News for hackers. Stuff that matters.
Re:Hacking Voting Machines at Defcon by maxerickson on Monday July 31, 2017 @09:14AM (#14891583)
Much of the US does use optical scan paper ballots:

https://ballotpedia.org/Voting_methods_and_equipment_by_stat...

Hopefully the message that paper ballots are simpler and provide a strong audit trail will continue to beat back the new and shiny.

Re:Hacking Voting Machines at Defcon by CWuestefeld on Monday July 31, 2017 @09:35AM (#14891779)
Are optical scan ballots really "paper ballots"? It seems to me that in all the relevant criteria, this is just electronic voting with a different input method.
Re:Hacking Voting Machines at Defcon by hackeyed on Monday July 31, 2017 @10:12AM (#14892130)
Optical ballots provide a verifiable trail that can be used to audit the electronic counting machines. Seems that whatever system we use could benefit from some randomly selected mandatory audits/recounts at every level.
Re:Hacking Voting Machines at Defcon by maxerickson on Monday July 31, 2017 @09:49AM (#14891909)
Yes, they are paper ballots. The "machine" is a pen and the ballot and the official record of the vote is the paper ballots, the electronic tally is just for convenience.

So for example, if the machine in a precinct catches fire and explodes, the vote proceeds, except the ballots are placed in a box. If the numbers reported by the machine are nonsensical, the machine is set aside and the ballots are counted manually. If there is a recount, the ballots are counted manually.

Re:Hacking Voting Machines at Defcon by radarsat1 on Monday July 31, 2017 @10:10AM (#14892111)
> If the numbers reported by the machine are nonsensical

The problem is that this is not a sufficient criteria for detection. Presumably a hacked machine would spit out "sensical" counts that are biased to one side, not 99% for one party or something like that. How would you detect that by just looking at a simple sum?

I can't really see how to verify the count without having everyone check that the machine printed what they thought, and having multiple people perform independent counts that must match.

You could have people count later and check that the machine got it right, but then consider the problems that would cause if the media was reporting bad numbers before the official count is finished.

Re:Hacking Voting Machines at Defcon by maxerickson on Monday July 31, 2017 @10:19AM (#14892200)
The point of that remark was to point at the ballots being the actual record of the vote rather than the result provided by the counting machine.

It is certainly the case that trust in such machines could be misplaced.

Re:Hacking Voting Machines at Defcon by radarsat1 on Monday July 31, 2017 @02:22PM (#14894616)
> It is certainly the case that trust in such machines could be misplaced.

Right but if that's the case, you're going to have to count them by hand at some point. So what do the machines bring to the table, if their whole purpose is to avoid that?

Re:Hacking Voting Machines at Defcon by tveita on Monday July 31, 2017 @03:41PM (#14895248)
You usually only need to hand count a small number of randomly selected votes to verify the result statistically. The exception being very close results where a handful of votes makes the difference.
Re:Hacking Voting Machines at Defcon by radarsat1 on Monday July 31, 2017 @10:27PM (#14897469)
That is a good point, as long as "randomly selected" can be assured.
Re:Hacking Voting Machines at Defcon by kennydude on Monday July 31, 2017 @10:03AM (#14892046)
So, just make the machines nationwide present "sensible" but false results?
Re:Hacking Voting Machines at Defcon by maxerickson on Monday July 31, 2017 @10:09AM (#14892104)
Well, in addition to (just) hacking all the machines, you'd have to tamper with a sufficient number of exit polls to limit recounts (and the waves of subsequent recounts that would follow widespread evidence of tampering).
Re:Hacking Voting Machines at Defcon by dx034 on Monday July 31, 2017 @10:03AM (#14892045)
I don't get why. Counting ballots is so easy. Fraud can easily be prevented (open process that everyone can attend, group of people who have to agree on the result, re-counting by officials of results that are outliers and of some random samples, etc). Plus it's cheap. I find it hard to belief that these systems can be cheaper than a few people working for $10/hr. Counting a few thousand votes can easily be done in 2-3 hours by 3 people (by my own experience).
Re:Hacking Voting Machines at Defcon by maxerickson on Monday July 31, 2017 @10:16AM (#14892164)
How many issues are on those ballots?

I think my most recent vote was for ~10-12 different positions and also a couple of laws or taxes.