6 ms·

It's still a 3-point of failure versus a thousand in a paper vote. I've seen the British election many times, there are hundreds of people in the counting hall

by adwf 10y ago

It's still a 3-point of failure versus a thousand in a paper vote. I've seen the British election many times, there are hundreds of people in the counting hall for every district. They count, then they shuffle the ballots around and have different people recount. It would take the bribery of thousands upon thousands of people. People who are under constant scrutiny, not just by those around them, but on TV also. A computer is almost trivially suborned in comparison. Even our most important pieces of security software, such as openssl and others, get hacked from time to time. If such hugely important - massively used, massively tested - open-source projects get hacked, why on earth would you want to risk computer voting? It's just standard programmer NIH hubris; we think we can do it better, therefore we should.

tgb 10y ago
I've counted votes a couple times before and can tell you that where I come from in the US recounting is minimal (if done at all). We pair up with a person of our choosing and then count and recount. Collusion is trivial. Just make sure the total counts add up and that your results aren't so wildly disproportionate from the other people's that they'd get reexamined when all the pairs' numbers are summed. I don't know what you mean by scrutiny on the TV - are local polls counted live on television in the UK?
- adwf 10y ago
  Yep - this is the kind of thing: https://www.youtube.com/watch?v=XydeHaqxBbg https://www.youtube.com/watch?v=XydeHaqxBbg It's almost impossible to imagine that someone could bribe that many people to influence an election in the UK. There are 650 seats with over 100k population per seat. I just can't imagine it being bribable on a large scale. Maybe some tiny constituency in a tiny district might get influenced, but the absolute smallest is about 20k votes. That's very difficult to rig.
  - sgnelson 10y ago
    But you don't have to bribe 100k people. You just have to bribe/influence 50,001 people (and I know that's not exactly true, this is based on a US two party system, not the variety of parties in the UK, but hang with me here.) And in reality, it's as the saying goes for Baseball. "Every team is going to win a third of it's games, and every team is going to lose a third of it's games, it's what you do with the last third that makes a difference." Every party is going to have a large number of supporters and a large number of detractors, it's what you do with the unaffiliated votes that matters. Now I'm really going to talk out of my ass, in a horrible, gross generalization with no support to back me up; I'd guess that for many elections, it's less than 20% of voters who actually decide the fate of their country/district. And since we're talking about voters (not citizens or residents/people), we're then talking about an even smaller group of people you must influence. That's why bribery, voter intimidation and pure old fashioned marketing matter; You don't need to get everyone on board, only a much smaller percentage of key voters. Isn't democracy great?
  - DanBC 10y ago
    Some UK seats are marginal. You only need to manipulate a few dozen votes to influence those seats. That's much easier to do.
Retra 10y ago
>It's just standard programmer NIH hubris; we think we can do it better, therefore we should. It's not NIH at all. Electronic voting has not been implemented sufficiently. It could be done. It's not about doing it better, it's about doing it at all. It's not-invented-anywhere hubris, and that's plenty of reason to do something. People aren't much harder to manipulate than machines, and they're also just as transparent. There is no fundamental reason to believe computers can't be more secure than humans when it comes to collecting data and tallying it.
- thegp 10y ago
  To be done sufficiently, you need to not only prove that your system is fair, reliable, scalable, tamperproof, anonymous etc., but also that you system actually runs. That combination is nigh impossible. That is the fundamental reason, bootstrapping that trust. Imagine you have a 100% open source system, cryptographically verified etc. How do I know that is actually what is running in the voting box?
  - Natanael_L 10y ago
    Secure multiparty computation. You trust that the right software runs, because unless multiple mutually distrusting parties runs the EXACT SAME software in the same configuration, nothing will happen at all - and they'll hopefully never agree to collude on running anything but the officially agreed upon version. https://roamingaroundatrandom.wordpress.com/2014/06/16/an-mpc-based-privacy-preserving-flexible-cryptographic-voting-scheme/ https://roamingaroundatrandom.wordpress.com/2014/06/16/an-mp...
    - thegp 10y ago
      So who do you trust enough to be distrusting parties? This to me seems to be the same problem as making it proof of work: if the incentives are big enough, the scheme collapses. Look at the creativity that lead to caging and other forms of voter suppression
      - 10y ago

