Swiss e-voting pilot can't count 2,048 ballots after decryption failure
Posted by jjgreen 5 hours ago
Comments
Comment by pilingual 11 minutes ago
Comment by ericmay 4 hours ago
That being said for the United States, I am in favor of in-person voting requiring proof of citizenship, and making "voting day" a paid national holiday. Not so much for technical or efficiency reasons but for social reasons. I'd argue it should be mandatory but I don't think we should force people to do anything we don't have to force them to do, and I'm not sure we want disinterested people voting anyway.
Exercising democracy, requiring people to put in a minimal amount of thought and effort goes a long way. It should be a celebratory day with cookies and apple pie and free beer for all. Not some cold, AI-riddled, stay in your house and never meet your neighbors, clicking a few buttons to accept the Terms of Democracy process.
I know there's a lot of discussion points around "efficiency" or "cost" or "accessibility" or how difficult it supposedly is to have an ID (which is weird when you look at how other countries run elections) and there are certainly things to discuss there, but by and large I think the continued digitalization and alienation of Americans is a much worse problem that can be addressed with more in-person activities and participation in society. We're losing too many touchpoints with reality.
Comment by stetrain 4 hours ago
I think this is fine if it also then means that obtaining a qualifying ID is treated as a no-cost and highly-accessible right for all citizens.
This is where such arguments tend to get stuck in the US. If you require proof of citizenship, but also have places where getting to a government office to get such an ID is difficult or expensive, then you are effectively restricting voting access for citizens. A measure to place stricter qualifications on voting access needs to also carefully consider and account for providing access to all citizens.
The US is a geographically very large place with worse public transportation options compared to many other countries, and with that comes differences in economic and accessibility considerations for things like "Just go to your county's office and get a qualifying ID."
Comment by AuryGlenz 4 hours ago
Also, it’s a pretty silly thing anyways. I don’t even drink and I still need my driver’s license quite a few times every year.
Comment by d1sxeyes 1 hour ago
Comment by SoftTalker 2 minutes ago
Comment by 0cf8612b2e1e 55 minutes ago
Coincidental how these might be Democratic leaning areas in Republican states.
Comment by jeffbee 19 minutes ago
But anyway, none of that is the real core issue with the idea of voter ID. The real issue is that there are many living Americans who were born in jurisdictions that steadfastly refused to issue birth certificates to Black people.
Comment by stetrain 2 hours ago
Comment by delecti 1 hour ago
Comment by DangitBobby 46 minutes ago
Comment by jagenabler2 1 hour ago
Comment by jjmarr 40 minutes ago
https://www.dhs.gov/archive/real-id-public-faqs
For example, DACA recipients, temporary protected status refugees, and citizens of states in free association with the USA (Micronesia/Marshall Islands/Palau) that are in the USA are all eligible for Real ID.
Comment by mothballed 1 hour ago
"...based on HSI Special Agent training and experience, REAL ID can be unreliable to confirm U.S. citizenship."
https://storage.courtlistener.com/recap/gov.uscourts.alsd.76...Comment by lokar 1 hour ago
This is completely unnecessary.
We establish citizenship, very reliably, at time of registration. This is on of the main jobs of the registrar of voters. They have plenty of time to look up the details of the person and establish citizenship (and intentionally lying in this process is a serious crime).
We then establish identity at the time of voting, again, very reliably.
Intentional voter impersonation or voting when not eligible is vanishingly rare in the US.
Comment by tastyfreeze 1 hour ago
At no point during that process is there presentation of proof of citizenship.
Comment by meroes 25 minutes ago
Comment by selectodude 44 minutes ago
Source: actually ran a fucking election precinct. Non-citizens aren’t casting ballots illegally.
Comment by tastyfreeze 14 minutes ago
Comment by giancarlostoro 49 minutes ago
Comment by expedition32 41 minutes ago
These kind of fundamental changes require years of preparation. Either Trump is an incompetent moron or he has ulterior motives.
Comment by bilbo0s 24 minutes ago
Requiring poor people to pay a hefty fee, which they probably don't have, to get a passport seems a fairly competent way to go about making sure poor people don't vote to me.
