Swiss e-voting pilot can't count 2,048 ballots after decryption failure

Posted by jjgreen 5 hours ago

Counter57Comment122OpenOriginal

Comments

Comment by pilingual 11 minutes ago

Comment by ericmay 4 hours ago

Stories like this probably scare some people off from electronic voting but I don't think this is that big of a deal. When we finish voting operations in my area we load the ballots up on someone's personal vehicle and they take them down, securely, to where they need to go. That vehicle could get blown up and those ballots could be gone, though I think we could still get a record of the results.

That being said for the United States, I am in favor of in-person voting requiring proof of citizenship, and making "voting day" a paid national holiday. Not so much for technical or efficiency reasons but for social reasons. I'd argue it should be mandatory but I don't think we should force people to do anything we don't have to force them to do, and I'm not sure we want disinterested people voting anyway.

Exercising democracy, requiring people to put in a minimal amount of thought and effort goes a long way. It should be a celebratory day with cookies and apple pie and free beer for all. Not some cold, AI-riddled, stay in your house and never meet your neighbors, clicking a few buttons to accept the Terms of Democracy process.

I know there's a lot of discussion points around "efficiency" or "cost" or "accessibility" or how difficult it supposedly is to have an ID (which is weird when you look at how other countries run elections) and there are certainly things to discuss there, but by and large I think the continued digitalization and alienation of Americans is a much worse problem that can be addressed with more in-person activities and participation in society. We're losing too many touchpoints with reality.

Comment by stetrain 4 hours ago

> That being said, I am in favor of in-person voting requiring proof of citizenship

I think this is fine if it also then means that obtaining a qualifying ID is treated as a no-cost and highly-accessible right for all citizens.

This is where such arguments tend to get stuck in the US. If you require proof of citizenship, but also have places where getting to a government office to get such an ID is difficult or expensive, then you are effectively restricting voting access for citizens. A measure to place stricter qualifications on voting access needs to also carefully consider and account for providing access to all citizens.

The US is a geographically very large place with worse public transportation options compared to many other countries, and with that comes differences in economic and accessibility considerations for things like "Just go to your county's office and get a qualifying ID."

Comment by AuryGlenz 4 hours ago

Pretty much every bill that has ever been put forward for needing an ID to vote has had a provision for free IDs. That’s not where things get caught up.

Also, it’s a pretty silly thing anyways. I don’t even drink and I still need my driver’s license quite a few times every year.

Comment by d1sxeyes 1 hour ago

Even if the ID is nominally free, if I have to take a day off and pay for bus/train tickets to wait in line at some office, it’s not really free.

Comment by SoftTalker 2 minutes ago

That's life. Figure it out. It's really an insult to a group of people to imply that they aren't capable of being a functioning adult in society.

Comment by 0cf8612b2e1e 55 minutes ago

Some districts have limited DMV hours in advance of voting days.

Coincidental how these might be Democratic leaning areas in Republican states.

Comment by jeffbee 19 minutes ago

I don't even know why this is downvoted. Standard technique in Texas. Harris County does not have 40 DPS offices for its 5 million people. The current backlog to get a DPS drivers license appointment in Harris County is 45 days. The next available appointment in Kerrville is tomorrow. That is inequitable.

But anyway, none of that is the real core issue with the idea of voter ID. The real issue is that there are many living Americans who were born in jurisdictions that steadfastly refused to issue birth certificates to Black people.

Comment by stetrain 2 hours ago

Free and accessible are not the same thing. And a driver's license is not necessarily proof of citizenship.

Comment by delecti 1 hour ago

Yep. And in fact there's been a ton of resistance for 20 years to rolling out an alternate form of driver's license which does act as proof of citizenship. See the REAL ID, which even now is only kinda a requirement to fly domestically.

Comment by DangitBobby 46 minutes ago

I have a Real ID, and I supplied a proof of citizenship to get it. However, in my state, it's possible to obtain a Real ID without providing proof of citizenship, so my Real ID does not qualify as proof of citizenship. My passport is the only document I have that could function as both photo ID and proof of citizenship. Passports are not the easiest things to obtain and they are not free.

Comment by jagenabler2 1 hour ago

I'm not sure where this idea that REAL ID is a form of citizenship came from. I am not a citizen and i was given a REAL ID just by proving my legal (non-immigrant) status.

Comment by jjmarr 40 minutes ago

Real ID only confirms one was lawfully present in the United States when the ID was issued, it is not intended to prove citizenship.

https://www.dhs.gov/archive/real-id-public-faqs

For example, DACA recipients, temporary protected status refugees, and citizens of states in free association with the USA (Micronesia/Marshall Islands/Palau) that are in the USA are all eligible for Real ID.

Comment by mothballed 1 hour ago

.gov own court filings have argued Real ID isn't a reliable proof of citizenship and have refused to accept it as such.

