|
|
|
#1
|
|||
|
|||
|
Florida: No recounts on e-voting???
As if Florida doesn't already have a reputation for crooked elections:
Quote:
Now, I know it's still early in the law-making stage, and there's no guarantee that this thing will get signed into law. But I'm baffled by several things already: 1. Why would anyone in the Florida legislature, in their right mind, even propose such a bill to begin with? 2. Why did the Florida Senate Ethics and Elections committee, of all people, approve this thing 8-to-1? Is this some Orwellian doublespeak joke? I mean, people are suspicious about electronic voting as it is, so wouldn't the prudent thing would be to push a law requiring a paper trail? Instead, we've got (what appears to be) Republicans in Florida going in the opposite direction, to make it even easier to commit electronic election fraud. Does this make sense to anyone? Because I sure don't get it... |
| Advertisements | |
|
|
|
|
#2
|
|||
|
|||
|
Quote:
I, too, think that the Florida legislature is walking the cause two steps back. I would like to hear any type of reasoning behind their intentions, as well. LilShieste |
|
#3
|
|||
|
|||
|
Quote:
|
|
#4
|
|||
|
|||
|
I just do not understand why so many people are so aprehensive about e-voting. Technically it is as safe as can be. The notion that fraud is easy is just silly. The parties will have their observers and if the parties and their observers agree the system is safe why would I be afraid that it's not? I have absolute confidence that it is technically feasible to implement a system which is secure and by secure I mean you could not steal votes from party X without the cooperation of someone in party X. In other words, as safe as paper ballots.
__________________
Posted using 100% recycled electrons. |
|
#5
|
|||
|
|||
|
In my profession, I maintain expertise regarding data network security. While it is not what currently pays my bills, I have in the past provided consulting services to Fortune 500 companies regarding network security, and one of my clients was a bank.
With that said, I still would defer an issue like this to folks more expert than I on these topics. And the one expert I respect the most is Bruce Schneier (author of Applied Cryptography - the definitive textbook for cryptography). Bruce maintains a free monthly newsletter, and recently touched on this topic. Computerized and Electronic Voting Quote:
In my opinion, this bill is exceptionally ill advised. |
|
#6
|
|||
|
|||
|
My cynical, paranoid first response would be that someone is planning on doing some tricky stuff, but it won't be in Florida; that this is a red herring, a distraction to keep eyes away from the hand that really holds the coin.
It does lead me to wonder though, should either side win in such a way that the other cries foul, what happens when they demand a recount? Are there technicalities that make e voting impossible to be verifiably recounted? It's not exactly like being able to have a both sides keeping watch over a ballet box to make sure no one dips inside of it. There are at least 50 chances for it to fail assuming all states participate in e voting to some extent. If either side gets something resembling a landslide, I bet the other will dispute it. Either side may possibly cry foul simply as a strategic attack. I assume this then goes to the courts, and how long will that take this time? We waited a month in 2000, could it take months to settle in a case like this? Could there ever be a clear settlement, a recount that could prove beyond a reasonable doubt that the vote was not manipulated? Would the Bush administration stay in power in until an outcome is decided? And lastly, why the hell aren’t more of us Americans demanding verification? I bet by the end of the decade the issue will become big enough through some voting fiasco somewhere that it will have to be rethought. Until then, I fear there are those preparing to take advantage of the situation. |
|
#7
|
|||
|
|||
|
Quote:
|
|
#8
|
|||
|
|||
|
Quote:
Quote:
Unfortunately, between the leaked corporate memos documenting security holes, the tests from third-party computer experts which show how easily the results can be accessed and changed, and promises from corporate CEOs to "deliver Ohio's electorial votes for Bush", you'll pardon me if I'm not ready to believe their sincere promises just yet. |
|
#9
|
|||
|
|||
|
Quote:
Frankly, I'm not sure why we don't drop voting, and go to polling. If we got a true and large enough EPSEM picked group, it would probably be even MORE accurate than actually casting ballots. |
|
#10
|
|||
|
|||
|
Quote:
Quote:
The opposition to the concept (not to specific systems) comes mainly from ignorance because people tend to not trust what they do not understand. In reality it is much easier to do fraud with paper ballots where you just pay off the observers. With electronic systems this could be made much more difficult. For many years my bank would not accept orders by digitally signed email but they would accept orders by fax which are *trivial* to forge. I can create an email with any signature you want in a question of minutes. Most people just oppose anything new they do not understand. If you had to transfer $1 million across the country, would you mail it with the USPS or would you send an electronic transfer? Which is more secure? We allow voting by mail. In fact some places *mandate* vote by mail. Why is a vote by mail any more secure than a vote by secure email? the answer is that it is not. The issues of annonimity, security etc, have all been resolved in a very satisfactory manner and I am sure in the future people will laugh at our misgivings today just like we laugh at people who opposed the steam engine, the microwave oven or the washing machine. Basically the concept is very similar to that of electronic cash which allows security, annonimity, etc. The concepts of blind digital signatures etc are too complex to discuss here but they are basically the same as for digital cash which has been proven safe. The basic blinding concept is described in D. Chaum, "Blind Signatures for Untraceable Payments," in Advances in Cryptology--Proceedings of Crypto '82, edited by R.L. Rivest, A.T. Sherman, and D. Chaum (Plenum Press). A review of the various paradigms appears in David Chaum's "Achieving Electronic Privacy" (Scientific American, August 1992) The linked page does not have the graphics of the original article but should give a general idea. In my opinion is is technically possible to design a voting system which is anonimous and secure and reliable. It has to be open code so all involved can inspect it. The concept of "observer" (specific meaning for digital cash, encryption etc) guarantees the system is tamper proof. The "observer does not "trust" the machine it is embedded in. there is no need for "trust" anywhere along the line. No part of the system "trusts" any other part of the system. It works with electronic cash. As Chaum has proven it is possible to create "digital cash" in the form of strictly information (numbers). It is possible that the bank give me digital cash by email. That I spend that digital cash at a merchant and the merchan redeems the digital cash from the bank and that no one can deny their part of the transaction (the bank cannot deny having issued the cash, I cannot deny having spent it, etc) but it protects the anonimity of those involved (the bank and the merchant cannot identify me *even* if they cooperate, in other words, I do not trust them or need to trust them). All these issues have been resolved by science and are as applicable to voting as they are to money. I am not defending *any* specific sytems and it could well be they are flawed but that does not mean the concept is flawed. And, contrary to what people think, paper is the easiest thing to forge. It is just what we are used to using and what we feel comfortable with. But I can guarantee a digital system can have greater safeguards built in so that you need more people to cooperate than you need now. Right now if you want to stuff a ballot box full of votes all you have to do is pay off the few human observers who are physically there. Or distract them. Or. . . A digital system *can* be much more secure.
__________________
Posted using 100% recycled electrons. |
|
#11
|
|||
|
|||
|
sailor, I certainly won't assert that the technology doesn't exist to provide secure electronic voting. I won't assert that providing adequate security, even improved security, is unachievable.
However, I will assert that relying on such electronic voting systems without an auditable paper trail is ill advised at this time. There are a number of reasons why I reach this conclusion. One, based on my thorough understanding of digital signature technology (PKI), is that such technology and the infrastructure required to operationalize mass electronic voting, simply is not practical in the near-term. But, even if we have sufficient technology (I agree we do), and even if we have sufficient funding to operationalize the technology (which we don't), unauditable electronic voting is still a very bad idea. Why? Because the perception of integrity by the populace is just as critical as the actual integrity of the system. You continue to argue that many people simply don't trust what they don't understand. I fully agree - and assert that that is reason enough to not rely on electronic voting (without an audit trail). The instability within the electorate created by the lack of trust of election results is sufficient reason to avoid such systems. Perhaps the best summary of the position I support is elaborated by Rebecca Mercuri, and can be found here. Much more information on this topic compiled by Rebecca can be found here. I acknowledge the expertise of David Chaum on this topic, but make two quick points. The work you cite was created very early in the development of the technology, and many many issues have arisen since he contributed these works. Second, even David Chaum acknowledges the necessity of an auditable voting result. An article in The Economist back in 2002 summarized some of these issues, and just happens to mention all three of the experts mentioned in this thread so far. Quote:
|
|
#12
|
|||
|
|||
|
Quote:
Quote:
Quote:
__________________
Posted using 100% recycled electrons. |
|
#13
|
|||
|
|||
|
Since the OP is specific to the proposed Flordia legislation, I may be moving toward a bit of a hijack, so I will defer to rjung regarding what is appropriate to debate within this thread.
