E-Voting Report Finds Problems with Modern Elections
JonRob writes "The Open Rights Group has released a report on challenges faced by voting technology. Using the May 2007 Scottish/English elections as a testbed, researchers have collated hundreds of observations into a verdict on voting in the digital age. 'The report provides a comprehensive look at elections that used e-counting or e-voting technologies. As a result of the report's findings ORG cannot express confidence in the results for the areas we observed. This is not a declaration we take lightly but, despite having had accredited observers on location, having interviewed local authorities and having filed Freedom of Information requests, ORG is still not able to verify if votes were counted accurately and as voters intended.' The report is available online in pdf format for download."
give me one problem with paper ballots? seriously you nerds, this is a solution in search of a problem.
If you mod me down, I will become more powerful than you can imagine....
What's the betting they'll sue for some arcane reason? :-)
"All you need is ignorance and confidence; then success is sure." -- Mark Twain
"I mistrust all systematizers and avoid them. The will to a system is a lack of integrity." - Friedrich Nietzsche Twilight of the Idols
I agree that no system is above corruption - paper ballots included - but the lack of any verification is the greatest issue with the e-voting systems currently in use. Election fraud has been with us since the first Greek citizen was bribed for a vote; however, Diebold and others - with help from elected officials - are making a concerted effort to ensure that there is not - and will not be - such a system of verification. This report is terrifying, and I'm not sure what citizens can do beyond what they have been doing, given our current political climate.
"Those who believe in telekinetics, raise my hand" - Kurt Vonnegut, Jr.
The major reason that the unwashed masses don't really care about paper vs electronic ballots is that they really don't care about politics and voting. If this was to do with something important to most people (eg. What is on TV tonight) then you'd get people interested.
Engineering is the art of compromise.
it's just me and I'm not up on all the whys and wherefores but how fricken hard can it be to count something?
Can I get a "Duh" tag applied to the article? I thought everyone knew there were problems with modern elections.
Video at 11.
Well, it's more than a bad idea. E-Voting is probably the biggest threat to democracy since the second world war. I'm not exaggerating here. It's the apathy within we should be afraid of.
But I digress. Let's roll out an analogy here.
Let's say the government contracted out the counting out of paper ballots to private companies. Let's say again that these companies took your paper ballots into a huge warehouse with blacked out windows and wouldn't tell or show anyone how they were counting the ballots. They simply emerged hours or days later and announced the result. Would you be satisfied with this? Would you accept the result?
Let's soften the blow. Supposed the company allowed government inspector into the warehouse to supervise the counting. Would that make you feel more confident in the result?
Now, what is the difference between the warehouse, and the current systems of E-Voting. What is the difference between the warehouse and [b]any[/b] system of E-Voting, present or future? Why accept a computerized count if you wouldn't accept the warehouse. (Of course many people would accept the warehouse, but I digress...)
You know what the depressing thing is. Most people want E-Voting. Not because they think it's cheaper. Not because they think it's more reliable. It's because they think it's cool.
May the Maths Be with you!
In a typical American election, you might be voting for President, Governor, a Senator (2/3 chance), a Representative, a Mayor, School Board Members, State Representatives, ballot initiatives, etc. A 2-inch-square box for each of these would require a lot of paper.
Ben Hocking
Need a professional organizer?
For your consideration, may I present my[1] idea for a voter-verifiable counting system:
---
In addition to any other vote-counting or verification system, a county
elections office could take a full optical scan of the ballot papers.
The data from these scans would be made available to all who request it;
anyone could acquire the data and perform their own re-count with any
method of their own devising.
This would provide complete transparency for the automated portion of
the counting process.
The problem with optical-mark scanners, of course, is that the
scanner's internal software and firmware is vulnerable to tampering.
Such a tampered machine cannot change the ballots it reads, but it can
misinterpret them.
By providing a raw image scan to the public, we'd be enabling many
eyes to provide their own interpretation of the ballots. Any
optical-scan vulnerability would become moot. We would go beyond a
voter-verified ballot, and get to a voter-verified count.
This is technically achievable with commercial off-the-shelf hardware
for well under $100,000 per county in capital expenditures.
