Internet voting is insecure and should not be used in public elections

442 pointsposted a month ago
by WaitWaitWha

322 Comments

ggm

a month ago

I live in an economy where people vote with pencils on paper in cardboard booths and at scalable cost, it just works. Obviously the cost also has to scale linearly for the 200+m voter economies, and time becomes a factor, but for community acceptance I still think paper and pen/pencil beats machine hands down.

(this is Australia. we have compulsory attendance at voting booths for eligible citizens, you can spoil your paper or walk away but we enforce with a fine, participation in the one obligation of citizenship)

-I have been offered voting remotely in elections for my home economy of the UK and I would have welcomed some kind of homomorphic encrypted, secured voting method, given I have done KYC with the UK government to get my pension paid, I don't see there is a problem with them knowing who I am online.

I therefore do not totally agree with the headline, but I'm willing to be convinced by the article, because comparing the land of hanging chad to my own, I think paper and pencil is just fine. BTW we have a senate election which demands ballot papers cut from A0 paper in long strips. Hundreds of boxes to be filled in. What we don't have is the vote for every judge, official, proposition on the table, we just elect representatives and senators, but we have a complex vote method. It just works. We do machine reading, but every single paper is reviewed by people, and parties have rights to monitor the vote, in secured spaces. We do not have a serious concern with the integrity of our vote, and the question is regularly asked and tested. (it's not just because we believe its secure and don't check)

Its a great list of signatories, includes people I respect. I would think that the prime question for americans is "how much worse or better than the current approach could this be?"

Tagbert

a month ago

Where I live we vote by mail by filling in little bubbles with a pen. the counting is done by simple photoelectronic tabulators and there is a built-in, human readable record that can be checked by hand. It is very economical and hard to compromise at a scale that has any effect. i hate the idea of using internet voting. I also don’t trust the electronic voting booths where the whole action is virtual or the older mechanical systems with the chads. Just a pen and paper is sufficient.

schmuckonwheels

a month ago

>Where I live we vote by mail by filling in little bubbles with a pen.

>It is very economical and hard to compromise at a scale that has any effect.

Vote-by-mail creates unnecessary opportunities for cheating, irregularities, and all sorts of foolishness. If you can fill in the bubbles, you could theoretically fill them in for other people. People living with parents suffering from dementia could fill out their ballots without them knowing and vote multiple times. You don't even need a valid signature; states allow witnesses to vouch. Ballot boxes get vandalized. Ballot harvesting is rampant. There's so many problems. It's for the same reason universities don't allow take-home exams.

Vote-by-mail states are open targets for mockery (and rightfully so) as it routinely takes days or weeks to count all the ballots and declare a winner. Third-world backwaters can do it in the same night. This is a solved problem.

Whenever vote-by-mail is criticized, people get really upset. How do you think the other states do it? The argument about not being able to take off on election day doesn't hold water. Most states allow early voting for weeks. If you can find time to visit a post office or ballot box, you can certainly go to the library or a church basement for the 5 minutes it takes to fill in the bubbles, stick it in the machine and you absolutely know it's counted. And results will be available election night.

camgunz

a month ago

These problems are all theoretical. If you actually tried to implement them at the scale you'd typically need to sway a federal election you'd find it pretty unworkable. And in close elections, the recount process is pretty intense, so it's even less likely that you'll be successful.

You'll probably want more detail. Ballot harvesting can't work because data analysis shows weird patterns like this ("huh this nursing home went 95% Biden whereas every other nursing home in the county went 55%"). Recounts do signature validation and lawyers from either party can challenge any ballot they want. Voters are contacted to cure their ballots. I've worked on the Democratic side and been heavily involved in doing all of this. We had armies of lawyers, software and data engineers, and organizers.

Most of the pointing out opportunities for fraud comes from a place of like, reasoning from first principles. But elections are huge undertakings involving tons of people. It's hard to successfully commit election fraud at a large enough scale to sway a federal election. It's why foreign adversaries prefer to swarm social media with bots: it has a chance of working.

beej71

a month ago

The thing is, right now we have very little evidence that there is any significant mail-in voting fraud.

But we do have a fair amount of evidence that there is suppression of in-person voting.

So neither of these systems is perfect, but we should go with the one that gives us the most accurate legitimate vote.

Someone else posted a list of ways that in-person voting would be more acceptable, e.g. having a large window to cast ballots. But instead, we see move the other way, trying to restrict the window in which we can cast ballots.

You put a free ID in the hands of every legitimate voter and give them enough time and opportunity to vote, and then I will consider in-person to be on par with mail-in.

crote

a month ago

> People living with parents suffering from dementia could fill out their ballots without them knowing and vote multiple times.

Or more subtle: watching them vote, with the implicit threat of violence if they vote the "wrong" way.

> The argument about not being able to take off on election day doesn't hold water.

In my country it is mandatory to give time off to vote if necessary. But the booths are open from 07:30 to 21:00, are located in a bunch of convenient locations (schools, libraries, train stations, shopping malls), and have basically zero waiting time, so in practice rarely anyone needs to make use of it.

ralph84

a month ago

Ballot harvesting is viewed as a feature, not a bug, by the people who control vote-by-mail states.

ggm

a month ago

Because they operate in a non good faith model where discouraging voting and gerrymander is normalised. The electoral commission is politicised, not neutral and independent. Because voting is held at times and dates which disadvantage working poor, because voter ID rules are capricious and partisan.

joe_mamba

a month ago

>because voter ID rules are capricious and partisan.

Can you elaborate?

croon

a month ago

When looking at supporters of voter ID laws, look at whether they support free IDs, expansion of DMVs/issuers of IDs, etc.

Similarly, opposition of mail-in-voting typically ignores or supports closing down polling places (in strategically partisan areas), making it difficult for groups of people to vote.

These issues are always (by design) discussed in isolation, while ignoring the intrinsically related issues.

TL;DR: Voter ID laws are fine, only if, coupled with universal free IDs for citizens. And no mail-in-voting would be fine, if voting occured on a national holiday, and polling places were reachable by all eligible voters. This is not supported by any (elected) proponent of voter ID laws or opponent of mail-in-voting.

iamnothere

a month ago

My proposal:

- Free FEC federal voter ID (requires proof of citizenship) to be used ONLY for voting

- Voter ID can be obtained early (age 16?) but DOB is connected to ID and you can’t vote before the legal age

- Funded FEC program to register students for voter IDs at schools and colleges and teach them about voting

- FEC to work with agencies like social security and IRS to determine if a voter is deceased (messy process). Likely deceased voters are communicated to the states ASAP. States must report confirmed deceased voters to FEC ASAP for recording.

- Federal 2 week minimum early voting period

- Federal funding and monitoring of elections requiring adequate polling site coverage of geographic areas, notification of residents, etc

- Federal program to provide free shuttle to and from nearest polling station for residents without transit. Operated federally, states have no involvement. Contract with private transit as FEMA does.

- Mail in ballots heavily restricted, must provide proof of absence or be military

- Voting day is a national holiday

- Federal ballots are separate and simplified to speed up counting/recounting (ballot complexity is often cited as a reason for slow counting)

It will never happen but this would solve so many issues.

GJim

a month ago

> Where I live we vote by mail

The problem with this, like internet voting, is that you can be coerced.

e.g. a family member or your boss can tell you who to vote for and force you to submit that vote.

Whereas a polling both is utterly private; you are alone and free from coercion. Nobody else knows who you voted for and they have no way of telling.