For the most part, I think we agree with many of the most basic facts of this issue. For example, we both agree that e-voting can be made safer than paper voting (safer meaning secure with high levels of integrity). However, you appear to support the implementation of paper-less voting systems now, or at least in the very near future (right?). I don't. I'll agree that "auditable" doesn't require a paper trail. However, I will note that most security and electronic voting experts concede that a paper (or paper-like) receipt is the best solution in the near term. So these aren't simply the people that don't understand the technology. The people that best understand the technology are the strongest proponents for such systems. For some more recent perspectives on this issue, consider the writings of Robert X. Cringely. From two recent columns: Quote:
Quote:
|
|
#14
|
|||
|
|||
|
There's another issue here, too--the ability of a corrupt individual person to manipulate the system.
I dont know anything about electronic security.But I do know how to count pieces of paper (or mechanical voting machines with physical switches and gears inside) I know that any cheating done on paper (or mechanical machines) is limited by the physical premises.One person can cheat in ONE voting precinct only. He can intentionally miscount, or even change the paper ballots phsyically, but he can only affect a few hundred votes which he records in his voting station. .Any cheating (or even honest mistakes, like the "hanging chads" in Florida) may be hard to prove later, but at least it is limited to one small precinct. Convincing me that E-voting on a network is "safe" wont work--it is simply beyond my comprehension. One teenaged hacker with a laptop sitting in an igloo at the North Pole could publicly claim that he had broken into the system and changed everything. It's a reasonable claim--And I would have NO way to disprove it.Millions of hackers are out there, and I see them every day in my email box, when my anti-virus warning pops up. So I (and millions of other Luddites) would have no choice other than accepting the government's promises that "everything is okay". The arguments given here about how safe e-money is don't convince me. The real reason I trust my bank and credit card is that I get a monthly statement ON PAPER that I can verify. If anything looks suspicious, I can go to court, and demand evidence-- I know I never bought a million dollar diamond , and the diamond merchant knows he never sold it to me. But in elections, there is no other evidence. We need a paper trail to guarantee integrity.Otherwise all we have is a politician's promise . And we know how the public feels when told to accept a politician's promise (such as, say, that Iraq has WMD.) |
|
#15
|
|||||
|
|||||
|
Quote:
Quote:
Quote:
Quote:
Quote:
My main point I guess is that the security will not come from voters getting slips of paper but from the entire system being open and verifiable by all parties concerned. People keep thousands of dollars in the bank without need to understand the bank's security systems. Voters do not need to understand the technology behind the system. Just be assured by experts from all parties involved that the system is safe.
__________________
Posted using 100% recycled electrons. |
|
#16
|
||||
|
||||
|
Quote:
It's a reasonable claim--And I would have NO way to disprove it.Millions of hackers are out there, and I see them every day in my email box, when my anti-virus warning pops up. [/quote] They could claim the same thing now. Did you count the votes yourself? Quote:
Quote:
Quote:
If you send your vote by mail, how can you be so sure it was counted correctly other than trusting the USPS and a whole bunch of other people? It is *much* easier to commit fraud there than with a well designed electronic system.
