E-Voting Report Finds Problems with Modern Elections

JonRob writes "The Open Rights Group has released a report on challenges faced by voting technology. Using the May 2007 Scottish/English elections as a testbed, researchers have collated hundreds of observations into a verdict on voting in the digital age. 'The report provides a comprehensive look at elections that used e-counting or e-voting technologies. As a result of the report's findings ORG cannot express confidence in the results for the areas we observed. This is not a declaration we take lightly but, despite having had accredited observers on location, having interviewed local authorities and having filed Freedom of Information requests, ORG is still not able to verify if votes were counted accurately and as voters intended.' The report is available online in pdf format for download."

whats wrong with paper tickets anyway?

give me one problem with paper ballots? seriously you nerds, this is a solution in search of a problem.

Re:

The problem is it takes too much effort to steal an election if you use paper, duh!

Why I don't have a PDA

For many purposes it is very hard to beat dead trees and pencils. Just because something can be computerised does not mean it should be.

The major reason that the unwashed masses don't really care about paper vs electronic ballots is that they really don't care about politics and voting. If this was to do with something important to most people (eg. What is on TV tonight) then you'd get people interested.

Re:

give me one problem with paper ballots?

Blindness and other disabilities. Sure you could print braille ballots. So how about paraplegia, bilateral hand amputation, etc.? DRE voting machines can be adapted for a suck-and-blow interface. I can't think

Re:

I can't think of a paper adaptation except for having someone else help the voter.

An excellent solution.

Re:

Then have someone help the voter. In front of witnesses, so there's no chance of them being cheated. For the seeing impaired (but not blind) use large fonts on special paper and have vision magnification machines they can put them under in a suitably pri

Re:

Then have someone help the voter. In front of witnesses, so there's no chance of them being cheated.

Well, that really defeats the purpose of a secret ballot, then.

Re:

Well, that really defeats the purpose of a secret ballot, then.

Then just have a trusted witness. Judges, notaries, court clerks and most religious figures are already authorized to bear witness for official documents. Just have one on hand, or let someo

Re:

Welcome to life. There's no perfect answers. We have the following options

1)Secret electronic ballot, but no verification on the count, risking all of our right to vote being comprimised. But a small minority of the people who have problems voting may b

Re:

You do realize in the United Kingdom (where this pertains to) the ballots are only secret because nobody actually bothers to cross reference the ballot paper serial number against the electoral register where the serial number of the ballot paper was noted

Re:

right because spending huge amounts of money on your stupid suck and blow interface is better then just having someone help them because?????......

face it, there's better things for us to be doing.

Re:

For blindness, you can just have a braille voter card with a raised box to punch a hole out of.

So how about paraplegia, bilateral hand amputation, etc.?

They have to find some way to interface with the world, whether by feet, hands, assistance, or voice com

Re:

Having a take-home receipt that can be used to verify how a vote was cast is just asking for trouble.

"Hey, buddy, bring me a receipt that says you voted for 'John B. Asshat' and I'll give you $100 cash. Sound good?"

Any and all paper records need to be kept

Re:whats wrong with paper tickets anyway?

Chads

Long history of people cheating them (While the current system sucks, a combo of electtronic + paper if properly done, can double our chances of catching fraud)

Takes too long to count.

Takes up a lot of space.

Costs a lot more money.

If someone is removed from the ballot, we have to reprint, which may not happen in time

Delivery must be assured with enough to all, which means a lot of waste

Blind people have issues

People that don't read english have issues

Ballot design for large number of possible candidates - people seriously want to be the guy on the top of the list, it gives a small, but real boost to their numbers

Oh wait, you just wanted ONE issue. Hm. Hard too choose just one.

Re:whats wrong with paper tickets anyway?

For something that is supposed to be a cornerstone of our country, you'd think that the money, time, and other issues you list would be minor problems when compared to the overall purpose and goal of voting and the importance of integrity of accurate count and auditing. As an aside, why is election day *not* a national holiday? A serious WTF?

Of all the issues you list (and I'm sure others could come up with additional problems) not a single one of them is an issue around the ability to tally the numbers with accuracy.

