Colorado scrambles to change voting-system passwords after accidental leak
arstechnica.com
arstechnica.com
* This password list has been public for a long time, and is easy to access: hidden excel column on a public spreadsheet.
* BIOS access means the intruder can change boot devices, boot their own OS, infect the BIOS with a virus, change boot devices back, compromise the vote host OS.
* Keycard security isn't tight security. Any amature physical penetration tester would just use a primitive attack on the door to get around it. E.g.: Grab the handle from under the door with a wire. Youtube has a ton of examples.
* This could have been done months ago, and over a long period of time.
* The intruder could clean up logs and any other traces of their actions.
Where am I technically wrong here? I'm sure I'm missing something obvious. It sounds like what you would do with BIOS passwords if you wanted to do something nasty. I haven't seen these questions addressed anywhere.
I hear some people say "but we use paper ballots". Then why do you have a BIOS password? If it's all paper where does the computer fit in? All of this is honest curiosity, I'm not sure how the voting system works.
Not sure about Colorado specifically, but in many jurisdictions voters mark paper ballots, which go into a machine to be tabulated, and are finally deposited into a box for safe keeping/future recounts.
As to how the votes on the ballots are tallied - if those machines are compromised seems like a definite problem -- though there is at least the option to hand count the ballots to compare against ...
I absolutely hate that fact. I am a human, I cannot read barcodes without a computer. Therefore, I cannot tell if the important part of what was recorded is correct.
Not sure if Colorado's are the same...
Googling around I think colorado banned ballots with qr codes / non human readable machine encodings .. or at least banned use of them for tallies
https://securitytoday.com/Articles/2019/09/18/Colorado-Becom...
The presence of the barcodes doesn't do anything to reduce the trustworthiness of the system
Either way it smells extremely fishy to me.
I have never used such a machine but the UX could be a lot clearer than the analog filp-and-punch machines used in Florida in 2000.
I don’t love software in the voting process but printing the choices is verifiable and reduces ambiguity in the voting process.
[1] https://www.cpr.org/2022/07/13/colorado-counties-begin-audit...
Neither did you have the opportunity to also vote for the other color of the uniparty and cross check the ballots to see they printed identically and according to selection
How is it any different than traditional voting, where you drop your ballot into a black box and trust the poll workers would count it correctly?
You can do random spot checks select boxes to make sure the machine is tabulating correctly. If they're all correct, you can be reasonably sure the others are correct as well, unless your adversary has incredible luck.
I've worked in elections in Sweden, and all elections are recounted at least twice, by different people.
With a voting machine that wasn't verified by a hand count it'd be relying on who-knows-who, who-knows-where with an uncertain risk profile.
Moving ballots, machine counting, etc are all relatively modern inventions — and seem to greatly weaken the consensus mechanism for little benefit.
It's completely different from a machine count. Humans have human failure modes, which are easily accounted for. Machines have random failure modes, and complex ways of being attacked. And all of the machines can be wrong in one direction at the same time, which is impossible for human counters.
Even random spot checks don't work for machines if the machine has some way of detecting it is being checked.
The electronic voting system issues in the 2000 elections motivated the Help America Vote Act of 2002 under which voter-verified paper records for audit purpose required for all voting machines (this requirement became effective in 2006); effectively, “voting machines” add ballot marking machines that may also be involved in convenience tabulation, but are always audited against hand counts of paper ballots, which are the ultimate authority.
As I understand that article, BIOS access requires two passwords, and the list only provides one of the two passwords. So, instead of "password list" I would say "partial-password list".
The list also misses "There is 24/7 video camera recording on all election equipment." Of course, you can raise concerns and failure modes about video recordings, but that all brings up the question "Were those recordings compromised?" You should not assume that they were.
CO mails paper ballots to everyone* about a month before election day. You can choose to vote in person, or mail in/drop off your paper ballot anytime prior to election night.
My understanding is what while the ballots are paper, many (all?) are tabulated digitally. It certainly appears to be laid out in a way that benefits digital reading, and i believe that is what the machines in question are responsible for.
* for some definition of "everyone"
I’m an overseas Colorado voter. They lump me in with the military voters so my voting process is super easy (I’m sure certain groups would love to make this harder, but not for the troops). I get an email that my ballot is ready, I go to the CO website, authenticate with my SSN (fucking yikes), fill out my ballot online, print a copy to pdf, slap a digital signature on there, and email it back to the SOS who presumably prints it out and throws it in with the rest, and then get an email saying my vote has been counted.
It’s amazing how easy voting can be when we want it to be.
Even this isn't secure now, because everyone can just photograph their voting card within the booth.
Vote buying also does not appear to be a problem in the US electoral system, as another commented pointed out: in order to make a difference in the election, you’d have to buy enough votes that someone would be bound to tell on you.
You're proposing that secret vote-buying conspiracy is going on and thousands of people are all keeping their mouth shut in order to keep getting that... $10, $50, $100 bribe?
If you don’t want it to be possible for people to buy or sell votes, then you need to make sure every citizen is engaged and cares about casting their own vote, and you need to make sure the government has a stable and trustworthy system of checks and balances. And why not just make it illegal with massive fines to buy votes and post a huge bounty for anyone tattling on a vote buyer that gets prosecuted? It doesn’t seem that complicated to disincentivize vote buying in a way that eliminates any concerns about the method of voting.
Oh, hey, look: vote buying is already illegal in the US. https://www.law.cornell.edu/uscode/text/18/597
It has a surprisingly(?) low view count for how riled up everyone is about all this.
If you want more insight into this system, here is a test plan from August of this year on the Election Assistance Commission's website:
https://www.eac.gov/sites/default/files/2024-08/ClearVote%20...
