Ask HN: Why do you trust electronic voting machines?
Anyone who frequents this site should know that in any electronic system with a microprocessor there are a million and one ways that data can be tampered with in the hardware, firmware, or software. Often times in USA it’s just a regular old sql database of some type storing the results on top a regular Linux/Windows computer. I think it’s obviously a huge scandal that “electronic voting machines” have been normalized in public consciousness. Whenever I tell people it’s ridiculous that electronic machines have taken over the paper ballot box im called crazy or paranoid. Wake up people! Electronic voting machines are a scam used to undermine your democracies.
The only way to fix the problem and restore faith in humanity is to scrap all electronic voting machines and go back to paper. (Or, how about an extremely simple electronic circuit, 2 buttons, printed in copper suspended in acrylic so anyone in the room can verify with their own eyes the circuit isn’t tampered with, as long as they can understand simple circuits. these circuits will be directly connected to a tabulator machine similarly implemented as a simple circuit located in a public room, suspended within acrylic, and with a visible copper connection to the voting booths, which would have extremely thin opaque walls for privacy but also ensuring that you can see it’s not being siphoned off. The open hardware folks can create the simplest most effective circuit that’s still easily be auditable by the human eye. )
48 comments
[ 3.0 ms ] story [ 92.7 ms ] threadMy main objection to electronic voting is about the general population's trust, and that it is increasingly easy to convince the losing party that the machine was compromised, whether or not it is.
A voting system needs to be understood by the majority, the layman, in order for trust in the electoral process to be maintained.
[1] https://news.ycombinator.com/item?id=32436338
[2] https://en.wikipedia.org/wiki/Booth_capturing
Notice that nearly every state requires voters to approve the paper copy of their vote.
The digital record is only used to speed up tabulation. In the case of recounts or contested elections, paper records are hand tabulated by humans (a recent example were the Arizona recounts for the 2020 election).
Where are you located that you didn't have a paper receipt you were asked to approve when you voted?
The first requires a high number of conspirators per votes faked. You will at best get a ratio of hundreds of votes per conspirator. The second only requires a handful of conspirators with good access to essentially overturn entire elections with leads of hundreds of thousands of votes.
And it's not even the electronic part that is the most crucial. The fact that a single election worker is officially in charge of the integrity of tens of thousands votes, only made possible with the assistance of the machine, is the real issue here. That machine could've been 100% OK but it's not designed to protect against the election worker - on the contrary, it's designed to give him oversized power.
All you need to realize the farce is just watch a video where a single person counts tens of thousands of votes, and see the officials response to the video is to admit that indeed that is what happened, but "the votes were legitimate". A single person isn't responsible for thousands of votes in a real democracy.
If you bothered to follow the link, you would see that most states require voters to review and sign their ballots.
Again, even if you tried to sneak a small amount of fraud into the system, would no one catch it?
Ballots are not signed. In my jurisdiction, if a voter signs their ballot it spoils the ballot.
NCSL links to (also excellent) Verified Voting, which is kept current. (D'oh. That would have saved me some research effort.)
https://verifiedvoting.org/verifier/#mode/navigate/map/ppEqu...
Note that Arizona does not use DREs and so does not have (or need) VVPAT. Instead, Arizona went with the much superior ballot marking device (BMD) for enfranchising disabled voters.
Come to Israel, watch our elections. You'll understand how real democratic elections look like, where from the process itself you can dismiss most fraud allegations. It would take hundreds of independent fraud instances to change a single seat. These security guaranties do not exist in the US. It's like the difference between encrypted and unencrypted communications, where the American gaslighting is the equivalent of saying man in the middle is a conspiracy theory.
We catch voter fraud all the time in the US. Part of the reason we know it's not a big issue is that we catch so many people in a given year. If you read up on the multiple rounds of recounts and audits Arizona or Pennsylvania did this last federal election, I think you would have a lot of respect for the people who designed these systems to withstand the scrutiny of endless lawsuits.
> It would take hundreds of independent fraud instances to change a single seat. These security guaranties do not exist in the US.
It sounds like you are getting bad information about US elections from second hand sources. Anyone who actually takes the time to analyze their local election would probably come to the same conclusion you do about yours. They are remarkably transparent and well audited.
That does not stop bad actors from using endless speculation to try to undermine people's faith in elections. But I can attest that I would trust our local elections as much as anywhere else's in the world.
Indeed it is a very contentious matter because opposition claims paper trail will allow people to get a receipt and sell its vote (not true) but they don't want the paper trail system were after you confirm your vote is cast in a lacred box.
You are supposed to trust it because it is.
If you don't you are against the democracy.
[1] - You can at final hour generate a report from all electoral zone but there is no way to "go back" and audit it with paper trail.
How can any one verify the recorded and tabulated votes match the VVPAT?
