Slashdot Mirror


Sequoia Disclosing Voting System Source To DC

buzzinglikeafridge writes "After Sequoia voting machines registered more votes than there were voters in DC's primaries last September, and the city threatened a lawsuit as a result, the company agreed to disclose technical details of the system (including source code) to the city. Although this isn't the first time the company has disclosed the source code of its machines, it is the first time the machines' blueprints will be handed over as well."

19 of 100 comments (clear)

  1. Well there's your problem by feedayeen · · Score: 2, Funny

    if(candidate == "Bush") { castVote(candidate); castVote(candidate); } else { castVote(candidate); }

  2. Why not the first time? by Opportunist · · Score: 3, Insightful

    You want me to use your machine for my elections? Hand it all over. All. Source, blueprints, all. I want to audit it. For as long as I want and by whomever I please. Yes, of course you will get my signatures that your code will not be given to anyone (except for audits, but not to keep) and it will be only used to audit your machines. No problem.

    You don't let me? Ok.

    NEXT OFFER!

    Frankly, it's a HUGE biz. Once you have the foot in the door, do you think they'll audit your competitor or will they order their next machines with you again because they've been audited already? YOU want to sell ME your machines. YOU are about to earn a ton of money, enough that you'll never have to create any other product anymore. You're selling to the government, not some beancounting company, they won't question if your software costs a million despite costing you 10k.

    Do you think I'll find some company willing to comply with my requirements if you don't bend over?

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    1. Re:Why not the first time? by Opportunist · · Score: 2, Interesting

      Because I will compile it. Using my compiler.

      Doesn't work? NEXT!

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    2. Re:Why not the first time? by Anonymous Coward · · Score: 2, Interesting

      Some south-american countries do this already.

      The source makes rounds through representatives of all interested parties, and after examining it, they sign it with their private keys. Then the code (after verifying against their keys that it's not a changed one) is compiled (with a generic compiler for which md5 and sha1 are available) and then the resulting binary is signed digitally with keys from them all again. Then the signed binary gets copied to all the machines. And then anyone can check if the code in given machine has all the signatures it needs.

  3. What's so complicated? by Jamamala · · Score: 3, Interesting

    I don't understand how voting machines can be so complicated that such gross errors occur. Surely it can't be much more than a glorified counting program that also keeps some sort of log about what it's done. I'm making the presumption that these programs are for some reason very complicated, and that's why errors like this are more frequent than they should be. Can anyone either explain why they're so complicated or give another reason why they seem to spew out so many errors?

    (Aside from the witty "they're all programmed to vote for candidate X!" responses.)

    1. Re:What's so complicated? by S77IM · · Score: 4, Funny

      It's close enough for government work.

      --
      Student: Is it true that the foundation of the universe is paradox?
      Master: Well, yes and no.
    2. Re:What's so complicated? by Felix+Da+Rat · · Score: 2, Interesting

      My gut feeling for the complication is to add more features to help jack up the price per unit.

      Figure that each polling station will have at least 3 units, so you're talking about a lot of sales. A simple system, such as you described wouldn't be very expensive, and would be a tough sell.

      But if you add in 'Automated security sub-routines', 'Time stamp live validation', 'Heuristic Real-time Networked Vote Tallies', all of which I just made up, but sound semi-decent for a sales pitch, you can charge more.

      Of course, with such 'Features' you add complexity to what should be a straight forward system.

    3. Re:What's so complicated? by Devout_IPUite · · Score: 2, Informative

      Deibold makes ATMs. Those things are accurate, reliable, solid, perfect, etc. Why then should their voting machines be so flaky? I think the only answer can possibly be is "They wanted them that way."

    4. Re:What's so complicated? by Devout_IPUite · · Score: 2, Funny

      Pretty sure vote==1 doesn't do much. In Java it actually gives you an error. In C it just does nothing mysteriously.

  4. Re:Yay! by S77IM · · Score: 2, Interesting

    There is a solution to ALL election fraud - the Robinson Method.

    That's an interesting idea, but it seems like kind of a pain in the butt compared to paper-ballot systems. Plus, in reading it I instantly came up with like 3 or 4 simple ways to commit election fraud against such a system. So I think you are full of crap.

      -- 77IM

    --
    Student: Is it true that the foundation of the universe is paradox?
    Master: Well, yes and no.
  5. Should get the same attention as fighter planes by CFD339 · · Score: 5, Insightful

    The machines that protect democracy include jet fighters, naval warcraft, guns, rockets, bombs ---- and voting machines.

    The US Government wouldn't buy a any of those other things without a massive effort to make sure they were secure, why not voting machines as well? If you can compromise those, the rest are easy.

    --
    The problem with quotes on the internet, is that nobody bothers to check their veracity. -- Abraham Lincoln
    1. Re:Should get the same attention as fighter planes by dunezone · · Score: 2, Insightful

      The machines that protect democracy include jet fighters, naval warcraft, guns, rockets, bombs ---- and voting machines.

      The US Government wouldn't buy a any of those other things without a massive effort to make sure they were secure, why not voting machines as well? If you can compromise those, the rest are easy.

      Because the people that are elected in office are the same people voted in by those machines.

    2. Re:Should get the same attention as fighter planes by myspace-cn · · Score: 2, Interesting

      Actually the USAF is concerned about kill switches and other hidden logic built in at the doping level, and while the do play red team blue team with such devices, sadly the only way to truly find out is to destructively reverse engineer the chip. The only other way is to have 100% trust in the doping source, while maintaining 100% chain of custody.

      Meanwhile, out on the flightline, a tech sign's off that red x when the system is tested and working, "op's check good." It still doesn't mean it's working properly.