It also has a list of bug fixes like:
> Changed the ClearCount API to require authentication before uploading files (such as ballot images and tabulation results) to the server.
And software details like:
- MySQL 8
- Ubuntu 20
- Windows 10 IoT Enterprise LTSC 2021
- Windows Enterprise IoT 21H2 release
- Python 3
- CIS SCAP Ubuntu 20.04 revision 1.1.0
Here is a summary of an audit done on a previous version last year:
https://elections.ny.gov/system/files/documents/2023/10/clea...
But right now I feel like we are stuck, with one half the country having doubts about the process and the other half insisting that it is absolutely perfect. It isn’t enough for the process to be either correct or trustworthy. It has to be both.
It's not correct that one half of the US insists that the election process is absolutely perfect. There have been countless investigations, inquiries etc. and the process is being continuously reviewed. One half of the US insists that the process shouldn't be changed to the detriment of minority groups without any actual evidence that problems exist (as the investigations etc. did not result in such evidence), yet the other half still insists that the problems occur and the evidence is just hidden too well, and the process must be changed without ensuring that minority groups aren't affected more than other groups.
This is not a situation with two equal sides.
This trope that minorities are affected by voter ID laws doesn’t pass the slightest scrutiny. It’s also just plainly offensive and racist to assume minorities can’t show the basic competency to obtain ID when you already need it for so many things. Where were these complaints when everyone, including minorities, had to show documentation around their vaccination status for various things? Why isn’t this issue in every other country that does require ID to vote in elections?
> without any actual evidence that problems exist (as the investigations etc. did not result in such evidence)
A system not designed to generate data for such investigations will not turn up evidence. Just like with poorly designed software systems.
It is well-supported by actual research (e.g. [1]) AND by simple logic. Every single point you brought up has a clear counter argument - why didn't you respond to any of them? Have you simply never heard anyone mention them?
> It’s also just plainly offensive and racist to assume minorities can’t show the basic competency to obtain ID when you already need it for so many things.
It's plainly offensive and racist to ignore studies (e.g. [2]) that prove a higher percentage of minorities owns government issued photo ID compared to non-minorities. I'm not assuming anything, I'm only looking at statistics, at real people and data. You're instead attempting to move the conversation away from data.
> Where were these complaints when everyone, including minorities, had to show documentation around their vaccination status for various things?
First, such complaints did exist back then as well. Second, both vaccination and frequent testing were subsidized by the government, with extra investments towards minorities. Why don't advocates of voter ID ever make similar suggestions? Why not propose a program that allows any minority to acquire a government ID without any downsides, and once that's done propose voter ID?
> Why isn’t this issue in every other country that does require ID to vote in elections?
Because in pretty much every other developed country:
- there exist standardized, government issued IDs that are distributed to every citizen during normal government interactions (e.g. in Germany you must own government ID)
- poor people (a group that minorities make up a disproportionately large part of) have more free time and are in far less precarious positions regarding job security, and consequently health care
- poor people have a far easier time getting to government buildings (e.g. cities are less car-reliant, better public transport, better coverage of government buildings)
The US is in a very different position compared to most other countries. It’s just plainly offensive and racist to introduce additional barriers to basic rights while fully aware that the average person from minority groups will have to spend more time and effort to clear them.
I'm not going to spend time digging up research for every claim I've made unless you're willing to do the same for your positions. But since you've now been made aware that this "trope" does pass the slightest scrutiny, I'm looking forward to your response! Just to summarize, you'll have to explain how the disparate impact of additional barriers to voting isn't "plainly offensive and racist" given that:
- non-minorities are much more likely to own a government ID than minorities
- non-minorities on average have an easier time acquiring such ID
- non-minorities on average face fewer potential repercussions regarding work and health care acquiring such ID
[1] http://ippsr.msu.edu/research/voter-identification-laws-and-...
[2] https://www.voteriders.org/wp-content/uploads/2023/04/CDCE_V...
There was someone using the Michigan voter file (which has a line in it for each change to the voters record, so repeats voters) to claim that someone was voting dozens of times. They weren't airing a legitimate concern about the voting system, they were sowing discord by lying about how it works.
Your framing of the situation is reductive and cartoonish.
Chesterton’s fence.
In this case it is clear we don’t have verifiable elections - you don’t need to understand anything deeply to know this, since it is apparent with your own ballot. So instead let’s design for something better.
Are you giving up the secret ballot in your scheme?
It’s interesting that she made excuses for herself but previously had no quarter for someone who landed in similar position.
The only reason you've left out the details that Tina Peters actually facilitated physical access to voting machines with both required passwords, while this current leak was not even sufficient for someone to repeat Peters' actions, is that it would be absolutely devastating to your entire argument.
Computers add cost for acquiring the computers and training the staff. Computers add complexity and complexity usually reduces the reliability of a process. In a process like voting, that also reduces confidence in the process. This and the cost alone make it unclear why anyone would want to spend the money to electronicize vote casting and counting.
People have been voting without benefit of electronics for thousands of years.
In the vast majority of countries where paper ballots are used and counted by hand, the count is almost invariably completed the day of the election.
Conversely, in the US, where we spend lots of money to acquire, maintain and operate computers to “assist” in voting and vote counting, now we have many jurisdictions who say that they cannot complete counting on Election Day.
It boggles my mind that anyone still supports involving computers in vote casting and counting.
Counting by hand makes sense when each ballot paper has one race; when each ballot has 25 items, using robust optical scan systems common in testing makes sense. Electronic systems also open new options for improved accessibility, as long as all systems produce a physical record, ideally that is counted as itself, rather than a receipt for an electronic count.
