5 ms·
The worst damage done by GOP rhetoric on the 2020 election is that it set us back decades in terms of our ability to have rational and productive discourse abou
by TechBro8615 4y ago
The worst damage done by GOP rhetoric on the 2020 election is that it set us back decades in terms of our ability to have rational and productive discourse about election security. It's become an albatross that otherwise rational and technically minded people are unwilling to publicly discuss, lest they be labeled extremist by association.
The fact of the matter is our elections are not secure, in the sense that their results cannot be cryptographically verified. You either cannot verify your vote was counted, and/or cannot verify it contributed to the total votes received by the candidate for whom you voted. In aggregate, we can rarely verify that "all legitimate ballots were counted," and can never verify that only legitimate ballots were counted.
This is a problem, it's been a problem, and it will continue to be a problem. Our election infrastructure is only secure insofar as people trust it's secure, and people can only trust what they can verify. Otherwise, the winning party is asking the losing party to commit an act of faith in "trusting" a system that cannot be verified for correctness.
In 2017, Democrats recognized it as a problem, just like Republicans did in 2021. Yet we have so much whiplash from back and forth politicization of the issue that it's impossible to have a sane discussion about it.
- LeoPanthera 4y agoThe UK has the most secure voting system I know. Voting machines are not used, votes are always paper-and-pencil. Your ballot form contains a unique serial number to prevent multiple votes. Votes are counted at the district level, with only totals being submitted up the chain, in order to protect privacy. It's simple and it works.
- mnd999 4y agoThat doesn’t stop media firms after faster results and American voting machine manufacturers lobbying to change things every time we have an election.
- explorer83 4y agoHow is the serial number used to confirm that the person using it is who the ballet was issued to?
- LeoPanthera 4y agoWhen your ballot is handed to you, your home address is recorded in a log. It's handed to you inside the voting station, you can't take it back out.
- j33zusjuice 4y agoYour ballot is linked to your address? So, someone could link a ballot to the voter? That’s not something we want in the US. It’s intended to be anonymous.
- sbuttgereit 4y agoI live in San Francisco, CA, USA. Ballots here are also serialized and many (most?) people vote by mail which means that serialized ballots are mailed to you specifically at your registered address. After the vote, you can check the status of the ballot's serial number at the appropriate city/county website. It won't tell you who voted or the votes cast, but that it was received. So while the website won't link you to your votes, the city/county could absolutely make that connection since they control the serialization and the mailing. One hopes that they don't do this, and I'm sure they're not suppose to, but trust and wishes are the best surety we have for vote by mail ballots... there are ways to defeat the loss of anonymity in this case, but they involve not voting by mail or providing false signals (i.e. swapping ballots with someone else in your district).
- LeoPanthera 4y agoThis is, in theory, possible. However, the information remains in your local district, and is not passed up the chain with the results. It's one of those things that sounds bad in theory but is rarely an actual problem in practice.
- j33zusjuice 4y agoHow do they verify the answer wasn’t overwritten, since it’s in pencil? I can imagine a lot of potential security flaws in that system.
- generj 4y agoPaper and pencil doesn’t work in the US because of how litigious we are, and because each state operates their own elections. If every state ran elections the same way we could standardize on something like the UK has and have collective faith in it. When some battleground states routinely come down to less than 1% of voters, incredibly marginal effects matter. The US still has institutional trauma from Hanging chads. Just look at all the varied reasons mailed ballots are rejected, especially in tight races. With paper and pencil, what happens if a mark got erased? If the circle is half filled? If the circle is quarter filled? All of these are questions that will be the subject of lawsuits in a mix of jurisdictions.
- fknorangesite 4y agoI'm in Canada; I can't speak to the specifics of the UK. > what happens if a mark got erased? If the circle is half filled? If the circle is quarter filled? When I sit down to vote, there is a very unambiguous set of instructions on how to fill it out: mark an X in the circle. - we all know perfectly well that pencil erasers aren't perfect - It's not a Scantron™ ffs! Is that what you're imagining? That's just a voting machine with extra steps! Every single ballot is counted by a human! https://electionsanddemocracy.ca/canadas-elections/canadas-election-process/election-counting https://electionsanddemocracy.ca/canadas-elections/canadas-e...
- ceejayoz 4y agoI sure hope it's counted by more than one human. What do you do if someone marks something like a Y and it looks like the ink ran out? (My local elections are indeed a Scantron-style procedure, incidentally. Bubble in the entire circle.)
- fknorangesite 4y agoObviously. I'll just quote my link directly for you, then: > First, election officers open the ballot boxes and count the ballots. Note the plural. Safeguards for Counting Votes and Reporting on Results: https://www.elections.ca/content.aspx?section=vot&dir=int/cou&document=index&lang=e https://www.elections.ca/content.aspx?section=vot&dir=int/co...
- cm2187 4y agoI wouldn't call it "the most secure", there is no id check (because there is no mandatory ID scheme) so the process to verify your identity is super loose. Also very little constraints on voting by mail, with the only form of authentication being a signature which is weak to say the least. France has much stronger controls on ID checks at the voting booth and vote by mail (in fact for most elections there is no vote by mail, you can only delegate your vote to a person who cannot act as a delegate to more than two people to prevent ballot harvesting).
