News for hackers. Stuff that matters.
Re:US elections remain 'dangerously vulnerable' to cyber-att... by umanwizard on Monday August 13, 2018 @11:51AM (#17750984)
Friendly reminder: electronic voting is totally unnecessary. Many highly developed democracies (e.g. France) have totally paper voting where the ballots never leave the public eye.

If the past is any indication, there will almost certainly be a lot of comments on this article proposing complicated schemes for making electronic voting secure and verifiable. Consider when evaluating these schemes whether there is any benefit or upside at all over good old fashioned unhackable paper.

Re:US elections remain 'dangerously vulnerable' to cyber-att... by liberte82 on Monday August 13, 2018 @11:57AM (#17751029)
The best benefit I've heard about paper voting is the mechanism by which trust in the count is ensured.

With paper voting, all votes are counted by several people, with oversight and random recounts. It is _possible_ to cheat, but it would require a local conspiracy for a limited number of votes.

With electronic voting, the counting is done by machines and the mechanism is obfuscated and unverifiable. If it's working correctly, it should be perfect; but if the machines were hacked, it could be done through a network and the impacts could be massive. It would require a large conspiracy to pull off, but the number of votes that could be affected could change an election.

So in summary: paper voting = higher chance of small irregularities, with limited impact; electronic voting = lower chance of massive irregularities with election changing consequences. In paper voting, the trust is distributed, while in electronic voting, it is centralized.

Re:US elections remain 'dangerously vulnerable' to cyber-att... by jimrandomh on Monday August 13, 2018 @12:29PM (#17751319)
No, it would not require a large conspiracy to pull off. With electronic voting, a single highly skilled engineer could rig an election without needing any accomplices at all. That is why it's terrifying.
Re:US elections remain 'dangerously vulnerable' to cyber-att... by thevardanian on Monday August 13, 2018 @01:30PM (#17751838)
A paper ballot system is just as terribly ineffective as electronic voting. Look at Russia. They have a paper voting system as well.

I know in other poorer nations thugs just straight stuff the ballots with votes, some even steal the box, some set it on fire, and it can be in general a complete shit show.

What is simply required is a publicly available audit of elections, where any citizen can verify for themselves the outcome of their local results.

Re:US elections remain 'dangerously vulnerable' to cyber-att... by kartan on Monday August 13, 2018 @02:05PM (#17752195)
> A paper ballot system is just as terribly ineffective as electronic voting. Look at Russia. They have a paper voting system as well.

If corruption is widespread at all levels of society no system will work.

> I know in other poorer nations thugs just straight stuff the ballots with votes, some even steal the box, some set it on fire, and it can be in general a complete shit show.

And you know that this happens because you need a shit show to mess election at that level. With electronic voting, you will not even notice.

Paper voting is inefficient and is what it makes it hard to break. You need a lot of manpower to alter an election. If you can alter the election result with manpower, the system that you use does not matter anymore.

Re:US elections remain 'dangerously vulnerable' to cyber-att... by elefanten on Monday August 13, 2018 @01:37PM (#17751930)
You didn't respond to any of the logic in the comments above.

Yes, you need some minimum of civil society infrastructure for paper ballots to be categorically more secure than electronic ballots.

But the article is about the US. In the US, paper is simply safer.

Re:US elections remain 'dangerously vulnerable' to cyber-att... by liberte82 on Monday August 13, 2018 @07:17PM (#17754314)
If the civil society infrastructure doesn't exist to secure free elections with paper balloting, then you're not really living in a democracy anyway, and you've got bigger issues to deal with.
Re:US elections remain 'dangerously vulnerable' to cyber-att... by beat on Monday August 13, 2018 @02:01PM (#17752149)
Driving is unsafe. I could drive right into a tree!

Yeah, well, don't drive into trees then.

Well-designed, verifiable, auditable paper ballot systems already exist in the US. In many states, the paper-based ballot process is completely safe and reliable. For those states that struggle, the correct solution is to look to the states that don't struggle, and imitate them.

Re:US elections remain 'dangerously vulnerable' to cyber-att... by rtkwe on Monday August 13, 2018 @01:47PM (#17752020)
That's more a problem with the system surrounding the paper ballot than the paper system itself. Switch to an electronic means in those countries won't remove the fixing problem just make it harder to see because the fix will happen before election day instead of the day of.