I've attended the "auditing" of VVPAT machines. The "audit" only demonstrates the printer is functioning. And each time, at least one of the printers failed (paper jam, bad hardware, etc). So they swap gear and reprint the VVPAT.
All DREs should be banned outright. They are and always have been an existential threat to election integrity.
--
PS- The VVPAT is not a receipt. Giving voters a receipt allows vote buying, coercion, etc.
It's been a while, and election administration is the wild west, so although I don't recall any jurisdiction issuing voting receipts, I wouldn't be surprised if someone does.
> creating the illusion of physical chain of custody
How is this any different than paper ballot voting? Someone is going to collect the paper ballots and count them and put them into spreadsheets.
> How can any one verify the recorded and tabulated votes match the VVPAT?
In the US they literally pay hundreds of election workers to hand count paper receipts in the event of a recount. This is what happened in Arizona in the US.
Yup.
Bush v Gore and then Bush v Kerry motivated me to become an election integrity activist. Along with some chicanery in my own state. My friends proved, in court, that Kerry actually won New Mexico (the machines didn't record spanish language ballots), and compelled them to dump the DREs and switch to paper ballots. I also knew people in Ohio, NC, Georgian, Kentucky who uncovered similar problems. But those state's laws didn't permit challenges, or the records (evidence) was destroyed, often illegally.
It's with deep chagrin that all of our findings and talking points have since been weaponized by a cult hell bent on ending our democracy. Sometimes I even wonder if my friend Bev Harris (Black Box Voting) demonstrating how to hack Diebold live on TV was a mistake.
> In the US they literally pay hundreds of election workers to hand count paper receipts in the event of a recount. This is what happened in Arizona in the US.
Ok. I just wasted 30 min quickly figuring out how Arizona currently votes. https://azsos.gov/sites/default/files/2022_Election_Cycle_Vo...
Paper ballots. Optical scanners for poll sites. Image scanners for central count. Ballot marking devices for accessibility.
No VVPAT.
No receipts.
Whatever you think about Arizona's 2020 recount circus, the end result was greater confidence in the outcome (for the reality based community). Only because Arizona uses paper ballots.
Okay, again - what's the big picture difference between VVPAT and paper ballots that are scanned by a computer? If the computer leaves a receipt that I have to sign and confirm and leave with them - how's that different than one I do by hand and have scanned? It's just a difference in the order of operation.
With a DRE (eg a touchscreen) the legal ballot is the memory card. The VVPAT is like a log file printed to a cash register paper roll. VVPATs are not the legal ballot of record. Nor are they used for tabulation. Some jurisdictions may use the VVPAT for recounts or audits, but I wouldn't know. In other words, "Voter Verified Paper Audit Trail" is a lie; It's not used for auditing, and most voters don't even look at it.
The implementation of VVPAT isn't really intended for tabulation. It's thermal paper, easily damaged. There's no standardized format. There's no gear for scanning it. The content doesn't even look like a ballot.
Also, with the Australian ballot system, private voting and public counting, there are no receipts. (Whether or not DREs and postal ballots qualify as Australian ballots is another discussion.)
I think maybe a ballot marking device (BMD) would fit your goals. The UX is like a DRE. But a BMD generates an actual ballot. That is then treated like any other ballot, fed into a separate tabulator. BMDs do not tabulate.
I think BMDs are great. I'd bet that every election integrity activist would agree.
--
Every statement I make should include a "YMMV" caveat. Every jurisdiction (state, county) can potentially do their own thing. Worse, the details (gear, laws, rules, procedures) keep changing. So there's always a lot of thrashing getting everyone onto the same page.
Please keep asking questions. None of this stuff is intuitive, or works how people expect. It took me years of intense effort to get up to speed, which shouldn't be the case.
I don't understand your statement. You say you don't know if it's used for auditing... then you claim decisively it's not used for auditing?
> There's no standardized format. There's no gear for scanning it.
That's exactly the point - you are only looking at these by hand in the case of a recount?
Again, if I am trying to perpetrate voter fraud, enough to change an election, how do I do it with a VVPAT? Do I change their answer and hope that no one notices their vote got changed on their receipt? Or send a different answer to tabulation that would be caught in the event of a recount?
Both of these possibilities seem no different than a BMD. How do I know the tabulator machines themselves are not compromised? It seems like a weird distinction to trust one but not the other.
https://www.pewtrusts.org/~/media/legacy/uploadedfiles/wwwpe...
For now, paper voting is safer.
I think theyre very wrong, but a lot of people do think that.
And, if political candidates were caught trying to buy those miniscule number of votes from a police sting operation were sent to prison...well, they tend to stop doing that. Benefit too low, risk too high.
Historically vote buying has tended to be widespread when it is officially tolerated (e.g. in the 19th century) and then it disappears entirely even when the police only half-heartedly crack down on it.
