Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Slashdot Log In

Log In

Create Account  |  Retrieve Password

OSS Election Systems Desired, but Not Ready

Posted by ScuttleMonkey on Mon Mar 06, 2006 10:25 PM
from the more-than-ready dept.
An anonymous reader writes "Even though many American voters are ready for open source systems at the polls, Newsforge (a Slashdot sister site) has an interesting story about why open source may not be ready for the polls. From the article: 'The only open source e-voting effort that Rubin [an e-voting expert] noted was the Open Voting Consortium (OVC). "I don't agree with everything they are doing, but they are all about transparency and open source," Rubin said. OVC President and CEO Alan Dechert says it would take a large investment of time and money to provide an alternative to traditional e-voting systems vendors, but he says an effort known as Open Voting Solutions (OVS) is looking to do just that.'"
+ -
story
This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
  • Paper Ballots? (Score:5, Insightful)

    by Eightyford (893696) on Monday March 06 2006, @10:28PM (#14864087) Homepage
    What's wrong with paper ballots? They work great in Canada. We even have election results within a few hours, at most. As far as I can tell the only "downside" is that paper ballots are hard to rig elections with.
    • We have this thing in the US called States Rights. Voting systems are picked by each district, not on a Federal level and you'd have a very hard time forcing thousand of districts to replce their current systems. Some out of spite and stubborness, others out of financial hardship, and probably a mix of the two with the rest. The US Constitution was written to appease the States and as such the Federal Government could not appear to take too much power over their little feifdoms. Things like this are the
      • That's a bunk argument. So many states rights issues have been overruled by the federal court system. And, specifically, there have also been noises made about mandating a federal standard for federal elections. I'm quite sure that principle is not going to win out in this sort of discussion, as in many others.
      • We have this thing in the US called States Rights. [blah blah blah blah]. Perhaps you should try to understand this concept and why it came about before you bash the US.

        That's all fine and good, except you totally failed to actually address the question. What is wrong with paper ballots? They work fine in Canada and many other countries, and they seem to historically have fewer problems than other alternatives.

        That in mind, to address your two main concerns:

        1. You point out that they can't be mandated at
    • A blind citizen given a paper ballot has to get someone to help, raising problems of confidentiality and trust.

      A computer UI can, in principle, be made easier to follow than a crowded piece of paper. Googling for "butterfly ballot" will get you an example that turned out to be important. A computerized ballot can do validity checking and spare the counting system from having to divine "voter intent" from a double-voted or unreadable ballot.

      Those are the only real advantages I've ever seen mentioned.
      • Hello? 2000 was an even bigger fiasco than 2004, and 2000 used paper ballots. To this day many people say the 2000 election was rigged.

        Not the stupid punch card ballots with the hanging chads. Pen and paper. In Canada during federal elections, anyone can supervise the vote counting. It's almost impossible to rig elections that are held this way.
      • The method used in Canada scales very well. What you have is this.

        Each voting district has an elections officer who assembles the hardware. Then groups composed of all parties do the actual work of taking the vote and counting the results. All the parties involved are at the count and it's pretty well impossible to spin the result.
        As this happens at an individual poll level it will scale effortlessly. We get our hand counted results about 3 -4 hours after the polls close.

        It'll never
        • I think the problem is the timeliness of getting returns. People want election results fast. So, like everything else in politics they want it fast and easy, not slowly and accurately.
          • I think the problem is the timeliness of getting returns. People want election results fast. So, like everything else in politics they want it fast and easy, not slowly and accurately.

            They can't wait a few hours?
            • That's us Americans you're talking about. How often have we been patient or reasonable?
            • Well, the politics comment was my cyncism getting the better of me...

              But let me put it this way. I live in Ohio. There was a precinct upstate who didn't turn their tallies in until 9 am the next morning after the 2004 elections. This made the news, in other counties (such as mine). They were repremanded by state politicians about how this was unacceptable.
          • Re:Paper Ballots? (Score:5, Insightful)

            by rewinn (647614) on Monday March 06 2006, @10:50PM (#14864195) Homepage

            > People want election results fast

            I disagree.

            We may be told that we want results fast, but really we want them accurate.