It's not just the paper system it's that the paper system can be monitored by representatives of each party, there's no good way to do that with an electronic system that doesn't at least create a separate paper record of the vote that's counted separately.

Re:US elections remain 'dangerously vulnerable' to cyber-att... by PJDK on Monday August 13, 2018 @12:23PM (#17751256)
Another major benefit of this is that the things that makes it trustable are very easy to understand.

If someone asks "why should I trust this count is correct" you can say "well these are the people that counted the votes - these are the people who watched (selected by parties A, B and C) and here's some video of it all happening".

That's a lot more comprehensible than "well, do you know what a blockchain is?".

Being trustable is great - but it also needs to be trusted!

Re:US elections remain 'dangerously vulnerable' to cyber-att... by beat on Monday August 13, 2018 @12:39PM (#17751402)
In another electronic voting thread last week, I had a highly upvoted comment describing the Minnesota paper voting system (credentials: I have been a MN election judge). Part of the beauty is that it's so easy to understand. You see all these interlocking checks, and how they work to make large-scale manipulation/fraud impossible.

I don't think my mom knows what a blockchain is.

Re:US elections remain 'dangerously vulnerable' to cyber-att... by ximeng on Monday August 13, 2018 @01:25PM (#17751780)
Re:US elections remain 'dangerously vulnerable' to cyber-att... by beat on Monday August 13, 2018 @01:42PM (#17751987)
Yes, that one.
Re:US elections remain 'dangerously vulnerable' to cyber-att... by wallace_f on Monday August 13, 2018 @12:46PM (#17751454)
>With electronic voting, the counting is done by machines and the mechanism is obfuscated and unverifiable.

Can someone explain why I am ignorant here: Is it not just feasible to open source and open access everything with only obfuscating voter identity as a hash? That way people can voluntarily make public their votes for third-party investigation?

Note: I'm not saying this is better than paper voting. But if voting is to be electronic then this seems like the best model?

Re:US elections remain 'dangerously vulnerable' to cyber-att... by hibikir on Monday August 13, 2018 @01:11PM (#17751661)
The ability to make your own vote public is a bug, not a feature: It allows people to demand you to show them that you voted "correctly", whether for straight out vote sales, or plain old intimidation from a group. A pastor/union boss that can be sure that a bunch of people really went to vote, and voted they way they want, is pretty powerful. At some point you make the "voluntary" part of giving away your hash to not be so voluntary, as only traitors would keep it quiet.

In many environments, secret votes and public votes lead to different outcomes: requests to make regularly public votes secret is not that uncommon in elections for private groups: Everyone knows that there's a big percentage of people that want to vote in an unpopular way, and suddenly either an old leader is ousted, or a very corrupt choice is made.

So no, the ability to voluntarily make your own vote public and verifiable is a dealbreaker for elections in a modern state.

Re:US elections remain 'dangerously vulnerable' to cyber-att... by logfromblammo on Monday August 13, 2018 @03:23PM (#17752849)
Example: I usually do not vote in the party primaries in my state, because the party that primary voters selected is public. Mostly, I don't want to get tagged by Big Data as having a political affiliation.

These combine with "at will" employment such that I could be fired for voting in the "wrong" primary for my company, with no laws broken. I'm not saying it has ever happened, but it could. Murphy's Law provides the rest.

In the general election, the only public information is whether I voted or not. So I vote as I please. I can still be fired for wearing only the minimum required amount of flair, but at least that's not interfering with democracy.

Public votes can also be sold. If you say you'll pay me $X if I vote for Y, making the Y vote public means they buyer can know that they got what they paid for.

Re:US elections remain 'dangerously vulnerable' to cyber-att... by PurpleBoxDragon on Monday August 13, 2018 @03:42PM (#17752975)
So would it be impossible to make a system that would allow a person to lie if needed and also prove that their vote was wrongly assigned if needed? I've seen cryptographic solutions to things that seem as impossible initially (like having a system verify you know your password without ever telling the system your password and without the system ever knowing what your password is), so I wouldn't be so quick to write off a potential solution to this problem.
Re:US elections remain 'dangerously vulnerable' to cyber-att... by ilikehurdles on Monday August 13, 2018 @01:10PM (#17751650)
How do you verify that the machine is running the same source code?
Re:US elections remain 'dangerously vulnerable' to cyber-att... by plopz on Monday August 13, 2018 @04:33PM (#17753409)
Its being debated whether ballot selfies should be allowed or not, because it is protected by free speech or because it violates current laws about voter bullying. So a system that allows third-party verification of an individuals vote is probably against the law, at least currently.
Re:US elections remain 'dangerously vulnerable' to cyber-att... by florabuzzword on Monday August 13, 2018 @12:02PM (#17751086)
Overall, well put, and those points are tough to discount.