  "...based on HSI Special Agent training and experience, REAL ID can be unreliable to confirm U.S. citizenship."
https://storage.courtlistener.com/recap/gov.uscourts.alsd.76...

Comment by lokar 1 hour ago

The current bill Trump is pushing for requires "documentary proof of citizenship ", this can actually be very hard. It means an original/certified birth certificate, as well as any subsequent name changes (mostly married women).

This is completely unnecessary.

We establish citizenship, very reliably, at time of registration. This is on of the main jobs of the registrar of voters. They have plenty of time to look up the details of the person and establish citizenship (and intentionally lying in this process is a serious crime).

We then establish identity at the time of voting, again, very reliably.

Intentional voter impersonation or voting when not eligible is vanishingly rare in the US.

Comment by tastyfreeze 1 hour ago

Some states only require a piece of mail and checking a box saying you are legally allowed to vote to register. Then when you checkin to vote the workers are not permitted to ask for ID to prove you are the person you claim to be.

At no point during that process is there presentation of proof of citizenship.

Comment by meroes 25 minutes ago

In that process there's no proof, but every state manages voter roles which your provisional information will then go through a further process.

Comment by selectodude 44 minutes ago

Any ballots that are cast under same-day registration are cast as provisional and will go through the full verification process if the election is close enough where those ballots are necessary.

Source: actually ran a fucking election precinct. Non-citizens aren’t casting ballots illegally.

Comment by tastyfreeze 14 minutes ago

I'm not talking about same day registration. If you are on the rolls and proof of citizenship is not required to register, then how do you as a poll worker know the person on the rolls is a citizen?

Comment by giancarlostoro 49 minutes ago

I have cousins from Cuba and Venezuela, hearing this sort of information is rather alarming to them to say the least.

Comment by expedition32 41 minutes ago

Trump expects half of the US to get a passport in the next 6 months.

These kind of fundamental changes require years of preparation. Either Trump is an incompetent moron or he has ulterior motives.

Comment by bilbo0s 24 minutes ago

He's trying to prevent poor people from voting.

Requiring poor people to pay a hefty fee, which they probably don't have, to get a passport seems a fairly competent way to go about making sure poor people don't vote to me.

If I don't want poor people voting, then attaching a fee to voting doesn't mean I'm incompetent. It means I'm smart enough to know poor people don't have money.

By the way, I think all of this is horrible. Everyone should be equal before the law and should have their vote count without having to pay for that right. I'm just pointing out that this is a really good way to eliminate the vote of the poor.

Comment by ericmay 4 hours ago

> I think this is fine if it also then means that obtaining a qualifying ID is treated as a no-cost and highly-accessible right for all citizens.

I completely agree and I don't think there is a fair argument to suggest otherwise.

Comment by stetrain 2 hours ago

Right, so proposals that do not adequately address this point are not fair, and this is why the issue is so contentious in the US.

I absolutely support ID to vote provided that everyone who is eligible and wants to vote can get such an ID and vote without hassle.

I don't support most attempts to pass Voter ID laws because I am wary that they would not actually result in that outcome.

Comment by dolni 4 hours ago

> but also have places where getting to a government office to get such an ID is difficult or expensive

Where in the US do you find it's difficult for people to get an ID? Where is it not? What percentage of the population has an ID in a place where it's difficult to get one vs somewhere it is easier?

What constitutes an ID being expensive?

Nearly every country in the world requires proof of citizenship to vote. How is the rest of the world dealing with this problem? Do you think that their democratic processes might be compromised because of it?

Comment by jjmarr 29 minutes ago

Until 1986[1] most Americans didn't get a Social Security Number until their first job.

In The Matrix (1999) there's a scene where Agent Smith explicitly remarks that Neo has an SSN as proof he's a law-abiding citizen in a white-collar job.

[1] when it was made a requirement to claim tax deductions for dependent children. Even today, if you don't want the tax break, you can opt out at the cost of ruining your child's life!

Comment by swiftcoder 1 hour ago

> Nearly every country in the world requires proof of citizenship to vote. How is the rest of the world dealing with this problem?

Most of those nations have a mandatory national ID, so everyone already has proof of citizenship. The US and UK are very much outliers in having vocal and successful resistance to the implementation of a national ID card.

Comment by mothballed 1 hour ago

It's still bizarre though how this plays out in reality.

In some places like Illinois, an ID is required to exercise the rights of people but not the rights of citizens (FOID required to bear guns, but ID not required for vote).

In places like Arizona, it's the exact opposite. You can bear or conceal guns without an ID but you need an ID to vote.

Vermont is the only state I know of with any consistency on lack of ID requirements that convey non-ID citizens to also have the right of people. You can conceal guns and vote without ID.

Comment by zinekeller 4 hours ago

> What percentage of the population has an ID in a place where it's difficult to get one vs somewhere it is easier?

Not the OP, but except for passports (and passport cards)... there isn't really any federal-level ID in the US (and passport booklets/cards are expensive, just a bit over $100 IIRC).