- Counting machines should be dead simple, and should be one per ballot style. We should go back to precinct-only voting and forget county-wide voting.
- Reconciliation is an absolute must -- as it's always been, but we seem to have stopped doing it in many places.
- Every day of early voting should be treated like election day: with results published for each day. This would reduce the risk of ballot stuffing after hours because one the ballots are counted for the day there are no ballot boxes to stuff.
Parliamentary systems are the only democratic systems I’m aware of that ever features more than 2 parties in a FPTP system as well.
I lived in a country which did away with many of the small elections, only to have the positions filled by toxic empire-builders.
We went back to elections, where a scandal was handled by electors, not union rules.
Parliamentary democracies are usually accompanied by competent, autonomous civil services. That’s not something America has.
That's a bold claim. The federal system can be incompetent and isn't autonomous. But lower level local ones tend to be especially if far away from politically contentious topics until you get to counties that are really small. Representative elections are both about accountability and about representation so I don't have to worry about minutia. As long as rules are followed and you have systems that remove influence peddling (not so much appointments as above-board job interviews with many candidates), then you can let failing to follow such rules be a scandal that takes out the politician that tried to corrupt the system.
Or we could invert a lot of the races. I am college educated but never involved in law, how can I reasonably pick a judge or DA? What I want is my representatives to choose one, and then have a very low threshold for a special election to fire (“recall”) the person if they do a bad job. And only need that because my representatives have shown that they won’t.
Any sort of non-in-person voting is a security nightmare. But I am very sympathetic to the people who want to make it easier. I think we should vote on a Saturday or Sunday instead of a weekday, we should make it a federal holiday in order to close as many businesses as possible, and I think that employers who stay open should be required to give paid time off to vote, that doesn’t count against vacation or sick leave.
In US elections, any alternative voting system would essentially require computers. With all the complexity, problems and mistrust that they bring. Also those alternative systems are subject to gamification as shown in recent elections in Alaska and France. No fraud or illegality, but the will of the people was arguably thwarted by introduction of confounding candidates.
Re: parliamentary vs US representation
US was designed to have a true republic (not a democratic republic) but with a democratic lower house as a counterbalance to a non democratic upper house. The 17th amendment screwed us as it made sure that all the drama from the lower house spread to both houses, and now our congress is entirely captured by lobbyists as every legislator now has to worry about financing campaigns. It wasn’t supposed to work that way.
The US was not supposed to be one big country with uniform laws. It was supposed to be N number of mostly independent states with a common currency + a common defense + a safeguards against states taking advantage of each other. The basic assumption is that most laws are not one-size-fits-all, and that each state should be largely autonomous and figure out the laws that work best for that state’s citizens.
The more people you try to put under the same set of laws, the more likely it is that the weak will be taken advantage of by the strong. Take California water management- the populous cities, in true democratic fashion, determine what farmers can do with the water on and under their land, and special interests can contribute to campaigns for favor and end up getting water rights to water on your land, because democracy!
But all these are the “why” of the US election system, which is kinda orthogonal to how we vote and count.
That's a pretty rose-tinted description. The 17th amendment came about because the Senate was cartoonishly corrupt under the previous system. It should tell you something that it was ratified by the very state legislatures whose power it diminished.
You can say this with a straight face about the presidential election because it's a statistical tie. But it's laughable at the municipal/county level. Even at the state level it's often not true-- e.g., in Ohio were savvy enough to reject a marijuana legalization referendum (which they overwhelmingly wanted!) because it would have given a tiny cartel control over growing it. That caveat wasn't in the text of the referendum IIRC, so somehow a majority of Ohioans defeated it using their "absolutely zero knowledge" of the inner workings of that proposed law.
> So then they turn to their favorite voting guides which just shifts the power to unaccountable political groups instead of making the single representative you elect responsible for figuring it out.
There's a human web of trust lots of voters use to navigate the complexity of voting. The more local you get the more effective it is. At the municipal level there's a chance you're web includes the people directly involved in an issue, in addition to people who can help you judge the veracity of those people!
> And there’s too many elections - non presidential year elections give the power to a motivated and vocal minority which is not what you want because it lets shit stirrers seize control when no one is paying attention.
Sounds like you're hedging here-- what exactly does "give the power to" mean? If you're saying that special interests have more power to slip in corrupting legislation or install lackeys during an off-year, that's definitely not true. The worst stuff gets passed through when there's a lot of noise to cover it-- like presidential elections or national disasters.
I realize state of the art, modern, high-performance systems are incredibly complex... but that doesn't mean all systems have to be incredibly complex.
Simple computerized systems are incredibly accurate and reliable, easily moreso than humans.
And critically, it's feasible to perform attestation on electronic systems: something that's completely impossible with humans. You have no idea if Joe or Sally are randomly slipping in a few miscounts (or the people auditing them, or the people auditing them). If you're careful, you can be sure that only specific code is executing.
I'd be fascinated to get a breakdown of trust in computerized voting systems, from programming professionals, by programming speciality. I have a suspicion you'd get different answers from firmware/RT folks vs js front-end, to pick a couple of examples.
Such systems are better enough that businesses handling cash use them to count paper money.
Next to voting, or perhaps ahead of it, people surely value reliable accuracy in their money. So why not ballots?
Sure, we use a computer to produce a paper ballot (computers DON'T count or keep counts). The voter has a voting id that is hashed/encrypted/processed in such a way that the number is verifiable as a valid ballot hash (maybe using some sort of public/private key pair) so hashes can't simply be randomly generated.
