Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Slashdot Log In

Log In

Create Account  |  Retrieve Password

Federal Panel [not NIST] Rejects Paper Trail For E-Voting

Posted by Zonk on Thu Dec 07, 2006 01:43 PM
from the democracy-costs-too-much dept.
emil10001 writes "The National Institute of Standards and Technology (NIST) has rejected a proposal suggesting that electronic voting have a paper trail. The draft recommendation was developed by NIST scientists, who called out electronic voting machines as being 'impossible' to secure." From the article: "Committee member Brit Williams, who opposed the measure, said, 'You are talking about basically a reinstallation of the entire voting system hardware.' The proposal failed to obtain the 8 of 15 votes needed to pass. Five states — Delaware, Georgia, Louisiana, Maryland and South Carolina — use machines without a paper record exclusively. Eleven states and the District either use them in some jurisdictions or allow voters to chose whether to use them or some other voting system." So ... accountability in voting will be a joke for the foreseeable future because it costs too much?
Update: 12/11 03:20 GMT by KD : Correction: It was not NIST that rejected NIST's recommendations, it was a federal panel chartered by Congress, the Technical Guidelines Development Committee.
+ -
story

Related Stories

[+] News: Brave New Ballot 137 comments
Ben Rothke writes "In an important new book Brave New Ballot: The Battle to Safeguard Democracy in the Age of Electronic Voting, Avi Rubin writes 'too often in American life, when it comes to divisive issues, the facts can be less important than the weight of public opinion'. That basically sums up Rubin's story in this fascinating story of his frustrations in dealing with government and corporate officials in his quest to show that e-voting was not as secure as it was originally made out to be." Read the rest of Ben's review.
[+] Interviews: Hugh Thompson Answers Voting Machine Security Questions 122 comments
You posted your questions for Herbert H. Thompson, PhD, on November 3rd and 4th. He decided to wait to answer until after the election in case there was a flagrant voting machine problem he could include in his answers -- and there has been at least one, but it is probably not a "security" problem per se, and is a long way from being resolved in any case. So here we go. Good food for thought here.
[+] IT: NIST Condemns Paperless Electronic Voting 201 comments
quizzicus writes "Paperless electronic voting machines 'cannot be made secure' [pdf] according to the National Institute of Standards and Technology (NIST). In the most sweeping condemnation of voting machines issued by any federal agency, NIST echoes what critics have been saying all along, that due to the lack of verifiability, 'a single programmer could rig a major election.' Rather than adding printers, though, NIST endorses the hand-marked optical-scan system as the most reliable."
[+] News: U.S. To Certify Labs For Testing E-Voting Machines 75 comments
InternetVoting writes "In a clear counter to the recent criticisms of secrecy involving Ciber labs the National Institute of Standards and Technology (NIST) has issued recommendations (pdf) to the Election Assistance Commission (EAC). NIST recommends the accreditation of two labs, iBeta Quality Assurance and SysTest Labs. The recommendation, emphasizing the need for transparency, includes on-site assessment reports, lab responses, and on-site reviews for each lab. These reports shed much needed light into the process of voting machine certification. Learn more from the Q&As About NIST Evaluation of Laboratories that Test Voting Systems."
This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
  • First p (Score:4, Funny)

    by Harmonious Botch (921977) * on Thursday December 07 2006, @01:45PM (#17149522) Homepage Journal
    Hey! Where did the rest of my subject line go?? It was there! I typed an'o', an 's', and a 't'! These dang computers are so insecure. I want a paper trail of my postings.
  • So ... accountability in voting will be a joke for the foreseeable future because it costs too much? Yes, its expensive and will remain a joke, not because its expensive, but because politicians want it to be expensive to fix the joke that helps them win elections....
    • Have you considered the possibility that the people who voted against the proposal (or their political masters) got into place via a software-rigged vote?
      • My first thought was simple: WTF? Better crack than the mods at ./ apparently.
        But you and the GP seem to fit Occam's Razor better, so I think it's likely to be true. Sadly.