The nearest equivalent in the state level are driver's licenses, which are also on the expensive side considering the ancillary costs (because it's a driver's license, not just an identification card). This is also the reason why US-centric companies like PayPal, for this exact reason, accepts a driver's license as proof of identification (obviously where not otherwise prohibited by local laws).

Some (New York for example) do have an ID (called a non-DL ID, that's how embedded driver's license is in the US), but most states do not have a per se ID.

> What constitutes an ID being expensive?

Developing countries, rather ironically, issue their IDs for free? Okay, indirectly paid by taxes, but there's no upfront cost. The above-mentioned identity documents have a clear cost attached to them.

> How is the rest of the world dealing with this problem? Do you think that their democratic processes might be compromised because of it?

Cannot talk about other countries (because there is an ID system and it's not a controversial affair to them), but instead I'll answer with a reflection of the US system.

Unfortunately, American ID politics are hard, mainly due to concerns of surveillance, but I think (only my opinion) because some of them want those historically disenfranchised (even if a fully native-born US citizen) de facto disenfranchised. This means that there is no uniform and freely-issued identification system in the US (or even a requirement to do that at the state level). Unfortunately, this... is a tough nut to crack, politically-speaking.

Comment by ricree 55 minutes ago

>but most states do not have a per se ID

Out of curiosity, do you have a source or list for this? My own home state and those around me that I've spot checked all have a state ID available as an alternative to a driver's license. My understanding was that this is the case for most states.

Unless I've misunderstood you and you meant a state ID that is completely separate from a driver's license to the point that people with a DL would have one?

Comment by devilbunny 35 minutes ago

> most states do not have a per se ID

I haven't researched this thoroughly, but what state will not issue an ID that is equivalent in every way to a driver's license except that it isn't a license to drive? I just checked Mississippi, Wyoming, South Dakota, and West Virginia, all of which do, so clearly being rural, poor, or both isn't enough to stop states from doing it. (The detailed politics are, as you say, a mess.)

Comment by stvltvs 3 hours ago

Note that drivers licenses wouldn't count as proof of citizenship under the SAVE act.

Comment by orwin 4 hours ago

The person I used to stay with when I used to visit WV don't have a proof of citizenship. He doesn't know where his birth certificate is (probably with the US army if they kept track of their nurses giving birth on ex-allied territory during a war), and get by with is SSN and driver license.

How it works in my country : my electoral card is freely sent to my address when I register to my voting office. I can vote with it, or with an official ID, as long as I'm in the correct place. The only moment I need my ID is to cast a vote on behalf of someone who identified me as a 'surrogate'.

Comment by stvltvs 4 hours ago

Proof of citizenship is not the same as the driver's licenses people are issued by their state.

Not everyone has ready access to proof of citizenship in order to register to vote. It gets even more difficult if your current legal name doesn't match your birth name, e.g. if you took your husband's name.

Not every eligible voter has or needs a government issued ID. For example, retired people who don't drive. For them to get to the DMV to get an ID just to vote would be a challenge.

The US has large rural areas where government offices are hours away.

All of this adds up to significant barriers to eligible voters. There's a reason even the GOP isn't bending over backward to pass the SAVE Act.

Comment by stetrain 2 hours ago

There are rural places in the US where it is an hour + drive to whatever the equivalent of the DMV office is, with no public transit. You can find similar places in cities where people may not have a car at all, with a long walk to find such an office that is only open during narrow hours.

People in or near poverty are going to be disproportionately affected by those conditions.

And just getting to the DMV does not necessarily mean you can get an ID that counts as proof of citizenship. There is no standard federal citizen ID in the US. A basic state ID or driver's license is not proof of citizenship. Even a RealID compliant ID is not a direct proof of citizenship, so depending on how strict the voting requirements are it may not be adequate.

Comment by xvector 4 hours ago

Even the poorest people have a state ID or drivers license. You cannot get most jobs without some legal ID.

Comment by pseudalopex 40 minutes ago

Nearly 21 million voting-age U.S. citizens do not have a current (non-expired) driver’s license. Just under 9%, or 20.76 million people, who are U.S. citizens aged 18 or older do not have a non-expired driver’s license. Another 12% (28.6 million) have a non-expired license, but it does not have both their current address and current name.

Additionally, just over 1% of adult U.S. citizens do not have any form of government-issued photo identification, which amounts to nearly 2.6 million people.[1]

[1] https://cdce.umd.edu/sites/cdce.umd.edu/files/pubs/Voter%20I...

Comment by appointment 4 hours ago

In many states these are available without proof of citizenship. When people say proof of citizenship they usually mean a passport or REALID.

Comment by stvltvs 3 hours ago

Most state-issued Real IDs don't count as proof of citizenship under the SAVE Act.

https://factually.co/fact-checks/politics/will-save-act-allo...

Comment by bilbo0s 34 minutes ago

Under the SAVE act, you kind of have to have a passport or don't vote in some states.