So the computer UI produces the ballot. The voter is told to check their ballot reflects what they wanted to vote for. The ballot is scanned with a scantron.
pretty easy if your company produced the machines
I know a guy who did this for a job for a company that produced food
https://en.wikipedia.org/wiki/Estimated_sign
his entire job was to allow the company to push up as close to that line as possible without going over when checked randomly
saving them tens of millions a year
Teachers and students understand how this all works, so it has a lot of trust.
I’d say this was a fluke if the GOP hadn’t spent the last umpteen months pushing all this non-citizen voting nonsense.
> “Governor Youngkin has been clear: every eligible Virginia citizen who wants to vote can do so by Same Day Registering through Election Day—that’s what our law says,” said Youngkin spokesman Christian Martinez.
> A “final failsafe,” Martinez added, is the ability for residents to use same day registration to vote early or on Election Day.
[0]: https://www.cnn.com/2024/11/02/politics/us-citizens-caught-i...
This is where it gets confusing for me because your comment makes me think that people can’t agree on whether it’s a more serious mistake to allow an ineligible person to vote or whether we end up stopping (hopefully temporarily) an eligible voter from exercising their right.
Over the last 20 years there's no record of a non citizen voting in VA.
As a poll worker myself, there's nothing we would check election day that was that wasn't already checked during registration. Asking me to "verify" day of, beyond what we already do, isn't really feasible.
Recommend you work the polls and educate yourself on how your particular locale operates.
If a state is allowing intelligible people to register to vote that's a much, much bigger issue and one that can't be solved by poll workers.
And purging them within 60 days of the election is illegal per federal statute.
Youngkin and the GOP are flat out wrong here. The courts have said as much so far. And yet here we are again having to explain all this to somebody who watches too much Fox News.
~7 million with no ID ~29 million without an up-to-date DL
You'll know what to do.
I worked a total of eleven elections, from primarily elections to general elections. I even worked a special recall election where the recall was the only thing on the ballot. I was a volunteer for all of them. I worked as a "Polling Place Inspector", which means I was 'in charge' of a single polling place: I did the setup & teardown, reached out to the other polling place's poll workers to confirm they'll be there, and scheduled breaks etc..
I worked in Orange County, California, which is the county between Los Angeles and San Diego. At the time, it was very right-leaning. It may be so today, but that doesn't matter for this post.
Fun fact: In Orange County, poll workers are the only people who are allowed to question (or "challenge") a person's right to vote. The general public are not. How do I know that? Because it's one of the things I was taught during training. You can see it mentioned in [2], on page 11, under "What Are Observers NOT Allowed To Do?". (In the document, "precinct board" means "the poll workers".)
Now, three situational "pop quizzes" related to the situation from the article. In all three, you are a poll worker. Note that I will refer to procedures that were in place in Orange County, CA, not Fairfax County, VA:
Pop Quiz #1: Someone has arrived to vote, and you do not believe they are eligible to vote, what do you do?
Answer #1: You are challenging a voter. You have the voter vote provisionally. Their ballot would be sealed in the envelope, and their information (plus an explanation of why you're having them vote provisionally) would be on the envelope. The challenged voter would take a receipt with them, giving them a phone number to call, should they want to check up on the status of their vote after the election.
Fun Fact: Challenging a voter without probable cause is a felony in the State of California. How do I know that? Because it's in the instructional handbook that every poll worker gets, when they go through training. You can find Orange County's handbook for the 2018 election at [1].
Pop Quiz #2: Someone at the polling place, who is not a poll worker, is challenging peoples' right to vote. What do you do?
Answer #2: Call the dedicated polling place helpdesk, letting them know about the incident. Depending on the person's behavior, you may ask them to leave, or you may skip directly to calling the police. Your polling place inspector would have already looked up the phone number of the nearest police station, or you could just call 911.
Fun Fact: As part of polling place supplies, I received a county mobile phone. I was specifically instructed to charge it up in advance of election day. They were always chunky Nokia phones, which felt like they could be used as a weapon in an emergency.
Finally, to address your question…
Pop Quiz #3: Another poll worker is challenging a voter, and you believe the challenge is unlawful. What do you do?
Answer #3: If you are not able to dissuade the poll worker into allowing the voter to vote normally, then you have them vote provisionally. The most important thing is to get the voter through the process, and their provisional envelope into the box. Once that is done, you reach out to the polling place helpdesk, letting them know who did what.
Indeed, quoting from the article you linked, "After the [polling place] manager intervened, Burrell-Aldana was allowed to vote." The article does not say, but I expect the polling place manager was already planning on how to communicate the incident back to headquarters, and was keeping an eye on that poll worker.
If you had volunteered for this election, and you happened to be in the situation from this article, then you would have known what to do. :-)
[1]: https://ocvote.gov/fileadmin/user_upload/elections/gen2018/T...
[2]: https://ocvote.gov/election-library/docs/Election%20Observat...
Non-citizen voting is illegal already. We don’t need new laws re-banning it.
The numbers of non-citizens voting is small so any effort to purge them is as likely to disenfranchise legitimate voters as remove illegal voters. That’s a net negative.
There are plenty of folks who think illegal aliens* should be allowed to vote.
* not sure what the political correct term is now tbh, double-plus-unnaturalized maybe, ha?
This is an intended feature, and it's exclusively a feature of one political party. The elections are always rigged, this one is rigged, the voting process is rigged, just don't ask me to present evidence in a court of law...
When you see a system more complex than paper ballots, know that the additions are not there on your behalf.
(Side note: I also believe that hand-counting of ballots can be tedious, and humans performing tedious, repetitive tasks are prone to error. See [1].)
[1]: https://www.brennancenter.org/our-work/research-reports/hand...
In Denmark all ballots are hand-counted. It takes about 6 hours from polls close to every precinct reporting a preliminary result. Wanting it faster isn't really necessary, other than to feed the 24/7 news machine.
