3 ms·
We need to have a system where all the code is open source and available for download. All the code, from the registration servers to the voting machines to th
by jefurii 4y ago
We need to have a system where all the code is open source and available for download. All the code, from the registration servers to the voting machines to the tallying servers. Everything made available along with the SHA256 checksums. The public should be able to clone repositories of all the software, run the checksums on their own hardware, and examine software checksums on every piece of voting equipment they have access to. Checksums for each piece of hardware used by the government should be made public.
Digital representations of votes need to be in text, and they need to exactly match a printed receipt given to the voter at the moment they vote. The data would include a digital signature, some hash of the vote values, the precinct, the datetime, and a salt, and would be anonymized. The data should go into Git repositories. You wouldn't put an entire state's data into a single repository, you'd have separate repos for e.g. the district or even precinct level. Git repositories would be initiated before voting begins, and updates could come in via network or via physical storage transported with the same security as ballot boxes.
[Before all the Git haters descend to say that the public will never be able to use Git for themselves, I agree with you that that would never work. Nobody would be using Git directly, the software would use Git under the hood to manage the vote data.]
Once the repositories of vote data are conveyed to the district level, the public should be able to browse all the votes, and each person should be able to enter the digital signature from their paper receipt (via typing, or QRCode, semacode, barcode, or whatever) and find their vote. If they want and if they are organized enough, they should be able to confirm that the votes of whole communities are in fact all in the system. The public should be able to download the vote tallying software along with as much of the vote data as they want, and run the counts on their own hardware.
If the data is in Git repositories, every single vote will have a digital signature. Every modification of the data that is committed would have a signature, and would have its own signature. Every piece of data, every modification, and every bit of the history would be perfectly transmissible, and if it's not perfect it will become immediately apparent.