Which is why I'm pretty sure it's not gonna pass. Both republicans and democrats depend heavily on mass votes from, let's just say, a lot of people who are, generally speaking, not the sort to have passports.

Comment by orwin 4 hours ago

In the US, a driver license isn't a proof of citizenship. Also, state IDs are not accepted by federal agencies, so it probably wouldn't work as proof of citizenship on federal elections.

Comment by lokar 1 hour ago

There really are not federal elections. We call them that, but they are state elections for federal office.

Comment by mplewis9z 1 hour ago

Federal elections are all run by the individual states, so a state ID would be all you need.

Comment by stetrain 1 hour ago

If there is a federal law requiring proof of citizenship, as is currently being argued in Congress, a state ID would not be all you need since they are not proof of citizenship.

Comment by amanaplanacanal 39 minutes ago

I would guess most people don't have a proof of citizenship handy. This would get even worse if the effort to get rid of birthright citizenship succeeds, how would you even prove you are a citizen?

This would be less of a problem if the US had some sort of national ID issued by right, but we don't, and the same people pushing for requiring ID for voting would be against creating one. They hate the idea of a national ID.

My state does all elections by mail now. How would this even work?

All this is on top of the fact that elections are run by the states, not the national government. Would such a law even be constitutional?

Comment by kanbara 22 minutes ago

i don’t think that requiring in-person “ID”-proofed voting and removing mail-in ballots (which is the best part of voting in CA) does anything to bring people back to reality…

Even if it were a holiday, people may not be able to travel or take time off from obligations. There’s no obligation to drive 2 hours to vote, to fly back if you work in another country, or to go get a new birth certificate because Real ID doesn’t prove citizenship even though you provide citizenship documents to it when you get one…

I’ve heard of a lot of takes here about what we should do for voting to make it “more secure” but all of this is actually a solution for a problem we just don’t have.

Comment by Waterluvian 4 hours ago

I think a lot of what you argue might make sense for American elections where you're voting for an absolutely ridiculous number of things.

I'm not sure how it is in Switzerland, but in Canada I will vote for maybe three candidates in five years. And I don't mean three visits to the polls (though it's usually that), I mean three actual checkbox ticks for people to count. They're paper ballots and the counting is done that night. I think if we were stuck voting for like forty different races every two years it would be a very different story and a lot of what you say would resonate with me more. Except the voter registration stuff.

We're pretty flexible about registration up here and it works. My wife one year showed up with some mail that had her name/address, and me vouching for her. Though I think a lot of the luxuries of democracy are most easily enjoyed with a trusting, cooperative culture that isn't constantly wound up about being cheated by the others.

Comment by soco 4 hours ago

In Switzerland I voted last week for 5 election lists and 6 different topics. This happens at least 4 times a year, but I don't call it "ridiculous number of things".

Comment by Waterluvian 4 hours ago

For the voter that may not be a ton of work. I imagine to count all those votes you need technology and not just the election workers at each station? Here we have kept it dead simple. They’re all just hand counted over a few hours.

Comment by lolc 4 hours ago

Please realize that Switzerland holds many votes per year. There is no big voting day where I have to go somewhere. I could go cast my ballot in person, but I can also fill out and send in my ballot in advance. That is entirely routine and part of my day like other paperwork.

The problem with e-voting is that it is much harder to validate. My paper ballot rests at a community building where it will be counted on the day of the vote. I can understand the process from start to finish in physical terms. Throw in a USB stick and anything could happen. It is possible we will never know what went wrong here.

Comment by rhcom2 44 minutes ago

> voting requiring proof of citizenship

Isn't this just a solution in search of a problem though? Multiple investigations have discovered absolutely minuscule amount of non-citizen voting in US elections. It's something that seems reasonable on its face but lacks any purpose and comes with an ulterior motive that it is part of the made up GOP talking points of a "stolen election" and "illegals voting".

Comment by RandomLensman 48 minutes ago

What would constitute a "proof of citizenship"? Would a passport be enough, for example?

Comment by expedition32 44 minutes ago

I used to be really angry that we still vote with paper and red pencil. The Netherlands is ultra digital after all!

But then they showed how easy it is to hack and we live in a world with evil countries like the US, China and Russia who want to destroy our way of life.

Comment by zer00eyz 38 minutes ago

>> requiring proof of citizenship

Go and try to figure out how to do this from scratch. Imagine your house burned down and you need to start with "nothing".

If your parents are still alive you can use them to bootstrap the process of getting those vital documents (or if you're married that can be another semi viable path).

Pitty if you don't have those resources. Furthermore it might get complicated for any partner who adopts their other partners first name (were talking about getting the documents, before you can get some sort of verified ID).

The reality is we don't have a lot of instances of "voter fraud" committed by people who aren't citizens (see: https://www.facebook.com/Louisianasos/posts/secretary-of-sta... as an example) . And the amount of voter fraud we do have is very small (and ironically committed by citizens see https://www.brookings.edu/articles/how-widespread-is-electio... for some examples).