There are no 100% digital voting systems in the US to my knowledge. Where I live, we have a printout that we can review and then hand over to be stored securely as a paper trail.
There are also multiple checks and balances where they confirm that final votes make sense, and if the counts are off, they count the paper ballots.
To compromise an election, you'd have to take over thousands of machines in multiple states, bypass multiple independent human reviews, and be able to predict where the important counties were going to be. It's impossible.
Those early mistakes have been corrected and I believe you are correct, all voting machines in the US now produce a paper trail.
> multiple checks and balances where they confirm that final votes make sense
A term we heard a lot in the lead up and aftermath of the 2020 election was 'risk limiting audits'. It would be irresponsible not to have a strong audit program in place to verify the count, which is what I believe you're referring to.
The fact the US runs 50 independent elections is an interesting double edged sword as a Canadian observer. I'm used to incredibly simple ballots administered by either Elections Canada or Elections Ontario. The US has massively complex ballots administered by their state for county, state and federal office.
In some circumstances the US system makes nation-wide election fraud nearly impossible (election fraud does happen and is different from so-called 'voter fraud' that doesn't). The small scale of some offices and elections does make election fraud more achievable on some scales.
A new weakness has been revealed. Various local election officials (particularly Secretaries of State) wield enormous power to affect the process and outcome of the election. Elections Canada runs exactly the same election under exactly the same rules in every polling place across the country. Experiences state to state, county to country, and even at different polling places within a county can vary wildly in the US. This is exacerbated in Presidential elections by the fact only a handful of states are actually up for grabs in the election. A Secretary of State in any of Pennsylvania, Florida, Georgia, Nevada, Arizona, Minnesota, or Michigan potentially has the power to throw the next election into chaos. 2024 is not going to be fun and I'm not even American.
I personally wouldn't say 50 -- more like 3,000 independent elections. Each county is arguably its own election. They get funding and voting machines from the state, but personnel and operations of the county are run locally and often reflect the population of that area.
> A Secretary of State in any of Pennsylvania, Florida, Georgia, Nevada, Arizona, Minnesota, or Michigan potentially has the power to throw the next election into chaos.
This is true, although I think they'd have some difficulty doing it out in the open. We'll have to see.
Our FPTP voting system is the most brittle. 50% + 1 vote.
Election integrity would be greatly improved by switching to voting systems more resilient to errors. Specifically Approval Voting (or RCV) for single seat contests and Proportional Representation for assemblies.
I'm not aware of any jurisdiction that uses VVPAT for the final count. And most don't even use the VVPAT for auditing or manual recounts. Which is probably just as well, because the VVPAT is just thermal paper (like at the store) and is easily damaged, assuming it was working at all.
Jurisdictions are always changing things. You'd have to get your jurisdiction's manual to learn how they do counts, recounts, audits. And then actually observe to ensure they follow their own rules.
Details matter. Procedures and process matter. Technology is not a cure-all.
That commission has long experience inspecting devices to ensure that they are fair and impervious to unobservable tampering.
Once someone actually manufactures such a machine, then it needs to be used in a system that can detect fraudulent behavior, just like banks do. The system must require an official id, and must ensure voting privacy (sorry - mail-in ballots fail on both of these). It does no good to have a great machine if it will be subject to adulterated or coerced input.
None had a zero error rate. Fully electronic was not preferable because of the lack of audit trail. The best system seemed to be paper with scanners. The error rate was among the lowest and it is fully auditable.
After this study came out I was disappointed that my state chose fully electronic.
But before this last election we went to paper with scanners. The big advantage of course is the ability to recount by hand to your heart’s content. Which of course we did.
I think you've brought this up a couple of times now. Ask yourself, which is likelier:
1) It's a great big conspiracy and everyone hopes nobody sees your posts about this clear backdoor technology, and the mods try their best to delete it every time you post.
-- OR --
2) You're somehow mistaken and it's not all that big of a deal. "
Confidence in the results is only possible thru mutual distrust. Meaning all belligerents recognize and honor the count.
The gold standard for our Australian ballot (private voting, public counting) style system is paper ballots cast at poll sites, tabulated using optical scanners, with results posted publicly the moment the polls close.
With postal ballots, the higher volume jurisdictions use image scanners. Think fax scanners with OCR software to identify the votes. Adjudication is done electronically, by updating the database.
Further, many jurisdictions scan postal ballots as they are received, before election day, running daily summary reports. The fiction is that "final tabulation" is the final report.
For postal ballots, signature verification is being automated. Computers automatically compare ballot's signature with voter's recorded signature. Back when I studied election integrity (20004 thru 2010), the error rate was ~10%, with no independent auditing or verification.
For postal ballots, 1% are lost in transit. What the USPS calls UAA (undelivered as addressed). Meaning a fraction of voters are being silently disenfranchised every election.