If I don't want poor people voting, then attaching a fee to voting doesn't mean I'm incompetent. It means I'm smart enough to know poor people don't have money.
By the way, I think all of this is horrible. Everyone should be equal before the law and should have their vote count without having to pay for that right. I'm just pointing out that this is a really good way to eliminate the vote of the poor.
Comment by ericmay 4 hours ago
I completely agree and I don't think there is a fair argument to suggest otherwise.
Comment by stetrain 2 hours ago
I absolutely support ID to vote provided that everyone who is eligible and wants to vote can get such an ID and vote without hassle.
I don't support most attempts to pass Voter ID laws because I am wary that they would not actually result in that outcome.
Comment by dolni 4 hours ago
Where in the US do you find it's difficult for people to get an ID? Where is it not? What percentage of the population has an ID in a place where it's difficult to get one vs somewhere it is easier?
What constitutes an ID being expensive?
Nearly every country in the world requires proof of citizenship to vote. How is the rest of the world dealing with this problem? Do you think that their democratic processes might be compromised because of it?
Comment by jjmarr 29 minutes ago
In The Matrix (1999) there's a scene where Agent Smith explicitly remarks that Neo has an SSN as proof he's a law-abiding citizen in a white-collar job.
[1] when it was made a requirement to claim tax deductions for dependent children. Even today, if you don't want the tax break, you can opt out at the cost of ruining your child's life!
Comment by swiftcoder 1 hour ago
Most of those nations have a mandatory national ID, so everyone already has proof of citizenship. The US and UK are very much outliers in having vocal and successful resistance to the implementation of a national ID card.
Comment by mothballed 1 hour ago
In some places like Illinois, an ID is required to exercise the rights of people but not the rights of citizens (FOID required to bear guns, but ID not required for vote).
In places like Arizona, it's the exact opposite. You can bear or conceal guns without an ID but you need an ID to vote.
Vermont is the only state I know of with any consistency on lack of ID requirements that convey non-ID citizens to also have the right of people. You can conceal guns and vote without ID.
Comment by zinekeller 4 hours ago
Not the OP, but except for passports (and passport cards)... there isn't really any federal-level ID in the US (and passport booklets/cards are expensive, just a bit over $100 IIRC).
The nearest equivalent in the state level are driver's licenses, which are also on the expensive side considering the ancillary costs (because it's a driver's license, not just an identification card). This is also the reason why US-centric companies like PayPal, for this exact reason, accepts a driver's license as proof of identification (obviously where not otherwise prohibited by local laws).
Some (New York for example) do have an ID (called a non-DL ID, that's how embedded driver's license is in the US), but most states do not have a per se ID.
> What constitutes an ID being expensive?
Developing countries, rather ironically, issue their IDs for free? Okay, indirectly paid by taxes, but there's no upfront cost. The above-mentioned identity documents have a clear cost attached to them.
> How is the rest of the world dealing with this problem? Do you think that their democratic processes might be compromised because of it?
Cannot talk about other countries (because there is an ID system and it's not a controversial affair to them), but instead I'll answer with a reflection of the US system.
Unfortunately, American ID politics are hard, mainly due to concerns of surveillance, but I think (only my opinion) because some of them want those historically disenfranchised (even if a fully native-born US citizen) de facto disenfranchised. This means that there is no uniform and freely-issued identification system in the US (or even a requirement to do that at the state level). Unfortunately, this... is a tough nut to crack, politically-speaking.
Comment by ricree 55 minutes ago
Out of curiosity, do you have a source or list for this? My own home state and those around me that I've spot checked all have a state ID available as an alternative to a driver's license. My understanding was that this is the case for most states.
Unless I've misunderstood you and you meant a state ID that is completely separate from a driver's license to the point that people with a DL would have one?
Comment by devilbunny 35 minutes ago
I haven't researched this thoroughly, but what state will not issue an ID that is equivalent in every way to a driver's license except that it isn't a license to drive? I just checked Mississippi, Wyoming, South Dakota, and West Virginia, all of which do, so clearly being rural, poor, or both isn't enough to stop states from doing it. (The detailed politics are, as you say, a mess.)