> I am in favor of in-person voting

Again, the size and dispersion of the American population makes this odious. Dense urban areas will face lines (they already do) and many of them (Chicago) have moved to early voting because spreading things out over many days is just more effective. Meanwhile places like Montana (where population density is in people per square mile) make travel to a location burdensome.

I get why you feel the way you do, but the data, the reality of America, makes what you desire unnecessary and impractical. Feelings are a terrible reason to erect this barrier when it makes little sense to do so.

Comment by phailhaus 4 hours ago

Voter registration already requires proof of citizenship. What is the point of requiring that high bar of proof on the day of voting as well?

Comment by AuryGlenz 4 hours ago

In my state it doesn’t require that. You just need someone else that’s registered the vouch for you. A registered person can vouch for up to 8 people:

https://www.sos.mn.gov/elections-voting/register-to-vote/reg...

Comment by tossstone 4 hours ago

I've lived in 3 states and none of them have required proof of citizenship to register to vote. You basically check a box that acknowledges that you are a US Citizen with the right to vote and that illegal registration carries penalties.

Comment by grosswait 4 hours ago

How is it a high bar of proof if it is already required? Edit: and already met

Comment by stvltvs 3 hours ago

It's not a requirement in most places. This would be a significant change in practice.

Comment by nomorewords 4 hours ago

Why have voter registration?

Comment by smw 55 minutes ago

One of the issues is that the US, unlike most of Europe, for example, doesn't require registering your address with your locality or police when you move.

Comment by ericmay 4 hours ago

In the United States at least, voter registration will include your place of residence which will place you in a specific precinct. In other words: "I am so and so, and I live here. Votes that affect this area include me, and I get a say."

When voters are voting for things, for example a tax levy to fund a new school, or for who will be their state or federal congressional representatives, it's important that the voters in that school district or in that congressional district are the ones voting for their representatives or for the bills or initiatives that affect them. This isn't quite as important for national elections, gubernatorial races, or for the senate at the federal level, but it's obviously incredibly important the more local you get.

Without voter registration, that model breaks down. Even mundane things like how much staff and equipment should be at a polling location is not easy to figure out when you don't know how many voters you'll have. If you haven't worked as a poll worker it's really enlightening to learn about how the process works and a great way to meet your neighbors.

Comment by ritzaco 5 hours ago

I don't care how much maths and encryption you use, you can't get out of the fact that things can be anonymous (no one can know how you voted) or verifiable (people can prove that you only voted once) but not both.

- Switzerland usually gets around this by knowing where everyone lives and mailing them a piece of paper 'something you have'

- South Africa gets around this by putting ink on your fingernail

I've read quite a bit about the e-voting systems in Switzerland and USA and I just don't see how they thread the needle. At some point, you have to give someone access to a database and they can change that database.

Until we all have government-issued public keys or something, there isn't a technical solution to this? (Genuinely curious if I'm wrong here)

Comment by zahlman 38 minutes ago

Sure you can, you just need an anonymous voting mechanism that's sufficiently naive. You use the verifiable process to restrict access to that anonymous mechanism.

In Canada, at both federal and provincial levels, you walk up to a desk and identify yourself, are crossed off a list, and handed a paper ballot. You go behind a screen, mark an X on the ballot, fold it up, take it back out to another desk, and put it in the box. It's extraordinarily simple.

> At some point, you have to give someone access to a database and they can change that database.

Well, that kind of fraud is a different issue from someone reading the database and figuring out who someone voted for (you just... don't record identities in the database).

Comment by jasode 1 minute ago

>Sure you can, you just need [...] , you walk up to a desk and identify yourself, are crossed off a list, and handed a paper ballot. [...]

Your counterpoint (explaining in-person paper ballots) doesn't seem relevant to the thread's article or the gp you're responding to.

The article is about digital voting. Quote: >the problem with its e-voting pilot, open to about 10,300 locals living abroad and 30 people with disabilities,

Comment by Bender 20 minutes ago

There will never be a technical or operational process that excludes cheating. The only deterrence that seems to work on humans and even then only most of the time is severe capitol punishment and that will only be as effective as people believe it happens thus requiring live streaming of the removal of cheaters heads without censorship. The current legal process of each country would have to be by-passed or people would just sit in a cage for 30 years. Even in such cases there will be people that sacrifice themselves if they think that bribe money can go to their family but that is at least a start.

Comment by SoftTalker 14 minutes ago

Also cheating with paper ballots is much harder to scale and remain undetected than cheating by altering records in a database.

Comment by Bender 1 minute ago

remain undetected than cheating by altering records in a database.

Absolutely. Any time something is centralized it becomes an irresistible target for unlimited numbers of bad actors and the bar to entry for remote anonymous access makes it a much easier target.