by adwf 10y ago

tgb 10y ago

I've counted votes a couple times before and can tell you that where I come from in the US recounting is minimal (if done at all). We pair up with a person of our choosing and then count and recount. Collusion is trivial. Just make sure the total counts add up and that your results aren't so wildly disproportionate from the other people's that they'd get reexamined when all the pairs' numbers are summed. I don't know what you mean by scrutiny on the TV - are local polls counted live on television in the UK?

adwf 10y ago
Yep - this is the kind of thing: https://www.youtube.com/watch?v=XydeHaqxBbg https://www.youtube.com/watch?v=XydeHaqxBbg It's almost impossible to imagine that someone could bribe that many people to influence an election in the UK. There are 650 seats with over 100k population per seat. I just can't imagine it being bribable on a large scale. Maybe some tiny constituency in a tiny district might get influenced, but the absolute smallest is about 20k votes. That's very difficult to rig.
- sgnelson 10y ago
  But you don't have to bribe 100k people. You just have to bribe/influence 50,001 people (and I know that's not exactly true, this is based on a US two party system, not the variety of parties in the UK, but hang with me here.) And in reality, it's as the saying goes for Baseball. "Every team is going to win a third of it's games, and every team is going to lose a third of it's games, it's what you do with the last third that makes a difference." Every party is going to have a large number of supporters and a large number of detractors, it's what you do with the unaffiliated votes that matters. Now I'm really going to talk out of my ass, in a horrible, gross generalization with no support to back me up; I'd guess that for many elections, it's less than 20% of voters who actually decide the fate of their country/district. And since we're talking about voters (not citizens or residents/people), we're then talking about an even smaller group of people you must influence. That's why bribery, voter intimidation and pure old fashioned marketing matter; You don't need to get everyone on board, only a much smaller percentage of key voters. Isn't democracy great?
- DanBC 10y ago
  Some UK seats are marginal. You only need to manipulate a few dozen votes to influence those seats. That's much easier to do.

Retra 10y ago

>It's just standard programmer NIH hubris; we think we can do it better, therefore we should. It's not NIH at all. Electronic voting has not been implemented sufficiently. It could be done. It's not about doing it better, it's about doing it at all. It's not-invented-anywhere hubris, and that's plenty of reason to do something. People aren't much harder to manipulate than machines, and they're also just as transparent. There is no fundamental reason to believe computers can't be more secure than humans when it comes to collecting data and tallying it.

thegp 10y ago
To be done sufficiently, you need to not only prove that your system is fair, reliable, scalable, tamperproof, anonymous etc., but also that you system actually runs. That combination is nigh impossible. That is the fundamental reason, bootstrapping that trust. Imagine you have a 100% open source system, cryptographically verified etc. How do I know that is actually what is running in the voting box?
- Natanael_L 10y ago
  Secure multiparty computation. You trust that the right software runs, because unless multiple mutually distrusting parties runs the EXACT SAME software in the same configuration, nothing will happen at all - and they'll hopefully never agree to collude on running anything but the officially agreed upon version. https://roamingaroundatrandom.wordpress.com/2014/06/16/an-mpc-based-privacy-preserving-flexible-cryptographic-voting-scheme/ https://roamingaroundatrandom.wordpress.com/2014/06/16/an-mp...
  - thegp 10y ago
    So who do you trust enough to be distrusting parties? This to me seems to be the same problem as making it proof of work: if the incentives are big enough, the scheme collapses. Look at the creativity that lead to caging and other forms of voter suppression
    - 10y ago