        -nB
    • Re: (Score:2, Insightful)

      The administration in power just suffered an enormous loss of power, with these machines already in place. Many of those elections were close enough to tip with only a tiny, hard-to-detect cheat, and the Republicans needed only a single change in the Senate to keep power there.

      Are you saying that they're waiting for something REALLY important to come along before they unleash the their cheats?

      I do think we need better accountability in elections, because it's terrible that we can't be certain in the country
      • [sarcasm]They cheated alright, but due to a bug with a misplaced decimal or something ("I always do that") they found that they had $300 grand more than planned and thew Dems got the votes.[/sarcasm]

        realistically though if you were to cheat you would want it to me hard to detect, maybe if they did the algorithm just needs more tweaking? :-)

        I dunno, I simply hope for the big backlash to put indys in office. I bet if Ross Perot ran now he'd take it by a landslide.
        -nB
      • Well, obviously the republicans did cheat, just they did not cheat enough! the voter gap was so large infavor of the Dems that those evil repubs lost even AFTER adding lots and lots of extra votes!

        Or, if you are a republican:

        Well, it is obvious that the dirty dems riged the vote this time around! They stole the election! And we all know that the dems ALWAYS rig elections (*point back to past casses of votter coersion*).

        heh, pardon me, just felt like it :D

        As for why I think they voted it down?
        They don't r
      • by ShieldW0lf (601553) on Thursday December 07 2006, @02:23PM (#17150176) Journal
        Committee member Brit Williams, who opposed the measure, said, 'You are talking about basically a reinstallation of the entire voting system hardware.'

        You know, if each American who reads slashdot went out and smashed just ONE voting machine each with a sledgehammer, this entire argument would be a moot point.

        I do think we need better accountability in elections, because it's terrible that we can't be certain in the country that's supposed to be the leader in democracy.

        Is this a joke? America has replaced more democratic leaders with puppet dictators than Nazi Germany and Soviet Russia put together, and their own democracy looks more and more like a trick of the light with each passing day.
      • Re: (Score:3, Insightful)

        What makes you think they didn't cheat? It could very well be that they rigged to throw one out of ten thousand votes to go republican but it wasn't enough.

        I am not saying that they did that, I am saying that just because they won it doesn't mean they didn't cheat. It could mean they didn't cheat enough and maybe next time they will.
  • Great quote (Score:5, Insightful)

    by Daniel Dvorkin (106857) * on Thursday December 07 2006, @01:47PM (#17149558) Homepage Journal
    "You are talking about basically a reinstallation of the entire voting system hardware."

    Um ... yeah, like the switch from paper ballots and/or mechanical voting machines to electronic voting machines in the first place?

    Stupidest. Excuse. For. Shilling. For. The. Forces. Of. Evil. EVER.
    • Re: (Score:2, Insightful)

      by Anonymous Coward
      Even if it's not schilling for the forces of evil, it is unwise to admit to an error in judgement and simultaneously claim that it would be too costly to repair your error after the fact.
    • When I voted in the last election my polling place had about a dozen plastic voting booth tables on metal legs and one optical scan reader that instantly verified/tabulated/secured the paper ballot (mis-marked ballots are rejected by the reader). Imagine the costs for that single poll station if there were a dozen complex electronic voting machines instead of the plastic booths. It's also easier to train poll workers how to replace pens and issue new blank ballots than it is to get them to understand comple
      • Re: (Score:3, Interesting)

        >Whether or not you think electronic voting can ever work, from a simple cost-effectiveness standpoint it is an asinine goal to pursue.

        This is absolutey not true. Electronic voting done right works in many places, most notably Brazil. Theyve had some scandals but now they have paper verified voting. You vote and it prints out a slip of paper. The paper goes in a bag in case of contestment. (is that a word?) Not to mention Brazil is HUGE country. Its almost 200 million. We're at 300 million and we dont
    • Tell Brit Williams [nist.gov] how you feel. His email is on that page.
  • by Kookus (653170) on Thursday December 07 2006, @01:48PM (#17149570) Journal
    So what if there's a paper trail? It means absolutely nothing unless it's actually used, and is accessible by the people casting the votes! This is something that is wrong with the current system also!

