Follow Slashdot blog updates by subscribing to our blog RSS feed

 



Forgot your password?
typodupeerror
×
Open Source Software United States Politics

LA County Gets State Approval of New Vote-Counting System Using Open-Source Software (latimes.com) 95

A new voting system that uses open-source software for counting ballots has been approved by California elections officials. "The certification of the new tally system for the county paves the way for other improvements, including redesigned absentee ballot packets, in the Nov. 6 election," reports Los Angeles Times. "It is the first election system of its kind, using publicly available source code that has been certified for use in California." From the report: The ballot-counting equipment is part of a broader redesign of Los Angeles County's voting system, which will include new equipment while relying on a traditional paper ballot. The county's existing system, portions of which are now decades old, has been targeted for replacement for several years.
This discussion has been archived. No new comments can be posted.

LA County Gets State Approval of New Vote-Counting System Using Open-Source Software

Comments Filter:
  • Finally! (Score:5, Insightful)

    by GerryGilmore ( 663905 ) on Wednesday August 22, 2018 @05:52PM (#57177130)
    Damn - considering that every single major tech provider from Google through Facebook through...relies fundamentally on open-source software, the idea that our elections rely on - essentially - DOS-based, closed-source systems for every step from voting through counting is beyond bizarre!
    • Damn - considering that every single major tech provider from Google through Facebook through...relies fundamentally on open-source software, the idea that our elections rely on - essentially - DOS-based, closed-source systems for every step from voting through counting is beyond bizarre!

      Agree, elections after all is not a daily thing, I would say that for the sake of protecting this essential democratic tool it is worth to just manually count the ballots by representatives of major parties (on local level of course) and compare the results. Are we so lazy?

      Regarding the closed software issue: some time ago I heard a podcast about software to guide judges whether to allow bailout or not - the software is closed source, and when the redactor asked why not open source ALL the experts in the d

  • by Anonymous Coward on Wednesday August 22, 2018 @05:57PM (#57177156)

    Being able to look at the source is great and everything, but which actual bits are installed and configured on the machines is another matter.

    Anything with a general purpose CPU shouldn't be allowed anywhere near the election system. A volunteer observer with a high school education should be able to verify, by simple inspection, the operation of any machine involved with counting/processing the physical ballots.

    • The computer should be used to print the filled out ballot, because American elections throw in voting for other stuff like sherif and dog catcher. The human readable paper ballot should then be taken by the voter, verified, and inserted into the ballot box. The ballot boxes are opened and counted by humans, and the totals and winners announced. And those computers don't have a network connection, and all software is a standard load with audits done.
    • by Anonymous Coward

      Being able to look at the source is great and everything, but which actual bits are installed and configured on the machines is another matter.

      Also, more verification in the areas that haven't experienced any widespread election fraud isn't exactly going to help.
      Meanwhile voting records in Georgia is still deleted and no-one held accountable.

  • by PopeRatzo ( 965947 ) on Wednesday August 22, 2018 @05:58PM (#57177162) Journal

    California leading the way once again. While Georgia is closing polling stations in majority-black counties, California demonstrates how to have fair and honest elections. And guess what? When the elections are fair and open and all the citizens get to vote, you get good government.

    • When the elections are fair and open and all the citizens get to vote, you get good government.

      Start drinking early tonight, did you.

      • Start drinking early tonight, did you.

        Yes, there is much to celebrate tonight. Donald Trump's campaign chairman, deputy campaign chair, National Security adviser, and personal attorney have all been guilty in a court of law, his two sons and oldest daughter are now being investigated by the New York department of revenue and attorney general for fraud regarding the "Trump Foundation" (Donald himself was also named in the suit and investigation) and both his private attorney and publisher David Pecker of

  • by aberglas ( 991072 ) on Wednesday August 22, 2018 @06:01PM (#57177178)

    Being open source is less horrible, but there will still be plenty of opportunity of hacking. Most of this hacking is done by (elected) election officials, not Russians. And the Republicans are far better at it than the Dems.

