Researchers And Registrars Debate E-Voting 153
Paper Trail writes "There's a fascinating discussion going on right now over at SiliconValley.com.
A group of computer scientists, journalists, voting activists, and county registrars are discussing the e-voting mess in an online forum that runs all this week. The panel is a who's who of e-voting: Avi Rubin, David Dill, David Jefferson, and registrars from San Bernadino and Riverside, CA. They've even got Scott Ritchie from the Open Vote Foundation. The question they're hoping to answer: "What's your assessment of the risks related to the use of electronic voting machines -- in the areas of verifiable voting, errors, recounts and manipulation -- not in the computer lab, but in a real-world setting? And how do those risks compare with current voting systems and other low-tech options?""
Comment removed (Score:5, Insightful)
Re:said it before -- I'll say it again (Score:2, Insightful)
Re:said it before -- I'll say it again (Score:3, Insightful)
People want pretty colors and instantaneous stats. People don't want to worry about counting and recounting. People want to have the voting booth be available in 1000 different languages. People want to have their tax money spent on something that is ever
Comment removed (Score:4, Insightful)
Re:said it before -- I'll say it again (Score:1, Redundant)
No, not like you can when you're watching Survivor or an NFL game. Remember that's what people want... Monday Night Football commentary with tickers. Flashing lights and shiny metal. Oooh.
And what multiple languages do you need? They see the names of the people running -- if they don't know "George W. Bush" is running the President and not the local Assembly seat that's their problem.
You have negated any credibility you might have had with
Re:said it before -- I'll say it again (Score:3, Insightful)
I want to know who these "people" are. Personally, I would give up all of those bells & whistles for a system that is reliable, accurate, and fraud-resistent. Certainly, the integrity of the election process is more important than marketing fluff.
Re:said it before -- I'll say it again (Score:2)
In my part of the country in addition to just elected positions, we tend to have a large number of ballot issues that need to be voted on. Thus you need to be able to read the description to know if you are voting on allowing a state income tax vs increasing the number of dog catchers allowed to communities under 5,000 population. It is required by law that we have at least english and spanish. In California, IIRC, by law they have a large number of languages that must be accomodated, Chinese, Japanese,
Re:said it before -- I'll say it again (Score:3, Insightful)
When they watch TV, not necessarily when they vote. People don't care if they vote by pulling a 20 year old lever. They only care that it's quick, easy, and counts.
The masses aren't screaming for computer graphics on the windshield to aid in driving or a drive-by-wire joystick. People experiment with it, but the flashy stuff isn't what people call for in practical situations.
And making it colorful won't get more people to vote. People aren't running
Re:said it before -- I'll say it again (Score:5, Insightful)
--
What would it take? [slashdot.org]
Re:said it before -- I'll say it again (Score:3, Interesting)
So it's easy for votes to be lost due to mechanical error.
Re: (Score:3, Interesting)
Comment removed (Score:5, Informative)
Re:said it before -- I'll say it again (Score:2)
First, let me state that I think electronic voting in its current form is horribly broken. The best solution is a paper printout that gets deposited in a lockbox before the voter leaves.
That said - I am so sick of hearing the above quote bandied about as though it unmasks some voting conspiracy. Let's go over this one more time for the slow kids:
Whoever wi
Re:said it before -- I'll say it again (Score:1, Insightful)
Re:said it before -- I'll say it again (Score:3, Insightful)
And as far as fraud goes -- which system do you trust more? The system that relies on two public servants sworn to uphold a scared trust or the system that relies on private vendor companies with lovely quotes like "I'm committed to delivering Ohio's electoral votes to the President". This is a no brainer people.
This question presents a false dichotomy.
The correct answer to the question is "Neither". We should trust no one to be in a position to manipulate our votes. That ideal may be unachievable, b
Re:said it before -- I'll say it again (Score:2)
Note that this step was what was missing from the problematic Florida ballots. No one ever verified that the vote was being read properly before the voter left. If they had, they would have caught both problems: votes t
Re:said it before -- I'll say it again (Score:2)
You missed a step. After the paper ballot is printed, put it in whatever will be reading the ballot and verify that it is reading it the way that you expect. This ensures that the vote is understandable (and can count the votes so that the end of night count can be read off the reader).
