Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
×
United States Security

Pentagon Cancels Internet Voting System 350

Ben B writes "The Pentagon won't use an Internet voting system for overseas U.S. citizens this fall because of concerns about its security, an official said Thursday. The official, who requested anonymity, said Deputy Defense Secretary Paul Wolfowitz made the decision to scrap the system because Pentagon officials were not certain they could 'assure the legitimacy of votes that would be cast.' Computer security experts who last month reviewed the Secure Electronic Registration and Voting Experiment, or SERVE, had urged the Pentagon to scrap the system, saying it was too vulnerable."
This discussion has been archived. No new comments can be posted.

Pentagon Cancels Internet Voting System

Comments Filter:
  • by barenaked ( 711701 ) on Thursday February 05, 2004 @08:48PM (#8196608)
    I question the whole premise of using the internet in the voting process. The flaws are unsolvable because they are fundamental to the architecture of the internet. Using a voting system based upon the internet poses a serious and unacceptable risk for election fraud. It is simply not secure enough for something as serious as the election of a government official. The report recommends that the Serve project be shut down and nothing like it be tried until "both the internet and the world's home computer infrastructure have been fundamentally redesigned, or some other unforeseen security breakthroughs appear." With which I wholeheartedly agree
    • by Rotten168 ( 104565 ) on Thursday February 05, 2004 @08:53PM (#8196672) Homepage
      Well, the Pentagon considered the implication that worldwide "hackers" could alter the outcome of the election. And seeing as how popular GWB is worldwide, their decision was wise.
      • by MikeXpop ( 614167 ) <mike AT redcrowbar DOT com> on Thursday February 05, 2004 @10:46PM (#8197581) Journal
        Ever watch the old Dilbert cartoons that used to be on UPN? There was an episode called "Ethics" where Dilbert was assigned the task of building the internet voting system, and how he dealt with the thought of creating a back door for himself or not. In the end, he decided not to, but some h4x0rs got in anyway and added the candidate "Harry McButtcrack" (or some similar name, I forget) as a joke. The american public voted for him.

        But hey, it could have been worse. They could have voted for Bush.
    • I disagree. You can solve all manner of these types of problems using certificates with high encryption strength.

      BTM
      • by El ( 94934 ) on Thursday February 05, 2004 @08:56PM (#8196710)
        Unless you assume that the machine doing the encryption has already been compromised.
        • by TyrranzzX ( 617713 ) on Thursday February 05, 2004 @09:44PM (#8197138) Journal
          Use a p2p system, there's no centralized point under control by anyone. Just one secure, open source model that gets implemented and is hard to hack. Plus, with paper ballots, and that kind of a system where the votes are tallied by thousands of voting machines, anyone can check the votes in their area without a problem. Use good encryption, trustable maintainers and goverment certification, and you've got a strong basis for something most techies would trust.
          • As El so elegantly stated, Unless you assume that the machine doing the encryption has already been compromised.

            The problem is if I root your computer and thn you register to vote, I simply block your vote from leaving your computer, fabricate my own packets and send them along. you'll never know because voting methods require that they can't be traced back to you. If someone can prove that you voted for a certain candidate then people will start being paid to vote for certain candidates As long as you
        • Well, I say if amazon can pull it off charging millions of folks securely over this magic internet, there should be no `technical' reason not to have voting online.

          The system just has to be designed `right'. With possibly 10 different open source implementations (implemented by different teams/companies) working as one... (have the client machine talk to 10 different gov servers at the same time - each running it's own implementation), and their results compared. If any one of them is not `correct', then t
      • by MillionthMonkey ( 240664 ) on Thursday February 05, 2004 @11:18PM (#8197778)
        You can solve all manner of these types of problems using certificates with high encryption strength.

        No you can't. People concentrate on encryption strength as if that's everything. It's like the height of a wall. Doubling it doesn't help if people can walk around the wall. The key length is only one of many vulnerabilities in a system. Think of all the computer security breaches you've heard about. How many happened because an attacker succeeded in brute forcing a key? As opposed to, say, using an easily guessed default password? Unless you're using DES, or crappy exportable encryption, brute forced keyspaces are probably not how you will go down.

        What you have here is something that is pretending to be a solution to a problem that is pretending to be a solution in search of a problem. There are really two problems here- the one you are addressing (short key length), and a more fundamental one, which is that there is no reason for we the voting public to be hearing the words "Internet" and "voting" in the same sentence at all, nor is there any reason why we should have to assume a collective responsibility for safeguarding our own votes in this election process when we weren't even the ones who had anything to gain from endangering the democratic process in the first place.
      • I disagree. You can solve all manner of these types of problems using certificates with high encryption strength.

        But not the confidence problem.

        The problem with SERVE is that it got caught in the crossfire from the Diebold issue. It is an easier target in some ways because people are used to ATMs, they are less used to the Internet.