Specifically:
* Industrial scanners of sufficient reliability are available. At my
workplace we have a "light" duty commercial scanner with a duty cycle
of 8,500 scans per day; this machine cost around $7,000. If county
clerks were to have about 5 days to produce the scans, two of these
scanners could completely scan the ballots for all but the largest
counties. And, of course, heavier duty scanners are available.
* Since industrial scanners are not optimized for ballot reading or
even optical-mark recognition, it would be much more difficult for any
malicious entity to successfully tamper with their software to produce
inaccurate ballot image scans. It's much more difficult for software
to produce an incorrect image than an incorrect interpretation of an
image. What's more, these scanners are available from several
manufacturers; if one distrusts any or all scanner vendors, one could
simply scan the original ballots with a variety of different
manufacturers' scanners and compare the results.
* For the standard optical-scan ballot, a fax-quality scan would be
sufficient for a voter-verified count. Better scans are possible for
higher time, money, and data storage budgets, but I don't think they
would be necessary as a practical matter.
* The data storage requirement for an approximately fax-quality scan
of every Oregon ballot - approximately 2 million ballots with 100%
turnout - would be under 500 gigabytes uncompressed per statewide
election. (And ballot scans should be highly compressible even with
lossless and error-correcting algorithms.) Portable hard drives that
large are available for around $300. Most individual county ballot
scan datasets would even fit on larger iPods.
---
This brings up a couple other problems, of course. Foremost, the ballots have to be on ADF-feedable paper, and probably had best be marked ballots rather than punched-paper. Also, the question of what to do with a voter-made distinctive or identifying mark on the ballot needs to be addressed. (Distinctive marks could lead to buyer-verified vote buying.)
But still, it's a huge step beyond just trusting the county's optical-scanning ballot interpreter.
[1: Actually this is my brother's idea, which I have modified slightly.]
With reasonable men I will reason; with humane men I will plead; but to tyrants I will give no quarter. -- William Lloyd
Ben Hocking
Need a professional organizer?
In addition to any other vote-counting or verification system, a county
elections office could take a full optical scan of the ballot papers.
The data from these scans would be made available to all who request it;
anyone could acquire the data and perform their own re-count with any
method of their own devising.
Vote-buyers could pay people to vote a particular way and make
an individual identifying mark in some non-significant part of
the ballot. The scan would enable them to check whether the
voter had voted as he had been paid to do.
(I found out about these laws when looking into getting FOIA
access to the raw output of an OCR scan of ballots, intending to
do statistical analysis to look for various kinds of vote fraud,
which might show up as long runs of identical or near-identical
ballots or other anomalies. Sorry, no can get.)
Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
*Make the code as open and freely viewable as possible. This will ensure maximum review.
* There was a NATIONAL standard. None of this spotty state-by-state Quality Assurance hooplah. Utilize the standard Southwest Airlines uses: find one rock solid, simple standard and stick to it across the board.
* Minimalism over Featurism: Make the system as simple as possible hardware/software wise. The more complex a system, the more room there is for error.
* Hardwired hardware vs software. Once a system has been hammered out to the quality level of Space Shuttle computer code, burn it into a chip. Utilize as little software as possible, as it is much harder to manipulate physical hardware then it is to flash a memory card
* Make the hardware as hard-wired as possible. Utilize ROM-only memory. No memory cards, no FPGAs, no flashable BIOS, but straight up hard-coded hardware. This will greatly reduce the ability to tamper with the system before an election.
* Make physical security an absolute top priority. Physical security is one of the major complaints against Dibold systems.
* Any upgrades needed would go through just as much review as the original code, and would be published just as freely and openly. Also, upgrades could only be made within a certain amount of time before an election. Once this time period has passed leading up to an election, the hardware could not be changed at all. This would help reduce any last minute changes to the code.
* Make the manufacturing of this electoral system completely governmental. Yes, it may be bloated as other government projects, but it will not be controlled by private interests which have profit interests and would likely copyright parts the system. It will be a system for the people by the state. No middle man.
* Setup an independent commission to oversee the entire roll out of this system, at every single stage. From the infancy of the code to election day and beyond.
* A physical paper trail MUST be incorporated, and be reviewed by the citizen ballot caster on election day. It MUST also be a federal offense, punished with heavy penalties, for tampering with this trail. Also, it must be a punishable offense for not auditing the election against the paper trail.
Under these points, I would support a digital voting system.