> With electronic voting, the counting is done by machines and the mechanism is obfuscated and unverifiable.

Could a blockchain not address that with public/private keys? Why is this ridiculous?

Re:US elections remain 'dangerously vulnerable' to cyber-att... by lvh on Monday August 13, 2018 @12:17PM (#17751203)
The hard parts of voting systems are keeping 1 ratios 1 of voter and vote and preserving individual voter anonymity. Blockchains don't solve either problem better than paper, and if you're not careful you end up introducing subtle new voting problems (you should not be able to prove who you voted for -- _even_ if you hold a special credential) and shiny new operational problems like key distribution. All of this is at best a ton of risk for ostensibly very little benefit; at worst, your democracy is now owned by some rando with an Android 0day.
Re:US elections remain 'dangerously vulnerable' to cyber-att... by beat on Monday August 13, 2018 @12:24PM (#17751272)
Okay, let's start with the idea that it isn't ridiculous. For the sake of argument, let's say a blockchain-based voting system could be as verifiable as paper.

So what problem does it solve? What does the blockchain accomplish that a paper ballot does not? And what are the costs in terms of user interface and voter education, relative to paper?

Re:US elections remain 'dangerously vulnerable' to cyber-att... by dqpb on Monday August 13, 2018 @01:43PM (#17751995)
It makes voting faster and less expensive (practically free). That means you could have the public voting at arbitrary frequency. You could imagine a system where the public is voting every month, week, or day on what the country should do next.

I'm not saying this would be good necessarily, only that such a technology would enable fast, frequent, continuous control distributed across the population. Such a country would be very different from anything that exists today.

Re:US elections remain 'dangerously vulnerable' to cyber-att... by sleepingpills on Monday August 13, 2018 @02:37PM (#17752459)
This is assuming that the system would be inherently trustworthy and trustable with no human oversight. I have a nagging suspicion that over time this system would still settle in a state where we have just as many humans involved in ensuring everything is kosher as we have now, but compounded with a system that is less transparent for someone who is blockchain illiterate.

Assuming that voting would become effectively free, the second point does sound quite intriguing. It's the sort of direct democracy that is practiced by some countries (e.g. Switzerland). It does require a certain level of voter education though - so people look at the longer term. Otherwise you'll never push through an initiative that raises taxes for example.

Re:US elections remain 'dangerously vulnerable' to cyber-att... by nanimo on Monday August 13, 2018 @04:06PM (#17753178)
I haven't heard of a "practically free" blockchain yet, though.
Re:US elections remain 'dangerously vulnerable' to cyber-att... by xori on Monday August 13, 2018 @12:07PM (#17751138)
Because your vote also needs to be private to the point where a third-party can't verify that a vote belongs to you.

To prevent selling of votes, or forced votes via blackmail.

Re:US elections remain 'dangerously vulnerable' to cyber-att... by florabuzzword on Monday August 13, 2018 @12:13PM (#17751176)
Thanks. That’s the answer I was looking for. I guess there would be no way to verify privately.
Re:US elections remain 'dangerously vulnerable' to cyber-att... by xori on Monday August 13, 2018 @01:30PM (#17751846)
There's ways. A memorized "secret" that would be put on the ballot in addition to your vote could be used for you to verify a checksum.

The main issue is the hardware, and added complexity. But these are interesting problems that should be talked about.

Re:US elections remain 'dangerously vulnerable' to cyber-att... by evv on Monday August 13, 2018 @12:19PM (#17751217)
There are a large number of technical issues with blockchain voting. The thing about public key cryptography is that it is easy to create a new identity. But in a voting system you need to trust that each voter is a citizen and that they only vote once. This means that public keys of the citizens need to be securely collected by a government authority (for example your local DMV).

