members of Congress may or may not read Slashdot, they or their staff do presumably read their Inbox, and I've gotten at least cursory replies (usually by snail mail) before.
    I've posted the letter I just wrote below as an example, but it's probably more effective if you write your own words rather than using mine:

    To the Honorable Walter B. Jones:

    I just became aware of pending legislation via a number of technical industry news sites including Slashdot and Arstechnica that I feel is long overdue, H.R. 811: Voter Confidence and Increased Accessibility Act of 2007.

    As a constituent of your district, and as a registered voter, the integrity and transparency of election processes deeply concerns me.

    Of particular importance and interest to me are provisions which provide for voter-verifiable paper trails in elections, provisions that require random auditing to insure that paper records match electronic ones, provisions that require the software used within electronic voting machines be open to public inspection, and provisions that provide for the emergency use of paper ballots in the event of system or equipment failure.

    I realize that these measures create an additional burden on the states, however, I strongly believe they are needed to restore accountability, auditability, and voter confidence lost by the widespread adoption of electronic voting machines.

    I urge you to strongly consider voting for this legislation when it comes before you, and to resist amendments which weaken or eliminate the strong provisions on election integrity it contains.

    Sincerely,
    Stephanie Daugherty

  43. Not good enough by kst · · Score: 2

    It mandates that the paper records be the authoritative source in any recounts ...

    Make the paper record the authoritative source in any and all counts.

    If the paper record (it's called a ballot!) is computer-generated, that's ok, as long as the voter gets to verify it, and as long as everything on the ballot is human-readable. (If it looks like a human-readable ballot but the actual vote is recorded in a barcode, that's subject to abuse; the voter has no way to confirm that the barcode matches the actual vote.)

    And I don't think there's any good reason not to count the ballots by hand.

  44. Re:Good, but so what? by skrolle2 · · Score: 3, Insightful

    I'm sorry, but that would be a pretty stupid system.

    There are problems with our representative democracies, but effectively going back to a direct democracy won't solve anything. Representative democracy is a direct cause of the division of labour which is the main reason our civilization is as advanced as it is. Instead of everyone farming their own food, building their own tools, writing their own programs, performing their own surgery, being their own lawyers and making their own political decisions, we divide the labour. I farm, you code, Johnny performs surgery and Karen sues people and everyone is happy doing what they're best at.

    The important thing to remember about representatives is not that they should vote AS their constituents, but that they should make INFORMED DECISIONS in the interest of their contituents. That's the labour we divide to our representatives, to inform themselves of what a political decision means or leads to in the future, to inform themselves of the political landscape and the compromises needed to get a certain policy accepted, to see the big picture, to enact long-term policies for the benefit of their constituents, even though it might be bad in the short term. And, most importantly, to take personal responsibility for the votes cast as an elected official.

    You forget some things about political decisions that would get totally lost in your suggested system.

    1) Most decisions are incredibly boring regarding concerns that are interesting only to a small minority of the population. With direct democracy, everyone would have to spend time informing themselves of the impact of the fishing quotas of the North Atlantic to make the best decision. But seriously, people won't, they'll just press a little vote button on your webpage and not care what was enacted as a result. Ooops, we bankrupted an entire industry, oh well, noone *I* knew...

    2) There's a lot of decisions like the one above, with direct democracy, so everyone would have to check your webpage every day, vote on the issues in a sensible manner, taking time away from whatever else they were doing. Why should people do this every day for the rest of their lives? If everyone does not participate every day, then it's no longer the will of the people, but the will of the people who can be bothered to do this every day, or have time to do this every day. Your average working parent who make up the bulk of the taxpayers will not have time for this, making the "decisions" pretty skewed.

    3) Everyone does not have access to the internet every day. Seriously, get some perspectives.

    4) You may think that the representatives are biased or lobbied into submission or corrupt, but why would ordinary people be any better? If people believe in ads, what's to stop them from believing in every political ad on their TV, comfortably telling them what to vote for tomorrow?

    5) Voter turnout here is about 80%. That means that 20% of the eligible population can't be bothered to make ONE decision every FOURTH YEAR. That's not a lot of work. And you want these people to make decisions every day or at least every week? About things they care even less for than high-level general political ideology?