        There is a big difference in the two problems, with Internet voting it is much easier to perform one off frauds that afftect single votes. You can trojan a machine if you k

      • by Gorimek ( 61128 ) on Friday February 06, 2004 @04:27AM (#8199178) Homepage
        One fundamental flaw with Internet voting is that there is no way to verify that the voter does not have a gun held to his head while voting, or is subject to some other pressure.

        Only by having the voter go in alone in a booth to vote out of sight of everyone else can that be assured.
    • by osewa77 ( 603622 ) <naijasms@NOspaM.gmail.com> on Thursday February 05, 2004 @08:57PM (#8196728) Homepage
      High security can always be layered on top of the 'unreliable' internet as it is; the problem is that the stock software has so many easily exploited loopholes (trojans? keyword capture? windows exploits?) that it would introduce messy, situations, which would not help the current government's bid for the next elections (better safe than sorry?)
    • by gewalker ( 57809 ) <Gary.Walker@Astr a D i g i tal.com> on Thursday February 05, 2004 @09:05PM (#8196818)
      In Florida they had a big fiasco. They tried to fix it by recounting the PAPER ballots repeatedly. This did not make anyone too happy either. George W. won all of the recounts, including ones done by the independent press, but lots of people still argue a fix was on, Bush stole the election, etc. -- Note:, I'm not arguing that Bush did or did not steal the election, or if he would be the first that had if he did -- I'm focusing on the controversy surrounding it to the day.

      How in the world would the U.S. react if you could reasonably argue that the system could have been hacked, etc. -- Strikes me that this would be a very chaotic result.

      The Internet based system does not and probably cannot have a useful audit trail that is equivalent to the paper ballots.
      Foreign nationals are certainly limited in their voting flexibility and I think the Pentagon was trying to incorporate them betting in the voting process. Is there not a reasonable compromise that would meets the needs of voters and voting integrity?
      • by MuParadigm ( 687680 ) <jgabriel66@yahoo.com> on Thursday February 05, 2004 @09:53PM (#8197197) Homepage Journal

        "...George W. won all of the recounts, including ones done by the independent press..."

        Actually, not to get into the argument of whether there was a fix or not, but the independent press tally came up with different winners, depending on how the vote was counted.

        Ironically, using the counting method that the Democrats recommended would have resulted in a Bush victory, and using the counting method advocated by the Republicans would have resulted in a Gore victory.

        But then the Supreme Court stepped in at the Republicans request, called off the recounts, and gave the victory to Bush. So the proper counting method for the recounts became a moot issue.

        • by Anonymous Cowtard ( 573891 ) on Thursday February 05, 2004 @10:21PM (#8197375)
          But then the Supreme Court stepped in at the Republicans request

          Yeah... after the Democrats took it to the courts to begin with.

          Neither party's hands are clean in the whole fiasco.
          • by Free_Meson ( 706323 ) on Thursday February 05, 2004 @11:29PM (#8197840)
            But then the Supreme Court stepped in at the Republicans request

            Yeah... after the Democrats took it to the courts to begin with.

            Neither party's hands are clean in the whole fiasco.


            I hope you aren't saying that it was somehow wrong to take that election to court. That's the reason we have courts -- when everything else breaks down, they are the final arbiters of right and wrong. They are the referees that determine which rules are just and how they should be interpreted and enforced. You can't have a truly democratic system without a powerful court because those abused by the tyranny of the majority have no recourse. As for the case of Gore v. Bush, it looks like the court failed. It didn't fail because Bush won (though I would have prefered Gore), it failed because in a situation that needed a conclusive end it rendered the worst possible verdict for the sanctity of democracy in the United States. They said that a recount should happen, but becuase of an artificial deadline ~50 days before the winner would take office and less than a day after the decision, a full recount requiring less than a week would just be too inconvenient to endure. The case should have been about how to count the votes, with the democrats arguing one way and the republicans arguing another. Instead, the republican council argued that there should be no recount at all... As a litigation tactic, this was good -- if you won the first count, argue against any subsequent recounts. As it concerns the country, though, this was a horrible argument, and a less radical court would have seen the importance of deciding the election with a universal standard of fairness rather than doing what it did. The Gore v. Bush decision may have been the single worst supreme court decision since the Dred Scott v. Sanford decision, but at least in Scott the court had a sound legal principle to support its decision.

            Anyway, I can't believe you're claiming the democrats should somehow be blamed or tarnished for seeking a recount in an election where equal protection had obviously been violated. The fact that such a request even made it into a court should tell you that the republican party, at least at the time, cared more about being in power than it cared about the democratic nature of the united states or its constitution.

            • "I hope you aren't saying that it was somehow wrong to take that election to court. That's the reason we have courts -- when everything else breaks down, they are the final arbiters of right and wrong."

              Well, there is a Constitutional process documented, yes, right there in the Constitution, that throws the election into the House and Senate in the event of a contested slate of electoral votes from any particular state.