So the incentive to automate things are bigger here.
Plus US Senate, federal congressional district, state assembly, state Senate, 7 judges, and 6 paragraph-long ballot propositions.
Not only your postcard idea wouldn't work, manual counting 3 pages (!) of a giant ballot would get prone to errors and be expensive rather quickly.
I think the current electronic plus storing the paper ballot for future audit if needed offers the best of both worlds.
Hand counts are actually not all that time-consuming for large groups. Voting districts are already broken down enough whete each polling station only has a few thousand ballots.
Where's the problem with waiting? This is not some customer service to optimize for profit, there's no harm in waiting a bit.
Paper ballot have the advantage of being robust against e.g. power failures. They are also trivially to scale up - just need small secluded space for people to fill them and an additional pen - much shorter waiting lines. There is not BIOS, there is no software to be rolled out or computer to be procured, installed, secured and finally put in secure storage or securely disposed.
Being a country with compulsory voting helps, because the system has to make it possible for everyone without a valid exceptional circumstance to be able to vote (would be unfair to be fined for not voting if you were still waiting in line to vote when the polls closed), and also they can quite accurately predict the kind of numbers they're going to get at the polling places.
As a result, there are a whole lot of separate elections conducted on the same ballot in the US, more than is typical elsewhere. This increases the tabulation load.
There are currently many heads of household voting for their entire families, and even aside from mail-in ballots, there are people watching and photographing other family members voting within polling places, and uploading the photographs to social media with parental pride. In many places, this is not even criminal anymore.
Paper ballots, with voters having no method to prove who they voted for (no-receipt), in a private booth.
In Sweden you can vote by mail, but it has to be done in a private booth on a post office. You have to show ID, of course.
That means everybody votes secretly, even when voting by mail.
Firing people for not cooperating with something that is a crime under both federal and state law is a strategy that…doesn’t work very long for the criminals.
(Giving a large group of people who you don’t trust to vote your way that kind of criminal leverage over you in general is a pretty self-defeating strategy even without the intense incentives produced when you pile termination of employment on top of it.)
Also, near-universal mail-in voting isn’t some novel untested practice. Oregon has been doing it for more than two decades, Washington and Colorado for a decade, and even more states have adopted it between 2019 and 2022.
That's a felony isn't it?
Are you able to cite any evidence for this sort of conspiracy, or is this mainly conjecture? My search came up short. While one can certainly imagine it taking place, particularly in smaller groups, I expect there are both federal and likely also state laws that would make such activities illegal. At the very least, it would seem hard to hide at scale.
Is there any basis in reality for this?
Where is the line of accepted risk?
The fact that this is rarely discussed probably means that it rarely actually happens. Political beliefs between husbands and wives are usually quite correlated, I'd imagine.
The issue of maliciously voting for you elderly grandparent may happen, but is probably very very rare.
Tale as old as time
The US voting machines are just waiting to be hacked, just a matter of when, not if.
You need to present an election system that will convince Joe Q. Public, who is almost certainly not as tech-literate as this forum, is probably not even white-collar or university educated, and likely also suspicious of globalisation. "Tamper-proof Indian system-on-a-chip" does not have that property. Otherwise you get increasingly unhinged arguments over the election results until something breaks.
Appropriately documenting these occurrences should not be hard. Appropriately archiving them would be moderately difficult but would serve as the evidence of the final tally. The final tally of all precincts could then be calculated by any number of independent organizations.
There can't be any hard to understand computer voodoo, deleteable audit logs, or single vendor reporting the final tally. No one should trust that anyways.
Ref.: https://www.brennancenter.org/our-work/research-reports/hand...
Indeed! I've volunteered at polling places where this is done.
I think one reason polling places have gravitated towards the "use paper ballots for everything, which are then scanned" option is because you're likely going to have something like that anyway, for mail-in ballots. It does bring problems, but you still have the paper to fall back to.
That's not exactly what happened in Florida 24 years ago.
In principle I don't really disagree, but just saying the problems run rather deeper than just hand-counting vs. electronic voting. The one time a recount actually would have been useful it was stopped for highly legalistic reasons that are hard to explain to a normal person. Not only that, it's highly likely – perhaps even probable – that Gore won Florida, although we'll never know for sure.
I see no reason it would play out any different today. We all saw what happened during the last election.
Not only that, with the full-on cult of Trump and the perceived victimhood of his supporters, I'm not really sure to what degree hand counts can always be trusted. Given the very small margins in some states, even a very small error rate (malicious or otherwise) can really matter. Perhaps this is paranoid, but I fully expect Trumpdroids to try to cheat. Any idiot can cheat a handcount "by accident" (prove it otherwise), but actually tampering with voting machines is operationally much more complex, and not something any ol' yahoo can easily pull off (need not just technical knowledge, but also physical access).
tl;dr: it's all pretty fucked no matter what.
We talk a lot on HN about people's beliefs being a reflection of the systems they're placed under— you show me the incentives I'll show you the outcome— and the incentives are clear as day. Democratic voters have two nice properties that are being exploited, Democrats are generally concentrated in major metro areas, and Democrats vote early and by mail. Being concentrated makes those counties easy targets for lawsuits hoping to tie up the process with vague nothingness and rule-lawyering to try and turn away voters. Attacking mail in voting very cleanly affects almost entirely Democrats. And pre-undermining the election results act as a hedge to explain away a loss. Because this is a must-win election for Trump's GOP, two losses in a two risks pushing the "MAGA" faction of the party into irrelevancy.
And so that's what you see, it's a narrative that has been pushed hard designed specifically to carry out the exploit. It's genuinely clever and once it reaches critical mass the people who are tricked into actually believing it outnumber the original concern-trolls so it's naturally self-perpetuating.