            Go ahead, ask anyone: "Would you rather have poll results within an hour of the polls closing, with a 50% chance that they would be wrong, or have them within 3 days with a 0.00001% chance that they might be wrong?"

            You can play with the times and percentages a bit, but I would bet cash money that most people want accuracy & precision, not speed.

            • That's a really bad way to frame this issue. The answers you get from asking questions like that are always going to be skewed in favor of the point you're trying to get at. I strongly believe however, that when elections are taking place, the pressure being placed on election boards are to make sure the job is done as fast as possible. Correctness of the results is hard to check, and is done infrequently. Speed however, is plainly obvious to everyone.

              I guess i would put it this way:
              This is an issue of
          • Ummm... The returns do come in fast... The last election, we knew who our prime minister was going to be before the polls closed on the West Coast. Hand counted paper ballots are a highly scalable solution because counting is highly parallelizable. You don't have one team counting 200 million ballots...
            • It can be highly parallelizable. If you have the man-power to staff it. I don't know whether all polling stations can. I'm not arguing that it's a bad way to do it. In fact, i agree, it's hard to forge. (Heck, i'm probably moving to canada in the next year or so, so believe me, i'm not slamming the system)

              I do however think that it would be hard to get people to impliment such a system, and i'm trying to give you reasons how people might quibble.

              Elections are complicated, even the simple things can g
              • Elections are complicated, even the simple things can get really broken. Again, another example, here in central ohio, polling stations which served a lot of people (the inner city ones) ended up with a severe shortage of voting machines. This is a really easy oversight to fix (which is why there were so many accusations of rigging), but it still went drastically drastically wrong.

                Referring to this as an oversight is tremendously rich, given that the County elections boards and the Secretary of State's offi
                • Hey, preaching to the choir here. I voted for the guy who lost. Hell, i campaigned for the guy who lost. On top of that, i voted for the ballot measures in 2005 that were designed to remove the Secretary of State from the governance of elections. The problem is, and the republicans are right to say this, but the democrats who were to oversee things like the distribution of voting machines totally dropped the ball. I blame the Ohio Democratic Party more than anyone else. Cause i already assume that rep
      • They use paper ballots in the UK with a population of 60 million. The issue is not the number of voters, its the number of elections. In the US there are frequently ten posts up for election, sometimes more. Then there are ballot measures and so on.

        Counting paper ballots is not a big issue, we use bank tellers. I have run elections with several thousand people voting, it is not a huge issue. The general election counts are run in essentially the same way.

        I am very skeptical of this particular OSS projec

  • Australia (Score:5, Informative)

    by Kangburra (911213) on Monday March 06 2006, @10:32PM (#14864105)
    Here in Australia we have a system that works, and has been used already.

    http://www.softimp.com.au/index.php?id=evoting [softimp.com.au]
    • Re:Australia (Score:3, Informative)

      by Anonymous Coward
      Here in Australia we have a system that works, and has been used already.

      It's also worth noting that the eVACS system is free software under the GPL and you can get the source, and some more info, at the ACT Electoral Commission site [act.gov.au].

      Relevant to the article!
  • Easy formula (Score:4, Insightful)

    by HairyCanary (688865) on Monday March 06 2006, @10:36PM (#14864121)
    For public safety, I say we require three things from electronic voting systems:

    1. Open source. We need to be able to trust these systems and how can we do that without being able to examine the code behind them?
    2. Paper records kept for the government. Just in case there is a trust issue, this is a backup method for the recount.
    3. Paper records for the voter. Worst case, every voter has a copy of their own vote. Hard to use for a recount, but could help identify irregularities.

    So easy. I am all for having the convenience and speed of electronic voting, but I cannot for the life of me understand why we must give up the benefits of paper ballots at the same time, and even improve on them (as in the paper copy for the voter).

    • Re:Easy formula (Score:5, Insightful)

      by ??? (35971) <patrick@kob[ ]com ['ly.' in gap]> on Monday March 06 2006, @11:01PM (#14864247)
      1. Open source. We need to be able to trust these systems and how can we do that without being able to examine the code behind them?

      Indeed, I concur

      2. Paper records kept for the government. Just in case there is a trust issue, this is a backup method for the recount.

      So long as these records contain a human readable indication of an individual voter's intent, and were verified by the voter at vote-time.