That's a reasonable thing to do, but it's not necessary. The authoritative version of the data is the human-readable portion of the printed ballot, so in that sense "whatever will be reading the ballot" *does* verify that
Re:said it before -- I'll say it again (Score:2)
That doesn't guarantee that the official reader will read the ballot in the same way as the voter did. For example, the hanging chad issue was one where the voter thought the vote was going to be recorded in a certain way, but the actual vote was discarded as unreadable. "Human readable" is very vague. The main
Re:said it before -- I'll say it again (Score:2)
"Human readable" is very vague.
Sorry, I should have been more explicit.
What I meant by "human readable" is something like the following, printed in an easy-to-read font on the ballot:
There's no way for anyone to confuse the meaning of that.
Re:said it before -- I'll say it again (Score:2)
And I'll add one often overlooked:
It was hard for some older folks to simply pull the lever.
Re:said it before -- I'll say it again (Score:1)
So what if it took a week, it's not like anyone is advocating Citizen's Initiated Referenda where you could vote as often as monthly?
When there are institutional problems in the system like grey money or low voter turnout, complaining that the most accountable process is expensive and time consuming is very irresponsible for both the citizens and poli
Re:said it before -- I'll say it again (Score:1)
Why don't we enact legislation to pay 5 year olds in Asian sweatshops to to make new voting machines for us.
Secondly, one thing I don't think we need is instantaneous vote tallies. It's already bad enough that the press can sway election result by reporting on the east coast evening news that so and so candidate is winning the election while polling places on the west coast still have 3-4 hours of voting time left. I think this could be a real issue if the press can base their predicti
Re:said it before -- I'll say it again (Score:2, Informative)
Amazing -- 'cause that's how we count ballots in Nova Scotia. I would never trust a machine to do a count. [votescam.com] How we get around human intervention/error/fraud at the count:
There are at least four witnesses to the counting: the deputy returning officer and the poll clerk, who are nominated by the two leading parties, a
Re:said it before -- I'll say it again (Score:1, Insightful)
Also said it before and saying it again (Score:2)
Re:said it before -- I'll say it again (Score:3, Insightful)
Maintainence on these machines must be certified, etc.
Pen and paper (drawing an X in the appropriate square) have worked for years, but again trust is given to the people tallying the votes.
Your system to me sounds like a better solution then the touch screens. M
Re:said it before -- I'll say it again (Score:1)
you obviously were abducted by aliens while the last presidential election was happening
Re:said it before -- I'll say it again (Score:2)
Re:said it before -- I'll say it again (Score:4, Interesting)
1. Virtual elimination of mechanical breakdown. This can be an issue with some of the older equipment. It doesn't address the electronic systems breaking down or crashing, though.
2. Rapid collection of stats. This has less to do with anything useful and more to do with people getting impatient. In most cases, the results are pretty obvious within hours of the polls closing. In other cases, we get a little tension for a few days as things come down to the wire. (In still other cases, we get a lot of political infighting for the next four years.)
3. Standardization of interfaces. I've only seen one e-voting system, so I'm not entirely sure how possible this is, but it seems to me at least theoretically possible that the presented screen can be relatively standardized across a state, at least in terms of basic layout (since county- and city-specific issues will be different, of course).
Personally, I miss the lever system that I used for about ten years. The 'ka-chunk' feeling of the ballot being marked seemed to give a tactile and auditory sensation to the emotional satisfaction of having expressed my opinion.
Hand counted paper ballots are best (Score:2)
The trouble with the Yanks is they vote on a work day which means there isn't the availability of thousands apon thousands of volunteer scrutineers from the political parties to stand over hand counters' shoulders & watch them count.