Comment by dirasieb 2 minutes ago

> paper ballots and requiring IDs

isn't that racist? i've heard it repeated but i'm not so sure

Comment by jfengel 18 minutes ago

The USA threads the needle by simply not having verifiable voting. And it turns out it works pretty well. Despite countless hours and lawsuits dedicated to finding people who voted more than once, only a handful of cases have actually turned up.

It's not that there are no checks. You have to give your name, and they know if you've voted more than once at that station that day. To vote more than once you'd have to pretend to be somebody else, in person, which means that if you're caught you will go to jail.

We could certainly do better, but thus far all efforts to defeat this non-problem are clearly targeted at making it harder for people to vote rather than any kind of election integrity.

Comment by alistairSH 4 minutes ago

This. The process in my precinct is roughly...

- Enter queue

- A front of queue, show ID of some sort (various accepted) to volunteer

- They scratch you from the list and hand you a paper scantron sheet

- Go to private booth, fill out scantron

- Go to exit, scan ballot (it scans and then drops into a locked box for manual tally later, if necessary)

The "easy" ways to vote fraudulently are also easily caught... fake ID documents, voting twice, etc.

For people who forget their ID or have address changes that haven't propagated through the voter roll, there is provisional voting - you do the same as above, but they keep the ballot in a separate pile and validate your eligibility to vote at a later time. IIRC, the voter gets a ticket # so they can check the voter portal later to see if the ballot was accepted.

As noted, the number of fraudulent votes are astonishingly small, given the amount of money spent on proving otherwise. The current GOP has spent 100s of millions or billions on proving wide-spread fraud and so far, all they've managed to prove a few voters, most of whom were actually GOP-leaning, have committed fraud (and most of them were caught day-of already).

Comment by Joker_vD 9 minutes ago

> You have to give your name, and they know if you've voted more than once at that station that day.

So you go to other stations, duh. It's called "carousel voting" [0], if done on a large, organized scale.

[0] https://en.wikipedia.org/wiki/Carousel_voting

Comment by cj 1 minute ago

At least in NY, you would have to know the name of someone else at the 2nd polling site, since your name won't be on that list?

Comment by buckle8017 5 minutes ago

Have you considered that in a system where proving cheating is so difficult, even weak evidence is powerful?

If cheating is difficult to prove then we would expect only minimal evidence even with material amounts of cheating.

Comment by beautiful_apple 4 hours ago

You can have e-voting systems that protect ballot secrecy and are verifiable.

You can use homomorphic encryption or mixnets to prove that:

1) all valid votes were counted

2) no invalid votes were added

3) the totals for each candidate is correct

And you can do that without providing proof of who any particular voter voted for. A few such systems:

https://en.wikipedia.org/wiki/Helios_Voting

https://www.belenios.org/

Authentication to these systems is another issue - there are problems with mailing people credentials (what if they discard them in the trash?).

https://www.cbc.ca/news/canada/ontario-municipal-elections-o...

Estonia (a major adopter of online voting) solves this with the national identity card, which essentially is government issued public/private keys.

https://en.wikipedia.org/wiki/Estonian_identity_card

Lots of cyber risks with the use of online voting though, especially in jurisdictions without standards/certification. I outline many in my thesis which explores the risks to online elections in Ontario, Canada (one of the largest and longest-running users of online voting in the world)

https://uwo.scholaris.ca/items/705a25de-f5df-4f2d-a2c1-a07e9...

Comment by dietr1ch 31 minutes ago

> You can have e-voting systems that protect ballot secrecy and are verifiable.

In these systems the voter cannot verify that their vote was secret as they cannot understand, and much less verify the voting machine.

> And you can do that without providing proof of who any particular voter voted for.

Which is good for preventing the sale of votes, but keeps things obscure in a magical and correct box.

How can I tell the machine didn't alter my vote if it cannot tell me, and just me, who I voted for? The global sanity checks are worthless if the machine changed my vote as I entered it.

Comment by yason 1 minute ago

And if it could tell you that then a third party could force you to reveal that you voted "right" as agreed before.

Paper ballots with mutually suspicious representatives of all parties watching themselves during handling and counting is the only way to go for big things like parliament/presidential elections and national referendums where, in the worst case, the greatest of all matters are at stake. And foolproof method for voting is most needed when the levels of trust are at the lowest.

Comment by dmos62 4 hours ago

You should care how much maths and encryption you use [0][1], because this is not only possible, but there are multiple approaches.

[0] https://satoss.uni.lu/members/jun/papers/CSR13.pdf

[1] https://fc16.ifca.ai/voting/papers/ABBT16.pdf

Comment by jjmarr 50 minutes ago

More important than lack of voter fraud is proving to the population a lack of voter fraud.

Comment by kanapala 4 hours ago

There's a goverment issued public & private key right here: https://en.wikipedia.org/wiki/Estonian_identity_card

Comment by presentation 4 hours ago

Japan has them built into My Number Cards too https://www.digital.go.jp/en/policies/mynumber/private-busin...