National holiday

As an aside, why is election day *not* a national holiday? A serious WTF?

As much as people can argue about whether to just use paper ballots or use verifiable electronic ballots, I don't know of anyone who thinks election day shouldn't be a national holi

Re:

Which elections? If every election day was a holiday, then you wouldn't get a lot of work done between the new hospital levy issue and the fire department needing a new truck and, oh, Judge Bob's term is over we need to elect a new one.

Of course, making el

Re:

your e-voting system does nothing to solve any of those issues except for taking longer to count, which frankly pales in comparison to having a verifible count.

Re:whats wrong with paper tickets anyway?

My council was one of those piloting electronic counting. The main stated reason for doing so was to save time. They started counting on Thursday at 10pm. They declared the result the following Tuesday. With a manual count the result in usually known sometime on the Friday.

Re:whats wrong with paper tickets anyway?

Chads

Use a pencil or stamp, not physical holes. No chads!

Long history of people cheating them (While the current system sucks, a combo of electtronic + paper if properly done, can double our chances of catching fraud)

Keyword IF. Given that electronic systems have been demonstrated to be laughably easy to tamper with, may as well just use all paper and be done with it. You can also serialize the paper ballots using UV reactive ink, barcodes or RFID tags to be sure none are missing when they're counted. Anything that is reasonably impossible for someone to read would work, so they can't associate a particular person with a particular ballot. (Before you ask, you don't have to hand out the ballots in consecutive order, either.)

Takes too long to count.

Paper ballots can still be machine counted. Use those "bingo card" markers (but in black) and you won't have any problems with half-filled circles or fills that aren't dark enough.

Takes up a lot of space.

I hear the latest electronic systems hold away into your shirt pocket when you're done with them. They're also indestructible and can't possibly be damaged if handled roughly or exposed to less than perfect storage conditions for any length of time.

Costs a lot more money.

Those electronic kiosks are also free for life, never need maintenance or replacement, specially trained handlers and tighter security.

If someone is removed from the ballot, we have to reprint, which may not happen in time

OR you can post flyers and signs at the voting places, and have the attendant (who checks if you're registered to vote and would presumably hand you the ballots) strike off the name with a sharpie.

Delivery must be assured with enough to all, which means a lot of waste

District FOO has QUXX registered voters. Send them 1.10*QUXX ballots. Have someone sign off that they received the alloted amount. And, as we all know from previous elections, there are ALWAYS enough machines to adequately serve everyone who shows up.

Hell, done properly with barcodes, you could even print ballots ON DEMAND. Each district gets to print some limited number of "emergency ballots" should they run out.

Blind people have issues

The electronic machines have special LCD screens that can telepathically project the choices into a voter's brain, too. Those touchscreens? High-res active tactile feedback so the blind guy knows exactly which virtual button he's putting his finger on.

People that don't read english have issues

How'd they manage to register in the first place? I mean, it's not like you can have one set of printed instructions posted somewhere, instead of reprinting them on each and every ballot, right? (I would hope we wouldn't need to translate the candidate's names, too... "George W. Arbusto" would probably be MORE confusing.)

Ballot design for large number of possible candidates - people seriously want to be the guy on the top of the list, it gives a small, but real boost to their numbers

If the ballots are serialized (see above) and/or machine readable data is supplied (Datamatrix 2D barcode, RFID chip) then the names on the printed ballot can be randomized. Need more space? We could even use MULTIPLE A4 sized cards. If they're RFID'd and/or barcoded then we can make sure we have a full set from each voter. I doubt we'll ever get that many candidates on one ticket, though.

Oh wait, you just wanted ONE issue. Hm. Hard too choose just one.

Yeah, especially when they're all closer to excuses than actual issues.
=Smidge=

Re:

You won't have hanging chads if you have this two-inch-square box on a piece of paper that you mark with an x or fill in.

Hell, you could probably enlarge the font for the visually impaired.