I myself has said many times that simple, keep it stupid 'tick the box' paper ballots are best, but that's too simple & easy for those who like to wank off with unnecessa
Re:Hand counted paper ballots are best (Score:2)
The most common fight against putting it on the weekend comes from religion. Christians argue against putting it on Sunday because that's their holy day. Jews argue against putting it on a Saturday because that's their holy day. Businesses complain about making the day a national holiday (my preference), even though there's no requirement that any company gives a particular holiday off. Companies in some states are required to g
Re:e-voting is good, but... (Score:2)
Fortunately, Diebold has lots of experience dealing with both of these problems. They've been making atms for banks and others for at least a decade. It's been ages since I've seen an atm down due to a paperjam and the cost is such that every little quickymart has its own atm.
Re:said it before -- I'll say it again (Score:4, Insightful)
My current state doesn't use them. I used to live in NY, so I'm familiar with those machines. They were excellent. A trivial update of the design could allow electronic reading of mechanical vote tallies, if anyone cared to, while still keeping the old "seal" method for recounts. They are substantially better than the punchcard methods (used locally prior to last years touch screen purchase) or the electronic scams^H^H^H^H^Hschemes being suggested (and currenlty in use locally).
And I would say they are MORE effective than the touch screens for preventing overvoting. They give tactile feedback; you try it, and you realize the lever can't move.
Re:said it before -- I'll say it again (Score:2, Informative)
First off, as people pointed out above, the numbers are manually tallied at the end of the evening. The poll workers use a key to unlock the machine, and little windows appear with the individual tallies. These tallies are transc
Re:said it before -- I'll say it again (Score:2)
I'm an appointed poll officer again this November. As site supervisor, I get information on the primary voting records of the other workers at the site. This is regrettable, in that it intrudes on their privacy to tell me this information, but it's done so, in cases where voter assistance is needed, I can make sure two workers from opposite partys are assisting the disabled voter.
Right now, whenever, a volunteer can't mak
Re:said it before -- I'll say it again (Score:5, Insightful)
Hell...look at Diebold. They made their voting machines without a confirmable printout. Why? Just about everything else they make (from ATMs to cash registers) has a confirmable printout. But hey...look at that...now they can get paid AGAIN to go "upgrade" all the faulty machines they've already deployed. And then they can get paid again to fix the "bugs" in the machines.
Even if that is a little too cynical for you, the fact remains that the companies bringing out the voting machines are making a lot of money.
It is up to those companies to convince the public that they need and want new voting machines. It doesn't matter whether the existing technology works - they'll focus on its flaws and potential abuses and tote their shiny new products as if they are sleek and bugfree.
Create a sense of fear and then offer a remedy that appears to address it. Works in business. Works in politics. Works in just about anything really.
Re:said it before -- I'll say it again (Score:2)
Probably their association with Chicago (Score:3, Informative)
Simplifying greatly, the people who tabulated the votes from the lever-operated machines were pro-Kennedy. Vote tabulation was done by opening the machine up, and reading numbers off a little odometer-style readout. When the numbers were written down, the Kennedy numbers were written as higher than the machine recorded, and the Nixon numbers as lower.
However, the Democrats weren't the only
Re:said it before -- I'll say it again (Score:2)
Re:said it before -- I'll say it again (Score:1)
I can see on my ballot exactly where I marked. They use ebony pencils, which do not erase gracefully, so a poll employee would have to work hard to even have a potential of erasing and revoting my ballot. (If a voter does make an error, they can go to a poll worker to
Re:said it before -- I'll say it again (Score:2)
Re:said it before -- I'll say it again (Score:2, Insightful)
- Verification of ballot - no invalid ballots
- Context sensitive help, less confusion
- Possibility of more advance voting methods (condorcet, IRV, etc)
Re:said it before -- I'll say it again (Score:2)
Well, for one, I won't be able to win by a landslide by promising to empty the entire US treasury into the bank accouts of the employees, investors and the families of the people involved with e-voting machines.
Re:said it before -- I'll say it again (Score:2)
There's no paper trail; in spite of what you say there's no easy way to determine whether multiple votes have been cast by the same person or by a poll worker; and there's no really easy way to verify that the mechanical system hasn't been hacked either (in case you're wondering, the insides of these things are incredibly arcanely complex).