- fknorangesite 4y agoI agree with your first paragraph here, but that's about it. I know that the userbase on a site like this one tends to want to solve these types of issues with technology, but that's just because all we've got here on HN is a hammer, ya know? Pencil-and-paper works. Anything else is a solution in search of a problem.
- ceejayoz 4y ago> Pencil-and-paper works. Paper has its own issues, effectively illustrated by photos from 2000: https://imgur.com/a/lpDhmQP https://imgur.com/a/lpDhmQP
- fknorangesite 4y ago"Hanging chads" is a fundamentally difference system than 'put an X in the circle', and your screenshot here demonstrates a potential issue with accessibility, but not with ballot integrity.
- ceejayoz 4y ago"Is that an X?" https://www.theguardian.com/politics/2015/may/06/vote-with-a-smiley-face-electoral-guide-says-x-doesnt-have-to-mark-the-spot https://www.theguardian.com/politics/2015/may/06/vote-with-a... > The official body supervising the British general election on Thursday has said votes should be counted if support is expressed by the drawing of a smiley face, instead of a cross, as is requested at the top of the ballot paper. > Also permitted is writing “yes”, and drawings that may well be accepted are those of a flower, and sketches of naked people, though best if they are smiling. https://www.revisor.mn.gov/statutes/cite/204c.22 https://www.revisor.mn.gov/statutes/cite/204c.22 > If a mark (X) is made out of its proper place, but so near a name or space as to indicate clearly the voter's intent, the vote shall be counted. > If the names of two candidates have been marked, and an attempt has been made to erase or obliterate one of the marks, a vote shall be counted for the remaining marked candidate. If an attempt has been made to obliterate a write-in name a vote shall be counted for the remaining write-in name or marked candidate.
- burkaman 4y ago> cannot verify it contributed to the total votes received by the candidate for whom you voted Isn't this by design? If you can verify this, then someone else can force you to verify it in front of them to make sure you did what they told you to do, and then we don't have a secret ballot anymore. It's not obvious to me that the risk of fraud from miscounting is worse than the risk of fraud from voter intimidation or bribery. Imagine everyone you know is posting screenshots of their verification on social media, and you voted for someone or something considered controversial in your community. If you post that verification you get harassed, if you don't post anything then everyone knows what that means and you get harassed anyway. That's the type of voter intimidation I'd worry about.
- tzs 4y ago> If you can verify this, then someone else can force you to verify it in front of them to make sure you did what they told you to do, and then we don't have a secret ballot anymore. Not being able to prove to someone else that you voted a particular way is called "coercion resistance", and it is in fact possible to design a voting system where you can verify you vote was included and counted correctly but that are coercion resistant. See this comment [1] from a while back about such a system. Link #3 in that comment is to a paper showing that system is coercion resistant. There are several systems that provide verifiability but are coercion resistant. The one discussed in that comment is noteworthy because it is an easy add-on to existing optical scan voting systems. The cryptographic cleverness that it depends on is in how the ballots are generated and what is printed on them, with the only modification in the voting booth is that you have to use a special marker to mark the ballots. [1] https://news.ycombinator.com/item?id=31675726 https://news.ycombinator.com/item?id=31675726
- burkaman 4y agoThis is super interesting, thanks for posting. What a cool idea. However, I see two potential problems and I don't think this would satisfy anyone that is concerned about election security in America. First, this is vulnerable to someone accidentally or intentionally writing down the wrong code on their receipt, and then going on TV to display it as irrefutable proof of election fraud. With 150+ million people voting there is basically 100% chance that will happen many times. Second, this system proves that your ballot was received and uploaded to a government website. That does address a claim of "they threw my ballot in the trash", but it does not address: 1. They're busing in illegal voters 2. Election workers are all corrupt and are just making up the count 3. They flipped my vote 4. Foreign hackers infiltrated the system and added more votes 5. They added a bunch of fake votes last minute when my guy was about to win 6. My guy did 15% better in exit polls than the actual count, something is up etc. etc. Here's a list of real-life fraud claims, I don't think Scantegrity would resolve any of these: https://www.factcheck.org/2020/12/nine-election-fraud-claims-none-credible/ https://www.factcheck.org/2020/12/nine-election-fraud-claims... To be clear I don't believe any of these things, but this is the sort of stuff you hear from people who are worried or claim to be worried about election fraud. They type of person who would be satisfied by their Scantegrity receipt is not the type of person who is currently making noise about election integrity. Sorry to move the goalposts, you completely addressed the issue I described in my last comment. I'm just trying to think through if this system would actually fix anything in the US, and I think it would not. I do think it's a good idea though, and it certainly wouldn't hurt.
- stonogo 4y agoComputer enthusiasts have conflated cryptography and security for so long that simple ballot verification systems like the ones in use for decades around the country are regarded as "insecure" merely because the speaker doesn't really have a clear definition of the term. My ballot has a tear-off receipt and a bar code. I can verify when and how my ballot was counted. If I suspect fraud at the ballot counting site I can supervise the process myself in person. If my signature doesn't match the ballot office can contact me to verify. There is no world where cryptography is a requisite for ballot security, and I would not want to live in a world where computers are required for something as basic as democracy.