              If your going by the Constitution, the recount should have proceeded and, since whicheve
            • That's the reason we have courts--when everything else breaks down, they are the final arbiters of right and wrong.

              No, that's why we have the military--they're the final arbiter when everything else breaks down. Fortunately, it has only once gotten to that point, and hopefully it never will again. The courts are the last peaceful recourse, but there are others available.

      • Actually several recounts showed Gore winning. The really foolish thing the Dems did was insist on certain precients being recounted and that count ended up showing Bush winning anyway, if they had selected a different set of precients or *all* precients they could have shown Gore winning. That pretty much made them look really stupid and lost their argument for anybody (like me) who didn't really care (personally I think something is wrong with our system that the two candidates can so exactly center thems
        • IMHO, what made things look really stupid was the voters who can't handle a simple punch ballet. In the past, we used them in Washington State, and it wasn't rocket science -- punch the ballot completely, pull out of machine, make sure all the punches are clean, put ballot in box. If you can't handle that, I argue that you're too clueless to vote.

          If you're going to allow the "divining the voter's intent" game (that is, try to detect hanging/dimpled chads) as Florida did, and the number of ballot that need
          • I think there is a flaw in the system. In effect if you plot the platforms of Gore and Bush on the entire political opinion spectrum, you would get something like this:

            LEFT------GB------RIGHT

            Most people when they think about politics expect it to maybe be more like this (showing a case where Bush would win):

            LEFT---G----B-----RIGHT

            The actual result is the same as very simple economic theories such as "where to put your resturant along the road to compete with other resturants". They all end up clustered
            • Not that I have any idea what the solution is. Possibly approval voting would fix this (where you can vote for more than one candidate).

              we have that in Australia. It leads to the profound uglyness called preference deals where the Pro-life/anti-union/aspirational voter people walk up to the black/gay/dredlocked/pro-healthcare/greenie/anti- w ar people and say "I'll put you as number two on my 'how to vote guide' if you put me as number two on yours, but if you say no deal I'll put the White Supremecist/Ul
      • The reason the recount was so confused in Florida was the lack of rules for the recount. The Florida legislature never took the time or effort required to lay out what counted and what didn't. Specifically, they did not include the common mandate "The intent of the voter should take precedence over all other issues."

        This mandate is spelled out clearly in most states (ironically, including Texas) and makes perfect sense. For a real world example, a ballot is issued with the holes misaligned. Just lookin
    • Old ways (Score:4, Funny)

      by t0ny ( 590331 ) on Thursday February 05, 2004 @09:34PM (#8197068)
      I guess they will just have to go back to the old method of giving your absentee ballot to your local alderman.
  • It's bad enough that the internet was going to be used to count votes outside the country. How much worse would it be with all those illegals voting online here inside the U.S. borders?
    • by Ungrounded Lightning ( 62228 ) on Thursday February 05, 2004 @09:57PM (#8197222) Journal
      It's bad enough that the internet was going to be used to count votes outside the country. How much worse would it be with all those illegals voting online here inside the U.S. borders?

      They do that already.

      With motor-voter you can crank out as many registrations as you want. (There's an illegal immigrant on my street who brags about how he goes from precinct to precinct on election day and shows off his >20 registrations. His reaction to questions about whether this is right: "They don't care. If they cared they'd do something to check.")

      Don't expect any respect for law from people who grew up in a country where the government is totally corrupt (let alone the subset that then broke OUR laws to even BE here, rather than going through proper channels.) It's not their fault they grew up in that environment. But now that their opinions are formed you'll need to do more than set an example, if you want to get their attention and change their behavior. And you're not going to do that while it's ILLEGAL to review their elegibility, or even check their ID.

      (Now think about how the "drug war" and the 55 MPH speed limit have similarly affected the Boomer generation's respect for law and established institutions.)

      Think it's hard? Think they do any checking? Heck. *I*ve been double-registered twice in the last few years. (Changed my party affiliation - which is done on the same form - and had my name typoed and the form misprocessed as a new registration. I STILL get double jury-duty notices from the last instance.)

      To motor-voter add no-excuse absentee ballots. Now anyone can:
      - pick up a stack of forms in any government office,
      - crank out fake voters as fast as he can fill them out and drop them in a mailbox,
      - file for absentee voting as fast as he can check a box on the registration notice postcards and drop THOSE in a mailbox, and
      - never have to show his face at a polling place.

      There was one address in Berkeley that had over 4,000 absentee ballots in a recent election. (Tried to claim that they were a mail drop for some street people. 4,000 of em? Yeah, right!)

      Then there are the ballot boxes that are found floating in the San Francisco Bay when there's an election in San Francisco.