Also, they aren't nearly as flexible, accessible to people with disabilities or who
If we want truly verifiable voting (Score:1, Funny)
Electronic voting machines aren't the problem (Score:3, Informative)
See here for more [dkosopedia.com]
And yes, I know it's a partisan site, but it's just collecting news stories, look past the commentary.
Re:Electronic voting machines aren't the problem (Score:1, Insightful)
Re:Electronic voting machines aren't the problem (Score:3, Insightful)
Re:Electronic voting machines aren't the problem (Score:3, Insightful)
Re:Electronic voting machines aren't the problem (Score:4, Insightful)
Re:Electronic voting machines aren't the problem (Score:2)
It doesn't matter if they're suppressing the registration of democrats, republicans, the greens or the one guy in the freaking Socialist Dog Ball Lickers Party of North Dakota.
For christs sake, just because a federal crime is committed against someone you have a political disagreement with does not make it ok. These are your fellow Americans. Do people hate their political opponents so much they're willing to destroy democracy
Recounts? (Score:5, Insightful)
Re:Recounts? (Score:2)
Of course, I could be wrong in my assessment, so if I've piqued your interest enough, perhaps you could
Re:Recounts? (Score:3, Interesting)
Or, alternately, fail to certify the vote count, and not send ANY electors. Which would have caused a far bigger stink.
Re:Recounts? (Score:2)
Re:Recounts? (Score:3, Insightful)
There are specific federal laws governing elections, and more specifically the couting of military ballots. The law is, if they aren't in by a certain date, they aren't counted.
Bush and his people (namely his brother and Kathleen Harris) broke federal election laws and counted all military ballots, regardless of when they came in, to the tune of a +800 gain for Bush, pushing him over by 576 v
OT - re: cluster (Score:2)
Another way to get around saying "cluster f**k" in polite company is to call it a "Charlie Foxtrot". Ex-military will probably recognize the term and most civilians will assume Charlie is a person.
Don't see what the fuss is about (Score:3, Interesting)
Even if the worst FUD claims of the anti electronic voting crowd are true electronic voting is no more vulnerable to tampering than paper ballot voting. Where ballots can (and are) lost (or "lost") and there are dozens of opportunities for workers to mess with or change things.
I've voted touchscreen twice and it was great, I got to vote in advance of election day (when it was convenient for me). Though there was a LOT of pressing "next page" for the CA Recall election to sort through the >100 candidates. :)
Like any new system it will no doubt have it's own issues that will need to be worked out. That's the price for progress.
What I'm waiting for is the opportunity to vote online.
Re:Don't see what the fuss is about (Score:1, Insightful)
That's always a recipe for success.
Re:Don't see what the fuss is about (Score:1)
Really not meant to be flamebait but:
The horse and buggy were cheap and simple compared to early automobiles.
Pencil, paper & a sliderule were certianly cheap and simple compared to the first computers.
Newer is certianly not always better but it's most definitely not always worse.
Re:Don't see what the fuss is about (Score:3, Interesting)
Re:Don't see what the fuss is about (Score:5, Insightful)
Wrong. In most states there are multiple eyes on every ballot from the moment they're taken out of the box until they're counted and sealed. An all-electronic vote is not usually reviewed by multiple people. That's why in test runs thousands of fake extra votes are able to be counted. If every electronic vote was scrutinized the same as paper then they'd be roughly equally vulnerable, but they're not and probably never will be.
Re:Don't see what the fuss is about (Score:2)
Re:Don't see what the fuss is about (Score:5, Insightful)
That is simply not true. With paper ballot voting the only people who can tamper with the ballots are the election officials, and members of all interested parties, observe the voting and tallying process. With some of these poorly implemented systems, anyone with internet access or access to the voting machine (any voter) could potentially hack and tamper with the voting results. This is not a theoretical concern either - there are proven vulnerabilities with these systems.
The lesser reason why your statement is incorrect is that with paper ballots, if fraud is suspected, you can at least go back and do some post mortem analysis of the election - recount the existing ballots, make sure that the number of people who signed in at a voting location is consistent with the number of existing ballots. With most of these electronic voting systems this is currently not an option (although it could be).
