VeriSign and Secure Internet Voting 290
Bucky Katt writes "VeriSign announced Monday that it will provide key components of a system designed to let Americans abroad cast absentee votes over the Internet."
"I'm not a god, I was misquoted." -- Lister, Red Dwarf
OMG (Score:5, Insightful)
Re:OMG (Score:2)
Given the problems I had legitimately changing my domain name details, hackers should have a difficult time breaking in...
Re:OMG (Score:3, Interesting)
NPR did a story last week on closed voting systems, and specifically mentioned Diebold and the "no-printers" argument. It's a start.
Re:OMG (Score:2, Interesting)
What is this about MS Access? I RTFA, and the only thing I saw was:
Given that the interface appears to be browser-based, this can be migrated to MaxOS, and *nixes if testing goes well.
However, there was one disconcerting item on the serveusa.gov FAQs. This item:
Re:OMG (Score:3, Interesting)
No, the Palladium software is not sufficiently ubiquitous at this time for use in SERVE.
Put asside your RIAA induced predjudices, just for a second. Exactly why would you not want to use trusted hardware for secure voting?
Palladium would be an ideal base to use. You might well want to go to the trouble of creating and signing your own version of the nexus under a different hardware key. But if the technology was available today I would be usin
Re:OMG (Score:2)
Re:OMG (Score:4, Interesting)
Exactly, with Palladium any conspiracy would have to include Microsoft, the hardware manufacturers, the CA and the people administering the ballots.
It is one thing to have open source code review. That is great but actually irrelevant since my main concern is not that the source code offered for review would have a backdoor. My concern is that the code running on the machine might not be the code given for review.
With Palladium it is possible for an external process to determine that a specific version of a software code is running on a particular machine. That is exactly what I want in designing an internet supported voting scheme.
Incidentally I find it really interesting that everyone seems to assume from the start that any ballot tampering would be directed by the GOP.
GREAT! (Score:5, Funny)
Re:GREAT! (Score:3, Funny)
Your vote will expire in 30 days!
You can recast your vote by sending $70 per vote to...
This is going to be a fiasco (Score:5, Insightful)
This is going to get worst before it gets better.
Re:This is going to be a fiasco (Score:3, Insightful)
Re:This is going to be a fiasco (Score:3, Insightful)
better? (Score:5, Insightful)
How do you think things will get better? There are few if any local independent news papers because they have all been crushed by big coroprate owned national broadcasters and "news" services like MSNBC. The same people have made sure that individuals have a hard time publishing on the internet, so everyone has to go through providers or portals where they can be shut down. Now the loop is being closed with black box voting, which is impossible to audit. Even if you could tell people the truth, they won't be able to do anything about it.
Vote against this kind of thing NOW.
Re:better? (Score:3, Insightful)
Vote how? They will own the voting process...
It's a downward spiral.
Re:better? (Score:2)
Revolt?
Re:better? (Score:2)
Not if the people you've been voting into office all your life took away your guns.
Welcome to the flipside, ladies and gents. We warned you.
Re:better? (Score:2)
Re:better? (Score:3, Interesting)
How, exactly, were they crushed? If their readers left their paper to read one of the "big corporated owned..." outlets, then they could not secure advertisers, then how is it the fault of those big corporate interests? If the public really wanted those independent papers, they would support them. Its called free-market at work (or, democracy expressed through the market).
Re:better? (Score:2)
The vast majority of US markets have one newpaper that is affiliated with one of the big corporate media groups.
Re:better? (Score:3, Insightful)
No one *allowed* Amazon to "dominate the book sales industry" (somehow I doubt Amazon sells more books than either Barnes&Noble or Borders, though they probably have better margins than the other two). Consumers decided they preferred the convenience of shopping for books online, and Amazon was pretty much first out the gate. Personnally, the only reason I sometimes shop in small bookshops is when I feel my ego getting too big and I need some abuse to make it go down
Re:better? (Score:2)
You think that will actually help, or will it just give you a warm fuzzy "I did something good today" feeling inside?
Of course if the issue you're against never appears on the ballot and all candidates up for election are in favor of it, then I guess voting against it isn't really an option. Whatcha gonna do now?
Re:This is going to be a fiasco (Score:2)
Without a verifiable voter trail, the potential for fraud is massive. VeriSign has been less than trustworthy these days. Lets all spike this immediately so that it never happens.