      And cheating on mechanical and electronic vote-counting, without audit trails, is nothing new. You've all heard about Diebold's touchscreens. But the vote counting a few decades back was done on minicomputers, by proprietary software, where you could pause the program and tweak a register from the front panel switches (and election officials were sometimes seen to do that).

      Even mechanical voting machines had opportunities for cheating: It was common to find little stickers in the bottom with "0000" on them - the trace of a voting scam. The wheels would be set to a non-zero value and covered with a sticker. Lock the machine, let the official certify it's zeroed, put it into service. One vote for the stickered candidates knocks the stickers off.

      Internet voting isn't necessary for election corruption. It just simplifies automating it.

      • You said:
        With motor-voter you can crank out as many registrations as you want. (There's an illegal immigrant on my street who brags about how he goes from precinct to precinct on election day and shows off his >20 registrations. His reaction to questions about whether this is right: "They don't care. If they cared they'd do something to check.")

        This sounds like some Rush Limbaugh FOAF. It doesn't make sense. An illegal immigrant got twenty licenses? From your state DMV? With 20 different addresses?
  • by MrRTFM ( 740877 ) on Thursday February 05, 2004 @08:51PM (#8196649) Journal
    If this 'internet' is so insecure , why are the big corps. trusting it to transfer billions of dollars around.

    I must be missing something - this is technically feasible, they are just doing it the wrong way.
    • by Rufus88 ( 748752 ) on Thursday February 05, 2004 @08:57PM (#8196719)
      Because they have a way of verifying after the fact that their transactions occurred as they should, in case they suspect fraud. With internet voting, you can't. In fact, regardless of the voting mechanism, it's important that you not be able to verify that your individual vote was recorded properly, because that would imply being able to prove who you voted for, which would permit vote-selling and make people susceptable to vote-extortion.
      • It could be done with cryptographic hashes, whereby the hash of a phrase you give the voting machine is placed in a list. You can check to make sure "Skinner Sucks" is on the list, while those not knowing your phrase can't trace anything back to you for vote-extortion.

        I'd rather risk extortion than have my vote stolen. Are you listening, DIEBOLD?
    • by stratjakt ( 596332 ) on Thursday February 05, 2004 @09:12PM (#8196895) Journal
      Banks are insured. Elections aren't.
    • by zeugma-amp ( 139862 ) on Thursday February 05, 2004 @09:14PM (#8196914) Homepage

      Yes. You are missing something. The fundamental problem with internet voting is that it needs to be able to assure three things:

      First, that the person voting is eligible to vote. This is not too hard to do. We know how to verify identity, though there are a few issues with this that are not present in a financial relationship.

      Second, that the person's vote is anonymous. Anonymous voting is trivially implmented. There is a problem when you combine the above verification requirement with the need to keep a given person's vote secret.

      Third, that the election be auditable. THere was yeling and finger-pointing in the last American presidential election. Could you imagine what it would be like if votes just suddenly marterialized out of the ether with no way to audit them?

      Combine all three of the above requirements and you have a very tough problem at hand. We don't want to be able to have some political hack analyze the raw vote data and b able to say "Joe Blow voted for candidate X, as this could, for various reasons result in repercussions of one kind or another on Joe, thus allowing others to intimidate his vote.

      This is one reason why I really dislike mail-in ballots. Mail ballots allow an agent of Party y to hand an absentee ballot to Joe, make sure he marks for the 'correct' candidate, and then mail it in, assured of the vote rendered. It is a also a sitation custom made for fraud on a massive scale. With in-person voting, party X can pay Joe $5 dollars to vote, but when Joe deposits the ballot in the box, there is no way to guarantee that Joe voted "correctly".

      Now, there some bright fellows have proposed cryptographic protocols that solve the problems mentioned above. Unfortunately, you are dealing with an electorate too stupid to figure out how to punch holes in a ballot reliably. The Protocols for secure, anonymous internet voting are far too complex to ever be used in the real world.

      • by Kris_J ( 10111 ) * on Thursday February 05, 2004 @09:53PM (#8197195) Homepage Journal
        Second, that the person's vote is anonymous. Anonymous voting is trivially implmented. There is a problem when you combine the above verification requirement with the need to keep a given person's vote secret.
        Let's lose this then. Personally, I believe that I should be able to ask the system afterwards what it believed my vote was. Obviously this is impossible if it's been anonymized.

        Mind you, I also believe Internet voting should be used to allow people to vote on the issues throughout the year, assign proxy votes and basically allow democracy to be dynamic -- rather than this thing we have currently where you're stuck with some arsehole for four years and have no way to affect decisions on issues you actually care about.

      • by MrRTFM ( 740877 ) on Thursday February 05, 2004 @10:26PM (#8197415) Journal
        Current paper voting could easily be tracked - you go up and get your name ticked off a role, and if they wanted, I'm sure they could hand me a marked ballot paper, or something. It is simply a matter of trust.