Plus we would need culture changes around key management, so that non-tech-literate people can create and protect keys. Which means the people would need some standard for secure hardware to generate keys and sign ballots. Which means we'd need some government standard for "trusted hardware", and that would quickly become an attack vector.

Only after all of that would it be possible for the government to trust votes via public key cryptography. And as Jacob says, the important thing is that the _public_ has trust in the vote, regardless of what government officials believe.

Re:US elections remain 'dangerously vulnerable' to cyber-att... by ljf on Monday August 13, 2018 @12:11PM (#17751159)
Re:US elections remain 'dangerously vulnerable' to cyber-att... by pjc50 on Monday August 13, 2018 @12:10PM (#17751156)
That still counts as "done by machines".
Re:US elections remain 'dangerously vulnerable' to cyber-att... by 8ytecoder on Monday August 13, 2018 @01:40PM (#17751960)
What is HN's view on the Indian Electronic Voting Machines? These machines are not connected to any network. They reduced invalid votes by a huge margin, increased trust in the system by making it almost impossible to stuff ballots, reduced the time to get the results by a very significant margin - even a full recount can be done in just a few hours. There are risks. IMHO, those risks existed with paper ballots as well. Also to note that this works well in India (so far no major complaints) primarily because it's accompanied by an independent Election Commission i.e., national/state/local sitting officials don't oversee elections.

https://en.wikipedia.org/wiki/Electronic_voting_in_India

Re:US elections remain 'dangerously vulnerable' to cyber-att... by ScottBurson on Monday August 13, 2018 @03:11PM (#17752741)
I can't speak for all of HN, but my own opinion is that if the machines don't produce a voter-verifiable physical paper trail, they are insecure.
Re:US elections remain 'dangerously vulnerable' to cyber-att... by doombolt on Monday August 13, 2018 @12:25PM (#17751285)
Paper voting means that you can hold very few elections and the like. This means choosing between representatives who nobody likes, and only discussing major questions. With electronic voting (not the black box kind of course) there's hope that democracy becomes more direct.
Re:US elections remain 'dangerously vulnerable' to cyber-att... by beat on Monday August 13, 2018 @12:42PM (#17751425)
That's actually a good point, better than the usual blockchain fetish nonsense. But two points...

First, that requires a new Constitution, throwing out our existing representative democracy and starting over with a new model.

Second, not everyone agrees direct democracy is a good idea. Adding a layer of focused expertise in the form of representation is arguably a very good thing.

Re:US elections remain 'dangerously vulnerable' to cyber-att... by boomboomsubban on Monday August 13, 2018 @02:04PM (#17752178)
>First, that requires a new Constitution, throwing out our existing representative democracy and starting over with a new model.

There are all sorts of changes that wouldn't require a new constitution, just likely an amendment. They're unlikely to happen though, as our current representative democracy would need to voluntarily give up some of their power.

>Second, not everyone agrees direct democracy is a good idea. Adding a layer of focused expertise in the form of representation is arguably a very good thing

There is a massive amount of room between a pure direct democracy and our current system. Our two party system removes any semblance of Democratic choice on issues the parties agree on.

Re:US elections remain 'dangerously vulnerable' to cyber-att... by beat on Monday August 13, 2018 @04:26PM (#17753344)
If both parties agree on something without significant contention, odds are a strong majority of the population also agrees with it. Which may or may not be a good thing (see racism, history of), but it does suggest that this idea that a handful of opposition can affect change through direct democracy is wrongheaded. It might matter for issues where the parties are well behind the public (ie the War on Drugs), but most of the time, it won't matter at all.
Re:US elections remain 'dangerously vulnerable' to cyber-att... by boomboomsubban on Monday August 13, 2018 @08:51PM (#17754813)
>If both parties agree on something without significant contention, odds are a strong majority of the population also agrees with it.

For this to be true, you need a majority of the population to be well informed voters, which just isn't true. I'd be surprised if 25% of American's knew about a US bomb blowing up a bus of schoolchildren recently, and doubt a strong majority would support that bombing. Yet my vote does not matter on the issue.

Re:US elections remain 'dangerously vulnerable' to cyber-att... by beat on Tuesday August 14, 2018 @09:29AM (#17757682)
And you want these willfully ignorant people voting more?