In the UK, our voting is also done by paper and pencil. The votes are counted overnight by humans (with plenty of checks, independent oversight and rights of recounting) with the result typically declared the next day.

Its secure, and it just works.

edmundsauto

a month ago

If you limit your perspective to the people who can do it, yes. If you feel it’s important to enable everyone to participate, it doesn’t “just work”

Given the ample attention recently, with no evidence of impactful fraud, it sounds like disenfranchising citizens for no reason other than unrealistic fears.

But now that one party sees their voters increasingly use mailin, I expect to see a shift in opinions quickly. (Recent evidence suggests democrats benefit from low turnout more)

giobi

a month ago

You can be coerced with paper and pencil too. In Sicily mafia gives you a voting paper with a predrawn X on the candidate they want, and you must come out with a clean voting paper so they are sure you did leave the pre-voted one.

GJim

a month ago

In the UK, you are handed a ballot paper in the voting room by an official immediately before you go to the polling booth; the ballot paper has an official mark on it, meaning no pre-printed or duplicate ballot papers are possible.

This makes the attack you described impossible (short of having every official in the voting room being corrupt).

JanisErdmanis

a month ago

Isn’t it still possible for the voter to not cast this ballot paper and bring it to the coercer who waits outside? Then the coercer fill this ballot and ask the next voter to cast it and bring back a blank ballot paper?

DreadY2K

a month ago

> e.g. a family member or your boss can tell you who to vote for and force you to submit that vote.

Where i live, you can show up in-person on election day to override a mailed ballot, if you're in a situation like that.

sirdvd

a month ago

>The problem with this, like internet voting, is that you can be coerced. As an example against coercion, on belenios faq they say that they let voter vote several times (and they count just the last vote).

M95D

a month ago

How do you authenticate yourself for voting? Is it possible for the "boss" to prevent you from voting again for example by changing the password?

golem14

a month ago

The problem, as I understand it, is that if you can prove to yourself that your vote was counted right, you can also prove it to the guy with the sledgehammer next to you saying "it would be a shame if something happened to your family, so prove how you voted"...

endgame

a month ago

There are some really clever systems that let you prove that you voted without leaking how you voted.

Unfortunately, explaining them to Joe Q. Public in such a way that he's going to trust your election is a very tough sell, whereas counting paper is a much easier process to explain.

And that's before you begin worrying that the developer of your whizz-bang mathematically-provable voting system is a) going to win the bid to build it for the government, b) implements it correctly, and c) isn't subverted while doing so.

croon

a month ago

I have had this discussion many times before, with people smarter than me, and I have not yet reached a counter argument to the idea that if you can only prove that you voted (and not couple each vote to a voter), how can you prove that innumerable votes were added to the record, or that your vote is correct?

You can either couple every vote to a voter and risk oppressive monitoring of votes at scale or coercion at micro level, OR you can have decoupled voting proving that your vote was counted, but not have convincing proof that your vote or anyone else's are accurate.

Please prove me wrong because I would love it if it was possible.

Edit: Booth/paper-voting solves this by:

* linearly scaling cost of multi-party verification of identity at time of voting

* your vote being anonymous and being decoupled from you at time of deposit

* you trust the system at scale since each step in the chain-of-custody has many-eyes-verification

* vote amount is grouped by location so vote insertion can't happen at scale without coordinating with each involved polling place to fudge each of their numbers

* you can't insert into one area without having a random 100k population increase in a polling place overnight

rstuart4133

a month ago

You could try reading the Wikipedia article on the end to end voter veritable system called Prêt à Voter. https://en.wikipedia.org/wiki/Pr%C3%AAt_%C3%A0_Voter It's not that hard to grok how it works because there is no complicated math involved.

It allows any voter to verify their vote was accurately recorded in the reported total. The usual argument against is you need a lot of people to verify, and most won't. That's probably true when everyone is confident in the outcome, but I'm not so sure it works be true if there was a wiff of fraud in the air.

> how can you prove that innumerable votes were added to the record, or that your vote is correct?

In Australia it's easy to prove no votes to the record because everyone on the rolls must vote, or they get fined. Ergo total votes must equal the number of people on the roll minus the number fined. As for "your vote was counted" - read the Wikipedia article. These systems do prove that, while keeping your ballot secret.

croon

a month ago

> You could try reading the Wikipedia article on the end to end voter veritable system called Prêt à Voter. https://en.wikipedia.org/wiki/Pr%C3%AAt_%C3%A0_Voter It's not that hard to grok how it works because there is no complicated math involved.

> It allows any voter to verify their vote was accurately recorded in the reported total. The usual argument against is you need a lot of people to verify, and most won't. That's probably true when everyone is confident in the outcome, but I'm not so sure it works be true if there was a wiff of fraud in the air.

There are a number of application details which wildly alters whether it's workable or not, where workable leans fairly close to current scalable cost, in which case the added benefit is minimal.

> In Australia it's easy to prove no votes to the record because everyone on the rolls must vote, or they get fined. Ergo total votes must equal the number of people on the roll minus the number fined. As for "your vote was counted" - read the Wikipedia article. These systems do prove that, while keeping your ballot secret.

Yes, but only by using as much verification as paper ballot casting, which is already provably robust and even more verifiable due to decentralization.

Skimmed these:

https://www.usenix.org/legacy/event/sec05/tech/full_papers/k...

https://www.researchgate.net/publication/277296393_Pret_a_vo...

rstuart4133

a month ago

> Yes, but only by using as much verification as paper ballot casting

I'm not sure what you are getting at here. A voter can not verify their vote in the current paper systems. Using these systems they can.

There are two kinds of attacks: typically classes as retail and wholesale. Retail attacks happen at the front end: stuffing ballot boxes, coercion, vote buying. As the effort involved roughly corresponds to the number of votes altered changing a large enough volume of votes to alter the outcome will be detectable using robust social systems, which boils down to teams of people watching each other.

Wholesale attacks happen when the vote is processed after they have been cast. An example is altering vote counting machine to lie about the votes counted. As they can systemically alter large numbers of votes they can be very difficult to detect even using statistical megtods. They are impossible to pull off when everything is done manually as teams watching teams still works, and you have to corrupt a lot of people. But when you introduce automation and machinery they voting system becomes vulnerable to this sort of manipulation.

Yes, "just continue to do everything manually using pencil and paper" does mostly eliminate wholesale attacks. But the reality is we are ditching pencil and paper for more automated processes. A famous example is a Diablo voting machine in some USA state, failed before regurgitating it's vote count (the "Volusia Error"). A man with a screw driver duely arrived, modified things, and handed over what he said was the correct vote count.

We are automating voting with voting machines and vote tabulators for good reasons. They are easier to use, particularly for the disabled, they are faster, they are cheaper than redundant teams of people, and they more accurate than manual methods. They are already arrived, and their use will only grow over time. Pleas like yours to "just use paper" are having little effect on their inceasing adoption.

The other option is to insist these machines and systems are end to end cryptographically verifable. That makes wholesale attacks these automated systems facilitate detectable. Currently we are deploying these systems without such safeguards. IMO this is insanity.

croon

a month ago

> I'm not sure what you are getting at here. A voter can not verify their vote in the current paper systems.

In the current paper systems you don't have to, as you know what you put on it before it got anonymized and counted as one vote by the teams watched by teams.

> Using these systems they can.

In theory, yes. In practice, barely. If it was easy/practical it would be intrinsically susceptible to coercion.