I wonder how big VeriSign contributes to Republican politicians?
This whole electronic voting thing is a major league mess. If these e-voting machines printed out a paper ballot, there would be no problem. Democracy is too important. Take the time, and do it right so t
Re:This is going to be a fiasco (Score:2, Interesting)
Every person over 18 goes onto a voting roll, they check you off that list when you enter a venue that has been set up to take votes (or when they receive an absentee vote by mail), they hand you a peice of paper, you tick the appropriate boxes and place it into a large locked container.
Simple, and there is a paper trail, and the expenense of counting the votes by hand is minimal.
Austr
Re:It was already a fiasco (Score:4, Funny)
In related news... (Score:3, Funny)
So Verisign will "own" democracy? (Score:2)
But hey, with an electoral system where the guy with the most votes loses (i.e. Al "Internet" Gore) then maybe it might even be an improvement. Hmmm.
Re:So Verisign will "own" democracy? (Score:2, Interesting)
Re:So Verisign will "own" democracy? (Score:2)
Actually if you count the votes on any basis other than the one that Gore's campaign asked for Gore would have won. But that is not the point.
The point is that the rules required a recount at the request of either candidate if the vote was narrow. The Republicans ignored that requirement and under the direction of the governor and the returning officer prevented the recount.
The fact is that it was th
Re:So Verisign will "own" democracy? (Score:2)
Regardless, it was Accenture that got the contract for this. They just signed a deal with VeriSign to provide "key pieces". Given that VeriSign is a well-known encryption key provider, my guess is they'll be providing the public-key encryption methods to authenticate absentee voters.
Ok, I'm done, you can put your tinfoil hats back on now.
-j
Re:Gore had most votes on all levels... (Score:2)
Electronic voting (Score:5, Interesting)
Yes, the algorithms for secure anonymous fraud-proof voting exist, but I don't think the implementations are up to the task yet - in particular, if they cannot be independently verified before, during and after the elections.
There's just too much potential for a fraud to justify dropping the good old pencil-in-the-number-of-your-candidate method.
I'll tell you why. (Score:3, Interesting)
Re:Electronic voting (Score:2)
Re:Electronic voting (Score:2)
1. raise taxes by 10%
2. if you vote, you get a 10% tax discount
The question is, do people in power really want all people to vote?
Replace the Electoral College w/ Folger's Crystals (Score:5, Interesting)
However, wouldn't it be nice if we (the US, if you can forgive my inclusive pronoun) were a democracy instead of a republic? If internet voting is good for the goose, then shouldn't it be good for the gander? We just need to replace those old and moldy voting booths with shiny new internet-enabled booths.
Of course, as a programmer, I'll believe the voting scheme is "secure" when monkeys fly out of my butt.
Re:Replace the Electoral College w/ Folger's Cryst (Score:2, Informative)
Absolutely not. The kind of democracy to which you refer is also known as "mob rule".
Re:Replace the Electoral College w/ Folger's Cryst (Score:2)
Re:Replace the Electoral College w/ Folger's Cryst (Score:2)
That only works if the people are informed.
Re:Replace the Electoral College w/ Folger's Cryst (Score:5, Insightful)
The PM of Malaysia is quoted as saying the duty of the democracy is to better the majority. Strictly speaking, that is true in that form of government.
That is why I support the Republic form is government. Republic is representative rule, not majority rule. Each stakeholder in the US system should be represented. Arguments about the rights of any minority make sense only in a Republic. In a democracy, who cares about minorities? We all vote in self-interest, and majority rules.
To repeat an oft repeated quote, Democracy is three wolves and a sheep voting on whats for dinner.
No, because Democracies are blind.. (Score:2)
Re:Replace the Electoral College w/ Folger's Cryst (Score:2)
So you propose that it's preferrable to have one hungry wolf and two sheep decide what's for dinner.
I don't see much difference other than increased carnage.
Re:Replace the Electoral College w/ Folger's Cryst (Score:2)
How? What is so special about a republic that ensures that those laws are put in place where they wouldn't be in another form of government?
A republic tends to give special interests more power to sway a small number of representatives. I don't see how this necessarily ensures more equitable laws.
They count absentee ballots? (Score:4, Interesting)
Someone must have thought, "Lets let absentee voters vote electronically, we're just going to throw out their votes anyway!"
Nothing lost, nothing gained.