Not saying it's a bad idea. Questioning whether you're contradicting yourself.

Re:US elections remain 'dangerously vulnerable' to cyber-att... by boomboomsubban on Tuesday August 14, 2018 @04:53PM (#17761795)
I personally want more than two options, and I don't think the potential ramifications are more dangerous than our current model. I don't think the ignorance is entirely willful, either way I'll choose ignorance over malevolence any day.
Re:US elections remain 'dangerously vulnerable' to cyber-att... by dragonwriter on Tuesday August 14, 2018 @05:16PM (#17761985)
> If both parties agree on something without significant contention, odds are a strong majority of the population also agrees with it.

Not really, even on some highly salient issues. Universal public health care has had majority public support most of the time since the early 1990s, but the Democratic Party has opposed it (in favor of various complex public/private schemes with insurance companies front and center) as has the Republican Party.

It's even less true in issues that are of extreme interest to a narrow group and low public salience.

Re:US elections remain 'dangerously vulnerable' to cyber-att... by doombolt on Monday August 13, 2018 @02:01PM (#17752156)
There are other locales other than the US. Anyway, I guess you can eventually vote in such congress that they see their only mission in providing platform for direct democracy & safeguarding its availability.

Other than that, what I have seen in representative democracies (and authoritarian states) worldwide have never sparked the "expertise" feeling in me.

Re:US elections remain 'dangerously vulnerable' to cyber-att... by liberte82 on Monday August 13, 2018 @07:20PM (#17754334)
A layer of focused expertise is theoretically a good thing.

When these experts are bought and sold by corporations who write the laws to benefit themselves and hurt the people who voted for said representatives, the system is utterly broken.

Re:US elections remain 'dangerously vulnerable' to cyber-att... by dragonwriter on Tuesday August 14, 2018 @05:19PM (#17762006)
Lots of (even quite large) US states have had much more direct democracy than the federal government for quite a long time with paper ballots. Paper ballots don't prevent direct democracy in large polities, nor do they prevent voting systems with more nuance than FPTP.
Re:US elections remain 'dangerously vulnerable' to cyber-att... by PurpleBoxDragon on Monday August 13, 2018 @03:33PM (#17752902)
>Consider when evaluating these schemes whether there is any benefit or upside at all over good old fashioned unhackable paper.

Just because there is no immediate benefit doesn't mean there won't one day be benefit. Initial versions of many forms of technology were near useless and only became better after refinement. Just look at how useless the original electric cars were. But electronic voting, if someone could make it safe and secure, could have benefits we can't recognize.

The risk is implementing an incomplete system and the very likely possibility that any government attempt will be very lacking (and often filled with the standard amount of corrupt in similar large IT projects). I would not support removing the paper process currently, but I would support development going into electronic voting so that one day the technology will be mature enough for us to see benefits that current paper voting can't provide.

A few examples of what may one day be possible is massively lowering the cost to vote (for many poor people getting a few hours off of work to go vote ends up costing them far more than they value their vote being worth), making it possible to do voting a more regular event which would allow more direct democratic versions of government, the ability to have something we can trust more than slips of paper that have to be hand tallied (current systems are far less trustable, but future systems may be able to become more trustable than paper).

Re:US elections remain 'dangerously vulnerable' to cyber-att... by umvi on Monday August 13, 2018 @02:49PM (#17752555)
> at all over good old fashioned unhackable paper.

I think regardless of if paper or digital is used, we need an anonymous verification method. i.e. I can confirm that my vote was cast and tallied for X candidate. And if you got your whole community together, you could prove there are no injected or altered votes.

The receipt of a vote could be a UUID that you can then use later to verify your vote, for instance.

Re:US elections remain 'dangerously vulnerable' to cyber-att... by skrause on Monday August 13, 2018 @04:46PM (#17753508)
The verification method is called public counting. Here in Germany you can stand next to the ballot box all day to verify that nobody tampers with it and then attend the public counting of the votes.
Re:US elections remain 'dangerously vulnerable' to cyber-att... by paulddraper on Monday August 13, 2018 @08:25PM (#17754700)
> good old fashioned unhackable paper

I agree with you, but let's not kid ourselves.

"Vote early, vote often" did not originate with electronic voting. Paper systems are hackable as well.