> So an attacker could potentially invalidate hundreds (or thousands) of votes by stuffing a single fake ballot into the box? This seems like the illusion of se

> So an attacker could potentially invalidate hundreds (or thousands) of votes by stuffing a single fake ballot into the box? This seems like the illusion of security. In Canada poll workers initial the ballots, and the ballots have serials numbers on them and a stub (which also has the S/N) that is torn off by poll worker: > The election worker checks their initials and the assigned polling station number on the back of the ballot; compares the counterfoil number against the stub number in the booklet and makes sure they are the same; takes off the counterfoil and tears it up; and gives the ballot back to you to put in the ballot box. You slide your ballot into the ballot box where it is mixed in with other ballots. No one will know how you voted. * https://www.elections.ca/content.aspx?section=vot&dir=int/saf&document=index&lang=e https://www.elections.ca/content.aspx?section=vot&dir=int/sa... So there's a record of which ballots were put in via proper workflow. If there's a discrepancy the non-proper ballots can be identified and removed. From Elections Canada: * https://www.youtube.com/watch?v=lqu8ONkWQBE https://www.youtube.com/watch?v=lqu8ONkWQBE * https://www.youtube.com/watch?v=cbc_n8Ys_CA https://www.youtube.com/watch?v=cbc_n8Ys_CA