In general, I agree with everything you write except for this paragraph:

> We are automating voting with voting machines and vote tabulators for good reasons. They are easier to use, particularly for the disabled, they are faster, they are cheaper than redundant teams of people, and they more accurate than manual methods. They are already arrived, and their use will only grow over time. Pleas like yours to "just use paper" are having little effect on their inceasing adoption.

The only "good" reason would be cost, but I wouldn't agree that it's a worthy trade-off. They could be easier to use, but it seems generally to be prone to UI issues making it unclear who/what you're voting for.

I'm sure their use will grow over time, but it won't be for any reasons that are good for democracy.

godelski

a month ago

Proving that you voted is different than proving you voted for a specific candidate.

In fact, the one isn't nearly as big of a privacy concern (if any at all). I wouldn't be surprised if someone told me the former could be done with some XOR scheme, but proving that both you voted and your vote counted for a specific candidate while keeping that a secret is a much more difficult task

lategloriousgnu

a month ago

In Australia, which has mandatory voting, they literally just check your name off the voter roll when you arrive at the polling station. Each polling station has a list (digital or paper) of people registered to vote in that electorate.

After your name is checked off, you then proceed to a booth where you mark a piece of paper before folding and placing that paper into a plastic collection box on the way out.

It's very analog and the electoral commission have no way to know if you actually voted or who you voted for. They only know that you turned up to the polling station and gave them your name.

I assume the number of people who turn up at the polling station, only to walk away without voting is so small that it's not seen as a problem to solve.

yazantapuz

a month ago

Years ago in Argentina, a corrupt politician forced a small community to vote for them using a clever trick. They instructed the voters to fold their ballots into a specific shape or figure. Since the paper wasn't torn or damaged, the votes remained legally valid. This allowed the politician to ensure the exact number of promised votes were in the ballot box during the count

M95D

a month ago

But votes aren't counted by how the paper is folded. Any one of the voters could stamp/mark another name (or no name at all) and still fold the paper as instructed. So, how does that work?

yazantapuz

a month ago

Because there was no unique ballot where you mark a name. Each party has it own ballot.

tucnak

a month ago

I thought there were ZKP constructions that produce forward-secret receipts, while allowing to re-vote so that only the last vote would count, without ever breaking the original receipt.

The receipt would id candidate

KPGv2

a month ago

> proving that both you voted and your vote counted for a specific candidate while keeping that a secret is a much more difficult task

Just have a code show the truth (for you to verify) and a second code to show a lie (in case of threats).

godelski

a month ago

Sure. But if you talk about anything from a high enough level it's trivial. The hard part is actually implementing that.

KurSix

a month ago

As soon as a system gives you a receipt, a cryptographic proof, or even a reliable way to re-verify later, you've created something that can usually be repurposed as evidence for a third party

testing22321

a month ago

Australia has very strict laws about who can be near a polling place, and certainly nobody can be inside other than the few certified officials running the show.

Guy with sledgehammer is at least a block waylay, and everyone knows that everyone votes, by law.

axus

a month ago

Obviously the person with the sledgehammer is a law enforcement officer working for the populist politician.

badestrand

a month ago

By that logic we have to get rid of mail-in voting as well because there could always be a sledgehammer guy standing next to someone in their own home.

endgame

a month ago

Yes. Here's a 2014 BBC article about that:

https://www.bbc.com/news/uk-politics-26487418

The article quotes one Mr Richard Mawrey QC:

> "Postal voting on demand, however many safeguards you build into it, is wide open to fraud… on a scale that will make election rigging a possibility and indeed in some areas a probability."

> "Now I know that there is a very strong political desire to keep the present system. What I'm saying is that if you keep the present system, then however many safeguards you create, fraud and serious fraud is inevitably going to continue because that is built into the system."

somenameforme

a month ago

In reality sledgehammer guy is never the threat, it's somebody fabricating votes. This can be done in a completely illegal fashion as in complete identity fraud, legally grey areas like ballot harvesting, or more socially palatable forms of identity fraud like somebody voting on behalf of family members who would not otherwise be voting.

And the biggest problem of this all is that it's basically impossible to prove because there's no meaningful identifier at any given point in the process. The only real evidence you'd have is a bad signature, yet in 2020 some states ceased comparing signatures and signature comparison was, in general, bizarrely under attack by certain interest groups.

habinero

a month ago

This is 100%, completely absolutely untrue. Stop repeating this propaganda. The system is actually really well designed and safe, I was a poll observer.

You cannot "fabricate" votes, because all mail-in ballots are associated with a voter. Or rather, you put your ballot in an envelope and the envelope is associated with you. When your ballot is received, you are marked as voted and other ballots are invalid. The envelope is stored as proof of who voted and the ballot is kept separately to be tallied.

Ballot counting is done in public (you can go watch!) and there are a lot of safeguards and crosschecks. It's intended to make any fraud very obvious and incredibly difficult to scale.

yonaguska

a month ago

Claims of voter fraud have shifted to mass voter registration occuring for people that are not eligible to vote, then ballots being sent out without being requested. How is this concern addressed?

habinero

a month ago

Yeah, and those claims are made up to scare people who don't know how it works.

The government knows who is a citizen and who isn't lol, they literally have the records.

Voter rolls are very closely scrutinized. Dead people are, in fact, taken off the rolls. There is essentially ~no voter fraud and ~no instance of non-citizens voting in this country. Yes, it's audited and studied. Yes, they keep the data and you can audit it.

You're literally complaining about it being easier for people to participate in democracy, and you should stop.

Everything's a conspiracy when you don't know how anything works.

somenameforme

a month ago

From the mail-in ballots from 2024 alone, tens of thousands were returned because somebody had already voted. If you're generous that is 'accidental attempts at voter fraud'. If you're realistic those are going to largely compose a small percent of all successful efforts at voting on behalf of other individuals.

And this for elections which are increasingly decided (in terms of flipping the electoral college one way or the other) by votes in the tens of thousands to low hundreds of thousands. So the scale of fraud in US elections is likely greater than the minimum margin of electoral college victory in them.

--

You also are substantially overstating the degree of organization of voter rolls. Voting in the US is heavily decentralized by design, which is what enables various states to have completely different electoral systems. But more specifically voter rolls are maintained by the states themselves and that, in turn, is typically further decentralized down to counties themselves.

This leaves a significant degree of inconsistency. In general I do not think that double voting or completely ineligible voting is a significant factor - nowhere near as much as voting on the behalf of others, but it certainly happens. For instance thousands of mail in votes were rejected because they came from dead people, and it is highly unlikely that 100% of these attempts were caught.

zamadatix

a month ago

Some do think so, but there is also a material difference in needing to be intimidated at the time of the vote being cast vs any point in the future as well.

godelski

a month ago

I think the bigger concern is that mail in ballots lead to fake ballots being submitted. Though I've seen no convincing evidence of this happening at any meaningful scale and the arguments seem unconvincing since you don't get a ballot unless verified with a state ID and your ballot has a unique ID associated with your name, preventing a double spend.

Personally, my concern is that with mail in ballots some nutjob that believes there's ballot stuffing can set fire to the ballotbox and even though they're caught it's a major inconvenience to get a replacement ballot and the websites that show your ballot is received take days to update.

But I still love mail in voting. My state sends a candidate brochure with it and I can take my time to actually look up all those random candidates' policies. It takes me hours to actually fill out my ballot but that's a feature, not a bug (there's nothing preventing you from along party lines but frankly I'd be happier without parties)

somenameforme

a month ago

In 2020 a number of states were sending out mail-in ballots to every single registered voter, even if they didn't request it. Those states were CA, CO, DC, HI, NJ, NV, OR, UT, VT, and WA. [1]

[1] - https://www.brennancenter.org/our-work/research-reports/voti...

habinero

a month ago

And that's completely fine, because each mail-in ballot is associated with one voter, and the system is designed to make fraud very obvious and difficult to scale.