      3. Paper records for the voter. Worst case, every voter has a copy of their own vote. Hard to use for a recount, but could help identify irregularities.

      Absolutely, uncategorically, under no circumstances. Proof of vote makes wholesale coercion, vote-buying and vote-selling methods practical.
    • Re:Easy formula (Score:4, Informative)

      by Geoffreyerffoeg (729040) on Monday March 06 2006, @11:40PM (#14864419)
      3. Paper records for the voter. Worst case, every voter has a copy of their own vote. Hard to use for a recount, but could help identify irregularities.

      Those who do not learn from history are doomed to repeat it. This used to be the standard, until they caught on to Big Business asking their employees to show them their voting receipt to make sure they were voting for the right candidate. Especially around the turn of the century, this became an effective way to abuse immigrant workers, who had little choice in employment and didn't know much about the political system.
  • Huh? (Score:5, Insightful)

    by femto (459605) on Monday March 06 2006, @10:36PM (#14864122) Homepage
    The article itself states (and other comments have pointed out):

    "Successful open voting systems that are cheaper, easier to manage, and more transparent than proprietary systems can be found in Australia, Canada, Estonia, and other places."

    Perhaps the author meant to say:

    "no American vendor offers open source software and systems that are ready for voting."

    • Re:Huh? (Score:3, Interesting)

      What I don't understand is why they are waiting around for a vendor? Take the money you would have given diebold, pool it with all other states that would have done the same thing, hire people, get it done.

      You can also create a private company and buy a significant percentage of shares in it and sell the system to other states or countries. There are all sorts of govt-private partnerships all over the world like this.
  • Australian (Score:3, Informative)

    by LetterRip (30937) on Monday March 06 2006, @10:37PM (#14864124)
    EVACS started open source under the GPL - but closed the source at a later point.

    http://www.elections.act.gov.au/EVACS.html [act.gov.au]

    It is made in Australia, and I was of the impression has been used in elections already.

    LetterRip

    • and from a previous slashdot article,

      [QUOTE]Within the world of electronic voting, though, eVACS (for "Electronic Voting and Counting System") has been a rare success story both for open source development methodology and for the benefits that electronic voting can offer. The first generation of eVACS (running on Debian Linux machines) was developed starting in March 2001 in response to a request for bids by the Australian Capitol Territory Electoral Commission (ACTEC), and it was done on a budget of only A
  • by jaywee (542660) on Monday March 06 2006, @10:38PM (#14864132)
    Can anyone explain me how can I trust OSS running box more than the one running closed software? How can I verify that the software running in the box is the same I verified? How can I be sure the cpu isn't mangled by some foreign goverment? (Since most hw is now made on taiwan..) What's wrong with paper ballots?
  • Paper trail (Score:3, Insightful)

    by ArcherB (796902) on Monday March 06 2006, @10:41PM (#14864151) Journal
    I don't care how "open" or secure a system is, I want a paper trail.

    We make photo kiosks. Every time someone places an order, we print a receipt. The receipt printer is one of the most reliable pieces of equipment on our systesm. We have about 60 employees. If we can do it, I see no reason why you could not have a voting machine print a paper receipt with your voting selection on it along with a unique, encrypted number. On the way out, the voter places the receipt (or paper ballot, if you will) in the drop box. Once the election is over, if everyone is satisfied with the results, the paper ballots are discarded. If there is a challenge, the paper receipts are counted and compared to the digital count. There should not be much of a difference. If the difference is enough to change the outcome, I'd say go with the paper count. However, if voting fraud is an issue, it will not be a small margin. It is doubtful that someone will try to fraud for only a couple of votes and there should never be more pieces of paper in the box than digital votes cast.

    This will allow for a challenge, investigation, and is the only way to provide for a recount.

    • Re:Paper trail (Score:5, Insightful)

      by ??? (35971) <patrick@kob[ ]com ['ly.' in gap]> on Monday March 06 2006, @11:08PM (#14864279)
      However, if voting fraud is an issue, it will not be a small margin. It is doubtful that someone will try to fraud for only a couple of votes

      Then clearly, you underestimate the skills and resources of your adversary. It is precisely small margins that are concerning. Remember, a small margin of votes can be changed in a close race without producing statistically significant differences from polling (and exit-polling) to raise suspicion. Such small changes, well placed, can have a significant effect on the overall race.