So if you miss-spell the candidate name... (Score:2, Funny)
This could be good (Score:5, Insightful)
Chances are though that this first pass will not be great, which will slow/stop future development due to cries of the public for and end to insecure online voting.
Re:This could be good (Score:4, Informative)
I don't agree on the first pass comment though. I think a bad show on the first pass will eliminate a chance of it ever happening again.
Re:This could be good (Score:2)
Or perhaps if there was a voting scheme that meant that if you voted for your favorite, but appearantly unpopular, candidate you wouldn't be throwing your vote away.
Or perhaps...
There's lots of reasons for the low voter turnout. One of them is that both major candidates are so vile that it sickens one to think of voting for either. Voting for "The lesser of two evils" is still voting for evil. And it ignores the other possible choices.
Still, they'v
Re:This could be good (Score:2)
The idea of having polling stations open 24 hours comes to mind too. Since most of the poll workers are volunteers, that might not be an easy task.
I think the largest problem with voter turnout is one of education, really... especially at the local level. There has got to be an easy answer in education folks on candidates, without th
Re:This could be good (Score:2)
Re:This could be good (Score:5, Insightful)
People who don't care enough to vote don't care enough to be informed. Pointing at "voter apathy" and claiming it's the problem is extremely short sighted. Voter apathy is a symptom, not the cause. Making voting easier to get better turnout is just going to ensure that more uninformed people are going to vote. I can't see how this is a good thing. Make people care about the issues and they'll find the way to the polls all by themselves.
Re:This could be good (Score:2, Interesting)
Well, there are two points that have to be made when it comes to internet voting:
1) Only middle class and higher will be able to easily use this system (have internet connections). The very poor will have to wait in line and vote the oldfashioned way, or wait in line for access to the public library PC (if they have a library with connections nearby - think ghettos). The poorest peoples have the exact same right to vote, and making it effortless for those "with" money, and still laborous for those "witho
Re:This could be good (Score:2)
Is that good? No, this is not a troll. I always thought that higher turnout is, by nature, good. But after reading it, I got to thinking...
People at the bottom turn out much better than people at the top. Thats because if you are at the bottom you want to fight, but, if you are already a winner, you get lazy. That seems to me to keep improving the situation of those at the bottom (in theory, anyway).
Now, lets say that we g
Re:This could be good (Score:3, Funny)
I would love to be able to vote from the comfort of your home/work/cafe, too. At the moment I think that will be easiest to do with a worm that infects your computer to make a man-in-the-middle attack possible, but we'll have to see Verisign's implementation before anyone works out the actual details. Fortunately for people who are tired of that "one man, one vote" nonsense, it's impossible for
Re:This could be good (Score:2, Insightful)
And, of course, you don't have to worry about someone in power monitoring the way you vote at your home/work/cafe...
One of the nice things about polling places is the effort the staff goes through to prevent "voting by intimidation". Those protections are not available at your home/work/cafe.
Or it could be VERY BAD (Score:2)
If you can vote from the comfort of your home, there's nothing to stop thugs from showing up at your home and asking you politely to vote for the candidate of their choice (and you get to keep your fingers unbroken in the bargain).
If you can vote from your office desktop, there's nothing to stop your super
what about.. (Score:3, Insightful)
last vote less than 50% or something voted
what about fixing that problem first?
geez..
Re:what about.. (Score:2)
The difference is that people who are stationed overseas want to vote, and typically do so in larger proportions than the continental American population. And how would you propose "making" people vote in the first place? No, it's better to spend effort where people are asking for the expenditure.
Re:what about.. (Score:2, Insightful)
Not voting is as much a right as voting. The fact that the US has dismal voter turnout only indicates to me that the general population feels disenfranchised and powerless.
The only way to get more people to vote is to make them feel empowered, and that should be the real goal. Higher voter turnout, then, would merely be a nice side-effect.
Re:what about.. (Score:3, Insightful)
Bigger is better (Score:3, Interesting)
If a majority of eligible voters actually voted, would we even be bothering with all this crap about electronic voting?
Be patriotic, and love Verisign (Score:3, Funny)
We have to love them them now. Put sitefinder behind us. Verisign is an American company helping America.
IF we complain about sitefinder being an abuse of power... the terrorists win.
BTW: heard those servers are going to be powered by SCO software
[/sarcasm]
Re:Be patriotic, and love Verisign (Score:2)
I haven't closed a sarcasm tag since 1991...
