First, you've omitted a major downside of digital vs. paper systems, scalability. Attacks on paper systems are much harder to scale, are more easily detected and more readily audited by staff who need no IT training/experience. There are other downsides, but scalability is a good example.

Second, the "plenty of upsides" are mere niceties. I don't know of any must-haves unique to digital voting systems. What do they offer that is worth their diminished security compared with paper ballots?

I put security of our electoral process at top priority. Given the difference in attack surfaces of digital systems vs. paper ballots, I can't see a case for the former.

The continuing parade of breaches of supposedly super secure systems indicates we don't yet know how to code systems for large-scale public applications where security is absolutely essential. Paper ballots are the best we have for now.

I really like the systems where there is an original easy to use paper ballot, that gets fed into a scanner for immediate counting with the ballot being stored securely in a box below the machine. It seems that the ballot could also have a scanned image stored for posterity.

At that point all the digital information can be immediately backed-up, replicated, and so on. It seems like it's the best of both worlds...

We saw with the Wisconsin recounts that only a couple cities had questionable issues and not enough to change the outcome (this time).

We saw in Michigan and Pennsylvania recounts that something more troubling was going on with Detroit and Philly and the real truth got hidden from public view when the recounts were abruptly ended in those places. I think there was evidence for fraud in certain Detroit precincts, but since that fraud involved Democrats, the media was silent on the issue. It got swept under the rug very fast.

I bet if we look harder we find fraud in Dade County, the state of Nevada, the state of Colorado, and also likely Arizona. Lastly, if we are going to be completely honest, California is allowing illegal immigrants vote in large numbers. Mind you, I'm not anti-Democrat, I'm just anti-fraud.

Verifying ID is a huge step towards ending most of the problems we have. The rest is stopping ballot stuffing and corrupt poll workers tossing out ballots.

In what place in the US can you vote without ID? Where? Point it out to me. You can't.

To vote, you already have an ID. It's called a Voter Registration Card. To get one, you generally have to cough up a bill, lease, etc. originally and then vote continuously over the years.

At this point, relative to "voting fraud" (the only thing "ID" will solve), you have:

1) No evidence of significant voting fraud anywhere (we lose more ballots to mismarking)

2) Significant evidence of partisan disfranchisement

3) Leaders having been caught ON AIR saying that disfranchisement was the whole purpose

Do you need someone to run up, kick you in the nuts, and yell "IT'S ABOUT DISFRANCHISEMENT" 3 inches from your ear before you get the message?

Now, if you want to talk about election fraud where the counting of the ballots is suspicious, we can chat.

Sure, it's almost everywhere.

For example, I recently voted in the 2016 presidential election. I voted in San Francisco. I didn't have to provide ID. I was allowed to vote despite claiming not to remember my own address. (Which I didn't, because I hadn't lived there for a few years. Voting continuously is certainly not a requirement.)

The normal procedure is that you go to the polling place, they ask you to point yourself out on their list of registered voters, and then you vote without authenticating your identity in any way.

Is this detailed/concrete enough for you?

I assume we don't want to keep track of who voted for whom (secret ballot).

President Obama was right when he said the fix to problems in our democracy is more voter participation. Imagine if close to 100% of those eligible to vote, registered and voted. Voter fraud would be insignificant.

"Under non-strict requirements, a voter who does not have the necessary identification may still vote without casting a provisional ballot.[1]"

If you hack election software, you can change thousands or millions of votes as easily as one. The physical nature of paper means you have to work for each ballot.

Even for the paper side. Most paper ballets are counted by machine so they could easily be tampered with at the count or when they're printed having a similar scale.

And recount-able by hand in case there is doubt.

Do you have a source for that statement? In Germany, ballots are counted by people making tally marks on paper.

Edit: Here you go. I couldn't find research or a study regarding it but this is probably good enough and was always my experience when I voted by paper: https://www.wired.com/2016/11/vote-counts-ballot-get-counted...

One reason is that Americans vote a lot more than Swedes. Here in California I have probably ~100 elections to vote in for each I had in Sweden.

It's quite common to drop handfuls of paper. And really, the grouping comes down to transportation issues as well; when you move ballots in boxes and trucks, 0(n) becomes less accurate.

There were numerous issues with the security, packing, and handfuls of paper in 2000.

http://www.dailymail.co.uk/news/article-3796116/Putin-s-part...

Not necessarily. I'm not cryptography expert, but I suspect some kind of proof-of-work system can be used for ballots.

True, but it is significantly (as in several orders of magnitude) harder to hack paper at a national scale than it is to hack an electronic voting record at a national scale.

Hacking paper requires people physically interacting with that paper to subvert it. That amounts to 1+ person per box of paper votes.

Electronics just needs the one person who discovered and exploited the vulnerability.

And it quickly becomes unmaintenable, "three can keep a secret, if two of them are dead".

Making a conspiracy like that work at US scale would require a small country's worth of conspirators which really, really wouldn't be able to hide from the light of day for very long.

To hack the U.S 2016 votes you'd only need to flip a few counties in Pennsylvania, Michigan, and Fl.

It would take an immense amount of reorganization of trust, but open hardware verifiable (both in person and on some kind of trustless ledger akin to a blockchain) voting systems would be more secure against such national actors, because there would be no back room to burn the paper in. If the machine is public and you can trust it, and you can trace the results nationally to insure the results were accurate, you have more security than you have now.

Yet, there are ways to make digital voting auditable. There is an inherent conflict between a system being auditable and anonymous. You can't completely satisfy both, but paper satisfy none, so there is plenty of margin for improvement.