      If you think that people do not have the skill to predict where small vote count frauds will make a difference, you need to visit the "gerrymandering" page on wikipedia, particularly the "Gerrymandering computer technology" heading.
      • In the last two election there was a statistically significant variance between exit polling and actual vote. In any other election, in any other country this would be a sign of voter fraud. In america nobody even cared.

        Let's face it you could out and out rig the machines and nobody would care. This is america only 35% of people eligable for voting even care enough to stop by the polling place on the way from work.
  • Privacy?? (Score:5, Insightful)

    by Freaky Spook (811861) on Monday March 06 2006, @10:44PM (#14864157)
    I haven't really read how this e-voting works, but if it means you can log on to a website and vote from home, wouldn't that make your vote not anonymus? What would happen with the log of your IP, your vote could be traced back to you.

    I like paper ballots because they don't get traced back to you, once you put it in the box you have no identity.
  • by Soong (7225) on Monday March 06 2006, @11:06PM (#14864269) Homepage Journal
    It's cheaper to count them by hand. [bolson.org] A full county wide voting machine system costs a lot of money, a lot of money that could buy a lot of ballot counting labor hours.

    I love a technofix as much as the next geek, but computerized voting machines are not the technology for now.
  • by iamwoodyjones (562550) on Monday March 06 2006, @11:10PM (#14864289) Journal
    VOTER: "Okay need to vote...here we go...."

    VOTER: "Huh, it's a command line terminal...Okay..."

    Looks at people running the voting place

    VOTER: "Excuse me. How do I vote....?...Uh huh...'ls'? Uh huh...'RFTM?' What does that mean...Oh I see. Thank you very much"

    ls

    VOTER: "Okay there's a file in here called README and INSTALL. I'll look at README first."

    after some time...

    VOTER: "Seams to be something about a pissed off guy named Richard and something he humps called a GNU...Okay. I'll take a look at INSTALL instead here"

    VOTER: "Generic install instructions....something something something, configure....something something make? Okay worth a shot"

    configure; make; make install

    ....
    Checking for sed.....ok
    Checking for awk.....ok
    Checking for kernl...
    ........

    30 mintues latter
    Checking for libyourmom....ok
    Checking for libkitchensick...Found Emacs....ok
    Checking for ruby on rails....
    ruby on rails not found...
    ruby on rails not found.??
    ruby on rails not found.??!!!!!!
    RUBY ON RAILS NOT FOUND!!!!!!!!!!!!
    Ruby on rails is the latest h4x0r dood!!!!!
    Install Ruby rails AJAX0r!!!!

    VOTER: "Son of a....!"
  • We've got an open source electronic voting system in the Australian Capital Territory, it's been used in two elections.

    Details and code here [act.gov.au].
  • The worst part about OSS election software is that someone else runs 'make', you run 'make install', but the install process installs too much crap and trashes some of your local files.

    Then, you try to 'make uninstall' but the process fails halfway through and so you're left with a system in an unknown state, with rogue files hanging out everyyear.

    But as Thomas Jefferson said, it's doubful that your current system will remain stable forever. Every once in a while you need to Reinstall the Operating System.
  • by ScrewMaster (602015) on Monday March 06 2006, @11:20PM (#14864341)
    Look. This is America. The nation that led the world in technological development for two hundred years, put men on the Moon a couple of times and invented the personal computer, and now we're saying that we can't even develop a machine that can count reliably???!!! Please. This is not, repeat not a technological issue. It is a political one, pure and simple.

    The only reason that implementing a transparent, auditable electronic voting system is such a problem is because there are certain people that have a vested interest in making it a problem.
    • I agree. (Score:4, Interesting)

      by jd (1658) <imipak.yahoo@com> on Tuesday March 07 2006, @01:50AM (#14864832) Homepage Journal
      There are only a few criteria:


      • You must be able to prove that every valid vote was counted exactly once - no more, no less
      • You must also be able to prove that fake ballots cannot be injected into the system
      • You must finally be able to prove that valid votes cannot be deducted from the system for the required length of time


      These are a bit trickier than just building a machine that can add 1 to a column, but not THAT much harder.