- Loughla 4y agoThat's it entirely. I live in a VERY rural area, and we have receipts with barcodes that you can track either electronically or in person if you want to. They are not attached to you, they are attached to your vote and have unique ID's on them. In theory anyone can track your vote, but only you know which is yours and whether it's accurate or not. This is not the difficult problem. The difficult problem is that we have thousands of systems, depending on where you live, and politically, getting anyone to agree on any one system is probably impossible. But I am with you, cryptography is absolutely not required, and computers should not be fundamental to the process. Hell, electricity should be optional as well, just in case the shit hits the real fan.
- robswc 4y agoIt's been a thing every since I can remember. Whichever side losses claims some sort of voter fraud. Fraud exists and should heavily be punished but I think its effects are overstated by everyone.
- marcodiego 4y ago> You either cannot verify your vote was counted, and/or cannot verify it contributed to the total votes received by the candidate for whom you voted. That would break the privacy of the vote. It would allow for actors to oblige or coerce people into voting in a candidate and then forcing them to prove their vote.
- jp42 4y agoElection commission of India conducts elections really well, given the scale of 800M+ voter. despite of isolated incidents booth capturing in remote or ungovernable areas, overall results reflects the mood of public. It super super hard to manipulated system at scale. roughly the way it works is - there is standalone electronic voting machine (EVM). it is NOT connected to network at all. for each vote, a receipt gets printed and vote puts that receipt in ballot box. the EVM count is used to aggregate over vote count. it speeds up counting process. Some percentage of randomly selected voting machines vote counts and corresponding printed vote ballot is cross verified. During the whole process, a representatives from all the parties are present in all election activity
- jcranmer 4y agoIt is not a problem. The solution to running high-trust elections is: * Use paper ballots with fill-in-the-oval results. This method has very little chance of user error filling out the ballot (modulo concerns like two-sided sheets, etc.). * Chain-of-custody the ballot box the ballots get fed into at the polling place. Keep a roster of who voted, which lets you count how many ballots should be in that box. If that count is incorrect for the number of voters, you have issues. (This is rare.) * Count the ballots with a ballot-reading machine. Verify the machine's counts by doing hand checks of samples. (The US runs too many races not to use machine counts.) * For mail-in ballots, use envelope-inside-envelope to preserve secrecy. The inner envelope contains the ballot, and only the ballot, while the outer envelope contains the information needed to verify the voter. At that point, the only real question is determining who is eligible to vote, and it turns out that it's not really a question about the security of the voting process, but rather about how to prevent the undesirables from voting. Aspersions on the security of the voting process are really about trying to justify changes to laws to keep undesirables from being able to vote.
- tptacek 4y agoYou can still safely do touchscreen voting in this system: just use ballot-marking devices that produce human-readable paper ballots. That's what happens in Cook County: you vote on a touchscreen (if you don't request a big cardboard paper ballot) and get a printed ballot that you cast as if you had marked paper yourself.
- quantified 4y agoIs it a print of the vote that was cast, or generated separately from the cast? How do you know?
- tptacek 4y agoIt prints the ballot you cast. Nothing in the BMD beams a vote to the secret vote-fixing center.
- 4y ago
- mandmandam 4y ago> In 2017, Democrats recognized it as a problem In 2016, Hillary beat Sanders by up to ~12% more than exit polls would have suggested in states without paper trails. [0] The fact that this only happened in states without paper trails raised some eyebrows among Sanders voters, but "Democrats" bent over backwards to explain how this was just a quirk, and 'probably the fault of Bernie Bros somehow anyway, who gives a shit about them, they're not Real Democrats TM'. And then we stopped doing exit polls at all. Because apparently that's a sensible thing to do when there's no paper trail, and indications of systemic fraud - remove the only remaining tell-tale sign. So, yeah - this is a problem, will continue to be a problem, and will be completely ignored by media unless it serves them to associate questioning voting machines with the far-right. 0 - https://www.snopes.com/fact-check/stanford-study-proves-election-fraud-through-exit-poll-discrepancies/ https://www.snopes.com/fact-check/stanford-study-proves-elec...
- daveguy 4y agoThe paper is suspect at best. Your own link enumerates the problems. Also, there are many reasons why exit polls don't match votes. And they have to do with votes being anonymous and exit polls not being anonymous. Did you read your own link?
- mandmandam 4y agoYes, I read the link. I felt it was only right to allow the best of both sides to be heard on this one. "Suspect at best" is really not a fair takeaway, unless you're cherry-picking quotes at face value. Myself, I found the responses to the paper rely on bluster and don't hold much water at all. If you want to see the responses taken apart, with more on the abysmal state of voting machines and the untrustworthy sounding electoral folk responsible, you can read this: https://www.counterpunch.org/2016/05/16/clinton-does-best-where-voting-machines-flunk-hacking-tests-hillary-clinton-vs-bernie-sanders-election-fraud-allegations/ https://www.counterpunch.org/2016/05/16/clinton-does-best-wh...