If thousands of people were told "you already voted" when they showed up, then that would be very very obvious.

They also really do look at signatures and contact voters to cure ballots if they're unsure.

somenameforme

a month ago

Mail-in ballots tend to be counted (and received) after in person ballots, so you don't need to worry about in-person conflict. If we go the other direction (mail-in ballot rejected because the person had already voted), it was indeed in the tens of thousands. In 2024 about 584k ballots were rejected. [1] 11% of those, more than 64k, were because the person had already voted.

[1] - https://ballotpedia.org/Election_results,_2024:_Analysis_of_...

godelski

a month ago

Not to mention that you can catch double voting across state lines. It's not common that people do this but it does happen and people are really looking for it.

Hell, the fact that so many people have been looking for massive voter fraud for about a decade now and haven't is pretty telling. People aren't good at keeping secrets and if it's being done at scale it would be uncovered or leaked. Accidents and stupid people happen, but that works both ways

direwolf20

a month ago

What's wrong with that?

yonaguska

a month ago

People were being unknowingly registered to vote, even if they weren't eligible to vote when they would get IDs. People move. They get sent ballots. Now you have tons of ballots that aren't really valid, but they're out there and usable. It makes illegal ballot harvesting a lot easier as well if there's no active step where the ballot must be requested. I have to request my ballot every election. it takes 5 minutes, I can do it online and I assert that I'm a citizen and am eligible to vote. I can also do that by mail and I get a mailer to do so. There's no reason to not implement that safeguard.

usefulcat

a month ago

> I can take my time to actually look up all those random candidates' policies

But you can already do that, regardless of mail in voting or not?

godelski

a month ago

In the booth I've never had a voter guide and you're definitely discouraged from pulling out your phone.

Not to mention the peer pressure. What asshole is going to stand in the booth for hours voting? I got to get to work!

Sure, you can do all this at home but there's a clear convenience when having both in hand

Detrytus

a month ago

For me the problem with mail-in votes is that they are (in many jurisdictions) allowed to come in long after the in-person voting is closed, and the preliminary results are annouced. So it creates the space for manipulations, where you count the in-person votes first, and, if the score is close, then a week after the election day half a million of mail-in votes mysteriously comes in and swings the vote one way or another.

ab5tract

a month ago

The postmark must be on or before voting day. I cannot fathom how people have bought into this idea that they can be sent after the preliminary voting has happened.

matsemann

a month ago

If you however can go to a polling place afterwards and cast a new vote, that solves that issue, right? And then your mail-in just doesn't count.

dietr1ch

a month ago

Yeah, and you should get rid of that

WWLink

a month ago

By that logic we should require DNA testing because, you never know, someone might go to a polling place and lie about their name and have a fake ID too.

You never can be too careful!

Also, maybe someone inside will take their ballot from them.

IMHO this voting thing is too risky. We should just go back to having a ruling family /s

zug_zug

a month ago

Such a weird argument. I've never met anybody with a sledgehammer threatening votes. Feels like a willfully absurd excuse to avoid having an audit trail in elections.

pdpi

a month ago

Then you haven’t lived under a dictatorship. It might not be a sledgehammer, but breaking voter secrecy and pressuring people to vote the “right” way is very much a thing.

notpushkin

a month ago

This. In Russia, employees of all sorts of organisations are “encouraged” to vote for a particular candidate or party (not always the ruling party, though it doesn’t really matter for different reasons I won’t get into).

As far as I know, these votes have gone mostly unchecked before electronic voting, but after that, they’ve started voting straight from the workplace computers. There were, of course, a lot of straight-up falsifications as well.

That said, our pen-on-paper voting isn’t too legit either :’)

somenameforme

a month ago

In the sort of scenario you're talking about the dictator doesn't care how people vote. 'The people who cast the votes decide nothing. The people who count the votes decide everything.' If he has such a lack of control that a mere election, which is to be counted fairly, could have him leave power, then it'd be somewhat farcical to declare him a dictator with all the connotations such a term implies.

anabab

a month ago

Yes but no. The looks are also important. They want 80-99% to stroke their ego and nice pictures to claim legitimacy. The latter seemingly being useful both internally and externally.

golem14

a month ago

Clearly, you haven’t lived behind the iron curtain. Checking up on what people do, and how they vote, would factor in promotions, school access for kids etc. this is by no means hypothetical.

I encourage everyone to look up the relevant sources, easy to find.

EGreg

a month ago

Can you actually back this up? I have seen this argument before thrown around like dogma, even though I have NEVER seen it in the modern world.

The closest I can think of is rare cases like this: https://en.wikipedia.org/wiki/Bushel%27s_Case

shushpanchik

a month ago

There are lots of reported cases in Russia, when your manager requires you to take photo of your paper ballot and show it to them, otherwise you have problems.

You can try to google-translate [this, for example](https://holod.media/2024/03/08/soprotivlenie-putinu/#h-3-%D0...)

EGreg

a month ago

Reported as in an advice article that claims it’s happening? This same article gives advice for what to do if it happens with paper ballots in real life! So clearly, paper ballots aren’t a panacea. And there is a far larger problem with paper ballots: you cannot check whether your vote was even counted correctly. With properly designed crypto electronic voting systems using eg Merkle trees that doesn’t happen. There are ways to make sure your vote was correctly counted while at the same time not being to prove to anyone how you voted.

joe_mamba

a month ago

You don't need a dictatorship to nudge people to vote the "right" way, just incentives for the masses:

  Vote for me and I'll increase your pensions, the other guy wants to decrease your pensions.

  Vote for me and I'll increase wages of gov workers and civil servants, the other guy wants to fire gov workers.

  VOte for me and I'll increase your welfare and give you free* housing.
etc... etc.

The gov has masses of people that depend on the gov's generosity that they can leverage with a carrot on a stick to swing the majority in their favor. You don't need to put a gun to their head. The gun to their head is the threat of losing those government provided perks.

That's how elections are won in Europe, just promise the boomers(largest voter base) higher pensions. That's why nobody who campaigns on reforming the pension system will ever win an election.

gus_massa

a month ago

At some level, incentives, masses bribes and political polices are interchangeable. A few almost real examples from Argentina:

Party A) Keep the 80% discount in the electricity and gas bills

Party B) Reduce inflation from 200% y.o.y. to 50% y.o.y.

Party C) [I don't remember]

Party D) "A normal country"

---

PS: D was a slogan, they got less than 5% of the votes.

vineyardmike

a month ago

I agree with the other comment about dictators and similar threatening voters, but at a mundane level: domestic violence.

People do, in fact, threaten or coerce their spouse and that extends to voting.

Being able to audit from a secure counting room and being able to produce an always-available-online permanent record is different.

somenameforme

a month ago

You haven't in any way prevented this scenario. Somebody could just as well demand that their spouse take a photo or video of their vote. Yeah no cameras allowed in the voting booth is a rule, but it's not like it's enforced or even realistically enforceable.

MikeRichardson

a month ago

The "no cameras/no phones" rule is absolutely enforced in Harris County, Texas, although as an election worker I have never seen this escalate beyond "Please put away your phone". Workers are to ask the voter to put it away and if not done so immediately they are to notify the election judge (top official for that location/precinct). Judge will approach and ask again and cite the actual Texas law and show the voter a posterboard with the law printed in at least 4 different languages.