      I would ascribe every digital ballot paper with a hash value that uniquely identifies that paper and would be hard to forge. eg: Have each ballot paper marked with a serial number, then digitally signed by the electoral authorities.


      Each voter's voting card would have a totally random public encryption key on it, plus a number. On going to the voting machine, the card would first tick the person off on the list of people who had voted. After casting the votes, the machine would encrypt the ballot paper with the encryption key, then it would append the number to the end. The electronic ballot paper would then, after a random delay, be sent back to the central repository via an SSL connection. The machine would keep no tallies and no records whatsoever. Nor would the local office. It would all be central. (The local office could count votes cast, though, as it would be useful to compare against votes decoded.)


      The central system would use the number to select a relatively small set of private keys. It would try each key in turn until it found the key that unlocked that ballot paper. That private key would then be deleted. The unlocked ballot paper would be placed into a secure database. The number of valid votes identified would be counted and publicly published in real-time.


      Just to be absolutely certain what is meant here, the database must be write-only from the central system and must be in a tamper-proof environment. Once all ballots are uploaded, it will then perform the count and download the results, ALL of the decrypted ballots and ALL of the encrypted ballots.


      That way, anyone can perform a recount and although it would be a monumental task to validate the votes, it could be done. This system is pseudo-anonymous, not truly anonymous, using a VERY large base to make anonymity effective. The upshot is that if a random sample of voter cards were gathered (anonymously!), it would be possible to show that each of those cards matches to exactly one encrypted vote and one decrypted vote.


      This shouldn't be necessary, as most of the avenues for fraud have already been eliminated. The effort to fraudulently enter a vote in this system would be extraordinary, as it would require breaking the ballot paper generation system, the encryption key system AND the decryption system, in order to be transparent. Failure to break all of these would result in the votes being rejected by the unbroken component.


      I don't think an actual voting system need be this complex, but that's not the point. The point here is that it is possible to imagine a system that is (a) Open Source and (b) so damn-near impervious that it would be cheaper to just buy the person who'd been elected than rig so much as a single vote.


      Has this been done? Probably not. Could it be done? Sure. Give me a couple of weeks, a few smart-cards, readers, kiosks and a tamper-proof computer case. There should be no difficulty in writing a system that would be close to iron-clad for the next 50-100 years, with so close to zero chance of tampering that it's just not going to happen.


      If an OSS election system group has the hardware and would like to play with this scheme, I'd be happy to write it for them.

  • Who's ready? (Score:5, Insightful)

    by SEWilco (27983) on Monday March 06 2006, @11:56PM (#14864466) Homepage Journal
    "... open source may not be ready for the polls."

    Is closed source ready for the polls?

  • Slate on India's all electronic voting system [slate.com]

    A simple, scalable, system.

  • by TheLink (130905) on Tuesday March 07 2006, @02:20AM (#14864900) Journal
    Seems rather strange that the richest and most powerful country in the world can't afford decent voting systems (whether free or not). There are plenty of really smart people in the USA, good in crypto, systems, architecture etc. So the talent is there.

    As for the money: this is the same country that has spent BILLIONS in Iraq for dubious reasons (the official reasons kept changing, so they can't have been the real reasons).

    I heard one of the US Gov's "reasons" was to have democracy/free elections in Iraq, but that can't be the real reason since the US Gov was very obviously not pleased when there was democracy/free elections in Palestine and Hamas got elected ;).

    I don't know what is really going on with the USA, but I doubt that the main issue is whether a voting system is OSS or non-OSS.

    With all this "globalisation" being hyped as such a great thing, maybe the US should outsource their elections to India, and have UN observers for free to observe stuff. ;).

    After all India is arguably the world's largest democracy (1 billion citizens). I bet if they had results as ridiculous as "more votes than voters", "negative votes" heads would _literally_ roll. They somehow have managed to get a decent chap as Prime Minister ( Dr. Manmohan Singh seems to be well-respected by most).

    If I were a US citizen I'd _demand_ that all the people involved in supplying or approving crappy election systems be charged for _TREASON_.

    After all, the USA keeps saying democracy is so important etc.