    I have no idea who I voted for in any election. I know who I thought I voted for, but I have no idea if it was counted that way. Where can I go to find that out? Let's say there is some way for me to determine if my vote was counted in a certain way. What about everyone else? Is there a way to make sure the vote they think was mine was exclusively mine?

    I'd rather have the problems associated with receipts with ids on them that I can log online to see who I voted for instead of the current system.
    • So what if there's a paper trail? It means absolutely nothing unless it's actually used, and is accessible by the people casting the votes! This is something that is wrong with the current system also!

      I have no idea who I voted for in any election. I know who I thought I voted for, but I have no idea if it was counted that way. Where can I go to find that out? Let's say there is some way for me to determine if my vote was counted in a certain way. What about everyone else? Is there a way to make sure the vote they think was mine was exclusively mine?

      I'd rather have the problems associated with receipts with ids on them that I can log online to see who I voted for instead of the current system.

      That would alloc coercion and vote buying.

      • Re: (Score:2, Interesting)

        What's a commercial? Why do the big race politicians spend millions of dollars (They sure aren't doing it to get their "message" out)?

        You gotta be kidding me if you think they aren't already buying votes.

        Let them attempt to buy elections, make it illegal, put out "honeypots", catch the rats and disqualify them from the race! Even if they could directly buy votes, think of how much money you'd need to spend just to sway an election... and there's no way you could do that without getting caught.

        I sure hope so
        • There is a difference between a political advertisement and saying "If you vote for X and can prove to me that you did, I'll give you $n"
    • Re: (Score:3, Interesting)

      There are three problems with logging online to see who you voted for:
      1. You could sell your vote, and use the website to verify it to the purchaser.
      2. Your boss or someone else could intimidate you into voting a certain way, and you would keep your job by showing your boss how you voted on the website
      3. The fact that you cast a ballot and your receipt number shows a certain vote on a website may have nothing at all to do with the official tally.

      See this post [slashdot.org] for my solution..

    • come up with such a system that protects you being susceptible to intimidation. your own access to your recorded vote outside of the voting booth of necessity grants access to your recorded vote to anyone who "convinces" you it is worthwhile to show them your vote.

      i still don't see the problem with simple scantron "fill in the bubble" voting sheets. fill them in, take them to a machine and feed it in. the machine displays the votes on screen that it is about to record. you confirm that "yup, the machine rea
    • "I'd rather have the problems associated with receipts with ids on them that I can log online to see who I voted for instead of the current system."

      Fine. In the next election, make sure you vote for the party I tell you to. I expect to see your reciept as proof you voted appropriately. If you don't, I'll break your kneecaps with a sledgehammer. And if I can't find you, I'll just have your family killed.

      Or we could just, you know, *not* promote vote fraud. That would be OK too. Whichever you and

    • It is used. Whenever there's a recount.

      No, you can't link an individual ballot to a particular individual. That's a feature, not a bug. If you could identify individuals you would enable coercion before the election and reprisals afterwards, hardly favourable conditions for a democratic society.

      But while you can't follow your particular ballot through the system, you can do that as a group. If 100 people vote at your polling station and more or less than 100 votes are tallied then there has been some ta

      • Re: (Score:2, Informative)

        I'd rather be ignorant on a subject then a complete asshole like you.
        • "The man who does not read good books has no advantage over the man who can't read them." - Mark Twain

          "It is better to keep your mouth closed and let people think you are a fool than to open it and remove all doubt." - Mark Twain

          So, the next question is, are the willfully ignorant worse than those who have tired of dealing with them?

          Or, to put it another way. Voting, and the pitfalls inherent in it is a very old topic with lots of information available, and examples to show the pitfalls in practice. Perha
  • Too Costly? (Score:3, Insightful)

    by gt_mattex (1016103) on Thursday December 07 2006, @01:49PM (#17149590)

    So, disregarding the fact that their own scientists cited the machine's insecurities, the executives feel that the 'cost' of replacing or updating the machines is prohibitive for our countries (arguably) most important decision?