- Vote with a computer interface
- the computer stores your vote
- you get a receipt how you voted
- you check and fold the receipt and drop it into a sealed box.
After the election ends, the computer spits out the results.
In randomly selected polling places, the paper receipts get counted manually. If there are major differences, more polling stations will be selected for a manual count.
"Beware of he who would deny you access to information, for in his heart he dreams himself your master."
when you voting in several elections, each with different rules your just asking for problems and this happened in scotland.
If your vote is 'meant to count' - then these politicians will find a way to make it not matter.
example: in our local election i could vote for 8 candidates. It becomes meaningless quite quickly
Is there something so terribly wrong with the scantrons we use so often in college and standardized testing? Quick, easy, and if there is a recount, a quick visible inspection makes it easy to tell who somebody intended to vote for.
And the masses cried out, "09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0!"
Seriously, that's all they need to do. Print a small paper receipt and drop that into a box and the county clerks could even count them all manually, but at their liesure. We'd have an electronic tabulation immediately, no staying up till midnight waiting for results, people working late, etc. Open source the code for peer review and its a solidly secure, reliable system. Who exactly isn't getting this? Oh...the people in charge who are techno idiots. Right...
If your too stupid to punch a hole or mark a box your vote shouldn't be counted.
Sucks to be dumb. There is no law that can change that.
John McAfee 'It was like that time I hired that Bangkok prostitute; to do my taxes, while I fucked my accountant'
I'm not for digital voting unless or until it is combined with OpenID, public key privacy, and a very high level of trust. This is not going to happen any time soon.
At least in the USA you have to be given enough time off to vote.
More fundamentally many think encouraging everybody to vote is a good thing. I disagree. Encouraging everybody to become informed is a good thing. IMHO Keeping the uninformed from voting is actually a good thing.
John McAfee 'It was like that time I hired that Bangkok prostitute; to do my taxes, while I fucked my accountant'
Why not pass it over to the banks? You have to pay for postage on an absentee ballot. I would happily pay that amount of money for a transaction from a bank with a receipt, perhaps an encrypted receipt I could forward to the DNC, RNC, or anyone else counting. I know some people have problems with online banking, but at least where I bank--the boeing employee's credit union--I would safe using this system to ensure my vote gets collected, counted, and a receipt returned to me or anyone else to which I would like to have it forwarded.
I strongly disagree with anyone who says that e-voting is a threat to democracy. the closer we can get the voter to the decision-making process--assuming you believe the voter should have a part in the decision making process--the better.
We bank online and yet we can't trust e-voting terminals? Perhaps we just need to find a competent company like Microsoft to handle this.
I'm not sure why many Western countries are obssessed with updating to electronic voting systems. They're 1) expensive, 2) very easily breached, 3) widely distrusted, 4) made by morally vacuous people (i.e. Diebold), 5) leave little to no paper trail most of the time, & 6) difficult to figure out in some instances (I'm talking about elderly people here). "eVoting" should be tossed out the window and replaced with something much, much more reliable - like a nationally standardized system for paper votes, counted and recounted by hand, and stored in a place - in the originally submitted order - where they can be easily recounted.
Stealing an election with paper ballots is a royal PITA. Fortunately, with E-voting, it is much easier.
"Be grateful for what you have. You may never know when you may lose it."
Report Finds Problems with Modern Electrons I thought I was going to read some major finding from a physics lab!
? syntax error
It is good to see the report out and see in measured words what those of us watching saw; that the preparation was below standard, procedures far from robust and the systems more black box than the public, candidates and parties happy to cope with.
I was proud to be part of this observation team and am looking forward to the next project I can give time to.
If anyone here wants to support the Open Rights Group either financially or buy volunteering to join in in further projects, scoot on over to http://www.openrightsgroup.org/support-org and sign up!
Gonzo: Slang for "the last man standing at a drinking marathon"
It sounds like a typical UK government IT scheme:
In short, such monumental managerial incompetence as to make me question if there are darker forces at work. I know you shouldn't ascribe to malice that which may be attributable to stupidity, but really, is anyone over the age of 12 that naive?
Ben Hocking
Need a professional organizer?