Comment by stvltvs 3 hours ago
Comment by orwin 4 hours ago
How it works in my country : my electoral card is freely sent to my address when I register to my voting office. I can vote with it, or with an official ID, as long as I'm in the correct place. The only moment I need my ID is to cast a vote on behalf of someone who identified me as a 'surrogate'.
Comment by stvltvs 4 hours ago
Not everyone has ready access to proof of citizenship in order to register to vote. It gets even more difficult if your current legal name doesn't match your birth name, e.g. if you took your husband's name.
Not every eligible voter has or needs a government issued ID. For example, retired people who don't drive. For them to get to the DMV to get an ID just to vote would be a challenge.
The US has large rural areas where government offices are hours away.
All of this adds up to significant barriers to eligible voters. There's a reason even the GOP isn't bending over backward to pass the SAVE Act.
Comment by stetrain 2 hours ago
People in or near poverty are going to be disproportionately affected by those conditions.
And just getting to the DMV does not necessarily mean you can get an ID that counts as proof of citizenship. There is no standard federal citizen ID in the US. A basic state ID or driver's license is not proof of citizenship. Even a RealID compliant ID is not a direct proof of citizenship, so depending on how strict the voting requirements are it may not be adequate.
Comment by xvector 4 hours ago
Comment by pseudalopex 40 minutes ago
Additionally, just over 1% of adult U.S. citizens do not have any form of government-issued photo identification, which amounts to nearly 2.6 million people.[1]
[1] https://cdce.umd.edu/sites/cdce.umd.edu/files/pubs/Voter%20I...
Comment by appointment 4 hours ago
Comment by stvltvs 3 hours ago
https://factually.co/fact-checks/politics/will-save-act-allo...
Comment by bilbo0s 34 minutes ago
Which is why I'm pretty sure it's not gonna pass. Both republicans and democrats depend heavily on mass votes from, let's just say, a lot of people who are, generally speaking, not the sort to have passports.
Comment by orwin 4 hours ago
Comment by lokar 1 hour ago
Comment by mplewis9z 1 hour ago
Comment by stetrain 1 hour ago
Comment by amanaplanacanal 39 minutes ago
This would be less of a problem if the US had some sort of national ID issued by right, but we don't, and the same people pushing for requiring ID for voting would be against creating one. They hate the idea of a national ID.
My state does all elections by mail now. How would this even work?
All this is on top of the fact that elections are run by the states, not the national government. Would such a law even be constitutional?
Comment by kanbara 22 minutes ago
Even if it were a holiday, people may not be able to travel or take time off from obligations. There’s no obligation to drive 2 hours to vote, to fly back if you work in another country, or to go get a new birth certificate because Real ID doesn’t prove citizenship even though you provide citizenship documents to it when you get one…
I’ve heard of a lot of takes here about what we should do for voting to make it “more secure” but all of this is actually a solution for a problem we just don’t have.
Comment by Waterluvian 4 hours ago
I'm not sure how it is in Switzerland, but in Canada I will vote for maybe three candidates in five years. And I don't mean three visits to the polls (though it's usually that), I mean three actual checkbox ticks for people to count. They're paper ballots and the counting is done that night. I think if we were stuck voting for like forty different races every two years it would be a very different story and a lot of what you say would resonate with me more. Except the voter registration stuff.
We're pretty flexible about registration up here and it works. My wife one year showed up with some mail that had her name/address, and me vouching for her. Though I think a lot of the luxuries of democracy are most easily enjoyed with a trusting, cooperative culture that isn't constantly wound up about being cheated by the others.
Comment by soco 4 hours ago
Comment by Waterluvian 4 hours ago
Comment by lolc 4 hours ago
The problem with e-voting is that it is much harder to validate. My paper ballot rests at a community building where it will be counted on the day of the vote. I can understand the process from start to finish in physical terms. Throw in a USB stick and anything could happen. It is possible we will never know what went wrong here.
Comment by rhcom2 44 minutes ago
Isn't this just a solution in search of a problem though? Multiple investigations have discovered absolutely minuscule amount of non-citizen voting in US elections. It's something that seems reasonable on its face but lacks any purpose and comes with an ulterior motive that it is part of the made up GOP talking points of a "stolen election" and "illegals voting".