I'm guessing you're not an American

In a typical American election, you might be voting for President, Governor, a Senator (2/3 chance), a Representative, a Mayor, School Board Members, State Representatives, ballot initiatives, etc. A 2-inch-square box for each of these would require a lot

Re:

Actually, I am. And to reply to that; since when has government cared about wasting paper or raw materials? Furthermore, if we're trying to reduce paper consumption, I can think of many far better places to start than making voting inaccurate.

Re:

There's nothing wrong with using a machine to print out the ballot - a machine could print out a nice easily-readable summary of each issue, and how you voted for that issue (and leave out all of the other choices). No problems with hanging chads there. Al

Re:

Chad

And what problem *is* that African country having with paper ballots?

Re:

But chad is a problem not because the Florida recount came out wrong (or right or whatever you like), but because of the fact that there had to be so much effort/time/guesswork put into it. Processing accuracy (not to mention time) for e voting is a huge

Re:whats wrong with paper tickets anyway?

but any paper system is fundamentally inaccurate above a certain size election.

I disagree. Paper systems make a certain amount of human error (feel free to call it 'stupidity,' I won't stop you) visible. Electronic systems hide it. They're not inherently superior.

The problem with the Florida ballots was a fundamental design flaw, combined with human error, combined with procedural mistakes.

You could fix many of the problems experienced in Florida, keeping paper ballots, by redesigning them and fixing the procedure. For example, the "dangling chad" problem of incompletely punched holes could be fixed by replacing the perforated-card ballots with optical ones, and giving the voter a big "dauber" type pen that they simply have to touch to the circle they want to fill in. Thousands of old people do this every day -- it's called Bingo Night. Do it with a UV-reflective marker and you can probably read them quickly using a machine. To prevent double-marks, just mandate that if you accidentally touch the marker to anyplace on the paper outside of a bubble you meant to fill in, you need to get a new ballot and start over. You could even have a 'test scanner' at the voting site that quickly scans a voter's ballot and checks for gross stupidity (double marks, marks outside the lines, etc.). If someone does manage to submit a ballot with two marks, it doesn't get counted, since the only person who can legally determine the intent of a voter is a judge. (I suppose you could put them all to the side and wait to see if the election is close enough to warrant bothering to look at them, but frankly I'd prefer that they just get thrown out. It's too easy to politicize the process of 'determining intent;' better to avoid it completely and only count well-formed ballots.)

Electronic voting covers up some of the inaccuracies of paper ballots and gives a false sense of perfection. They're not. You only think that the total you're getting is free of errors; there's just no way to look at a particular ballot and see if anything went amiss when someone was casting it. Last year when I went to the polls, there was a huge amount of confusion over one old codger who thought he was de-selecting candidates, when he was actually selecting them. I'm sure other people do similarly dumb things when voting -- but an electronic system just sweeps them under the rug behind a facade of digital faultlessness. It's camouflaging stupidity, not eliminating it. Just because the system gives you an output that's 1 or 0 doesn't mean that only ones and zeros went in; it's just being quantized down that way. You have no idea what's really going into it. All sorts of stupidity could be happening and you'd have no idea, just by looking at the output of an electronic voting system.

Hybrid electronic/paper systems are certainly better than paperless systems (which are anathema to democracy, frankly), but there's no reason, aside from a typical American obsession with instant gratification, to have the electronic side at all. There's no reason why we should be compromising our elections, introducing any unnecessary mysteriousness or opacity into the process, just to get the returns a few hours sooner. If it takes a few days to count all the ballots and make sure we do it right before we know the final results, fine! It's not worth the cost, or the risk, of e-voting, just to try to have the "final score" by 8PM on Election Day.

Re:whats wrong with paper tickets anyway?

accuracy (not to mention time) for e voting is a huge win. Chad is merely the most famous example, but any paper system is fundamentally inaccurate above a certain size election. Sometimes people forget this, but Florida was an excellent example that, with paper, there is really no meaningful way to define the "true" result.

Wait a second. They can't even get a machine to punch a clear hole in a piece of paper and you want them to impliment a more complex system? Hanging chads aren't "stupid voters" they are faulty machines. A paper system is highly accurate way to arrive at a true result. You count them all. sure it might take a while, but it will take less than the four years it takes to wait for your next chance to get it right. The Florida election was an excellent example that there are alot of people will to "misplace" votes and that will only be easier when there is no physical human-eye-readable trail.