__________________
Posted using 100% recycled electrons. |
|
#17
|
|||
|
|||
|
Actually, I'd like to see a separate thread with an informed debate about electronic voting schemes. A politics-free one, please! In particular, I'd like to learn more about the current proposed vendor schemes; it's my understanding that all of them are closed-architecture systems, which is one of the alarm points -- is that correct? And if we go to open-systems stuff, how would that affect security? The systems sailor talks about, which are indeed used for things much more important than the piddling question of who occupies the White House, are mostly closed and rely at least in part on security by obscurity. Another thing they have is that both sides of a transaction can match their records before or after a transaction is complete -- I get a bank statment telling my how many times and how hard I hit the ATM and I've got a full-time employee who does nothing but reconcile what goes in and out of the accounts for which I'm responsible, for example. And there's a certain trust level -- If I tell my bank they're nuts and delivered the wrong money or securities, the transaction is held in abayance until everyone matches up records and works things out. How, precisely, would an audit trail system work when the anonymity of each individual voter (or if not his anonymity, his choices) is an important part of the system?
I ask this and request a separate thread because (hold on tight, you won't see this too often!) I haven't the faintest idea of the answers to any of this stuff. So if you guys and others can do a separate thread without the DIEBOLD IS A REPUBLICAN WTFOMG11111!!!!! stuff that normally infects them I'd be grateful and perhaps some ignorance might be eradicated. |
|
#18
|
|||
|
|||
|
Quote:
We are mostly in agreement, at least in all fundamental ways, so I only wish to quibble a few comments to the bolded portions. First, I would argue that the paper receipts have more value than just to make people "feel-good". However, I would also argue that the value of making people "feel-good" is more than sufficient to justify their use. As I mentioned earlier, having the electorate trust the process is critical (a point I think you agree with). To your point, I would also agree that there are other ways of providing the addtional security value of a paper receipt without using a paper receipt, but instead using technology. I just don't think implementing such technology now is cost effective. To the "What will the paper say?" question, I tend to like the recommendation of David Chaum. The biggest concern over paper receipts that are "human readable" and reflect the votes that you just made is that it could enable voter fraud by allowing people to buy votes. I agree that that concern is valid. The receipt could easily reflect the same information in an encrypted manner, such that it could be validated electronically, but only by election officials. For example, [techno speak] Each voting machine could have a digital certificate with RSA keys, and be used to secure a precinct-level private key. The voting results, along with a voting record index number, could be encrypted with the precinct-level private key, and then "signed" (encrypted hash) with the machine digital cert. The precinct-level public keys could be kept private until voting results are certified. However, those keys could be used to validate voter receipts in the meantime. [/techno speak] |
|
#19
|
|||
|
|||
|
Quote:
I'd be happy to participate in the thread you propose, however, I am not the best person address the specific electronic voting systems on the market. It is not really an area that I am stongly versed (which is part of the reason I rely on experts that I trust). And while I may often come off quite partisan, I'm pretty sure I could participate in such a thread without resorting to any partisan screeches. |
|
#20
|
|||
|
|||
|
Quote:
In the past couple of years, our Legislature has done the following:
So at this point, nothing that our Legislature does surprises me; moreover, our governor is on record as supporting all of the actions that I mentioned above. I assume that a lobbyist for Diebold wrote the bill to which rjung refers and it will probably be passed and signed without significant changes to it. Statewide, voters are screaming about all of these things (and more -- there are more), but the districts as drawn virtually guarantee this will carry on for a very long time.