Comment by RandomLensman 48 minutes ago
Comment by expedition32 44 minutes ago
But then they showed how easy it is to hack and we live in a world with evil countries like the US, China and Russia who want to destroy our way of life.
Comment by zer00eyz 38 minutes ago
Go and try to figure out how to do this from scratch. Imagine your house burned down and you need to start with "nothing".
If your parents are still alive you can use them to bootstrap the process of getting those vital documents (or if you're married that can be another semi viable path).
Pitty if you don't have those resources. Furthermore it might get complicated for any partner who adopts their other partners first name (were talking about getting the documents, before you can get some sort of verified ID).
The reality is we don't have a lot of instances of "voter fraud" committed by people who aren't citizens (see: https://www.facebook.com/Louisianasos/posts/secretary-of-sta... as an example) . And the amount of voter fraud we do have is very small (and ironically committed by citizens see https://www.brookings.edu/articles/how-widespread-is-electio... for some examples).
> I am in favor of in-person voting
Again, the size and dispersion of the American population makes this odious. Dense urban areas will face lines (they already do) and many of them (Chicago) have moved to early voting because spreading things out over many days is just more effective. Meanwhile places like Montana (where population density is in people per square mile) make travel to a location burdensome.
I get why you feel the way you do, but the data, the reality of America, makes what you desire unnecessary and impractical. Feelings are a terrible reason to erect this barrier when it makes little sense to do so.
Comment by phailhaus 4 hours ago
Comment by AuryGlenz 4 hours ago
https://www.sos.mn.gov/elections-voting/register-to-vote/reg...
Comment by tossstone 4 hours ago
Comment by grosswait 4 hours ago
Comment by stvltvs 3 hours ago
Comment by nomorewords 4 hours ago
Comment by smw 55 minutes ago
Comment by ericmay 4 hours ago
When voters are voting for things, for example a tax levy to fund a new school, or for who will be their state or federal congressional representatives, it's important that the voters in that school district or in that congressional district are the ones voting for their representatives or for the bills or initiatives that affect them. This isn't quite as important for national elections, gubernatorial races, or for the senate at the federal level, but it's obviously incredibly important the more local you get.
Without voter registration, that model breaks down. Even mundane things like how much staff and equipment should be at a polling location is not easy to figure out when you don't know how many voters you'll have. If you haven't worked as a poll worker it's really enlightening to learn about how the process works and a great way to meet your neighbors.
Comment by ritzaco 5 hours ago
- Switzerland usually gets around this by knowing where everyone lives and mailing them a piece of paper 'something you have'
- South Africa gets around this by putting ink on your fingernail
I've read quite a bit about the e-voting systems in Switzerland and USA and I just don't see how they thread the needle. At some point, you have to give someone access to a database and they can change that database.
Until we all have government-issued public keys or something, there isn't a technical solution to this? (Genuinely curious if I'm wrong here)
Comment by zahlman 38 minutes ago
In Canada, at both federal and provincial levels, you walk up to a desk and identify yourself, are crossed off a list, and handed a paper ballot. You go behind a screen, mark an X on the ballot, fold it up, take it back out to another desk, and put it in the box. It's extraordinarily simple.
> At some point, you have to give someone access to a database and they can change that database.
Well, that kind of fraud is a different issue from someone reading the database and figuring out who someone voted for (you just... don't record identities in the database).
Comment by jasode 1 minute ago
Your counterpoint (explaining in-person paper ballots) doesn't seem relevant to the thread's article or the gp you're responding to.
The article is about digital voting. Quote: >the problem with its e-voting pilot, open to about 10,300 locals living abroad and 30 people with disabilities,
Comment by Bender 20 minutes ago
Comment by SoftTalker 14 minutes ago
Comment by Bender 1 minute ago
Absolutely. Any time something is centralized it becomes an irresistible target for unlimited numbers of bad actors and the bar to entry for remote anonymous access makes it a much easier target.
Comment by dirasieb 2 minutes ago
isn't that racist? i've heard it repeated but i'm not so sure
Comment by jfengel 18 minutes ago
It's not that there are no checks. You have to give your name, and they know if you've voted more than once at that station that day. To vote more than once you'd have to pretend to be somebody else, in person, which means that if you're caught you will go to jail.