        With the internet voting system there is that same critical step - after it verifies you and it assigns you that highly encrypted 'pass for one vote', you then trust the system to keep your details private (maybe with a 2nd key that only you know).

        It's the same thing - you have to trust the system for *any* type of voting to work.

    • Because you dont have to maintain anonymity in those transfers, in fact, exactly the opposite you identify both parties with rigor. In voting you have to verify the identity of the voter with some certainty, but then switch to a mode where the actual vote they cast can not be associated with the specific voter. Very hard to do on the Internet. You also still have to make sure the integrity of this anonymous vote is retained and can be recounted. It is an ideal application for pieces of paper and a box.

      I
  • by El ( 94934 ) on Thursday February 05, 2004 @08:53PM (#8196660)
    Couldn't they just require every voter to encrypt and sign their vote with a unique PGP key? Or are they assuming voters are too stupid to do this?
    • by Anonymous Coward on Thursday February 05, 2004 @08:55PM (#8196693)
      Couldn't they just require every voter to encrypt and sign their vote with a unique PGP key?

      OMG! You solved the problem! And in one sentence too! Could you tackle spam next? Thanks.
      • by El ( 94934 ) on Thursday February 05, 2004 @09:05PM (#8196819)
        Actually, I do have a partial solution to spam, but in involves changing the email protocol to require the SENDER to store the email, rather than the receiver. The current protocol was devised in uucp days, when it was common to store-and-forward email over several dial-up hops to it's destination. These days, everybody that has an email server also has a web server. If you sent only a URL and (optional) encryption/access key via the old protcol, then retrieved the rest of the message from the URL, this would elimate spoofing and put more of the burden on the sender and less on the receiver. It would also be more efficient -- currently, if I send the exact same message to 100 people, it uses up 100 times the size of the message in disk space on the receiver's servers. But if was stored on the sender's server, it could use the same copy for everybody! Yes, there is some additional overhead to track whether specific addressees have downloaded the message and determine when to delete it, but I think with some work it could be turned into a useful system -- certainly an improvement over the current system.
        • Hmm, I have a partial solution for spam too. However, it relies heavily on the invention of teleportation and time travel. I am sort of waiting on that before putting much more work into it.

        • If the spammer BCC's the one email to millions of people, his server only needs to host that one spam, not millions.
          • by El ( 94934 )
            Yes, but then you know which ISP to complain to (or which server to DoS), don't you? Also, that identical copy is going to get added to Spam filters pretty quickly; spammers now try to send DIFFERENT emails to every recipient to get around spam filters. And, if the URL in invalid (e.g. because the server has been shut down due to complaints) then your email reader can discard the header for you, and you never have to even know it was there.
    • by grasshoppa ( 657393 ) * on Thursday February 05, 2004 @08:57PM (#8196727) Homepage
      Or are they assuming voters are too stupid to do this?

      Christ, wouldn't you? Your average user has problems when they get those nasty letters from MAILER-DAEMON, and some ( my mother ) even get offended that they use such a vile name ( deamon ).

      So no, we are not ready, technically or socially, for internet voting.
  • Aww (Score:3, Funny)

    by goon america ( 536413 ) on Thursday February 05, 2004 @08:53PM (#8196664) Homepage Journal
    But my "Internet Vote Accelerator" spyware would've made me trillions richer!
  • by The I Shing ( 700142 ) * on Thursday February 05, 2004 @08:53PM (#8196665) Journal
    I'm not a security expert, but voting on the internet strikes me as being about as secure as locking up your bicycle with twist-ties.

    I'm glad they've dropped this idea.
  • by Flexagon ( 740643 ) on Thursday February 05, 2004 @08:57PM (#8196726)

    This more complete article [yahoo.com] has a quote that suggests this issue really isn't closed after all:

    Wolfowitz's memo, written to David Chu, under secretary of defense for personnel and readiness, allows the Pentagon to continue work already in progress to look into "other technical applications for voting on the Internet or electronically," the defense official said.

    "The door is still open to other methods. It's just that the SERVE we have decided not to use," he said.

  • Big problem (Score:5, Interesting)

    by Mieckowski ( 741243 ) <mieckowski@@@berkeley...edu> on Thursday February 05, 2004 @08:58PM (#8196735)
    The projects home page states that it "will let eligible U.S. citizens vote from any Windows-based computer with Internet access" WHAT? Making it harder for linux users to vote? (and as a result having less of them represented) Supporting Microsoft?

    I don't see how this got so far already.
  • by fnord123 ( 748158 ) * on Thursday February 05, 2004 @08:58PM (#8196738)
    I look forward to the day that electronic voting comes in as long as it provides a some means of of doing verification, because I do not trust my goverment (that includes both the Demopublicans and the Republicrats) enough to trust their vote counting today even without electronic voting coming into it.

    Today I drop my ballot in the mailbox (I live in a mail-in ballot state) and just have to trust everything is on the up and up from there.