__________________
Todo aquel que piense que la vida es desigual tiene que saber que no es así. La vida es una hermosura; hay que vivirla. Todo aquel que piense que está sólo y que está mal tiene que saber que no es así. En la vida no hay nadie sólo; siempre hay alguien. |
|
#21
|
|||
|
|||
|
Quote:
That is not to say that it was a good agreement, but it would be inaccurate to suggest that it was simply pork to reward local phone companies. |
|
#22
|
|||
|
|||
|
Quote:
|
|
#23
|
|||
|
|||
|
Quote:
Again, I think people will feel confident when the leaders of the party they want to vote for tell them the system is safe. That is the *main* thing. When the parties agree it is safe the people will follow. the parties will just have their experts who will review things and make sure everything is as it should be. There are several issues here. One is voting over the Internet and another is voting in Electronic booths. All this could be discussed for days. Of course, voting over the internet allows the buying of votes but so does voting by mail. A few single votes bought and sold are not going to make a difference and, like now, laws penalising it would prevent it from becoming widespread. Voting by Internet is safer than voting by mail. And with voting machines, the main issue is that the system has to be open so that anyone and everyone can examine it and be satisfied it is safe. There are millions of ways to design a safe system and, again, without need to trust anybody (I mean at the party level). The machines can be complete transparent in their operation. Each party and observer can install their own trusted electronic observer in the machine. Suppose you have a voting machine and it has 5 (electronic) observers installed. The machine does not "trust" the observers nor the observers "trust" the machine nor each other. Suppose at the end of the day the 5 "observers" report the same results, as is foreseeable, then those are the results for that machine. If one observer gives a different result it can be discounted and, furthermore, it can be analyzed. Again, the system can be as simple or as complex as you want. It is possible to have every vote digitally validated by every "party observer" and yet have the vote remain anonimous. It can all be done but the person in the street is not going to understand the mechanics any more than they understand the encryption of secure web pages. They just trust the system is secure because they have been told it is secure by people they trust. We have had past threads discussing the more technical and scientific aspects of this but soon people leave because it is just more complex than they want to get into. BTW, I spent quite a while trying to find the Scientific American article in my computer. I remembered having scanned it but I could not remember the name I gave it. That's what happens when you use cryptic names. *_* Understanding the concepts of encryption, digital signatures and blind digital signatures is a good start for anyone interested in understanding the security of e-voting systems and that article is a good start. In the more distant future all voting will be via Internet, even if you go to the precinct. You can encrypt your vote with the public key of the precinct and have the vote digitally validated with the blind signature of every observer. The system allows anonimity (like digital money) even if other parties are in collusion. And every vote is digitally signed and validated by every observer. Internet voting systems have already been used in quite a few of elections like for corporations, unions, etc, although they are not yet widespread for government representatives for the reason that the government is generally behind in these things. Several police unions have been using them in Spain already and don't seem to have a problem. The Swiss Canton of Neuchatel is in the process of implementing such a system where the citizens can vote from home and it will be effective later this year.
__________________
Posted using 100% recycled electrons. |
|
#24
|
|||
|
|||
|
While I think a discussion on the benefits/drawbacks of e-voting systems is good, I would prefer it to be a separate thread, s'il vous plait. I'd especially love to see a comparison of the existing systems with the Open Voting Consortium's open-sourced, paper-trail-enabled, fraud-proof system as well.
And hearing Bambi talk about the Florida Legislature creeps me out. Is there anything the voters can do, short of staging riots at the capitol building? |
|
#25
|
|||
|
|||
|
With pardons to rjung, a couple of quick responses, and I will let it go.
Bambi Hassenpfeffer, understand that the landscape of telecommunications is one of deregulation, where local phone companies eventually will no longer be regulated. The provisions you cite are specific to this issue, with current support for the idea of letting free market forces find the optimal solution. FTR, the local telco rates will not necessarily go up, they may go up. And raising rates at a time when your competitor's cost structure just dropped dramatically (by not having to pay access to terminate calls) probably won't make business sense. Your politics may vary, but the agreement wasn't pork. sailor, no, I'm not going to defend the "receipt" architecture here, specifically because I don't support moving to electronic voting at this time! But you can read The Economist article for more details about how the receipt would work. |
|
#26
|
|||
|
|||
|
Quote:
AZCowboy, let's agree to disagree, and I'll stop hijacking rjung's thread with my opinions of the specifics of a phone rate bill. |
|
#27
|
|||
|
|||
|
I concur.
|
![]() |
| Bookmarks |
| Thread Tools | |
| Display Modes | |
|
|