    Go for simple paper ballots. Counted in front of scrutineers appointed by the candidates. The scrutineers then report numbers back to their candidates independently from the official system, so no room for fudging.

    This is what happens in Australia. And all the votes are counted by hand within a couple of hours of closing the booths. It is a quick and painless process.

    I might add in Australia we also have a slightly more complex preferential system, where you order 1, 2, 3 instead of just one X. This avoids the vote splitting issues that the USA has. But it does require a population that knows how to count, even if they lived in a poor school district.

    • Being open source is less horrible, but there will still be plenty of opportunity of hacking. Most of this hacking is done by (elected) election officials, not Russians. And the Republicans are far better at it than the Dems.

      I stopped reading right there. You are openly partisan. At leas TRY to keep up a facade of independence when you are dissing the other party. Otherwise folks you are trying to persuade you are right will just stop listening.

      I will tell you the following as plainly as I can. There is NO electronic voting system hacking going on, at least none that has changed even ONE vote in any election that I know of. Do you have an example of this? Unless you do, we can discuss future security efforts, but there is

    • "Never trust a computer"....Says a guy who - besides posting on /. - probably does much more personally important stuff like banking, shopping, etc... ON A COMPUTER!!
    • What takes the long time is other stuff. Often they don't count the ballot at the polling place, which is often in someone's house, a church, a school room etc. So there's time needed to drive the ballots to a counting station. That's where a lot of tampering has a chance of occuring - not altering ballots but losing a box here and there from certain districts.

      But that's still minor. We have absentee ballots by the truckloads that need counting. Almost all of this counting happens *after* the winners a

    • I agree that the 1-2-3 system is better than the single X, but it is more vulnerable to vote-selling. It's easy to identify one's vote when you have not n, but n(n-1)(n-2) different ways to cast it. Unfortunately the perfect system does not exist.
  • Optical Scan has a killer feature. And that is you can have as many people voting as you have tables. Theres no hardware to break down. If the scanner breaks, go find another one, delay of a few hours at most.

    • by Hadlock ( 143607 )

      Agreed, the whole system is fully distributed, no reason to ever ever ever upgrade from paper ballots.

      • If it is distributed. Traditionally the ballots are stuffed in a box and then fed into the optical reader somewhere else. That's because it's too high tech for each individual polling place to security transmit the results to a central location, and you run into all sorts of issues that the average election commission is clueless about. How do you distribute certificates reliably (please, please, no preshared keys, this should have better security than the swiss cheese of wifi), how do you train these vol

        • In my polling place, you stick your ballot on the machine on the way out and you can see it tick up a mechanical counter on the top.

    • Optical Scan has a killer feature. And that is you can have as many people voting as you have tables. Theres no hardware to break down. If the scanner breaks, go find another one, delay of a few hours at most.

      the problem I see with this is the security of the paper ballots. Unless you physically or logically secure the stack of ballots from having ballots added, removed or modified, you still do not have a secure system.

      I suggest that paper ballots be serialized so they are unique when printed. Then all ballots are tracked to point of use at the precinct. Every ballot given to a precinct must be returned, used or not, and the number of used ballots must match the number of voters who voted. Then as each prec

      • In Connecticut, we feed our own ballot into the scanning machine on the way out..

        • Curious.. Does the machine verify that your ballot is complete and tell you what votes it would register? What is the point of scanning it right after you fill it out? Does the ballot remain in your hands or do you leave it behind?
          • I think you put it in yourself so you know that it was counted without tampering. I believe the machine has a hopper of all the scanned ballots that can be used as a paper trail.

      • by AvitarX ( 172628 )

        Now we risk losing anonymity.

        You can make it harder to track who (UUID not a serial number for example), but someone at the polling place could on the sly track the last four digits to people, and since the ballots are tracked by place, you'd likely be able to uniquely identifiy every vote.