At this point, if the voter has not checked in yet, we can refuse to do so. Either way, if the phone/camera is still out after the judge has asked and shown them the law, judge is to immediately call the constable's office (police), who have been positioned nearby (but never directly at any vote center, due to possible intimidation). The constable can and will remove the man from the vote center. (It's never escalated that far!) (arresting that voter for any length of time might be problematic on election day for obvious reasons).

The most common complaint is "but I wrote up all my selections on there!" and for these voters we can provide a paper "sample ballot" and even a pen and they are free to mark their selections outside of the room and then come back to vote on the machine. One location was a church that was even gracious enough to allow a gentleman to AirPrint his notes.

Also of note, we do not have any kind of a "booth", however, the machines are typically placed rather far apart, and no one is allowed to queue at or near the machines, or linger there after voting, so I believe that privacy is effectively maintained. (Workers including judges are not even allowed to linger there unless assisting a voter who has specifically asked for help, and even then, there's more rules - if the voter needs help actually making the selections for candidates, now you need at least one judge and one clerk, one of whom must observe and ensure that the voter's selections were made correctly.)

We also got rid of the problematic "digital only" machines several years ago, but this post is too long already.

degamad

a month ago

The solution in Australia is simpler - you don't submit the vote that you took a photo of. You can get a ballot, fill it out the "right" way, take a photo, erase the markings, write on your preferred vote, and submit that.

Even if you ignore the pencil they give you and use a pen, you can simply tear or damage the paper, take it back to the elections officer, ask for a new ballot, and fill that out instead. We make it as hard as possible to coerce a vote while maintaining secret voting (noting that it is definitely still possible, just hard).

somenameforme

a month ago

Are there no polling stations where you can submit the ballot in a private location, like a drop box inside a booth or whatever? In the US I've only voted electronically, and it's done in a private booth with a curtain preventing external visibility, so somebody can easily video record the entire process with no realistic way of altering their vote.

degamad

a month ago

No, the booths where you fill out your ballot are on one side of the room, and the ballot boxes are on the other, supervised by an election officer, and near the exit. You:

- collect blank ballots (usually 2 pieces of paper, one for the House, one for the Senate) at the entry,

- walk over to the booth,

- fill out your ballot in secret at the booth (taking as long as you like),

- fold the ballots,

- walk over to the ballot boxes,

- drop the folded ballots into the corresponding box (House ballot in the House box and Senate ballot in the Senate box),

- then leave.

As no-one sees what you write at the booth, you can vote legally, draw pictures on your ballot, write obscenities, write nothing, or a combination.

femto

a month ago

> it just works

The biggest reason "it just works" is that the Australian Electoral Commission, the organisation that sets electoral boundaries and runs the election, is independent of the government. Other reasons are compulsory voting and preferential voting. In my mind, it is these three things that keep Australia's democracy relatively healthy.

direwolf20

a month ago

And yet the people keep voting for some of the strictest internet surveillance laws in the world.

"The laws of mathematics are very commendable, but the only law that applies in Australia is the law of Australia" said a politician asked about his policy of making encryption illegal.

KurSix

a month ago

Paper systems fail locally and noisily; internet systems fail silently and at scale

ChrisMarshallNY

a month ago

I've heard great things about the way that India votes.

It sounds like their Election Commission takes their job very seriously.

phanimahesh

a month ago

Very. Every voter is guaranteed a booth nearby (<2km away from registered address). Including a monk who gets his own polling booth because he lives so far from everyone and everything else. https://www.aljazeera.com/gallery/2024/5/8/an-election-booth...

Also https://www.reuters.com/world/india/family-remote-himalayas-...

seanmcdirmid

a month ago

As a kid living in Vicksburg MS in the late 80s, this is what irked me about in person voting. We lived in county but in a fairly dense suburban area with some biggish apartments nearby (SFH was mostly white, the apartments were mostly black). Our polling site was way out in the boonies, somewhere you could never get to without driving for 45 minutes...I was shocked when my dad took me with him.

There was really no good reason for that, unless they were really against a certain segment of the population voting (a lot of people in the apartments didn't have cars, or were too busy to go so far to vote).

autoexec

a month ago

Yep. Physical voting places are great, but they're also an easy target for voter suppression. There should be a requirement that there be a nearby polling location, we should also have multiple days to vote there and employers should be required to give every one of their employees at least one of those days off.

seanmcdirmid

a month ago

Georgia made sure African Americans had crowded long line voting locations with no access to water. It wasn’t hard to figure out why they were doing that. The South is still pretty racist.

galago

a month ago

I observed this in New England while living in a city with evenly distributed population. The polling locations were more abundant in the wealthier side of the city. This may not have been straight racism; there was no way for me to determine why this was the case. Looking at a map of median income and polling locations made it pretty obvious to me at least that polling location choice was biased.

the_snooze

a month ago

It could be as simple as "wealthy areas get more county services." There are practical considerations when choosing polling places, like the availability of parking and enough space to accommodate a line, check-in tables, voting booths, and ideally separate entrance and exit doors. Public schools and county rec centers are go-to locations because the county (who administers the election) already owns them and they have the space needed. Churches are great too, but they require having an agreement with a private organization.

seanmcdirmid

a month ago

By New England I guess you just mean Boston and the Boston area right? I'm unaware of any other huge concentrations of African Americans in that region. Boston is well known for its racism, I actually had a friend from Boston when I was living in Vicksburg MS and they got along there much better than me.

topspin

a month ago

> It sounds like their Election Commission takes their job very seriously.

A key part of India's system is the Elector's Photo Identity Card (EPIC), required to cast ballots. Similar obligations are present wherever election integrity is taken seriously.

creata

a month ago

Australia, as far as I know, doesn't require voters to show identity documents, and they seem to take election integrity very seriously.

KiwiJohnno

a month ago

We do not. Elections here are run very smoothly, with no questions whatsoever about their integrity.

ggm

a month ago

No un-answered serious questions. Serious questions are asked, regularly, as well as un-serious ones by cookers. But, the serious questions, the audit, the sense "did we do ok" is continuously asked.

We have an independent electoral commission. I'm not saying its incapable of being reproachable, nothing is "beyond reproach" but I have yet to hear a serious, non-cooker accusation any political party has tried to stuff the electoral commission.

What we don't have, (and I think should have) is capped party donations. I'm tired of the money aspect of who gets the most billboards.

We also have silly bad behaviour emerging: People doing their billboards in the same style and colours as the electoral commission. Often in foreign language support roles, using words like (not a quote) YOU MUST VOTE FOR PARTY A LIKE THIS which I think is really trolling the voter badly.

degamad

a month ago

> but I have yet to hear a serious, non-cooker accusation any political party has tried to stuff the electoral commission.

We do get occasional issues with individuals trying stuff, but the AEC is very good at calling it out or prosecuting it.

It's strong enough that the parties don't try anything risky.

slg

a month ago

>Similar obligations are present wherever election integrity is taken seriously.

The flip side is even more true. If someone is claiming they care about election integrity and isn't willing to pair that with funding of an equivalent ID system that is both free and easy for voters to acquire, they don't actually care about election integrity.

mullingitover

a month ago

This needs to be said loudly from the rooftops.

If your voter ID system isn’t 100% free and absolutely effortless for voters to obtain, it’s a badly disguised vote suppression scheme.

