Slashdot Mirror


Prof. J. Alex Halderman Tells Us Why Internet-Based Voting Is a Bad Idea (Video)

On March 2, 2012, Timothy wrote about University of Michigan Professor J. Alex Halderman and his contention that there is no way to have secure voting over the Internet using current technology. In this video, Alex explains what he meant and tells us about an experiment (that some might call a prank) he and his students did back in 2010, when they (legally) hacked a Washington D.C. online voting pilot project. This is, of course, a "professional driver on closed course; do not attempt" kind of thing. If you mess with voting software without permission, you might suddenly find the FBI coming through your door at 4 a.m., so please don't do it.

2 of 264 comments (clear)

  1. Re:Not a "bad idea" by Anonymous Coward · · Score: 5, Interesting

    The problem is that the cost of securing such a system (which has to be accessible to the general populace) is very very high compared to the cost of compromising such a system.

    Anyway, I dislike any system where it is not mandatory to enforce the privacy of the voter. One of the main reasons we all have to go into a single person booth is to prevent someone who can *tell* how we voted influencing our vote. This could be as nasty as a someone with a crowbar or insidious as the patriarch of the family making his family vote in the same way.

  2. Re:Yes, a bad idea by yakovlev · · Score: 5, Interesting

    Absolutely. This was my first thought.

    It's actually quite sinister when you consider that you can combine this with a Super PAC.

    A Super PAC is an organization that can get unlimited amounts of money from corporations and has zero legal accountability to the candidate. This means it's perfectly possible for a Super PAC to offer to pay anyone $20 to vote (implied "for their candidate") then include some kind of browser plug-in that actually checks that the voter voted. If it's determined that this is illegal then the Super PAC goes down, but the candidate is squeaky clean. I'm sure they'd portray this as the internet equivalent of driving you to the polling place, though it's obviously much worse.

    $20 per person x 300 million people = about 6 billion dollars to pay every man woman and child $20 to vote. It's probably a billion or two cheaper than that when you consider that children can't vote. This means it is well within the abilities of a well-funded Super PAC to offer $20 per vote (technically not necessarily for their candidate) to anyone who will take it.

    All I've tried to describe above would likely be considered legal. If they wanted to step a little outside legal, the plug-in could "helpfully" fill out the vote form for the candidates they wanted you to vote for. A little less sinister would be to add a "default vote" or "Vote with Super PAC for Hope!" button to the ballot shown to the voter. Even if they said they would still pay you, some people would vote as directed for fear they would lose the money, and many would vote as directed because clicking the button or just pressing "VOTE" on the form as presented was easier than thinking about the issues. They could go even less sinister than that and just reorder the candidate listings on the ballot, such that their candidates were always on top.