    6) Referendums always lack personal responsibility. "It is the will of the people" is a great way to not have to stand for your actions. Part of the job of being an elected official is to make decisions and take personal responsibility for them. If an official makes decisions that the constituents really dislike, he/she will be voted out of office and someone who makes decisions that are better in line with the voters will take his/her place. But if everyone is voting on every issue, who is responsible for the bad ones? What's stopping people from only making badly-informed, short-sighted decisions that benefit themselves financially in the short run, but are devastating to the country in the long run? You can't vote the voters out of office. You could never have a regime-change in your system, with all the benefits that follow those.

  45. Why is evoting such an issue? by Froeschle · · Score: 1

    I am curious as to why e-voting (however it is spelled) is such a problem? Is the basic technology that different from ATMs which have been around for over 30 years now? Why can't the industry get things straight?

    1. Re:Why is evoting such an issue? by ScrewMaster · · Score: 1

      So far as I'm concerned, when these clowns finally get ATMs to work right maybe they can be given a shot at designing an electronic voting machine. Until then, my vote is for paper ballots.

      --
      The higher the technology, the sharper that two-edged sword.
  46. Re:Good, but so what? by unclethehornet · · Score: 1

    Thanks for your feedback. I really am considering doing this, and so am interested in what actually would happen - ie, how it really would play out.

    In response to your points:

    1. The idea is that the website would have information/links/arguments etc above the little vote button - so it would be very easy to get educated on the issue before voting. Kind of like how you can read a slashdot thread and then become an expert on an issue. :-)

    2-3. I think you missed the point of proxy voting. In it's laziest form, you could assign your proxy/default vote to a "normal" politician, which is effectively what you have today. The benefit ofcourse is that you can change your mind at any time or on any issue if/when you feel inclined.

    4. I think that lobby groups lobbying the general population is better than lobbying politicians. Particularly for issues such as media ownership, corporate rights, etc.

    5. Having no control and a feeling of helplessness in the existing political system creates much of the current apathy. I think that being able to impact change will increase involvement.

    6. Regime change is required when the population wants to go a different direction to the government . This doesn't happen in a direct democracy, so the need for regime change (ie, the big reset button) doesn't exist.

    You haven't convinced me that it wouldn't/couldn't work - but I do perhaps need to go into more detail as to how the website would actually work..

  47. Ummm, not quite. by NewWorldDan · · Score: 1

    This is in no way, shape, or form, the duty of the federal government to regulate voting machines. While I agree with most of the ideas in the bill, they should be implemented at the state or local level. Federal regulation of voting machines is a recipie for disaster.

    1. Re:Ummm, not quite. by nuzak · · Score: 1

      It's the 21st century, and we now have federal-level (presidential) elections that affect all of us. Even congressional seats affect the whole country. Ergo here in my state, I would like Ohio and Florida to follow some goddam standards, even if they have to be forced on them.

      Knowing how congress works though, the final form of this bill will probably require closed-source unlocked internet-connected diebold-only machines.

      --
      Done with slashdot, done with nerds, getting a life.
    2. Re:Ummm, not quite. by zarozarozaro · · Score: 1

      While I agree that these laws should be on the state level, recent federal law exists which regulates federal elections(e.g. Help America Vote Act of 2002). In other words, that ship has sailed.

  48. Re:Have you ever voted in the US? by CastrTroy · · Score: 1

    The "Ten Times" the number of voters is offset by the fact that you have 10 times as many people to count the votes. If India can get by on paper votes, then I'm sure the US can handle it. The major problem is that there's too many issues on the ballot. What's the point of putting someone in office if you can't delegate some of the decisions to them? I like the Canadian system. You vote for your municipal, Provincial, and Federal representatives, and they cast their ballot on all the other little issues you don't have the time to deal with.

    --

    Anthropic principle: We see the universe the way it is because if it were different we would not be here to see it.
  49. Re:Good law! by sakasune · · Score: 1

    I live in Monmouth County (about 2 miles from Ft Monmouth) - never saw that bumper sticker

    --
    "You're arguing for a universe with fewer waffles in it," I said. "I'm prepared to call that cowardice."
  50. Re:Congratulations: they made the right choice by TimTheFoolMan · · Score: 1

    Excellent point. Bartender, vacuum tubes... all around!

    However, the number of vacuum tubes necessary to provide full voting support for the visually or physically impaired, takes a bit of power, and it's kinda cumbersome the way they fill up the room. So let's strike them off the list.