It’s pretty much always a vote suppression scheme.

xp84

a month ago

I’d like to respectfully challenge you on this. There is no chance anyone can ever create an effortless-to-get ID. Even if it was like the census where they sent someone to your house repeatedly to try to find you, take your picture and print an ID on the spot, it wouldn’t be effortless because you might not know where your passport or birth certificate are.

Some people probably are so badly organized and/or ignorant that they can’t manage making and keeping one single DMV appointment even once every 15 years so that they could get an ID (I think we can all agree that an “expired” ID would do fine, as long as the picture isn’t so out of date it can’t be verified).

Anyway, it’s only those people who would be “disenfranchised” under a voter ID system and I’m not convinced our government would benefit from incorporating the opinions of someone so unserious. It’s ok that some things in life are reserved for people that have invested a tiny amount of effort once in their lives. There’s also not a free and effortless way to feed or bathe yourself.

By the way, a state ID costs $15 in Mississippi and $9 for “eligible people” in California.

array_key_first

a month ago

The main problem with obtaining ID is that is takes time, and it's not evenly distributed. In the US its not folklore that people of color are less likely to have ID, it's a statistical fact.

This can be fixed, but you will notice the people who champion voter ID never bother trying. Naturally, the only reasonable conclusion is they like it that way. They're not stupid, after all.

mullingitover

a month ago

> By the way, a state ID costs $15 in Mississippi and $9 for “eligible people” in California.

If it costs a penny and is a requirement to vote, it is an unconstitutional poll tax.

greenie_beans

a month ago

for real. read one single american history book and you'll realize this is bad

slg

a month ago

>Anyway, it’s only those people who would be “disenfranchised” under a voter ID system and I’m not convinced our government would benefit from incorporating the opinions of someone so unserious

I hate calling something a slippery slope, but I don't know how else to describe an argument that is fundamentally "Sure, it will disenfranchise people, but who cares about those people anyway?" Once you accept that people's rights can be taken away simply because protecting those rights is an inconvenience, then none of us actually have any protected rights.

mullingitover

a month ago

Exactly, a freedom you have to pay to access isn't a freedom. "If people can't get it together to pay a modest $9 fee for the 'don't get imprisoned forever' tax, who cares if they get throw into the forced labor camps?"

Beyond this point: voting isn't just a freedom, it's a duty in a civilized democracy. We don't enforce it like Australia does, but anyone who not only doesn't care if it's performed, but is sanguine about it, isn't fully on board with government by the people.

deathanatos

a month ago

> By the way, a state ID costs […] $9 for “eligible people” in California.

A state ID is not required to register to vote in CA[1]. (The requirement is CA ID number or last-four-of-SSN or a third complicated way, but I'm assuming ID or SSN is attainable for nigh everyone eligible.)

[1]: https://www.sos.ca.gov/elections/voter-registration

xp84

a month ago

Sure, it's not needed, but if it were needed it would be a $9 burden.

PaulDavisThe1st

a month ago

> Similar obligations are present wherever election integrity is taken seriously.

Asserted without evidence, and apparently quite likely to be an attempt to cast aspersions on "election integrity" in the USA and elsewhere.

creata

a month ago

Maybe, but the election ink stuff feels a bit overboard.

TiredOfLife

a month ago

> it just works

And the pieces of paper with votes for the wrong candidates are easy to dispose of. See, for example, russia.

joshcsimmons

a month ago

That seems common sense. It’s wild that this is an extremist position in the US now.

BurningFrog

a month ago

Australia really uses erasable pencil markings to vote?

I would feel much better if they required ink.

hydrox24

a month ago

Yes, and the reasons are outlined by the Australian Electoral Commission, the independent body that runs Australian elections (see the first FAQ)[0].

There are scrutineers that watch counting happen at the booth once polls close, and who also see and hear the numbers get phoned into HQ. HQ has more scrutineers from all parties checking both postal votes and recounts.

If anything doesn't match up it gets flagged. I think that the ability of every party to watch votes themselves means that trust is increased, and they have skin in the game (if they didn't object at the booth why not!?).

Pen markings are perfectly valid however, so you can bring a pen to the booth to vote with if you'd like to do so.

It's also true of course that erasers don't quite erase pencil. It would be fairly obvious that the paper was tampered with.

[0]: https://www.aec.gov.au/faqs/polling-place.htm

anon291

a month ago

> If anything doesn't match up it gets flagged. I think that the ability of every party to watch votes themselves means that trust is increased, and they have skin in the game (if they didn't object at the booth why not!?).

I mean the same is true in the United States. One of the key issues with the 2020 election was footage from several jurisdictions where the public was physically blocked from viewing the counting by election officials literally holding up giant white boards. The optics of that were extremely bad.

tacticus

a month ago

Unlike the US the elections aren't run by some local arsehat with local rules. they have consistent rules over the entire state or country (depending on election in question)

Scrutineers are also not members of the public. They are declared and appointed by candidates and parties for polling oversight and have complete access to the counting and polling area. They're not allowed to touch ballots but they can challenge and bring them up to all the scrutineers in the location (and EC staff) and finally they can take it to the court afterwards

Election officials are also not local council\elected people they're people working for the AEC\State Electoral commission. which is as mentioned above a non partisan organisation (which is highly different from bipartisan framing)

You also have a large number of counting staff. who do the sorting and then counting with machine assistance (how many sheets are here in this stack do they match the tally the 2 people already made on that pile)

Though the senate elections have a more complex voting software stack due to STV fun.

anon291

a month ago

Again, misconceptions abound. US elections are run by bureaucrats with an elected head. There are consistent rules across the entire state for all elections, with some federal oversight. Scrutineers are appointed by both parties, but also from members of the public.

Like... what do you think American elections are actually like? Do you think some democrat/republican counts them in secret somewhere?

xmprt

a month ago

If you're worried about someone taking away your vote by erasing your pencil marking, then you should be equally/more worried about someone spoiling your ballot by voting twice on the same ballot, thereby invalidating it. You just need to trust that the people handling your ballot won't do that.

tacticus

a month ago

> You just need to trust that the people handling your ballot won't do that.

Given the number of people involved in watching ballots the entire time it is happening this would require a lot of compromised people and a lot of compromised scrutineers.

b112

a month ago

It's pencil in Canada too. Pencil works. Ink pens stop working, and are far more expensive than pencil in bulk. Voting is old. Using fountain pens, and quills to vote, is far more annoying than pencil when it just works.

The mark of vote being indelible or not is irrelevant. The monitoring and protection of the ballots is far more important. For example, representatives of all political parties are involved in the count, oversight by an agency, etc. If you had time to erase and re-mark ballots, you could swap out paper ballets too.

crote

a month ago

The problem is that disappearing ink is a thing, and someone could swap out the source of ink (pen, stamp pad) in the voting booth.

Erasing is indeed a possibility with pencil markings, but this can only happen during the counting process - which should be open to anyone to audit, and anyone messing around with an eraser during the counting process would stand out like a sore thumb.

adrian_b

a month ago

Where I have seen stamp pads used for voting, you do not take them with you in the voting booth.

You must press the stamp on the stamp pad at the official who gives you the stamp.

Stamping is fast and convenient. While corrupted officials could apply additional stamps during the counting, to make the vote invalid, that should be prevented by witnesses belonging to the parties that compete in the election.

ben-schaaf

a month ago

Someone needs to gain physical access to the ballot after voting in order to erase it. If they can do that they can just as well make it invalid using a pen, or they can just tear it up.