Re:

And, as the report linked from TFA points out, in a lot of Scottish constituencies the winning margin was less than the number of "spoilt" papers, meaning that, had they been counted, the outcome could have been completely different. I believe this is know

Re:

No, disenfranchisement is when your vote isn't counted, not when you deliberately spoil the paper.

Diebold's reaction....

What's the betting they'll sue for some arcane reason? :-)

Nothing is Perfect

"I mistrust all systematizers and avoid them. The will to a system is a lack of integrity." - Friedrich Nietzsche Twilight of the Idols

I agree that no system is above corruption - paper ballots included - but the lack of any verification is the greates

Re:

I'm not sure what citizens can do beyond what they have been doing, given our current political climate.

Simple, get a gun and go shoot these assholes. It is part of your Declaration of Independence [archives.gov] and your constitution's second amendment [wikipedia.org]. Those old dead white guys that wrote this stuff in the late 1700's knew what they were doing (better than today's polit

I would support electronic voting if...

* The same level of scrutiny placed on debugging the Space Shuttle computer code was placed on something arguably as important, if not more so: the national election

*Make the code as open and freely viewable as possible. This will ensure maximum review.

* T

maybe...

it's just me and I'm not up on all the whys and wherefores but how fricken hard can it be to count something?

Re:

What's the highest you've ever counted to in your head? What's the largest amount of anything you've ever counted? How many pieces of paper do you think you could count before making a mistake?

Re:

it's just me and I'm not up on all the whys and wherefores but how fricken hard can it be to count something?

Try reading what Bruce Schneiner has to say:
http://www.schneier.com/blog/archives/2004/10/gett ing_out_the.html [schneier.com]

Of the things he lists, I think the

In other news....

E-Voting Report Finds Problems with Modern Elections

In other news: the earth is round and Richard Stallman really is an alien.

Video at 11.

Electronic Voting Is a Bad Idea

Well, it's more than a bad idea. E-Voting is probably the biggest threat to democracy since the second world war. I'm not exaggerating here. It's the apathy within we should be afraid of.

But I digress. Let's roll out an analogy here.

Let's say the government contracted out the counting out of paper ballots to private companies. Let's say again that these companies took your paper ballots into a huge warehouse with blacked out windows and wouldn't tell or show anyone how they were counting the ballots. They simply emerged hours or days later and announced the result. Would you be satisfied with this? Would you accept the result?

Let's soften the blow. Supposed the company allowed government inspector into the warehouse to supervise the counting. Would that make you feel more confident in the result?

Now, what is the difference between the warehouse, and the current systems of E-Voting. What is the difference between the warehouse and [b]any[/b] system of E-Voting, present or future? Why accept a computerized count if you wouldn't accept the warehouse. (Of course many people would accept the warehouse, but I digress...)

You know what the depressing thing is. Most people want E-Voting. Not because they think it's cheaper. Not because they think it's more reliable. It's because they think it's cool.

Re:

My thinking is that it should be illegal to use any voting software unless the source code is available for inspection by anyone. The electronic-voting companies all seem to be saying that the source code is proprietary, nobody is allowed to look at it an

Re:

The electronic-voting companies all seem to be saying that the source code is proprietary, nobody is allowed to look at it and see it.

In the US, the FEC requires that the software (source) be reviewed by an approved thrid-party auditor. This should help

Re:

My thinking is that it should be illegal to use any voting software unless the source code is available for inspection by anyone.

It still is not enough. You cannot know for sure that the code you audited is the one actually running on the hardware it is

Re:

Like the other poster said, I think your warehouse analogy only works for closed source voting machines.

Voter-verifiable counting

For your consideration, may I present my[1] idea for a voter-verifiable counting system:

---

In addition to any other vote-counting or verification system, a county
elections office could take a full optical scan of the ballot papers.
The data from these scans would be made available to all who request it;
anyone could acquire the data and perform their own re-count with any
method of their own devising.

This would provide complete transparency for the automated portion of
the counting process.