These complaints are not FUD, by any stretch of the imagination.
Just as long as I'm writing the voting software (Score:3, Insightful)
Playing devils advocate: I could write an easter egg into the software, so that when I come along to the voting booth, I tap my finger on the screen in a few special unmarked places, and that machine then favours my chosen candidate.
Tell a few of my friends and we could easily do that with all the machines in a swing state.
The pre-checks wouldn't pick it up, the random machines taken out for testing wouldn't show the problem (because I wouldn't be activati
Re:Just as long as I'm writing the voting software (Score:1)
This makes the IMO unreasonable assumption that a single individual writes code for the machines without any checks or oversight by at least one other person, and that the malicious coder is willing to become a fugitive or go to jail when (not if) the easter egg is discovered.
The same type of scenario applied to paper ballots would have one person drive the ballots from the polling place with no escort or other checks where they could easily drop one of the boxes in a dumpster on the way if they know the
Re:Just as long as I'm writing the voting software (Score:2)
Not really, it makes the assumption that after the code is written by many individuals, there is a single individual with the power to alter it. I think this assumption is fairly reasonable. Sure, this individual is probably not a re
Not at all (repeated from my anon post) (Score:2)
"This makes the IMO unreasonable assumption that a single individual writes code for the machines without any checks or oversight by at least one other person, and that the malicious coder is willing to become a fugitive or go to jail when (not if) the easter egg is discovered"
It surely takes only a single coder to code such an easter egg. To get it past code review *may* take another. So we're talking about a tiny conspiracy required to
Re:Don't see what the fuss is about (Score:2)
There's at least one significant difference.
Fraud with paper ballots involves much larger numbers of people.
A single hacker could theoretically change every vote.
-- should you believe authority without question?
Change the outcome with a 5-line VBScript (Score:2)
at least with paper ballots it took actual human hands to change each vote individually. now it's a script-kiddie job.
Re:Don't see what the fuss is about (Score:1)
This is FUD. A paper count can at least be opened to the public and watched by whoever wants to see. There is no way to witness what goes on inside a sillycon chip.
I could never trust an "election" counted by machines. (Hard enough to trust people; but a black box spitting out Walden-"committed to helping Ohio deliver its electoral votes to the President"-O'Dell-alone-knows-what? I'
Re:Don't see what the fuss is about (Score:3, Insightful)
Please explain to me in detail how one person, exerting no more effort than is necessary to write a line or two of code, could alter several thousand (or million!) paper ballots at once.
Re:It is more vulnerable (Score:2)
It could be made more tamper-proof, but remeber the government is running the show, and the governmentt is inept at many basic services it provides.
It's not the machines (Score:2)
What's your assessment of the risks related to the use of electronic voting machines
The risks come not from electronicness or mechanization, but from the people who design evil systems and implement them in the name of democracy.
Vote From Home (Score:5, Insightful)
I guess this is obvious, but had to be said.
Re:Vote From Home (Score:1)
That said, voting from home is a TERRIBLE idea because of all the insecure points between a home PC and the vote database.
Re:Vote From Home (Score:2)
That wouldn't be a valid argument, to say the problem is systemic so why shouldn't we exacerbate it. Sheesh.
Re:Vote From Home (Score:2)
Having said that, I wouldn't trust a voting system that was availab
Scrutineering (Score:5, Insightful)
Any layman can look over the shoulder of anybody doing anything with the current system, and know at a glance whether the work is being performed correctly.
I have a degree in computer science, and I can't look at an electronic voting system and see that it is working in the correct manner.
This is why I don't think electronic voting systems can ever replace a manual system.
Re:Scrutineering (Score:2)
Re:Scrutineering (Score:3, Insightful)
That being said, if the system were open source and included some kind of hashing mechanism to verify the binary is a product of the certified code, and the certification rules for the hardware were more strictly obeyed, evoting could be plausible.
None of this is possible with Diebold, or ES&S, or whatever.