    What I would like instead is to have every voter to get a receipt when they vote, that uniquely identifies their precinct and vote, and shows a unique number for that vote/voter combo. Something like:

    Vote #: 54353654354 Precinct: 58 Voted for: Mickey Mouse (or whoever)

    Then I'd like those all those numbers published somewhere after every election so that anybody can download it. Note that my vote is still anonymous, nobody knows who vote 54353654354 is because of the nature of one way functions.

    Any voter could go look at the published list to see that their vote was counted correctly. If it was counted incorrectly (I.e. the count showed my vote to be for Dopey instead of Mickey Mouse), then I could step forward with my biometric data to prove it. If enough people step forward, the election was clearly bogus and needs to be redone.

    Any voter could download the entire list and count the votes for themselves, at least minimizing the chances of large #s of votes appearing out of thin air in any particular precinct, and making counting of votes very clear and open to all to verify.

    Is it foolproof? Nope, but it is a lot more transparent process than we have today, where I have no visibility whatsoever into my vote being counted, what the real totals where, etc.

    • by demachina ( 71715 ) on Thursday February 05, 2004 @09:43PM (#8197125)
      This is NOT a viable approach nor is it anonymous. If you give each person a receipt and a number associating them with their vote, then someone who is either buying votes or intimidating voters can demand to see your receipt and verify how you voted.

      Nice try but its not acceptable.
    • Whats to stop people who voted for, say, a third party candidate like the green party to say their vote was "mistaken" if a republican candidate wins, so said perso could change their vote to the democratic party? Besides that, a very interesting idea.
      • Hmm - you have a point there :)

        Would probably need to factor in what the person voted as part of the nonce they got. I.e.:

        Nonce = hash (person's biomentric data + precinct + how they voted), perhaps signed with the private key of the voting machine.

        Probably not a good idea to network that voting machine, because that opens it up to cracking to get that private key - and it isn't really needed. Just have it spit out all the voting info (nonces + how they voted) after the election is done.

        Internet voting i

  • about time (Score:2, Interesting)

    by dkode ( 517172 )
    well i never thought I would see this happen.

    Considering all the snafu surrounding the Diebold screwups, I think it's a good thing that the pentagon is finally listening to common sense instead of possibly covering up another voting screwup.

    I'm from florida and the whole previous presidential election never sat well with me because of the morons we have down in south florida and the fact that we never really knew the truth about the actual voting results.
  • I think the system would have to be insecure but not because of the underlying infrastructure. Probably what they want is for the system not only to be secure, but to be also easy to use. For good measure, they'd probably want some eye candy too. These objectives are mutually incompatible. We don't need better technology, we need better users. People willing to give enough of a damn to learn about the machines they use instead of relying on "one click", "My this-and-that" and pretty pictures.
  • S.E.R.V.E (Score:4, Funny)

    by skzbass ( 719269 ) on Thursday February 05, 2004 @09:00PM (#8196768)
    SERVE another acronym brount to us by the people who concocted such obcenities as: US VISIT and US PATRIOT ACT. Who is this wonderful group you ask? why the Federal Acronym Reasearch Team (who mysteriously doesn't go by their acronym)
  • Good call (Score:3, Interesting)

    by savagedome ( 742194 ) on Thursday February 05, 2004 @09:00PM (#8196769)
    Internet voting presents far too many opportunities for hackers or even terrorists to interfere with fair and accurate voting, potentially in ways impossible to detect

    Not just hackers/terrorists but I am sure some tech savvy candidate might even go the length and 'hire' someone to do it for him/her. That would give a whole new meaning to the term *booth capturing*.

    I am glad Pentagon got it right before getting the system in place. Voting is not like the weather forecast. There is an 80% chance that we counted the votes right. No. We want to know the right tally. I can wait for the paper trail to be counted instead of electronic voting giving me the result instantly without 100% reliability.

    • I can wait for the paper trail to be counted instead of electronic voting giving me the result instantly without 100% reliability.

      This is a compelling argument in favour of the electronic system; however, hand-counting introduces a whole different problem because it requires hands, which are generally attached to people. And people are assholes.

      Since the Bush Vs. Gore in Florida issue has already come up many times, I'm going to use a different example: the Quebec sovereignity referendum in Canada duri

  • Secret ballots? (Score:4, Insightful)

    by Mieckowski ( 741243 ) <mieckowski@@@berkeley...edu> on Thursday February 05, 2004 @09:03PM (#8196798)
    If any computer can be used to vote, how are the ballots kept secret? If someone's vote is observed (and they might be pressured into this by husband/wife/friend etc...) I can easily see people avoiding voting for controversial canidates, or somebody who their friends oppose.
    • " If someone's vote is observed (and they might be pressured into this by husband/wife/friend etc...) I can easily see people avoiding voting for controversial canidates, or somebody who their friends oppose."