I could see (Score:3, Funny)
User error (Score:3, Troll)
Re:User error (Score:2)
actually an improvement (Score:4, Interesting)
On the security side, I hope that VeriSign avoids Diebold's mistake (with electronic voting machines, which is different from Internet voting) and makes the source code and security procedures public for scrutiny.
Re:actually an improvement (Score:2)
hah! wow, yeah, i'll be over here holding my breath for that one. right up until my lungs collapse.
until the government decides to care and force these systems to be open, they will not be. christ, maryland even got an independent review telling them how much of a piece of shit the Diebold sy
uhm (Score:3, Insightful)
This just in.... (Score:2)
So let me get this straight... (Score:3, Insightful)
I smell an oxymoron here! (Score:2)
Another profitable revenue stream! (Score:2, Insightful)
"Verisign will in no circumstances share your personal or voting information with 3rd parties."
now reads:
"In some cases, Verisign may share personal and voting information on customers with Verisign
With their new CanidateFinder service... (Score:3, Funny)
I guess it doesn't really matter though. Now your vote is just as unreliable as the canidates.
In other news .... (Score:2)
Solve the low-tech problem? (Score:2)
My concern is that a lot of votes might be coerced when people fill out a ballot (internet or otherwise) in private, where it is not guarenteed to be secret who you vote for. The more of these votes there are, the more the system is undermined.
Thoughts?
Re:Solve the low-tech problem? (Score:2)
Thoughts?
Sorry, this is Slashdot - you must be confusing us with someone else.
I want to see no part of this. (Score:3, Interesting)
The sooner we slay this beast, the better.... With that said, I recently found out about a heck of a deal "Everyone's Internet" is running: "$25 SSL certificates" [rackshack.net]. It's obvious that as a reseller for GeoTrust and as a webspace provider for small biz, they know that a ton of Mom & Pop shops that would jump at one of these in a second, even if profits from online sales were small, because a "secure order" page is great for their image.
On the other side, I've been using GoDaddy for years.
Down with Verisign.... We don't need you anymore.
Only in limited cases... (Score:5, Insightful)
Internet voting on a large scale will never take place due to logistical [for lack of a better word] rather than technical reasons. Electoral law requires that your vote be made in a manner that is free from influence (intimidation or vote buying). This is controlled by ensuring that voting goes on in select locations where campaigning is not permitted. Even campaign posters within sight of a voting station must be taken down.
With Internet voting, essentially anyplace could be a voting station. I could set up a little voting party for my friends and let them vote on my computer. Don't mind that there is paraphernalia all around for my candidate, or that I'm looking over your shoulder. After the party, laptop and cell in hand, I could help all the little old ladies in my neighborhood vote too.
[Your sig here]
Why do we need electronic voting ? (Score:3, Funny)
...courts in Florida appoint our Presidents, don't they ?
free -project.org (Score:4, Informative)
Even better, if Verisign running your elections worries you, why not see if you can help the project. With a secure, trusted and freely available alternative, Verisign will find it more difficult to convince audit committees that their software is the best option.
I just don't get it. (Score:4, Informative)
This company has a proven track record of bad security, unethical behaviour, and well.. I just don't get it, they are the main "TTP" of the web, and yet aren't worth anyone's trust really, then a Domain controller that abused it's power as such, and now they are going to run elections for Americans...
*/me shakes head in total astonishment*
Well... G'luck to ya guys. Here's hoping for once they'll maintain their ethics. (Or assign the project to Dilbert (for those who've seen that episode of Dilbert TV.
Something is needed to get people to vote (Score:3, Interesting)
This is a huge problem for a democracy IMHO. Considering we've fought 2 world wars for the right to determine who governs us, it's pathetic that a majority of people cannot be bothered to get off their arses and vote.
However, I have a confession. I'm one of the majority and ashamed of it. I always intend to vote, but when the time comes I always seem to have something important to do instead. If we had an easy electronic voting system then I for one would always cast my vote.
OTOH Do we really want to encourage EVERYONE to cast a vote? If there was no effort involved (like actually having to travel to vote) then would we be encouraging people with no real political views to vote 'just because they can' Maybe then the result of the election would be decided by the lazy jobless who had nothing better to do than vote?
Re:Something is needed to get people to vote (Score:2)
For example: current voting systems only allow a "Yes" vote. By voting you say "Yes" to a candidate.