On the other hand, disappearing ink has been around for a long time.

xp84

a month ago

At this point the main problem here is one of trust either way. Most Americans, of any party affiliation, believe that one party’s officials are presiding over a vast conspiracy to steal every election. The Left thinks the GOP is intimidating real citizens who happen to be immigrants from voting by trying to pass laws for proof of identity, and the Right thinks Democrats are trucking in illegals to stuff the ballot box, or that some random voting machine company is systematically rigging every vote. All these positions are presented without evidence.

Then both parties think that if their party’s guy isn’t in charge of the election itself, that the vote counting itself is being faked. Of course, these concerns only ever come out when their preferred party loses.

Mix internet voting into this, and the average person’s utter cluelessness about computers, and no amount of fancy crypto, blockchain, etc. would ever convince any American that their party lost fair and square. “The new online voting system was rigged!”

slg

a month ago

>All these positions are presented without evidence.

What evidence do you need that making it more difficult to vote will result in fewer people voting? Isn't it common sense?

themafia

a month ago

> we have compulsory attendance at voting booths for eligible citizens, you can spoil your paper or walk away but we enforce with a fine, participation in the one obligation of citizenship

Then my refusal to vote should be counted. If enough people refuse to vote then the entire election should be cancelled and new candidates found. Otherwise this is a ridiculous catch 22 of state bullying to no actual purpose. Who would even think to create such a law?

crote

a month ago

Which country doesn't count spoiled or blank votes? And the whole "cancel the election and find new candidates" is pretty pointless when anyone can start a political party of their own and participate in the election.

themafia

a month ago

> Which country doesn't count spoiled or blank votes?

The USA. We have districts where turnout is as low as 25% of eligible voters.

> anyone can start a political party of their own and participate in the election.

You don't get federal funding and the FCC doesn't force networks to cover your party or include you in debates until you win 5% on a national platform. Have fun actually doing this. Which was the only reason I voted for Nader. I wanted the greens to have a standing in the US. It's never even come close to happening since.

> "cancel the election and find new candidates"

Then your political parties will engage in a race to the bottom with you. You don't sense this already happening?

GJim

a month ago

> Then my refusal to vote should be counted.

Then spoil your paper.

Spoiling your paper shows that you got off your arse and voted to say "I don't want any of these people". (See the number of spoilt votes in the UK Police and Crime Commissioner elections for a prime example of this; many in the UK disagreed with politicising the police and spoilt their papers in protest)

By simply not voting, the assumption is you are either lazy or simply don't care...... And as a result, the politicians will not care either.

themafia

a month ago

> shows that you got off your arse

Is that the point of democracy?

> See the number of spoilt votes in the UK Police and Crime Commissioner elections

The candidate was still elected with a turnout of 15.3%. This is farcical to give this person a mandate where they clearly earned none. Shouldn't the parties get off their arse and pick better people for office? I'm busy and I pay taxes. What are you hassling me for?

> the assumption is

Assume whatever you like.

> the politicians will not care either.

I hate to be flip, but your entire tenor has brought it out of me, and this is the hardest to take. Then why would else would they run for office? They need my approval by engaging in a national cargo cult ritual to function properly? You accept this from your "leadership?"

How has that actually worked out in practice?

mos_basik

a month ago

Disclaimer: I'm not Australian.

It'd be a pity to get heated up over a misunderstanding of the Australian election system.

OP said (somewhat confusingly I admit):

>[Australia has] compulsory attendance at voting booths for eligible citizens, you can spoil your paper or walk away but we enforce with a fine,

and I think you understood that to mean:

>Australian citizens must choose: drop a valid ballot in the box or be fined

but I think what OP intended was (and this is consistent with the Australia Electoral Commission website [0]):

>Australian citizens must choose: drop a ballot (spoiled is fine) in the box or be fined

(As an aside - one WILL get fined if one appears the polling place but refuses to drop a ballot in the box - see [1].)

Then, believing (incorrectly) that casting a spoiled ballot incurs the fine, you said "Then my refusal to vote should be counted [for the system to be anywhere near reasonable, given that I went to the polling place and exercised my civic duty to the extent permitted by my moral fiber, fully expecting to be fined for it]" (emphasis and context added).

And Australia does keep track of how many "informal votes" (their term for what we're calling spoiled ballots here) are cast. See [2] for an official results page breaking out informal votes by count and percent. But informal votes have no bearing on the election results; they are thrown out and only the valid votes contribute to the result.

So I think you're fundamentally asking for the "informal votes" to have a first-class mechanism for contributing to the election result (specifics TBD, maybe a threshold to meet, maybe an disqualification of the candidates for a period of time, maybe a re-do, whatever).

And that's a valid ask and an interesting discussion to have!

But given that the reason you asked for that was based on a misunderstanding, do you even still want that? Do you still think the AUS system is unreasonable as-is?

----

0. https://aec.gov.au/About_AEC/Publications/voting/index.htm#c...

>Under the Electoral Act, the actual duty of the elector is to attend a polling place, have their name marked off the certified list, receive a ballot paper and take it to an individual voting booth, mark it, fold the ballot paper and place it in the ballot box.

>Because of the secrecy of the ballot, it is not possible to determine whether a person has completed their ballot paper prior to placing it in the ballot box. It is therefore not possible to determine whether all electors have met their legislated duty to vote. It is, however, possible to determine that an elector has attended a polling place or mobile polling team (or applied for a postal vote, pre-poll vote or absent vote) and been issued with a ballot paper.

1. https://www.aec.gov.au/about_aec/publications/backgrounders/...

in Krosch v Springell, at the polling place, Mr Springell handed the presiding officer a note saying, paraphrased, "none of these candidates deserve my vote". He was fined, because it could be proven that he didn't uphold the "duty of the elector" as defined in [0].

2. https://results.aec.gov.au/31496/Website/HouseInformalByStat...

Nursie

a month ago

You can pay the fine or spoil your paper. If significant numbers do this, it will be reported publicly.

As it is though, people tend to vote for one of the parties on offer, of which there are many. And as it's also preference voting, Australia is not stuck in the trap of "better vote for A or B will get in" either. You can vote for C, with a fallback to D, E and F before putting in A as a back-stop.

themafia

a month ago

> it will be reported publicly.

Does this manifest as any real political outcome?

Nursie

a month ago

Who knows? The numbers that choose to take this action are pretty small so there’s no particular driver for any political reaction. Turns out if you make people show up, most of them decide they do want to vote.

We also have a lot of choice of parties here which helps. Shame the same 2 majors keep getting in but the smaller parties and independents do take some seats.

rmunn

a month ago

The thing about paper ballots is that the ways to cheat with them are well-known ("finding" ballots in the trunk of a car, "losing" ballot boxes on the way to the counting center, counting the ballots behind locked doors with observers not present, and so on), and have been well known for centuries. So the counters to them (ballot boxes sealed with an official seal once full, only sealed ballot boxes will be opened and counted, neutral observers present at all times when ballot boxes are being transported and/or counted, and so on) are also well-known. If those anti-cheating counters are in place, that gives you quite a lot of trust in the results. And if observers get thrown out and then ballot counting continues behind closed doors, you can have a reasonable suspicion that cheating is going on, and can make a stink and demand a redo of the vote.

With Internet voting, the ways to cheat are not all that well-known among the general population, and even among an audience like HN I bet we couldn't come up with all the ways to cheat. (That's not a challenge!) So there's going to be fundamentally less trust in the election process than with paper ballots, even if the Internet-voting system was actually made completely secure. (And I'm not persuaded it can be made completely secure, given that secret ballots are a fundamental requirement of the process).