Comment by swiftcoder 1 hour ago

> Until we all have government-issued public keys or something

That's actually pretty common in Europe. The Spanish DNI (national identity card) has a chip these days, which gives you an authenticated key pair for accessing digital services.

In the pilot project for digital voting, that identity is only used to authenticate the user, and then an anonymous key needs generated that can be used to cast the final vote.

Comment by fermisea 4 hours ago

What about this? Consider a toy system: everyone gets issued a UUID, everyone can see how every UUID voted, but only you know which one is your vote.

This is of course flawed because a person can be coerced to share their ID. In which case you could have a system in which the vote itself is encrypted and the encryption key is private. Any random encryption key works and will yield a valid vote (actual vote = public vote + private key), so under coercion you can always generate a key that will give the output that you want, but only you know the real one.

Comment by looperhacks 13 minutes ago

Besides the fact that 99% of the general population won't be able to understand this, a $5€ wrench says that you show me proof of the correct private key (either by you showing me the letter you received, me being present when you set it up, or however it is set up)

Comment by 4 hours ago

Comment by mothballed 50 minutes ago

South Africa is in a somewhat similar situation of having a gigantic (1-10%, government is too broken to figure out where in that range) illegal immigrant population and poor access to paperwork for many citizens that would make any heavily scrutinized citizenship for registration lean heavily towards disenfranchisement of the poorer segments.

Comment by SideburnsOfDoom 4 hours ago

> South Africa gets around this by putting ink on your fingernail

This is true, but its used in other countries as well, as it's a simple, effective, low-tech, affordable process.

Most notably in India https://edition.cnn.com/2024/05/02/style/india-elections-pur...

but also in many other countries: https://en.wikipedia.org/wiki/Election_ink#International_use

Comment by phoronixrly 4 hours ago

> At some point, you have to give someone access to a database and they can change that database.

It's the only problem in existence that can be solved by the blockchain...

Comment by beautiful_apple 4 hours ago

Ironically most production e-voting systems do not use blockchains. That's because there isn't need for decentralization, just verifiability of a correct result and protecting voting secrecy.

Comment by caminanteblanco 4 hours ago

But generally sacrifices that anonymous axis via a reproduceable public ledger

Comment by phoronixrly 4 hours ago

Unless pseudonymized...

Comment by clcaev 15 minutes ago

Don’t forget about https://verifiedvoting.org/ and its decades-long advocacy for scanned paper ballots.

Comment by eunos 5 hours ago

That's a very exact number if you know what I mean

Comment by zoobab 5 hours ago

eVoting cannot be understood and audited by normal citizens, not even by nerdy ones. It's just good for the trash.

Comment by atoav 4 hours ago

It is not even about understanding. It is about how easy it is to distrust it.

Contrary to what nerds think, the goal of elections isn't to get bulletproof results by mathematical standards. The goal is to create agreeable consent among those who voted. A good election system is one where even sworn enemies can begrudgingly agree on the result.

A paper ballot system has the advantage that it can be monitored by any group that has members which have mastered the skill of object permanence and don't lie. That is not everybody, but it is much better than any hypothetical digital system

Comment by zahlman 36 minutes ago

> the goal of elections isn't to get bulletproof results by mathematical standards. The goal is to create agreeable consent among those who voted. A good election system is one where even sworn enemies can begrudgingly agree on the result.

First you must explain to them why the former is not an example of the latter.

Comment by atoav 5 minutes ago

[delayed]

Comment by abdullahkhalids 15 minutes ago

GP already said.

> eVoting cannot be understood and audited by normal citizens, not even by nerdy ones.

I suggest you explain the verifiability of evoting systems to your grandma or your friend with an art degree. Then ask them to explain the same to their peer while you just listen. Then repeat the exercise with paper voting. You will see the difference.

Comment by phoronixrly 4 hours ago

How about a machine voting system with paper fallback. You as a voter can review the paper protocol from your vote. If there is distrust, the justice system can review the paper trail as well.

Comment by rwmj 3 hours ago

I don't understand the reason for electronic voting. The UK manages to tally up paper votes overnight, even from far-flung Scottish islands. Electronic voting is literally solving a problem that nobody has.

Comment by 85392_school 21 minutes ago

The UK is the world's 22nd most populated and 78th largest country.

Comment by palata 5 hours ago

Also e-voting can be hacked (I guess they vote from their computer/smartphone, which can be hacked from the other side of the world). The last place you want to care about phishing, IMO, is voting.

Good luck hacking in-person voting or even "physical" mail voting from the other side of the world.

Comment by phoronixrly 4 hours ago

Regular ballot voting can also be hacked and on a scale. Making ballots invalid while counting them, or modifying them in some form or other, intentionally writing wrong values in the counting protocols...

And of course controlled vote or paid vote...

E-voting can and has also led to exposing voting fraud -- see Venezuella.