    Likewise, doing reliable scanning of hand marked (and mismarked) ballots in an optical scanner requires either a bunch of hard-coded crap, or a whole lotta vacuum tubes to interpret all the variations of "completely filled in" that the average human is capable of.

    Then there's the nasty problem of the hundreds of ballot styles that you may have within a given county, and the nasty complexity of counting all those bad boys between the primary, the almost-certain runoff election, and the subsequent general election. For reasonably large counties, we're gonna need a few hundred volunteers to hand-count them, or a library full of vacuum tubes (and a mountain of wire, and several man-years of programming in the ballot logic, and then there's the referendums that they always add at the last minute...).

  51. Re:Good law! by kennygraham · · Score: 1

    Now, if only they'd pass the damn thing without amending it into a horrible parody of itself or huge piles of pork.

    I hope they just add pork. With our luck, they'll attach a broadcast flag rider.

  52. Valid choices by badc0ffee · · Score: 1

    Something no one has mentioned yet is validation of choices. When there is more than one choice, it can be validated by the machine before the vote is cast. With a paper only ballot the voter can vote for two or more candidates for the same office. The ballot is invalid and becomes a null vote. Some votes for commisions have a choice of say 4 out of 9. Voting for 3 is valid, but 5 makes the entire list invalid. With e-magic voting, only valid votes are cast. Ever try to make more than one choice on a /. poll?

    --
    1011 1010 1101 1100 0000 1111 1111 1110 1110
  53. Re:Congratulations: they made the right choice by CowTipperGore · · Score: 1

    The bill shouldn't discriminate between the OS and the voting software. This is not a general purpose machine that requires an advanced OS -- it requires a bare minimum system that can count votes and print ballots! The machines that do these very limited tasks should not be something which Microsoft targets as a significant market for their standard operating systems. And an ATM would seem to fall into this category as well, if not more so (read a mag stripe, manage output to a small CRT, print receipts, dispense cash, and communicate via modem to a private network). Yet, Diebold used OS/2 Warp for years and finally switched to Windows XP a few years ago. The ATMs are PCs inside - consumer-grade mobo, hard drive, processor, RAM, etc.
  54. Re:Congratulations: they made the right choice by erbmjw · · Score: 1

    CTG please note; the voting machines are actually required to do less than an ATM.

    1) ATMs are required to have secure communications capabilities, but the voting machines are required NOT to have any communications capabilities.

    2) ATM's are required to read a mag stripe, but the voting machines are NOT required to read a mag stripe{or any type of card}

    3) ATM's are required to display and print a number of various types of forms and formats, but voting machines are NOT.

    So the OS in the category of voting machine can and should have limited capabilities in respect to the OS in the category of ATM.

  55. Offset? by Anonymous Coward · · Score: 1, Informative

    There may be ten times as many workers to count the votes. I doubt it. You're assuming election staff participation scales linearly.

    You're also ignoring the higher class segregation in the U.S., which makes it more difficult to find educated volunteers with free time who live within a poor district. Workers from other districts are more likely to try faking votes.

    Even if election participation did scale, though, you'd still have to deal with the sheer number of ballots at certain key bottlenecks. Phoning the totals in is easier with Canada's votes. Error-checking the totals is easier. Changing the voting system to deal with any inefficiencies is far, far easier.

    Don't get me wrong. I agree that all these ballot initiatives and minor offices do not belong on a federal ballot. Unfortunately, the U.S. has chosen this micromanagement to offset the two-party system's sloth. It's far too entrenched to change.

    Ironically, my CAPTCHA is "mutable".

  56. Re:Congratulations: they made the right choice by CowTipperGore · · Score: 1

    CTG please note; the voting machines are actually required to do less than an ATM. That depends on what you expect a voting machine to do.

    1) ATMs are required to have secure communications capabilities, but the voting machines are required NOT to have any communications capabilities. ATMs used to be abused by people who would capture the dispense packets coming off the modem and then replay them until the machine was dry. I doubt this happens now that they (Diebold, at least) use 3DES. Several of the voting machines did in fact have and use network capabilities (most were via modem). I'm not saying this is the right way to do it, but there clearly is no requirement that voting machines have no communications capabilities.

    2) ATM's are required to read a mag stripe, but the voting machines are NOT required to read a mag stripe{or any type of card} How does the voting machine know that a valid voter needs to use the machine? Most implementations use a fob, smart card, USB key, or other removable media that is provided to each voter. Otherwise, what's to stop someone from voting repeatedly?