We could certainly do better, but thus far all efforts to defeat this non-problem are clearly targeted at making it harder for people to vote rather than any kind of election integrity.
Comment by alistairSH 4 minutes ago
- Enter queue
- A front of queue, show ID of some sort (various accepted) to volunteer
- They scratch you from the list and hand you a paper scantron sheet
- Go to private booth, fill out scantron
- Go to exit, scan ballot (it scans and then drops into a locked box for manual tally later, if necessary)
The "easy" ways to vote fraudulently are also easily caught... fake ID documents, voting twice, etc.
For people who forget their ID or have address changes that haven't propagated through the voter roll, there is provisional voting - you do the same as above, but they keep the ballot in a separate pile and validate your eligibility to vote at a later time. IIRC, the voter gets a ticket # so they can check the voter portal later to see if the ballot was accepted.
As noted, the number of fraudulent votes are astonishingly small, given the amount of money spent on proving otherwise. The current GOP has spent 100s of millions or billions on proving wide-spread fraud and so far, all they've managed to prove a few voters, most of whom were actually GOP-leaning, have committed fraud (and most of them were caught day-of already).
Comment by Joker_vD 9 minutes ago
So you go to other stations, duh. It's called "carousel voting" [0], if done on a large, organized scale.
Comment by cj 1 minute ago
Comment by buckle8017 5 minutes ago
If cheating is difficult to prove then we would expect only minimal evidence even with material amounts of cheating.
Comment by beautiful_apple 4 hours ago
You can use homomorphic encryption or mixnets to prove that:
1) all valid votes were counted
2) no invalid votes were added
3) the totals for each candidate is correct
And you can do that without providing proof of who any particular voter voted for. A few such systems:
https://en.wikipedia.org/wiki/Helios_Voting
Authentication to these systems is another issue - there are problems with mailing people credentials (what if they discard them in the trash?).
https://www.cbc.ca/news/canada/ontario-municipal-elections-o...
Estonia (a major adopter of online voting) solves this with the national identity card, which essentially is government issued public/private keys.
https://en.wikipedia.org/wiki/Estonian_identity_card
Lots of cyber risks with the use of online voting though, especially in jurisdictions without standards/certification. I outline many in my thesis which explores the risks to online elections in Ontario, Canada (one of the largest and longest-running users of online voting in the world)
https://uwo.scholaris.ca/items/705a25de-f5df-4f2d-a2c1-a07e9...
Comment by dietr1ch 31 minutes ago
In these systems the voter cannot verify that their vote was secret as they cannot understand, and much less verify the voting machine.
> And you can do that without providing proof of who any particular voter voted for.
Which is good for preventing the sale of votes, but keeps things obscure in a magical and correct box.
How can I tell the machine didn't alter my vote if it cannot tell me, and just me, who I voted for? The global sanity checks are worthless if the machine changed my vote as I entered it.
Comment by yason 1 minute ago
Paper ballots with mutually suspicious representatives of all parties watching themselves during handling and counting is the only way to go for big things like parliament/presidential elections and national referendums where, in the worst case, the greatest of all matters are at stake. And foolproof method for voting is most needed when the levels of trust are at the lowest.
Comment by dmos62 4 hours ago
Comment by jjmarr 50 minutes ago
Comment by kanapala 4 hours ago
Comment by presentation 4 hours ago
Comment by swiftcoder 1 hour ago
That's actually pretty common in Europe. The Spanish DNI (national identity card) has a chip these days, which gives you an authenticated key pair for accessing digital services.
In the pilot project for digital voting, that identity is only used to authenticate the user, and then an anonymous key needs generated that can be used to cast the final vote.
Comment by fermisea 4 hours ago
This is of course flawed because a person can be coerced to share their ID. In which case you could have a system in which the vote itself is encrypted and the encryption key is private. Any random encryption key works and will yield a valid vote (actual vote = public vote + private key), so under coercion you can always generate a key that will give the output that you want, but only you know the real one.