The problem with optical-mark scanners, of course, is that the
scanner's internal software and firmware is vulnerable to tampering.
Such a tampered machine cannot change the ballots it reads, but it can
misinterpret them.

By providing a raw image scan to the public, we'd be enabling many
eyes to provide their own interpretation of the ballots. Any
optical-scan vulnerability would become moot. We would go beyond a
voter-verified ballot, and get to a voter-verified count.

This is technically achievable with commercial off-the-shelf hardware
for well under $100,000 per county in capital expenditures.
Specifically:

* Industrial scanners of sufficient reliability are available. At my
workplace we have a "light" duty commercial scanner with a duty cycle
of 8,500 scans per day; this machine cost around $7,000. If county
clerks were to have about 5 days to produce the scans, two of these
scanners could completely scan the ballots for all but the largest
counties. And, of course, heavier duty scanners are available.

* Since industrial scanners are not optimized for ballot reading or
even optical-mark recognition, it would be much more difficult for any
malicious entity to successfully tamper with their software to produce
inaccurate ballot image scans. It's much more difficult for software
to produce an incorrect image than an incorrect interpretation of an
image. What's more, these scanners are available from several
manufacturers; if one distrusts any or all scanner vendors, one could
simply scan the original ballots with a variety of different
manufacturers' scanners and compare the results.

* For the standard optical-scan ballot, a fax-quality scan would be
sufficient for a voter-verified count. Better scans are possible for
higher time, money, and data storage budgets, but I don't think they
would be necessary as a practical matter.

* The data storage requirement for an approximately fax-quality scan
of every Oregon ballot - approximately 2 million ballots with 100%
turnout - would be under 500 gigabytes uncompressed per statewide
election. (And ballot scans should be highly compressible even with
lossless and error-correcting algorithms.) Portable hard drives that
large are available for around $300. Most individual county ballot
scan datasets would even fit on larger iPods.

---

This brings up a couple other problems, of course. Foremost, the ballots have to be on ADF-feedable paper, and probably had best be marked ballots rather than punched-paper. Also, the question of what to do with a voter-made distinctive or identifying mark on the ballot needs to be addressed. (Distinctive marks could lead to buyer-verified vote buying.)

But still, it's a huge step beyond just trusting the county's optical-scanning ballot interpreter.

[1: Actually this is my brother's idea, which I have modified slightly.]

the anti-vote-buying laws would ban that.

In addition to any other vote-counting or verification system, a county
elections office could take a full optical scan of the ballot papers.
The data from these scans would be made available to all who request it;
anyone could acquire the data and perform th

Re:

Yup. In most places it would take some legislative changes to implement.

It's probably true that vote-buying would be a worse problem than inaccurate counting. In Washington (where my brother lives) a ballot with an identifying mark is disqualified. If that

Is it really so hard?

- Vote with a computer interface
- the computer stores your vote
- you get a receipt how you voted
- you check and fold the receipt and drop it into a sealed box.

After the election ends, the computer spits out the results.

In randomly selected polling places, the paper receipts get counted manually. If there are major differences, more polling stations will be selected for a manual count.

Add "open source" and you've got it

Seriously, that's all they need to do. Print a small paper receipt and drop that into a box and the county clerks could even count them all manually, but at their liesure. We'd have an electronic tabulation immediately, no staying up till midnight waiting for results, people working late, etc. Open source the code for peer review and its a solidly secure, reliable system. Who exactly isn't getting this? Oh...the people in charge who are techno idiots. Right...

Re:

And if someone "forgets" to scan it? If they scan it and don't drop it? If they scan it and drop something else? What's needed is a system where it's impossible to both vote and take your voting slip outside the booth. The suggestion that has been posted m

Great work Jason and everyone else

It is good to see the report out and see in measured words what those of us watching saw; that the preparation was below standard, procedures far from robust and the systems more black box than the public, candidates and parties happy to cope with.
I was proud to be part of this observation team and am looking forward to the next project I can give time to.

If anyone here wants to support the Open Rights Group either financially or buy volunteering to join in in further projects, scoot on over to http://www.openrightsgroup.org/support-org [openrightsgroup.org] and sign up!