    This whole things reeks of pork and the 'old boys' club'

  • by DavidinAla (639952) on Thursday December 07 2006, @01:50PM (#17149594)
    That news article was from two days ago. Check out what happened since then: http://www.techliberation.com/archives/041383.php [techliberation.com]
  • by mungtor (306258) on Thursday December 07 2006, @01:50PM (#17149610)
    "Members of the Technical Guidelines Development Committee, a group created by Congress to advise the U.S. Election Assistance Commission, deadlocked 6 to 6 on the proposal at a meeting held at the NIST headquarters in Gaithersburg. Eight votes are needed to pass a measure on the 15-member committee."

    How do you deadlock 6 to 6 on a 15 person committee? Were the other 3 votes just not counted?
  • by Philom (24273) * on Thursday December 07 2006, @01:51PM (#17149626) Homepage
    This story is badly out of date. The panel voted again the next day and reached a compromise that will require future electronic voting machines to have paper trails. See:

    http://news.com.com/Panel+changes+course%2C+approv es+e-voting+checks/2100-1028_3-6140956.html [com.com]
    http://www.freedom-to-tinker.com/?p=1095 [freedom-to-tinker.com]
    • Re: (Score:3, Interesting)

      That's interesting, I submitted the story yesterday at noon, and hadn't seen anything new on it. But reading the update is also quite interesting, because the issue remains that the voting machines which are currently in place, and have no paper trail, will stay there as they are. The proposal that passed leaves it to the "next generation" of machines, and does not seem to affect the ones currently in place. So, this story is still relevant, because those problematic machines are still in place, and will st

  • The article summary (no, I didn't RTFA) seems to be in direct opposition to a Washington Post article I read today stating that the Technology Guidelines Development Committee wanted to "end the era" of paperless electronic voting and that many politicians wanted to add some form of verification method.

    So who's got the real story and who's just spreading FUD? Inquiring minds want to know.
  • Not cost (Score:5, Insightful)

    by amigabill (146897) on Thursday December 07 2006, @01:55PM (#17149698)
    So ... accountability in voting will be a joke for the foreseeable future because it costs too much?

    No. Accountability in voting will be a joke because that would be an inconvenience to the Inner Party achieving their goals, whatever those may be. Cost is simply an excuse for the public.
  • by Anonymous Coward
    ... except when it's our Democracy.

    Think about it, we spend more in Iraq each month than this proposal would cost, all in the name of "securing democracy". Not only that, it's perfectly clear at this point that the only "freedom" we are providing the Iraqis is the freedom to kill each other and our soldiers.

    How the hell can anyone not support this measure? Or, more appropriately, how are the clowns who don't support it keeping their jobs?

    Oh,

    yeah,

    the easily stealable elections...
  • by Bryansix (761547) on Thursday December 07 2006, @02:02PM (#17149838) Homepage
    I'm getting really tired of this crap! Putting the whole country on an optical scanning system would not be expensive at all. No more excuses. I want a paper with the name of the candidate I voted for right next to my mark. I want this to be audited randomly and I want random checks of the random checks. I want to know that my vote was counted. Otherwise this is just a fake democracy.
    • Why do you need optical scanners at all? Why not just have people count the votes? This is the way it works in Canada, and in many other countries.
  • I haven't yet determined if this is a conspiracy of power mongers or just one of mass stupidity. I think both.
  • The scientiest at the NIST are right: voting machines *are* indeed impossible to secure. But it's not because of some inherent technical limitation or issue. It's because there is absolutely no way to truely verify the integrity of the machine at its most basic levels: operating system and voting software. There's no way to ensure that either has not been tampered with since both of these two critical pieces of the infrastructure are usually closed source.

    Now, while I'm a fan of open source, I can definitel
  • Secure tallying (Score:3, Interesting)

    by lawpoop (604919) on Thursday December 07 2006, @02:06PM (#17149900) Homepage Journal
    I don't think the solution to current-day voting machine problems are a more secure way of voting. I think what we need is secure tallying.