My suggestion is: if you are able to say "No" then perhaps more people would vote. A No vote = -1. A Yes vote = +1.
Then you could have candidates winning the election but with a net _negative_ score.
I like to see such a can
Outsourcing Security and Voting (Score:5, Informative)
Now I RTFA and I understand this is for military absentee ballots. But this will set precedence. Who will get the job next year? Don't you think the standards applied here will eventually be used for absentee ballots for State Department personnel? And then eventually the general public?
If the government is not capable on its own of running a fully electronic election, then they should not be doing it. Period. Forget the cost of alternative systems or even the impossibility. If the DOD cannot handle this internally (they should, they handle billions of dollars of secrets) then I think it is a step to far to outsource it.
"The sanctity of the vote can't be compromised nor can the integrity of the system be compromised"
Doesn't that line make you feel worried. At least they could say,"we have the best security and experience." But no, "the integrity of the system [can't] be compromised."
Re:Outsourcing Security and Voting (Score:2)
Maybe I've had my tinfoil hat off for too long...but I actually construed this as the goal they were working towards, i.e. "We want to make sure that the sanctity of the vote can't be compromised". IMHO, that's a worthy goal to shoot for,
The nontechnological concern... (Score:3, Insightful)
By making it brainlessly easy for someone to vote, are we not making it so the voter does not have to plan to vote. And if a person doesn't plan to vote, how informed is their choice going to be?
Many states have already implemented "motor voter" systems where folks don't even have to explicitly register to vote -- it's just attached to their drivers license registration. Literacy tests & poll taxes -- once of which helps ensure that the voter can read the ballot & the other further forces voters to plan to vote -- were thrown out long ago as infringements on the civil rights of unschooled procrastinators.
I believe whole-heartedly that the political establishment of the United States does not want voters to be informed or to pre-plan the act of voting. The reasons for this ought to be self-evident to those of us who are capable of reading a ballot or planning our activities more than 10 minutes into the future.
Turning briefly to "secure" online voting (so this comment stays "on topic"), maybe the Verisign system couldn't be decrypted but it would be very possible for a determined attacker to simply mangle the packets so the votes wouldn't count.
"trusted voting site"? (Score:2)
I'm voting by mail (Score:5, Informative)
I certainly don't trust Verisign. I think the first few elections using this technology should be limited to say, a few thousand votes so as not to have a significant impact on the results (of course, given what happened in Florida, a few thousand votes might have a significant impact). Maybe it would be even better to run the electronic voting at the same time, requiring mail-in ballots and compare the results and not count the electronic voting until it's proven itself. Mail-in ballots aren't anonymous votes, so it should be easy enough to compare.
Even then, I don't know that that would work. I'd eventually like to see secure internet voting, but I'm just not sure the implementations are there yet.
Re:I'm voting by mail (Score:2)
I'm sure some statistical analysis can account for the few people that do that. But I don't think you'd see a general trend in that direction. I mean, what purpose would it serve? I know there are the few that would do it just to screw with the system, but I doubt that would be a serious trend.
And if you screw up... (Score:3, Funny)
votefinder (Score:2)
"We didn't find: Democrat"
Perhaps you meant Republican.
Votefinder (Score:2)
Wildcard Voting (Score:2)
Looks like bush will be in office another term
SiteFinder equivalent... (Score:2)
I'm sure that by 2008, the CEO of Verisign will take a four-year sabbatical to hold office as the President of the United States. This administration will, among other things, abolish ICANN, IETF, IANA, etc. and simply hand all Internet authority over to Verisign.
votefinder.verisign.com (Score:2, Funny)
There is no political party at this address.
Did you mean?
We did find these similar political parties.
The Republican Party
Re:Aren't they obligated then... (Score:2, Insightful)
Re:Aren't they obligated then... (Score:2)
Re:Hmm...so what does an SSL certificate cost? (Score:2)
Postal ballot (Score:2)
My other option here in the UK is a proxy vote whereby I designate someone to place my vote for me. This sort of get's rid of the secret part of a secret ballot to me so I've never looked into
Re:fundamentally flawed (Score:2)
However, letting Verisign get involved is fundamentally flawed. Verisign are a bunch who have time and time again proven they can't be trusted to do the right thing.
There's probably a good reason why the current Gov is pushing for flawed electronic voting designs.
You guys better wake up.