      Working correctly is meaningless with no transparency, chain of custody or public oversight.

      Also jets fly every day, electronic voting machines sat in storage, then had sleepovers. Where the machines were physically sitting in a poll worker's living room.

      The problem with electronic vote tabulation devices differs from "state secrets" when we start getting into things like "public oversight." Public oversight is impossible when humans walk into the Secretary of State's office, go through some training, then head out to their polling place with with no spectrum analyzer, meter, freq counter, or logic analyzer.

      I remind you, this is what we have now. And I am not making an argument for poll workers to have such tools, as that would be insanely stupid.

      Even if poll watchers knew basic, or assembly, or electronics, or physics, they can't be allowed to access the code or allowed into the machine while an election is live because our elections must have transparency. If you can read the code during a live election, while you might consider this partial public oversight (from a purely technical standpoint), you no longer have transparency. Transparency is essential to our elections. While you might argue you have a right to give your transparency up (ala the Astronauts), you don't have a right to force anyone else to give their transparency up. And if your reading the code, it's trivial to change the code or modify the data.

      This isn't just about code, it's also about firmware, and hardware!

      Interestingly (diebold/premier/sequoia/es&s Whatever they call themselves) tech's have reported as being allowed access to service machines during live elections.

      Electronic vote tabulation devices fail us at every step, Trust of the Doping Source, Chain of Custody, Public Oversight, and Transparency. Whoever pushes them to be allowed into our elections, clearly wants to subvert our government. While those who were accepting of such subversion early on were not fully informed, and others were clearly corrupt. There can be no excuse anymore.

      Yet know this information and still here we are with these devices subverting our elections still to this day. So called "corporate journalists" do not touch this topic. And now they want internet voting?! These people can't even publish documents on their websites correctly.

      And for the argument, "the handicapped need access to ballots so we need ballot marking devices."

      Utter nonsense, and frankly the subversive lie which has been used to stuff this cruft down our throats from the sources which are either uninformed or corrupt.

      We didn't use electronic devices in our elections in the 1700's and we don't need them today. The dilemma of you being disabled does not give you the right to subvert the entire election process by enabling invisible electronic exploits to be targeted against everyone else.

  6. Not being taken seriously by TheLink · · Score: 2, Insightful

    If it was actually being taken seriously it would be done by hand counted paper ballots.

    There are already good paper voting systems in use that meet important criteria such as:
    1) Being easy for most people to understand how their vote is counted and the effort it takes to cheat the system.
    2) Allowing the different political parties and independent bodies have their observers present to observe the votes as they are being counted.

    Because, I suggest that: elections don't just have to be fair. They have to be _seen_ as fair.

    Otherwise if there's a "surprise" result, there may be too many people on the streets for the police to quieten down. And that is a bad thing. If an election is seen as fair, while there may still be sore losers on the streets, the rest will be drowning their sorrows/disgust/disappointment in less troublesome ways.

    Electronic voting fails that way.

    It's a black box that the average voter does not understand. And worse, an expert in the field will tell you that it's a black box that makes cheating easier. How can you prove that the source code you see, is the one that was actually running during the election? You can't! If an ATM makes an error, someone in ops, accounts or audit might notice the creation or destruction of money. But the creation and destruction of votes is hard to detect and prove unless it gets to a ridiculous state (like now).

    I've been in the IT line for years and I see no good reason to have electronic voting systems in a Democracy.

    The more voters you have, the more counters and observers you can have. Hand counting scales fine.

    I find it darkly amusing that the most powerful country in the world spends hundreds of billions to choose governments oops "establish democracy" in other countries, and can't even spend a much lower amount to do things properly at home.

    --
  7. Re:Why a secret ballot? by WhatDoIKnow · · Score: 3, Insightful

    No one is getting executed or persecuted based on their vote.

    You think maybe that's because the vote is secret?

  8. Re:Why a secret ballot? by Anonymous Coward · · Score: 3, Insightful

    The reason the ballot is a secret is to be certain that no one can leverage your vote against you. A secret ballot is critical for the safety of the voters. Just imagine that your boss knows who you're voting for.

    "No one is getting executed or persecuted based on their vote."

    Not in the US, where voting is fairly free and safe. In other places not so much (Kenya).

  9. Re:Why a secret ballot? by An+Onerous+Coward · · Score: 2, Funny

    There is an old saying about how those who don't read history are doomed to repeat it.

    I have no idea why that thought sprang to mind just now. None whatsoever.

    --

    You want the truthiness? You can't handle the truthiness!

  10. Re:Why a secret ballot? by Devout_IPUite · · Score: 4, Interesting

    Yes, I am sure that secret ballots are essential. Not only can an open ballot leave you open to retaliation (an extremist group says "Anyone who votes for Candidate X is going to be on our hit list") but it also lets them buy votes a la "$50 for anyone who votes for Candidate Y" (by the way, at $50 for each voter takes about $3.5 billion if you want the same popular vote that Obama got last year. Obama spent around $0.6 billion, think any corporations would be willing to fund a candidate?)

  11. Re:Yay! by ae1294 · · Score: 2, Insightful

    Can you tell I am pissed off?

    No.. because you didn't use all UPPERCASE.... but everything you said is true enough. Something as important as voting shouldn't be played with and subject to the whim's of lobbyist and 'for profit' tech companies who are outsourcing their coding to china.

    The whole idea (facile) of saving a buck by making the voting system electronic or that paper ballets are too hard to understand is just cover for someone trying to make a buck or worse someone trying to rig elections with less effort and/or chance of being caught.

    Doesn't mater what party or group you belong to we all loose...