So look, I have no expectation that you'll change your stance, I just hope at least that if you really bought into it that going forward you'll at least do it on purpose and be in on the game.
I have some distrust in the American voting system, first with the computerized systems, but also that federal elections are run at the state level. With so many states and jurisdictions, I can't help but feel that fraud is happening. If the federal elections process was truly federalized, and funded if it is not already, managed and controlled by the federal government, then I think there could be greater control and security.
Colorado ballot envelopes already have a bar code - essentially your "serial number".
I feel like I'm taking crazy pills because everyone who thinks there's widespread election fraud seems to not know anything about how elections work.
Does your knowledge imply the system is perfect? Is there more than one type of voter fraud? Do we mean just one or two particular federal elections or all elections at every level? What about internal party elections, have those all been extremely fair and above board lately?
There's obvious advantages to perpetrating this class of fraud. Historically we know this fraud has interfered in all types of elections at all levels. Why would this not continue to be a target?
I mean, even in your link, Step 1 includes mailing ballots in. Even recently we've seen the simple flaws in this insecure mechanism. How could you have such a level of confidence in this system? The fact the smart and well meaning people do is all the more reason to engage this subject more rigorously.
Perhaps a more generous interpretation to people making these claims is to understand that we are still not doing a good enough job at making our elections secure, easy, free and fair. For Hacker News this should easily be understood to be a technical challenge and one that the USA has yet again completely failed to succeed at.
It's literally that easy in Colorado.
Anyways, you would walk into it and throw a big mechanical lever that would close a privacy curtain behind you. Then you would have to manually turn an individual mechanical switch for each choice. When finished voting, you would throw the big mechanical lever back to the original position. Moving the lever back would cause all of your votes to be counted, reset all voting switches, and open the privacy curtains. There were mechanical counters for all possible voting options. Then, when the polls closed the votes would be read off the counters (and presumably verified by multiple individuals) and then reported to the whoever they reported the results to.
This was before the internet, but the same machines could (and should) be used in the internet age. There's nothing to hack into electronically as the voting machines contain no electronics (at least for communications, for sure).
The only big downside is that the machines have to be stored somewhere and they take up a sizable space. Also, they incur expenses to be moved from storage to polling places (and back).
Someone will bring up voters with disabilities, but there were voters with disabilities back then too. I'm sure there was a protocol for accommodating voter disabilities.
All in all, I think it's a sensible and pragmatic solution to thwart hacking and hopefully garner more confidence in voting integrity.
As an Indian citizen I see the casual lack of security mindset in large swathe of things implemented by both public and private actors. Many things get better only though iterative failures and corresponding reactive fixes.
What type of failures and improvements have happened here, or instances of demonstrated hardness against those with motivation and access to machinery.
The Electronic Voting Machines (EVMs) do simple counting of key presses and keep tally of the totals.
The machines are not reprogrammable, run on alkaline batteries and have no WiFi/Bluetooth, USB or ethernet.
There was an interview with one of the Profs who designed the EVMs here.
Ranked choice voting is essentially doing multiple elections at a time, having to recount portions of votes every time a candidate drops out. That's a lot easier with computers.
I think the totals from every precinct could be made public in a way that they are verifiable from a central database, where the numbers add up to the total for the state and eventually federal count.
This is probably already happening, but people don't seem to think so.
I agree that for voting systems other than FPTP it is more work and may take longer - but it’s not an intractable problem.
We need results in as short a time as possible, ws have about 100 crore registered voters, of whom about 70% on average vote, meaning that the ECI must process 70 Crore votes, in under 10 hours.
Making that happen in a free and fair way is a logistical challenge, one that we undertake every 5 years.
One more large advantage of EVMs is making booth capture very expensive (because EVMs have a inbuilt rate limit, but a ballot box does not).
At any rate, with VVPAT being there, it adds another layer of security.
Why do you need the result in under 10 hours?
The US 2000 election was a fiasco of the failures of paper ballots. Officials spent weeks scrutinizing ballots and to this day nobody thinks they got it correct to within the margin of error.
That's when electronic machines came in. They are not necessarily better, but nobody who lived through that nightmare thinks fondly of the clarity of paper ballots.
I lived through that, it wasn't that big a deal, and I still think fondly of the clarity of paper ballots. No system is perfect, but paper ballots work and work well.
The US election system is very distributed and fragmented - there is virtually no standardization.
Even in the tightest margins for something like President you'd need to have seriously good data to figure out which random municipality voting system(s) you'd need to target to actually affect the outcome.
As you said, no standardization, which means all precincts reports on wildly different time intervals, if you can interfere with just tallying during or after the fact, and you can get the information on other precincts before any other outlets, you could easily take advantage of this.
It's essentially the Superman II version of interfering with an election. Just put your thumb on the scale a little bit everywhere on late precincts all at once.
The fact that so many states let a simple majority of their state take _all_ electors actually makes this possible. If more states removed the Unit Rule and went like Nebraska and Maine this would be far less effective.
There is standardization within all precincts of a county. And from my past experience as a poll worker, I can tell you why precinct reporting times can vary wildly within a county.
(Note things I say here are specific to the county where I worked.)
Anyone in line to vote by 8PM is allowed to vote. We (the other poll workers and I) could not start closing the polls until every voter had voted. If the local community did not trust vote-by-mail, then that polling place will likely see delays in closing due to lines.
One polling place often covered multiple precincts, so you'll see multiple precincts delayed simultaneously.
After that, boxes go from one queue to another, with multiple queues consolidating into one or two. So, a one-minute delay in dropping off your box to a collection point, may mean a two-hour delay in that box being processed.