    3) ATM's are required to display and print a number of various types of forms and formats, but voting machines are NOT. Like most ATMS now, voting machines use touch screens for input and output. Any worthwhile voting machine also would have some sort of reciept printer, just like an ATM does.

    So the OS in the category of voting machine can and should have limited capabilities in respect to the OS in the category of ATM. I don't disagree that using Windows XP for voting machines (as well as ATMs) is a bad idea. However, I don't follow your attempt to draw such a big line between ATMs and voting machines.
  57. Re:Good, but so what? by acramon1 · · Score: 1

    1. The idea is that the website would have information/links/arguments etc above the little vote button - so it would be very easy to get educated on the issue before voting. Kind of like how you can read a slashdot thread and then become an expert on an issue. :-) This perhaps is the most dangerous of all. Who gets to write what goes above the little vote button? Whoever does has immense power over the voters. By providing a potentially biased view while also trivializing the voting process, we would open up the possibility of thousands or millions of votes being swayed by the writer/compiler of the "facts." Lobbyists can lobby the writer/compiler. If instead of a single writer/compiler we have a committee, who gets to pick the committee members? What keeps lobbyists from lobbying the committee after it's been selected? If we make the information for the vote an open forum, what keeps lobbyists from flooding the forum with their interests? Would a forum even be feasible with millions of daily readers?

    What you suggest may work, but I think, as you say, that a lot more thought is needed.
  58. Re:Good, but so what? by unclethehornet · · Score: 1

    Part of the reason that I am "floating" the idea, rather than doing it, is that this system would not be a monopoly - but simply one of many websites in a competitive environment of e-polling stations - each with their own "coalition of independents". Some of these sites would be private, and some would themselves be democratically run - so you could vote out the facilitator if needed.

    If voters thought the any particular system (e.g., mine) was in any way corrupted, they could stop voting in members from that system, and starting using another.

    Similarly, I would think that many commentary and review websites would spring up with the specific goal of reviewing the independence of such e-polling sites. Much like our current Media Watch program in AU. People could easily visit my summary website, each lobby group's website, and a number of independent review sites before voting.

    And my last count-point, is to compare the "corruptability" of my proposed edemocracy system verses your current "democratic" system. Start by counting the number of official "dinners", "lunches", or "functions" that your current representative attends in any given year...

    PS. I'm surprised that I've only had negative feedback on slashdot... Imagine if slashdot had a "vote" button at the bottom of each issue relating to a parliamentary bill, and that one (or more) members of parliament (or senators or whatever) would actually vote that way. Obviously there's a lot of the logistics to work out, but doesn't democratic and political power, and the achievability of such a system appeal?

  59. Fatally Flawed by mrosgood · · Score: 1

    Just scanned the replies (3 or higher, nested). Lots of uncritical praise, very little skepticism. If everyone here can take a breather from the mutual admiration and basking in the collective wisdom, as it were, I'd like to set everyone here straight.

    First, and please remember this, the ideal is private voting and public counting. Aka "The Australian Ballot".

    Computerized voting machines are fatally flawed. Unredeemable. There is no way to have a fully electronic system which protects the secret ballot as well as ensures the public vote count. Can't be done. Cannot. Be. Done. Period. Despite what all the electronic voting enthusiasts tell you. (I'm looking at you, Avi Rubin.) If you don't understand this, then please stop kibitzing, figure out how our voting systems should work (historically) and get up to speed. Thank you.

    Second, this bill relies on "auditing" to ensure the integrity of our elections.

    That never works. You cannot test your way to quality. Any one working software knows this. If you're in software and don't, please stop pretending and resign your job.

    Additionally, by the time the mistake happens in an election, it's already too late. Too late. Because there's no recourse.

    Timothy B. Lee, and other electronic voting apologists, like to mischaracterize the opposition of informed and experienced election integrity activists and experts. I can't guess why. My pet theory is unbounded technolophilia. Others suspect darker motives. Who's to say.

    Anyone actually concerned about the health of our democracy would do well to read the criticisms of Holt's HR 811. Here's Beware of the Bandwagon -- A concise list of problems with Holt Bill HR 811 and Help Amend HR 811 to prohibit "electronic ballots."

    That is all. I'm happy to answer anyone's questions. I'll check back later.