    Whatever scheme we dream up, such as punch-card voting, or a paper trail, the fact remains that we really don't know whether our vote will affect the *tally*. A paper trail only comes into play when the official tally is suspect for some reason. What we really need to know is that our vote is counted. Even if we have a bar-code on a paper receipt that shows exactly who we voted for, we have no way of knowing whether or not our little bar-code verified data gets in to the official tally.

    Here's what I wrote [slashdot.org] the last time this discussion came up on slashdot:
    "What I'm envisioning is some kind of method where votes can be tallied, and the running tally can be periodically published during the count. I imagine it would have some kind of hashing technology, like PGP, where tallies are perhaps encoded in a string, and the string is published. The hashing token, or whatever mechanism allowed a vote to be legitimately added to the tally, would be passed from one voter to another, after they voted. This puts the power to count votes into the hand of the voters, rather than a poorly-trained election volunteer, a partisan, or a hackable machine. Because of the constraints of the token and hashing, a voter can only vote as they are allowed, without destroying the tally hash string."

    One problem with secure tallying is that you want to make sure that your vote is counted in the official tally, but you don't want others to deduce how you voted from the official tally. At this point, I imagine one voter passing the official tally to the next voter. That way you can be certain you have affected the tally, and the design of the system constrains you to only one vote. Periodically, perhaps every hour, the official tally is publicly released. Nobody can then figure out how you voted; they only know how the crowd voted in the past hour.

    To satisfy the choke point of one voter passing the official tally to the next person, there can be multiple official tallies that are running concurrently, and at the end of voting, they are all added together in a master tally.
  • A few years ago when your candidate lost, you complained about other countries having E-voting and u.s. lagging behind. When your candidate still lost in 2004, you complained about E-voting not working and rushing into it too fast.

    Now you're complaining about other countries taxing energy use to reduce global warming and u.s. lagging behind in such taxes. Wonder where this is going.

  • It's not the people who vote that count, it's the people who count the votes.

    If voting mattered, they wouldn't let you vote! Silly to think you actually have choices in an election. Elections are just your high school SGA with older people. Simple popularity contests.
  • by nullchar (446050) on Thursday December 07 2006, @02:10PM (#17149958)

    So ... accountability in voting will be a joke for the foreseeable future because it costs too much?

    And accountability in voting will be a joke because the first implementation was a total fuck up?

    In software, the solution to this problem would be: eVoting 2.0
    Changelog:

    • Added verifiable paper trail for each ballot cast (not a total summary printout at the end)
    • Replaced Diebold with open source hardware and software
    • Restored confidence in democracy
  • Voting machine:

    1. Setup linux distro with apache, tomcat, whatever
    2. Install ballot web app
    3. Install ballot CUPS printer filter
    4. Setup firefox for kiosk mode

    Counting machine:

    1. Setup linux distro with ballot_counter.py
    2. Attach scanner
    3. Run ballots through OCR software
    4. Update counters (in realtime as scanned)

    Ballots print like this, one measure per line:

    PRESIDENT: AL GORE
    SENATE: JAMES WEBB
    STEM-CE
  • I can walk into a store and buy a postage stamp and get a receipt for it. The receipt uniquely records my transaction and is my proof that I bought a stamp. So how come a voting machine cannot do likewise? It isn't rocket science. It isn't difficult. All it has to do is print a receipt that I put in a box when I walk out of the voting booth. If there is any dispute, the paper receipt can be used independently count the number of votes which should tally with the electronic total.

    I do not understand why an

    • It would take away the intimidation and nuttiness factors of each side having their own lawyers watching to make sure that clueless those chads don't get pregnant.

      Problem with mail voting is that ballots could be made to "disappear" outside the election system (for example post office clerks could be bribed to toss them). The more hands sensitive data passes through, the more of a chance there is for corruption of said data, whether accidental or malevolent.

      -b.