Re:Scrutineering (Score:2)
The problem is that these systems aren't auditable because there is no voter verified record. To fix this, you add a voter verified record (i.e. print out the ballot). If you have this record, you don't need to verify the machine. The record is sufficient.
Re:Scrutineering (Score:2)
I'm not arguing your other points here, but that is orders of magnitude harder than what's currently available, and virtually impossible in a validated system if validation is done correctly.
If it aint broke.... (Score:4, Insightful)
I am totally at a loss to understand this rush to some sort of electronic voting. I regard voting as the one, true sacrament of citizenship. I have no problem with it taking a little bit of time. After lying to pollsters for months, the ritual of going into the booth and casting my secret ballot is very satisfying.
Remember, voters are citizens; all others are residents.
Re:If it aint broke.... (Score:2)
Voting gives you nothing over the rest of society. It gives YOU peace of mind that you were involved in your own way. I may choose to get my peace of mind by not voting. Neither of us gets a citizen "promotion" for our act. Your statment implies that you are entitled to something and I am not. I'm no constitutional expert so I'll let you tell me where it says that your
Citizenship (Score:2)
neon, you wrote that the implication is that voting somehow makes me better than non-voters or gives me some enhanced status in society. I don't see it that way at all. I see citizenship as a series of obligations; a social contract. I see voting as an obligation that is part of good citizenship.
If you see no difference in the Presidential candidates, and none are to your
Re:Citizenship (Score:2)
As a citizen I only have one obligation -- obey the law. There is no law that says I am obligated to vote.
I get your point about a "social contract." It is an unwritten thing. I am saying that I am fulfilling that unwritten obligation by NOT voting because of all the things that action says. I am allowed (and obligated in your social contract) to take the action at voting time that I feel has the most meaning (or whatever my qualifiers are). Not v
Re:If it aint broke.... (Score:2)
My choosing not to vote is my business and I'm allowed to do that in this system of government. If I have any "civic duty" whatsoever, then it is to use the polls for an effective political purpose to further this great country. I have done that by not voting and telling people why I didn't vote.
When about half the country doesn't vote, the majority of the populace has just
The big question (Score:2)
What type of fail-safes does the touch-screen system have in case of system failure (i.e. Hard drive dies, power goes out, ect) in which you can quickly recover from something unexpected happening? My understanding is that the touch-screens in the booths feed the data into a central computer that tabulates the results, so what if something happens t
In Alaska (Score:3, Informative)
It should be error-free, but, in our local election last week, the machines somehow managed to count 11 more ballots than were cast. That's where the paper ballots come in: they're human readable, and humans are auditing and handcounting them right now.
Anyone else hear about. . . (Score:3, Interesting)
Here's the link [business2.com] to the Business 2.0 article talking about his new system which he claims is "the first electronic mechanism that ensures both integrity and privacy."
Re:Anyone else hear about. . . (Score:2)
We don't need a complicated eVoting system. We need a system that has the voter verify that the vote counter is counting the vote correctly prior to storing the vote. That was the only problem in the Florida election: people thought that their votes were being cast in a different way than they actually were. Simply putting the ballot th
Three examples (Score:2)
Re:Three examples (Score:1)
Anyone want to post some of the relevant parts? (Score:1)
Vote Early, Vote Often (Score:2)
well, I should have used the 'Preview' button! (Score:2)
Make Election Day a Holiday! (Score:4, Interesting)
Many other nations make Election day a holiday. We should have election day as a Work & School holiday.It would solve problems:
Validation (Score:2, Insightful)
When you're done voting, the record is added to the database. And the computer spits out two copies of the voting record:
One copy goes to the voter, with an outline of how he/she voted.
Another stays with the computer and is used to verify the e-voting tallies if neccessary.
Both printouts are bar coded and have a user/id pin combo that the voter can, after the election verify that his/her vote has been
Best of both worlds. (Score:2)
The machine registers the vote electronically. The paper slips allow vote checkers to bring up each record without having to sort through the paper slips. (Just scan the barcode.) The printed paper receipt allows a visual check of the vote against what is recorded in the databas