        • Now we risk losing anonymity.

          You can make it harder to track who (UUID not a serial number for example), but someone at the polling place could on the sly track the last four digits to people, and since the ballots are tracked by place, you'd likely be able to uniquely identifiy every vote.

          True, but if the serialization is done by barcode, it's really hard (though not impossible) for a human to record information easily. Further, precincts should have multiple election judges who's duty is to monitor each other for such activity. Coupled with a "no electronic device within reach when handling ballots" policy for the election judges I think we can make this really hard to do.

          Perhaps the serial numbers can be encoded on the top and bottom of the ballot in a known margin. In this way, the seri

          • by AvitarX ( 172628 )

            Barcode only (no human readable number) and prohibition of cameras from anyone working the polls should be enough.

            Also, UUID over serial number.

  • Why do they care? (Score:2, Insightful)

    by mi ( 197448 )

    Why does California worry about counting the votes, if they would not bother to verify the eligibility of the people casting it?

    • What made you believe that California doesn't verify voters' eligibility? I'm not seeing support for your significant claim.
      • by mi ( 197448 )
        1. Illegal immigrants can obtain driver's license in California [latimes.com].
        2. Anyone obtaining a driver's license in California (and in many other states) can check a checkbox to also register to vote [snopes.com]. It is the person's own discretion, scruples, and fear of prosecution, that decides it.
        3. Anyone registered to vote, can come and vote — no verification is done at the time of voting.
        4. Indeed, various cities — including San Francisco [cnn.com] — encourage non-citizens to vote now. Ostensibly, they are only supposed to vot
        • While it is true that citizens are able to check a box to register to vote when they get their driver's license or state ID, the non-citizen versions of those IDs do not come with that privilege. Non-citizens are unable to register to vote and are unable to vote. But I can understand your mistake because conservative media leaves that incredibly important detail out when fearmongering.

          You are correct in saying that San Francisco recently allowed non-citizens with children in school to vote in school boar
          • by mi ( 197448 )

            Non-citizens are unable to register to vote and are unable to vote.

            There is literally nothing preventing them. And that is the point KKKon$ervative media are making — correctly. The forms at the DMV are the same for all. Whether or not to register to vote is determined by the applicant himself — the DMV employees are neither expected nor even allowed to verify eligibility. Indeed, this is what caused that poor abuela from Kansas to do it, according to this article [nbcnews.com]:

            She applied for an Illinois dr

            • Good news! You are mistaken in thinking that the forms at the DMV are the same for everyone. Non-citizens file forms that do not come with automatic voter registration, and they are not able to register to vote with the non-citizen versions of those IDs. However, this may only be true for California (the state we were talking about). Perhaps it sometimes happens in other states like you suggested.

              "While it’s true that undocumented residents living in California can obtain driver’s licenses, t
    • -1, "When did you stop beating your wife"-style telling a question

      • by mi ( 197448 )

        This makes even less sense, than is usual for Left's ramblings...

        • It might not make much sense to you, but to anyone who has studied formal logic, it's obvious that he's pointing out the fact that your post is a loaded question fallacy [yourlogicalfallacyis.com].

          The classic example is, "When did you stop beating your wife?" That question is based on the unfounded and unsupported assumption that you did in fact regularly beating your wife, much like your question is based on the unfounded and unsupported assumption that California doesn't verify the eligibility of voters to vote.
  • I love these things: politicians get pressured by a few who actually give a shit, or get cornered into doing the right thing, then spend a decade undoing it. This time, they'll have the entire coding community on their back and those guys never give up a good verbal battle!
  • by jtara ( 133429 ) on Wednesday August 22, 2018 @08:02PM (#57177748)

    Is there an actual repository of actual code?

    None of the articles (including in technical press) have mentioned where to find the alleged open-source software.