> if you can interfere with just tallying
First off, that would require a remarkable amount of fraud. Second, that's why there are observers. It doesn't matter if it's 2AM on the Wednesday after election day: If tabulating is happening, you are allowed to observe.
Ballots printed by Fort Orange Press are failing through the scan reader. This is annoying, and small counties appear not to have rehearsed the combinations of paper and scanner. There will be a lot of hand counting, which requires party-appointed poll workers.
A notable but insignificant number of ballots in Mesa county failed to authenticate signatures and when contacted, those voters said hadn’t voted yet. Once the signature matches, the ballot becomes part of a large box, indistinguishably. This describes something like 3 ballots.
https://www.cpr.org/2022/10/17/colorado-elections-ballot-cou...
Importantly there’s always an audit in which auditors verify random samplings of ballots. This audit process is overseen by judges from the Republican and Democrat parties.
So even if all the voting software was compromised the audit would still catch any manipulation in the vote entry.
E.g. this article has information in it that refutes the idea that the voting process in CO is fundamentally broken; it describes aspects of their security-in-depth which show how a single vulnerability doesn’t lead to compromised election results. (Not to mention the auditing process which would also have to be fully compromised for the results of even fully hacked voting machines to be accepted.)
https://archive.ph/smlSQ (capture of https://electionnexus.com from earlier today)
https://www.walmart.com/ip/President-s-Choice-The-Decadent-C...
The ADL has a database full of “hate symbols” that nobody uses or some random person on the internet used one time. It’s a joke and the ADL uses it to bully other groups and people into silence.
"In addition to the Department of State Employees and in coordination with county clerks, these employees will only enter badged areas in pairs to update the passwords for election equipment in counties and will be directly observed by local elections officials from the county clerk's office.
This is a bit weird. Someone having a perfectly legitimate excuse to fiddle with voting machines, urgently, two days before elections.This is not an election where we can afford doubt.
Edit: i was out of the loop but apparently bezos decided to throw his chips out the window for little benefit to himself (or anyone). Just goes to show the wealthy are just as capable of being morons as the rest of us
All other developed countries make this work, what are Americans lacking?
The system is just: - Keep a list of citizens allowed to vote
- Print paper ballots with the names of the candidates
- ask for a proper ID with photograph
- collect the votes
- count them by hand with the oversee of representatives of the candidates
That’s it, that’s all there’s to it and we count 99% of the votes in less than 6h.
However there is another more cynical thing going on, which is that in recent times the pro-voting-rights Democratic party has also benefited electorally from the increased turnout resulting from looser voting rules. This has made any changes to voter ID laws impossible to pass federally (where they are currently set).
This situation is changing now though because polling and the last election suggest that increased turnout currently benefits Republicans. Many commentators believe that within a year the Democratic party will actually be agnostic on voting ID laws, and already in this election you can see that "getting out the vote" is not much of a Democratic talking point.
It can be difficult to get on the list of eligible voters; different places count different things as a proper ID. If you are poor or marginalized in other ways, getting a proper ID can be a challenge. The US has a long history of trying to prevent substantial populations from voting; it’s even designed into the Constitution.
Just this week, the Supreme Court ruled that votes in Pennsylvania that don’t have the date written on them (properly) but were mailed in don’t have to be counted. That has nothing to do with the intent of the voter, but political factions think it affects their chances one way or the other. In some states, you can’t give water to people while they wait in line to vote.
Also the photo ID part is different in the US, since there's no uniform governmental ID that every citizen is expected to have. Minorities are less likely to have such ID compared to non-minorities, and (since minorities are disproportionately more likely to be poor) on average face larger issues acquiring such ID.
Are you trying to say that the process doesn't work fine in Germany?
> - ask for a proper ID with photograph
Neither of these claims is right. Personally, I doubt the election was stolen. I know of a handful of cases of voter fraud both anecdotally ("My mom [in a retirement home] told me to vote for McCain, but I know she really wanted to vote for Obama, so that's what I put.") and numerically[1].
I would not be surprised if one or two of the very razor thin House district elections in 2020 experienced enough fraud to flip the decision. This doesn't mean that I believe all of the Dominion voting system hack nonsense or anything like that. I just think only a Sith deals in absolutes.
1: https://apnews.com/article/ohio-voters-citizenship-referrals...
Additionally, the sides have completely flipped. Utterly bizarre.
Note that the Bush/Gore election issues were not allegations of fraud or any intentional shenanigans. The issue there was a badly designed ballots and/or badly designed voting machines that let to a large number of spoiled ballots due to people voting for more than one candidate or not marking any candidate, and in one major county led many voters to mark a candidate other than the one they intended to mark.
All the controversy there after the election was how to resolve those problems. Some, like the infamous "hanging chads" could in some cases be resolved by hand examination of the ballot, but there would often be some ambiguity so that would not be without controversy.
Others, like the "butterfly ballot" in Palm Beach County did not lead to any physical problem with the ballot but the design of the ballot led many voters to vote for a candidate other than the one they intended to vote for. That was a completely novel failure mode and the system had no procedure for dealing with it.
Prior to Trump, it was afaict an accepted fact among software people that closed source electronic voting machines were sitting ducks ripe for hacking.
We went from "don't trust Diebold" to "how dare you question Dominion."
Whether or not an election has actually ever been hacked at the voting machine level is a separate conversation.
Did Republicans anywhere try to "secure elections" in a way that didn't involve curtailing voting rights? Improving voting machines, systems, counting, etc. in a way that partisan leadership couldn't mess with?
Georgia, I predict, will be a shitshow this year.
It's going to be insane here.