I try to stay up with the topics, but the day of the election I always make a point of making sure I know about every politician (regardless of party) and every resolution that will be on my ballot. That in itself takes far more than half an hour. Furthermore, when I lived in Atlanta, it'd take half an hour just to drive to the polling location and find a place to park! Then, there are the lines (usually around early morning and late afternoon/evening because almost no one has the day off). If you're lucky enough to live (and vote) near where you work, you could always do it during your lunchtime.
Making it a national holiday is symbolic as well. It says that this is important to us. Right now it says this is something that I'll try to squeeze in before work (if the lines aren't too long), or I'll try to squeeze it in before dinner (if the lines aren't too long). Election day should be a big deal, and not just seem like an afterthought.
How is that different from Memorial Day, Labor Day, MLK Day, or any other national holiday? Those who don't honor it (probably the majority of Americans for all of those), do exactly what you say they would do for a national holiday to vote. Why would it bother you that they did it on this new holiday as well?
Ben Hocking
Need a professional organizer?
The key is that one is allowed to vote unlimited number of times, last vote being the one that counts. So, if there is a pistol on your head demanding you to vote for someone you don't want to, then when the pistol has left the building you can cast another vote to revert that earlier one. The same goes for situations where somebody is giving you money for voting that somebody. After having been paid you could re-vote and cancel that vote that you were paid for.
l
A detailed description of Estonian model is available http://www.vm.ee/estonia/kat_340/pea_172/7025.htm
As a result; Estonians were again able to pull successful e-elections. Why should we reinvent the wheel and not use their E-voting model as a model?
The problem isn't black-box electronic voting, or paper ballots with dimpled chads, or any of the hypothetical situations you can conjure. One aspect of the problem is trust. We must not trust any one entity, whether Diebold or Fred and Ethel the election judges, to count the votes.
Read Acceptable Electronic Voting. Here is an excerpt:
The job of both electronic voting and paper ballots is quickly and securely converting the ballot into a vote, while maintaining the physical record for what is essentially forensic analysis. The situations are almost opposite: with electronic voting, bits can be mangled and made not to match the physical record, if any, but with paper ballots the paper can be mangled, discarded, or destroyed before, during, or after the counting process. Both processes are subject to time shifting: we don't know when the bits in an EVS got there, nor do we know when the paper ballots were cast. All we have are the controls in place, so we can at least get to the reasonable doubt level with paper ballots, but not, as you say, with black box electronic ones.
What's needed is a hybrid, to avoid violating the security principle of Least Common Mechanism. If the electronic system creates a physical record of each ballot/vote, and sends the results in itself, then if each voter checks the physical record as it is created there is an extremely high likelihood that the vote tally will be accurate. If a paper ballot reader tallies the votes itself, there is already a physical record.
Either way, by separating the counting from the collection of ballots, you avoid Least Common Mechanism and force a tamperer to match any electronic tampering to physical tampering, which is a lot harder than doing one or the other. The physical ballots should be counted the same as always, and serve as the official ballot since they will be there for verification. It then doesn't really matter whether the voting machine is open or not.
sigs, as if you care.
The schools are the basic problem. Idiots abound.
John McAfee 'It was like that time I hired that Bangkok prostitute; to do my taxes, while I fucked my accountant'
Every source has a viewpoint, from the lefties at NPR/ABC/NBC/CBS to the righties at FOX and talk radio.
This is called the net. Read as many sources as you can find, then impose your own viewpoint, then check yourself.
John McAfee 'It was like that time I hired that Bangkok prostitute; to do my taxes, while I fucked my accountant'
I'd be fine with that.
Many want all day to vote so they can 'vote early and often.'
Most cases of polling stations being kept open late are when a party (cough, democrats, cough) realizes they are about to lose and sends voters out to vote just one more time at the last minute.
John McAfee 'It was like that time I hired that Bangkok prostitute; to do my taxes, while I fucked my accountant'
Sure. But lets not make policy based on dreams.
They've had lots of chances to look into the issues, why would we assume they'd spend voting day differently than any other day off.
John McAfee 'It was like that time I hired that Bangkok prostitute; to do my taxes, while I fucked my accountant'
Why should Thanksgiving? Why assume they'd spend those days any differently than any other day off? Don't get me wrong, I'm not arguing for a holiday just for the sake of holiday. How about we vote on Labor Day? (I was going to suggest Thanksgiving or the Friday after, but then realized how many people would be in entirely different states.)
Ben Hocking
Need a professional organizer?