    I found plans and progress reports and PDFs and PDFs, and more PDFs, oh, my!

    Nary a source file. Nary a mention of language(s) etc.

    Can somebody help me find where it is hiding?

    Yes, I looked on GitHub. I realize it's not the only place to look, but the most obvious.

    From a Pretty PDF:

    "This should include making hardware components available for inspection, and source code to the
    extent that the manner of doing so would not jeopardize system security or availability."

    "available for inspection"? Is this like how your HOA makes documents "available for inspection"? Looking through paper documents in a cramped office with no air conditioning?

    And that "extent and manner" means it is not open-source. If it is not ALL open-source (place don't point to passwords, etc. which shouldn't be in a source code repo) then it's not open-source. Period.

  • by rally2xs ( 1093023 ) on Wednesday August 22, 2018 @11:23PM (#57178322)

    Good grief, will we never learn? To make it truly unhackable, you use paper ballots, get about 50 people into the room, and count the damned ballots by eyeball. Not that hard.

    • by Mal-2 ( 675116 )

      Sure. Because none of those 50 people can be bought off, and 50 points of attack is so much safer than one.

      • You will need to buy off 26 people, the one you want to cheat, and the other 25 on the other side to not look while he does it.
        • by Mal-2 ( 675116 )

          No, you pay off ONE counter in EACH precinct and hope some or most of them get through without an audit by making sure it's not close enough to trigger a recount. You wouldn't have to tilt all of them, and some you would just be making closer rather than in your favor (since all the votes are aggregated anyhow). Steal a hundred votes here, a hundred there, a thousand somewhere else. Keep the margins tight, so that one big victory elsewhere (also assisted by buying a vote counter) can cancel them all out.

          • Maybe you should look into how votes are actually counted...
            • by Mal-2 ( 675116 )

              From what I have seen, they scan them optically. Then if things don't check out, they might count the ballots (not the votes, just the actual physical papers) to make sure two didn't get stuck to each other or anything like that. Only if that fails to resolve the discrepancy do they actually count votes manually, and only that particular batch that the machine barfed on.

              • Pointless strawman.

                To make it truly unhackable, you use paper ballots, get about 50 people into the room, and count the damned ballots by eyeball. Not that hard.

                Maybe you need to scan the posts you are replying to optically, instead of just going with your idiot talking points.

                • by Mal-2 ( 675116 )

                  I trust a dumb machine that just counts and does nothing else over 50 people doing that same counting. Even if they're all honest, the 50 people are going to make more mistakes unless the machine is broken.

                  • Again, irrelevant. You need to read the posts you are replying to, or are you just a dumb machine?
                    • by Mal-2 ( 675116 )

                      It is possible to have a discussion without the ad hominem attacks, but it is beyond obvious that you don't want to discuss, you want to inflict abuse. Go die in a fire.

                    • Of course it's possible. But unlikely if one of us isn't interested in reading whats written, and changes the topic randomly to suite his talking points.
          • No, you pay off ONE counter in EACH precinct and hope all of them keep your secret...

            That is the flaw. Conspiracies are hard, because someone always talks.

            • by Mal-2 ( 675116 )

              Maybe they talk, but by then it's too late to do anything but take down some bag men. How many elections have been negated due to tampering or fraud? None in the U.S. at least.

    • The PRI in Mexico rigged elections for 80 years using nothing but paper ballots.
      • Fine, there's nothing you can do about corruption, but what we don't need is a bunch of f'n Russian techs in Moscow screwing with the elections by attacking electronics.

  • by Anonymous Coward

    Blockchain is literately made for this task. Seems a waste to go any other direction.

  • This system seems nice and all, but what is LA County going to do to fix its voter registration rolls. Currently LA county has a 112% voter registration rate, which is obviously means some shenanigans are going on. Judicial Watch is currently suing California over this. https://www.judicialwatch.org/... [judicialwatch.org]

Avoid strange women and temporary variables.

Working...