Comment by looperhacks 13 minutes ago
Comment by mothballed 50 minutes ago
Comment by SideburnsOfDoom 4 hours ago
This is true, but its used in other countries as well, as it's a simple, effective, low-tech, affordable process.
Most notably in India https://edition.cnn.com/2024/05/02/style/india-elections-pur...
but also in many other countries: https://en.wikipedia.org/wiki/Election_ink#International_use
Comment by phoronixrly 4 hours ago
It's the only problem in existence that can be solved by the blockchain...
Comment by beautiful_apple 4 hours ago
Comment by caminanteblanco 4 hours ago
Comment by phoronixrly 4 hours ago
Comment by clcaev 15 minutes ago
Comment by eunos 5 hours ago
Comment by zoobab 5 hours ago
Comment by atoav 4 hours ago
Contrary to what nerds think, the goal of elections isn't to get bulletproof results by mathematical standards. The goal is to create agreeable consent among those who voted. A good election system is one where even sworn enemies can begrudgingly agree on the result.
A paper ballot system has the advantage that it can be monitored by any group that has members which have mastered the skill of object permanence and don't lie. That is not everybody, but it is much better than any hypothetical digital system
Comment by zahlman 36 minutes ago
First you must explain to them why the former is not an example of the latter.
Comment by atoav 5 minutes ago
Comment by abdullahkhalids 15 minutes ago
> eVoting cannot be understood and audited by normal citizens, not even by nerdy ones.
I suggest you explain the verifiability of evoting systems to your grandma or your friend with an art degree. Then ask them to explain the same to their peer while you just listen. Then repeat the exercise with paper voting. You will see the difference.
Comment by phoronixrly 4 hours ago
Comment by rwmj 3 hours ago
Comment by 85392_school 21 minutes ago
Comment by palata 5 hours ago
Good luck hacking in-person voting or even "physical" mail voting from the other side of the world.
Comment by phoronixrly 4 hours ago
And of course controlled vote or paid vote...
E-voting can and has also led to exposing voting fraud -- see Venezuella.
Comment by another-dave 4 hours ago
Comment by tribaal 4 hours ago
Comment by phoronixrly 4 hours ago
Comment by tribaal 4 hours ago
Any citizen can go and check how votes are counted in their Geminde. Any citizen can check what is reported in the federal tally. I did several times. It's not rocket science.
Comment by palata 5 hours ago
From Wikipedia [1]:
> A pilot experiment, pilot study, pilot test or pilot project is a small-scale preliminary study conducted to evaluate feasibility, duration, cost, adverse events, and improve upon the study design prior to performance of a full-scale research project.
Comment by beautiful_apple 4 hours ago
Comment by jjgreen 5 hours ago
Comment by palata 5 hours ago
Comment by MengerSponge 57 minutes ago
> Programmers / Engineers: The most recent piece of technology I own is a printer from 2004 and I keep a loaded gun ready to shoot it if it ever makes an unexpected noise.
Comment by jackweirdy 5 hours ago
Comment by fabiofzero 4 hours ago
Comment by diego_moita 5 hours ago
You'll get there Switzerland, it can be done. It is safer and faster.
Comment by beautiful_apple 4 hours ago
Comment by palata 5 hours ago
Comment by diego_moita 5 hours ago
But I think that the main reason is that Brazil's elections were a lot dirtier and a lot more unreliable than Switzerland's.
What I mean is that the push towards e-voting is much stronger in countries with unreliable elections, because e-voting is harder to tamper than the crude ways you can defraud paper ballots.
Switzerland's and other organized countries have elections that are "good enough", so the push towards e-voting is probably not that strong.
Is the "leapfrog" concept. Sometimes it is easier to adopt newer technologies in places where the existing ones are horrible. Other examples: electronic payment systems, solar panels and EVs in India and Africa.
Comment by palata 5 hours ago
Comment by brainwad 4 hours ago
Comment by diego_moita 4 hours ago
But in continental countries like Brazil it makes a lot of sense. It is cheaper, faster and safer.
> E-voting can be hacked from the other side of the world, because it happens on computers
How do you "hack from the other side of the world" a computer that isn't even online? True, the transmission of computed results is made online, but keeping that safe is trivial, banks do it.