Hacker News Reader

Comment by CamperBob2 | Hacker News Reader

This reminded me of an idea somebody else had of publishing everybody's votes in a federal or state election to the web. Everybody would get a unique, secret key right after voting with your voting choices. The machine would publish that key and the vote, but not your identity. You would then be able to, in the privacy of your own home, confirm that your vote has not been altered, while keeping your vote secret unless you choose to make your secret key public.

If you can prove you voted a certain way, that's a big problem in itself.

View on HN

Estonia (which has internet based voting) solves this by letting you check your vote on a different device but for only a short time period.

The thinking is that even if someone has managed to compromise, say, your laptop (e.g. through a specially constructed virus) to secretly switch your vote to a different party, then they'd also need to be able to compromise your phone too to persuade an entirely different piece of software to also report your vote back to you wrongly. Not impossible, but a much harder task (especially as you'd need to manage to do it for everyone, or else there'll be a big outcry from the large number of people who notice a discrepancy).

Being able to prove you voted that way during that time period doesn't really matter, as the system already allows you vote as many times as you like, with only the last one being counted. (i.e. if someone tries to coerce you, or buy your vote, you simply vote their way, and then, when they head off to the next person, log back in again and vote the way you originally wanted.)

For those that wonder why: Imagine organized crime saying things like, "You will prove to us that you voted this way, or we will burn down your house".

Or, perhaps more plausibly: confirmable voting makes it much more tractable for corrupt candidates to buy votes.

Actually, when talking about possibilities for election fraud in contested places, threats seem much more common and plausible than simple votes-for-cash trade. It's more widespread in places with less democratic traditions, but USA history has also a fair share of examples.

The most common current method worldwide for "vote buying" seems to be done by large regional employers organizing voting as such for their employees (time schedules, transportation, lunch/party after voting), sometimes that can be very effective as strategic voting (i.e., bussing large numbers of voters to a different district). If the votes would be actually verifiable, then even without any illegal violence it'd simply mean near-permanent unemployment in that town for "wrong-party" people.

And that's about ordinary elections. For a different example, the recent referendum for Crimea joining Russia, according to their official results, had ~32000 people voting against. I'm not informed about what's happening in Crimea now, but I'm very sure that if I was one of them, I wouldn't want that vote to be verifiable - the hypothetical risks far outweigh any possible benefits.

Even "ordinary" elections have a similar risk to Crimea in some parts of the world - if I lived in the Basque Country in Spain, and voted for the (mainstream, right wing) Partido Popular I wouldn't necessarily want that to be published.

You don't even need to go to organized crime; there's your parents, boss, church, friends, help group (e.g. AA), etc. Essentially everyone that holds some influence over you.

Would it be okay if you could verify the whole process, but couldn't prove which way _you_ voted? One such scheme is outlined at https://www.schneier.com/blog/archives/2006/10/new_voting_pr...

Such a system should obviously only allow a voter to prove to themselves that their vote was counted incorrectly. Some part of the secret would have to be retained in the voters memory in such a way that the voter can claim to others that they have voted in any way that they choose.

The goals "voters should be unable to prove their vote to vote-buying politicians/violent gangs" and "voters should have indisputable evidence they can take to the press if their vote has been miscounted" seem fairly contradictory to me.

Reply on news.ycombinator.com