      See, thats why the porn star didn't win the California election.

    • Really why do you need a secret ballot, what are you hiding?

      When people design a new system without specifiying the requirements clearly, they always forget something important like this.
  • Thank G (Score:3, Insightful)

    by shubert1966 ( 739403 ) on Thursday February 05, 2004 @09:06PM (#8196843) Journal
    What the heck is with all Internet-this and internet-that. Why don't they just deploy closed LANs pre-configured with nothing more to configure that attaching cables and plugging them in.

    There is little to be gained by it anyway. Apathetic and lethargic Americans will still come up with some excuse not to vote.

    The money could better be spent berating these pinheads, or funding voter vans, or introducing legislation to take away privelliges from non-voters.

    I think most of us feel that online CC transactions are usually safe, but we take the chance because most of the time we don't get burned (save eBay). Our CCs usually have a loss-limit protection of $50.00. My vote is more precious than $50.00.

    Besides, if it was Internet-wired some politician would enact some crap legislation for last-minute pop-up adds that looked like OS dialog-boxes, thereby tricking hasty and myopic people into voting for the wrong candidate.
  • Good call (Score:5, Informative)

    by spun ( 1352 ) <loverevolutionary&yahoo,com> on Thursday February 05, 2004 @09:07PM (#8196844) Journal
    Not everyone in the US government is a nimrod or a thief. There are plenty of shady goings on, but no over-arching nefarious conspiracies. Certainly, it looks bad when most electronic voting companies donate to Republicans [google.com], get contracts from same, and then leave holes in their software, but I think the conspiracy ends at graft and cronyism, not deliberate vote fraud. The companies donate to the Republicans knowing they will get lucrative contracts. The security issues are a seperate problem.

    Electronic voting at polling places could be implemented securely, but it would be VERY difficult to make a secure voting system that meets all of our (US) requirements and runs over the Internet.
  • by Ulbrekt ( 661903 ) on Thursday February 05, 2004 @09:10PM (#8196870)
    I'm from Sweden and the idea to let the armed forces have anything to do with overseeing voting seems both ridiculous and dangerous. Thats how it used to work in Spain, Portugal and Greece (not to mention eastern Europe) not so long ago.
    • They're not involved in vote collection for civilians. What are are involved in is collecting the votes of members of the armed services. Given that they may be deployed overseas in hard to get at and possibly secret places, the Pentagon has to be involved in collecting votes somehow.
    • by caudron ( 466327 ) on Thursday February 05, 2004 @10:16PM (#8197338) Homepage
      the idea to let the armed forces have anything to do with overseeing voting seems both ridiculous and dangerous.

      The Pentagon has an interest in this because these votes are the overseas ballots for the men and women of the U.S. Armed Forces. The Pentagon's job is to make sure there is a reasonable way for their people to get a say in the government back home. They are not involved in the vote tally itself. This is just the Pentagon saying that this method is not acceptable to them. A legitimate and sane response, given the known security risks.
  • For once... (Score:2, Funny)

    by blueZhift ( 652272 )
    ...military intelligence is not an oxymoron!
  • Now if only we can get rid of the idea of spending taxpayer money domestically for fancy touch screens and computers, and return to good old foolproof (well, except maybe for the most foolish) making holes in paper or pulling a lever, we'll be all set, and maybe we can trust the voting system. Oh wait - you don't need to prove who you are when you register to vote. Never mind.
  • by Sam Nitzberg ( 242911 ) on Thursday February 05, 2004 @09:26PM (#8196995)
    There are going to be more stories and issues related to Internet voting - here, in the US, and abroad, ranging from small club functions being voted on, through governmental matters from local - to - larger levels...

    My concern is that any system be appropriately thought out, formally and precisely defined, using rigidly designed systems (not necessarily off-the-shelf), made to precisely and verifiably conduct voting tansactions, without being able to disclose, leak, or bleed any information that is not supposed to escape the system.

    The Johns Hopkins study is an excellent reference and resource on the issues that have to be addressed.

    I am personally interested in setting up a panel in New York in Mid-July (not much - just about an hour), but at an interesting venue. I am not offering funding, but there could be some visibility.

    I would welcome hearing from anyone who is doing interesting work in this area - in the US or overseas, that would be interested in participating on such a panel, to include related topics on technology-and-democracy.

    Sam Nitzberg
    sam@iamsam.com
    http://www.iamsam.com
  • How do banks manage with ATM cards and pin numbers?

    Not secure?

    Ever tried to hack into a bank?
    • bank of americas entire ATM network was comprimized by SQL slammer.

      Ever notice those stickers on banks saying "Insured by FDIC"? Ever see on on your ballot?