Comment by another-dave 4 hours ago

but it's done in public where anyone observing the count can see that the people counting don't have any pencils etc in their hand

Comment by tribaal 4 hours ago

Exactly - it's done in public, and not centrally. Any citizen can go and check how it's done in their own Geminde.

Comment by 1 hour ago

Comment by phoronixrly 4 hours ago

The ballot voting process is also misunderstood by regular citizens, even nerdy ones. From experience, even by voting officials.

Comment by tribaal 4 hours ago

As a Swiss citizen I strongly disagree. Most people capable of reading and basic maths (addition!) can understand the counting of our paper ballots. My kids understand how this works since they are like 5.

Any citizen can go and check how votes are counted in their Geminde. Any citizen can check what is reported in the federal tally. I did several times. It's not rocket science.

Comment by palata 5 hours ago

The title is misleading. It's an e-voting PILOT. That's important. "Switzerland is running small-scale e-voting pilots in four of its 26 cantons", three of which were not affected.

From Wikipedia [1]:

> A pilot experiment, pilot study, pilot test or pilot project is a small-scale preliminary study conducted to evaluate feasibility, duration, cost, adverse events, and improve upon the study design prior to performance of a full-scale research project.

[1]: https://en.wikipedia.org/wiki/Pilot_experiment

Comment by beautiful_apple 4 hours ago

Switzerland has been very careful/ conservative about rolling out e-voting. The same cannot be said of other jurisdictions (like Ontario's municipal elections) where adoption is very rapid and without coordination/support/standards from the provincial or federal governments.

Comment by jjgreen 5 hours ago

Had to truncate the title since too long for HN (often the case for the Register)

Comment by palata 5 hours ago

And it makes it sound like a production system failed, where what actually happened is that this was a pilot that worked in 3/4 of the involved cantons and that the people who participated to it knew it was a pilot.

Comment by Alifatisk 4 hours ago

You cut out something that changed the message entirely

Comment by jjgreen 4 hours ago

I thought the edit window was 15 minutes, but it seems it is an hour, so edited to restore the "pilot"

Comment by MengerSponge 57 minutes ago

> Tech Enthusiasts: Everything in my house is wired to the Internet of Things! I control it all from my smartphone! My smart-house is bluetooth enabled and I can give it voice commands via alexa! I love the future!

> Programmers / Engineers: The most recent piece of technology I own is a printer from 2004 and I keep a loaded gun ready to shoot it if it ever makes an unexpected noise.

Comment by 4 hours ago

Comment by jackweirdy 5 hours ago

It’s a nice property of elections that you can measure votes needing more intervention against the margin of victory before you decide your next step

Comment by fabiofzero 4 hours ago

Brazil has digital voting since 1996 and it works pretty much flawlessly. I'm sure Switzerland will figure it out someday.

Comment by diego_moita 5 hours ago

Meanwhile Brazil does full e-vote for almost 30 years collecting more than 100 million votes (that's 11 times the whole of Switzerland's population).

You'll get there Switzerland, it can be done. It is safer and faster.

Comment by beautiful_apple 4 hours ago

Brazil's e-voting does not allow voters to vote online from home on a personal computer (like in Switzerland). It has very different requirements.

https://en.wikipedia.org/wiki/Electronic_voting_in_Brazil

Comment by palata 5 hours ago

And they probably started with small-scale pilots, too.

Comment by diego_moita 5 hours ago

Yes, they did.

But I think that the main reason is that Brazil's elections were a lot dirtier and a lot more unreliable than Switzerland's.

What I mean is that the push towards e-voting is much stronger in countries with unreliable elections, because e-voting is harder to tamper than the crude ways you can defraud paper ballots.

Switzerland's and other organized countries have elections that are "good enough", so the push towards e-voting is probably not that strong.

Is the "leapfrog" concept. Sometimes it is easier to adopt newer technologies in places where the existing ones are horrible. Other examples: electronic payment systems, solar panels and EVs in India and Africa.

Comment by palata 5 hours ago

Actually I don't understand the push towards e-voting in countries like Switzerland. E-voting can be hacked from the other side of the world, because it happens on computers. In-person voting or physical mail is much harder to hack from the other side of the world.

Comment by brainwad 4 hours ago

Most of the push for e-voting in Switzerland is from the Swiss abroad (10% of the electorate), who have a right to vote, but whose exercise of that right is subject to the vagaries of the international postal system. I personally have had problems with receiving postal ballots from Australia to Switzerland with not enough time to return them; presumably Swiss voters in Australia have similar problems, let alone less-developed countries.

Comment by diego_moita 4 hours ago

Can't talk about Switzerland, don't know the particularities.

But in continental countries like Brazil it makes a lot of sense. It is cheaper, faster and safer.

> E-voting can be hacked from the other side of the world, because it happens on computers

How do you "hack from the other side of the world" a computer that isn't even online? True, the transmission of computed results is made online, but keeping that safe is trivial, banks do it.

Comment by 4 hours ago