E-Voting
It is very frustrating to me that the implementations we have seen of electronic voting have been so abysmal. It is almost at a point where a cynical side of me starts wondering if people are purposely screwing it up just so we won’t implement it as soon.
Here are my suggestions:
* Have the code be open source or at least openly available for review and verification. Security is not gained through obscurity. It is obtained through adequate hardware protection, port lock down, and encryption.
* The master database should be on a closed network, and the only physical access to hardware ports should be in a place that can be locked and/or monitored.
* Counts should be done redundantly on all copies made of the data. Any variance should require a complete investigation.
* At the point the vote is submitted, print 2 – 3 receipts. One goes into the ballot box, one goes to the voter, and a possible third one goes into a sealed ballot box.
* Have some sort of unique identifier on the voter’s receipt. That should allow the voter to access their voting record via the phone or the Internet. This will allow for individuals to check that their vote is recorded correctly. The record would not reveal personal information about the voter.
* Potentially allow for random auditing – where the auditors call voters and, if given permission by that voter, access and verify their vote.
The largest issue with this method is that it is possible that someone may be able to access how someone voted. However, there are a number of methods to make this very, very difficult and possible to trace. Have that access and dispersion of that information as legally protected as possible.
Frankly, given the choice between knowing that the votes are accurately counted and having a slim chance that someone find out who I voted for, I’d far rather risk the second, especially if there is very little chance of them “getting away with it”.
If this is a major concern, the only need for the connection between voter and vote is for the random auditing. One could have allow voters to permit themselves to be audited. Only people who gave this permission would be entered into the auditing list.
As far as “paperless voting”… What the heck are they thinking? I want receipts for my ATM transactions. I’d sure like a verifiable hard copy of my vote.
Recent Comments