      Banks can plan for a potential hack, elections are more of a one shot deal.
  • by PineHall ( 206441 ) on Thursday February 05, 2004 @09:32PM (#8197056)
    I believe that the internet could be used to send the results from overseas military voting places. It would have to be encrypted and verifiable that no tapering took place, and there would be paper audit trail at the voting site that could be sent later. This would get the results in quicker.
  • by Anonymous Coward
    Internet voting system cancels YOU!
  • But... (Score:2, Funny)

    by Anonymous Coward
    I already voted 96,000 times...for NOTHING?!?
  • by Anonymous Coward on Thursday February 05, 2004 @10:16PM (#8197344)
    There is an analysis on the Unlimited Freedom [invisiblog.com] blog of how Trusted Computing (aka TCPA/Palladium) could solve the problems with Internet voting [invisiblog.com]. The idea is that the voting application could be protected from tampering from other software or the user himself. The secure I/O and sealed storage help as well. Once Trusted Computing technology is widespread then it may be time to take another look at voting on the net.
    • ...and it would also make it extremely easy for Big Brother to know exactly how you vote and to schedule you for your appointment at the Ministry of Love... all with utmost in security and efficiency.
  • by vonPoonBurGer ( 680105 ) on Thursday February 05, 2004 @10:27PM (#8197423)
    I'm sure many of you have seen this before, but in case you haven't, I like Cringely's take [pbs.org] on how to fix the voting system. Then again, since I'm a Canadian, my opinion is not without bias. But it certainly is nice to know who your new Prime Minister is the same day the ballots were cast! And hardly a computer involved, imagine that...
  • by foniksonik ( 573572 ) on Thursday February 05, 2004 @10:46PM (#8197580) Homepage Journal
    Back in the day people were ignorant and there were far fewer voters to persuade in order to determing an election by a) buying votes or b) forcibly compelling them.

    In the present day there are millions of voters and we have very good methods of criminal science and investigation to deter lawbreakers. (Now this may not be relevant to regional elections as the number of voters as well as imperative to dissuade criminal activities are lessened.)

    SO if someone did want to buy off an election how much would they have to spend to get even 2% of the vote? The CIA factboook says there are a little over 290 million people in the USA, around 60% of whom are of voting age... minus inelligibles, lets say 45% just to be safe, that's a little over 130 million people, lets say that 10% actually vote.. 13 million. 2% of that is 260,000 people for a presidential election. I don't know anyone who'd sell their vote for $10 but just for the hell of it... that would cost 2.6 million dollars to buy 2% of current voters. Now if you brought in all the non-voting but elligibles... the chances are greater that more people would sell their votes but the percent of total voters would change accordingly, meaning that the more voters there are, the less an individual vote counts, so it would take even more money to buy 2%.

    Granted that 2.6 million isn't a lot compared to how much the candidates or their parties spend already... but it is illegal, so they would have to somehow pay off that number of people for that large sum of money AND hide it all from the government, the people, the media, etc.

    This assumes that people would be willing to commit fraud a federal crime for $10 and risk going to federal prison for any number of years (I don't know the penalties).

    As far as extortion goes, extortion is a crime. How many lackeys are really willing to put pressure on people for this? Knowing that they personally can't possibly convince enough people to make a difference.

    The question is... do we really need an anonymous vote in the present day? SO what if your friend give you a hard time, you probably already tell them who you voted for anyways and already suffer the ridicule or whatever. We have anti-descrimination laws already on the books that could be extended to cover this as far as your job or any other official relationship is concerned.

    Why not have your vote tied to you? The biggest drawback I can see is that you'll open yourself up to election related spam and direct mail campaigns every 4 years.

    I'd like to hear about other real concerns and why we still need anonmous voting. bring it.

  • by midifarm ( 666278 ) on Thursday February 05, 2004 @11:08PM (#8197721) Homepage
    What in the HELL is the Pentagon doing deciding ANYTHING about our voting process? As far as I know the Pentagon is a division of the Department of Defense. What is the military doing making decisions for or about anything that a CITIZEN does? Beware folks, the "Wolf" is loose!

    Peace

  • by Quizo69 ( 659678 ) on Friday February 06, 2004 @06:14AM (#8199553) Homepage
    I've begun a political party here in Australia:

    www.neteffect.org.au

    with the intent of using the internet to allow members to vote on policy formation etc.

    I want to do this using open source software, whether we build it ourselves or not. Surely there exists a group of programmers out there who together can craft such a system?

    I think it could be one of the most important examples of how open source benefits the greater good if we could pull it off, and the flow on effects could be enormous since it would be open for anyone to use across the globe. I'm more than willing to make our political party site the home of it if you are interested.

    Come on Slashdot, if we as a group of geeks can't solve this problem, what hope is there that anyone else will?

    You are welcome to post in our forum about such a system, and download our Constitution which lays out the rules we plan for online voting, so please have a look at what we're hoping to accomplish and see if it can indeed be done successfully.

The Tao is like a glob pattern: used but never used up. It is like the extern void: filled with infinite possibilities.

Working...