This week alone we've had Bill Clinton, Bernie Sanders, and Tim Walz stumping here.
https://newrepublic.com/article/187597/pennsylvania-election...
Politics has become trench warfare. Everything is a battle to the death to keep the other side from gaining an inch anywhere. And, as is often the case in warfare, truth is a casualty. Both sides will say absolutely anything to keep anyone from thinking that the other side has a valid point.
It's advertising, but without any truth-in-advertising laws. Or, if you prefer, it's propaganda. Any relationship to the truth is purely accidental.
Even the Brits don’t take anything at face value anymore.
And with one party transformed in the Monster Raving Loony Party, the other one can't do anything else but push its own agenda through when it can, so compromise becomes rarer and rarer. And it's not just Trump – remember the madness and obstructionism of the Obama years?
And yes, there have been times the Democratic party could have done better. No doubt. But it's absolutely not a "both sides" issue.
Most secure in history is (in my state) is correct. There are more pointless safeguards than have ever existed. If you were willing to go with the results of any election pre 2020 then you should be overjoyed at how much more "secure" the process is. That's the point that's being made, the amount of provable voter fraud that bypasses the checks and is only discovered after the fact is nil
The article you cited is literally the system working. There's 11 million people in Ohio, the number of illegal registrations is several orders of magnitude less than the lizardman constant and they were nonetheless caught.
Source? I thought all the election fraud lawsuits/investigations for the 2020 election basically went nowhere?
If 'one side' break the silent understanding of 'do not criticize our complex, convoluted and arcane election process', well, bad luck if 'the other side' defends it instead of agreeing there is a need to do something about it.
I don't like how about every question becomes some sort of thrench warfare around strawman extremes.
I know correlation doesn't mean causation, but I also know that where's there smoke, there's usually a fire.
But also, the idea of a president or prime minister is dumb. In fact, nobody needs a federal/national government. We should just have a mayor for each city or region and if they need to decide on something which affects the nation as a whole, the mayors of all cities/regions should just get together vote for it.
When is something truly a national matter? Almost never. In those extremely rare cases, representatives can get together and vote.
With a globalized coercive system as ours, we're headed for a mass extinction event.
They will run with it. You can explain the details of computer security all day, and how one password doesnt matter.
They will not listen. They are not looking for details or a reasonable explanarion. The voting conspiracy people only look for confirmation.
The leak does increase the risk of a single trusted insider messing with the system, though.
Based on previous reports on the security of devices like these, I wouldn't be surprised if a quick flash dump of the NVRAM is enough to crack the password in seconds already. Perhaps voting machine manufacturers have finally made it too difficult to disassemble these machines in a short amount of time, but that's historically not been very difficult.
I would reckon the access time needed to hack+access the BIOS lies in the area of "a few minutes, twice", not the kind of prolonged physical access you'd need to brute force the password.
That's not exactly "someone posing as a voter could hack the machine", luckily, but then again apparently at least one hacker at DEF CON found a vulnerability in voting machines this year that won't be fixed before the upcoming American elections, so who knows if there's an exploit like that lying around.
Do you know of a vulnerability that allows someone to access the bios password hash but can't also be used to hack the election without bothering with the bios password?
Everything else is a scam.
It would mean no secrecy of vote, but I think that secrecy of vote is for places that are new to democracy.
It could be anonymised to a point a clever system of personal certificats, but the idea is that in a 100 people district, the citizens should be able to count themselves and check if their real votes are correctly registred.
If the list is public, everyone got a proof of vote and can confirm that the global list is correct localy, then there is no way to hide cheating.
About the best I can come up with is a QR code displayed on the screen and on a printout that you can compare with a third party phone app. Machine results are tabulated, and the QR code sheet is put in a lock box separately. This at least provides some way to compare what the computer says you voted versus the QR backup ballot for audits. I'm sure there are holes in my idea.
How about having the voter verify a printed copy of their electronic vote before the machine casts the ballot and then counting the paper ballots afterwards to verify the tally with the machine. Two way verification. Problem solved.
Since 2016, with the help of activists over the country, NJ and many otther states switched to electronic machines with paper records validated by the voter. Unfortunately the part about counting the paper ballots afterwards varies between states.
I don't think most states hand-check every single ballot, but I'd be shocked if there are any that don't perform random audits where some sampling of the receipt are hand-checked.
[1]:https://ballotpedia.org/Voting_methods_and_equipment_by_stat...
I am not a fan of Optical scan either. In NY back in 2019 I was a volunteer for a local election that was super close and we discovered that the machines rejected a bunch of votes. We then had to challenge the election and do a manual hand count. For the votes rejected by the machine that were not fully legible we had to find the voter who cast the ballot. I recall some ballot were rejected for stupid reason like there was a mustard stain on the ballot(this is in NYC ha ha). In the end I think we lost by 60 votes or so.
A good system in my mind is what NJ has moved to (although it seems like they have not moved to this system statewide which is a shame): DRE with paper trail. Essentially, the voter votes, the machine prints a paper record and shows it to the voter so they can verify. Once they verify, the vote is cast and the paper is deposited into a sealed box.
Unfortunately they only go back and count the paper for close races but they should really do it for all races.
The secrecy on individual votes has a good reason to exist. Votes are already bought based on per-section public results, imagine what would happen if individual votes were public.
Moreover, people under any sort of threat (communities dominated by drug dealers, employees of a dishonest, politically engaged business owner) would be in big trouble.
There is no evidence of voting systems in the US being "scams".
This monster under the bed mentality is getting tiresome.
1. didn't know how Colorado already does it 2. doesn't know how hard it is to get humans to count without errors 3. doesn't know how expensive having that many temp staff count ballots is.