    Prove it with actions and not bullshit.
  • by jbn-o (555068) <mail@digitalcitizen.info> on Tuesday March 07 2006, @02:48AM (#14864959) Homepage

    From the article:

    ""Companies could still maintain intellectual property rights, so that they are the only ones who can sell it, but members of the public should be able to inspect it," Dill says."

    Not only does maintaining "intellectual property [gnu.org] rights" not preclude others from distributing copies of the software for a fee (as anyone who understands Free Software licensing already knows), merely inspecting the software is insufficient to get real work done in a way that is beneficial to the public.

    I served on the Champaign County election equipment advisory board—an appointed board made up of representatives of businesses and political parties from Champaign County, Illinois. Over months in the past couple of years this board weighed a few machines from a variety of vendors so that we could make a recommendation to the elected County Board who would then make the final decision and sign the appropriate contracts. We were told at the first meeting that we were only to consider machines from "approved vendors" but in the end we learned that even the machines we were considering had not yet all been approved by the State of Illinois. It was just a means of narrowing the allowable debate, effectively excluding a variety of vendors who probably never knew we were seriously considering voting machines.

    I knew early on (and did my darndest to convince my fellow board members) that we want complete source code to the machines we'd buy so that we could make repairs and improvements while enjoying the benefits of global competition. Locally we have lots of talented computer programmers, the University of Illinois at Urbana-Champaign is in this county. It is a shame to waste all the talent we have by getting into a monopoly.

    Politically, there are good reasons to need the source code too: it's your machine paid for with your tax dollars, so you should not be restricted from getting it fixed when it breaks, running it any time you want, and not just inspecting what it ostensibly does. But we should also not constrain ourselves to the features the machine has today. Locally, we could switch from a first-past-the-post to some kind of ranked voting system (like instant run-off or some Condorcet system) for local elections. But so long as we can't get the vendor to do what we want and as long as we can't help ourselves because we're choosing to buy into a monopoly for support (which is what you do when you get proprietary software), we have an additional restriction to overcome with our voting machines—we can't switch to the voting system we want because the proprietor won't let us and we can't afford to simply switch to another set of machines.

    I discussed Free Software voting machines on Counterpunch [counterpunch.org].

    • by Anonymous Coward on Monday March 06 2006, @10:49PM (#14864188)
      I would have thought that the fundamental problem with closed source, in this particular application (not in general), is the fact that it is closed source. For elections to work it is important that the entire process be open to scrutiny. If something goes wrong, you need to be able to look through and find what/where... even if the only remedy is to say "bug x in function y of the source code makes this result invalid, we need to vote again using a different system (eg. paper)". But if the source is not available for scrutiny, you can't do this... you can look at the results and say "that's a bit odd", but you can't trace back to probable cause. This is precisely what closed source software can never get right, whereas OSS does by definition
    • by Dachannien (617929) on Monday March 06 2006, @10:51PM (#14864199)
      But if closed source polls can't get it right, what makes us think that OSS polls can?

      The difference is that, with an OSS voting system, if there's a problem with the code, the public will (be able to) know about it.

      Compare that to Diebold and ask yourself how likely it is that they'd be forthcoming with crucial details if and when something goes haywire with their electronic voting machines.

    • by jaseparlo (819802) on Monday March 06 2006, @11:14PM (#14864312) Homepage

      The (software|hardware) is only as smart as the person operating it.

      The same could be said for democracy...

    • This is a silly thing to say. There are massive differences between all candidates. Their policy platforms may not be drastically different, but the character of their administrations, the people they surround themselves with, and the process by which decisions are made are vastly different. Al Gore, and George W. Bush had very similar platforms, but i don't think anyone disagrees that the War on Terror would have turned out very differently had Gore been rightfully installed as president.
        • ...my apologies for forgetting Slashdot used HTML formatting for posts by default. Let me repost that entire post, since it's nearly unreadable.

          It's funny you should mention that. About a week ago I found http://crp.org/industries/list.asp [crp.org] , did some investigation, and posted the following summary of interesting points on another site I visit:

          - The Republicans received $20 million from oil/gas companies, compared to $5 million for Democrats. This sounds significant, but it actually is only significant in ho