So yes, paper ballots are very much the way to go.

rmunn

a month ago

P.S. On the subject of counting ballots behind closed doors, look up Athens, TN in 1946 if you haven't heard about it before. It's a fascinating story. https://en.wikipedia.org/wiki/Battle_of_Athens_%281946%29 has a very long account, but the short version is: the sheriff of McMinn County was widely believed to be cheating on ballots by, among other things, having his deputies count the ballots behind closed doors. In 1940, 1942, and 1944, he and his cohorts "won" the election. But in 1946, a bunch of WW2 veterans returning home had formed their own voting block and had run some candidates opposing the sheriff and his cronies. When the sheriff's men took ballot boxes away to count behind closed doors again in the county jail, the WW2 vets armed themselves (without permission) from the local National Guard armory and besieged the jail. The sheriff's men eventually surrendered and returned the ballot boxes which, once counted in front of unbiased observers, showed that the sheriff's candidates had lost and the veteran candidates had won. (Surprise, surprise).

It got made into a 1992 movie called "An American Story" (which covers many things, the Battle of Athens being just one of them). I have no idea how accurate the movie is (I know it's not 100% accurate, but how much it changed I don't know).

ceejayoz

a month ago

There's a town in Alabama that skipped elections for 60 years; they'd just hand it off to a buddy. Someone finally registered to run and won by default, so ten days later they had a secret do-over to avoid a Black mayor.

https://en.wikipedia.org/wiki/Newbern,_Alabama#Mayoral_dispu...

rmunn

a month ago

Hadn't heard about that one. Fascinating. Especially since the Black mayor then challenged the secret do-over, won, as was reinstated as mayor. Then the next year there was an actual election for the first time in over 60 years, and the Black mayor won reelection 66 to 26. Not 66% to 26%, 66 votes to 26 votes. Which just goes to show what a small town that was.

P.S. Population of that town in 2020, according to the census? 133 people.

wavemode

a month ago

Now here's the kicker - he resigned! Apparently he doesn't really live in the town and wasn't eligible to run for mayor after all.

https://www.al.com/news/2026/01/first-black-mayor-of-alabama...

rmunn

a month ago

That's hilarious. What a roller coaster of a soap-opera plot! Except it's not a soap opera, it's real life, and it happened in a small town of less than 150 people. The saying is right: truth often is stranger than fiction.

esseph

a month ago

There are around 19,500 Incorporated Places.

About 42%, or 8,200 of those places, have less than 500 people.

About 20% of ALL US towns have less than 200 people.

It's a big country.

rmunn

a month ago

Oh, and if the election is on something so polarizing that there are no "neutral" observers, then rather than neutral observers you can have observers from both (or all) parties/sides present, with cameras rolling, while the counting is going on.

twright0

a month ago

An interesting anecdote, another good example of a reasonably modern example of paper ballots enabling election stealing: https://en.wikipedia.org/wiki/Box_13_scandal

Caro covers this pretty extensively in his LBJ biography series, but it's reasonably clear from the evidence that LBJ won his senate seat by some pretty crude paper voting record manipulation after the fact - changing a '7' to a '9' by writing over the number with a pen - almost certainly with LBJ's knowledge. Given that his senate seat eventually put him in the presidency, it's probably the most consequential voter fraud ever committed in American history (that we know about, I suppose).

rmunn

a month ago

From the second paragraph of the Wikipedia article: "Six days after polls had closed, 202 additional votes were added to the totals for Precinct 13 of Jim Wells County, 200 for Johnson and two for Stevenson."

Those numbers alone should make anyone suspicious. If you have an urn containing about 20,000 balls in two colors, red and green (this election happened in 1948 and the 1950 census listed that county's population as 27,991; let's assume that roughly 20,000 people would have been old enough to vote in 1948) and you randomly draw out 202 balls (about 1% of the total number in the urn), you would expect the number of balls you draw out to be roughly proportional to the red-blue mix in the urn. (1% of the total is big enough to expect a roughly-unbiased sample). So if you draw out 99% red balls and 1% green balls, then either you have a very very skewed proportion of colors in the urn, or else someone is cheating. Given the TINY margin of victory in that race (87 votes out of nearly a million, 988,295 to be precise), it's very very unlikely that precinct 13 happened to be skewed 99% towards LBJ when the state as a whole was so closely balanced.

twright0

a month ago

I really encourage interested folks to read the biography (though it's an undertaking).

According to Caro, part of the background is that the relevant southern Texas precincts were well understood to have vote counts up for purchase; over the course of election counting, both sides would have their controlled districts release counts based on what the other side was reporting to stay in the race. These counts would vary in legitimacy and how skewed they were based on the precinct and need of the candidate that had swayed the boss to their side. But tactics like having armed guards supervise the casting of votes to ensure the favored candidate got a large majority, or simply distributing vote receipts to people who never voted at all and recording votes on their behalf, or making numbers up entirely, were quite common. Typically, though, Caro argues that because both sides did this, and they did it incrementally, it usually wasn't enough to sway an election one way or another, but rather was just part of the cost of doing business. He even says that LBJ lost his Senate election earlier that decade because he got cocky and told the bosses of the districts he had bought to just release all their numbers right away, letting his opposition then juice their numbers just enough to win.

It's really the timing, more than the margin, that makes it clear what happened (and the crudeness of the forgery); after every other precinct reported and finalized, they corrected their number by barely more than needed to win. The 100 to 1 vote margin was actually not that far off from the vote margin that the precinct reported in the first place (... which, of course, really tells you that the whole thing was made up from whole cloth).

john_minsk

a month ago

I strongly disagree. If the system is transparent enough and provides mechanisms for verification and control - No reason to distrust it. I would prefer a system where even in 20 years I can go online and check how my vote was counted in older elections - this way stealing my vote would be impossible.

The issue is how to preserve privacy...

rmunn

a month ago

> I would prefer a system where even in 20 years I can go online and check how my vote was counted in older elections - this way stealing my vote would be impossible.

Understandable, but then vote-buying becomes possible. The reason vote-buying is impossible in a secret ballot is because you can't prove how you voted to anyone else. If you can look up your own ballot even five minutes after it's dropped into the box, then you can show your screen to someone else who then hands you $100 for voting the right way, and elections change from being "who has persuaded the most voters?" into "who has the most money to buy votes with?"

bluGill

a month ago

Vote buying and worse 'vote for me or I'll shoot you'. Buying is the more common scam but there are worse options for evil people

gbear605

a month ago

A related issue is “vote for my preferred candidate, or I’ll abuse you” as a way for husbands to control wives. That’s especially relevant when one party is favored by a majority of men while the other party is favored by a majority of women.

NewJazz

a month ago

s/husband/boss

Or despot, or ruthless water district rep (lol)

HaZeust

a month ago

You can also do this today by telling someone to take a picture of their vote by smartphone or you'll shoot them. Millions post a picture of their ballot on high-energy political forums every 2 years already. This hypothetical is unhelpful.

luxcem

a month ago

Where I live, ballot are a piece of paper slipped into an envelope (not sealed). It's mandatory to take at least two different ballots before entering a voting booth. You can take a picture with one ballot inside the envelope and switch before leaving the booth.

HaZeust

a month ago

That's pretty cool.

bluGill

a month ago

Where I live phone use is not allowed in the room where the voting is

HaZeust

a month ago

And "sharing proof of your internet vote" would not be allowed either. Doesn't matter, they have the same problem.

bluGill

a month ago

Pole watchers will see you with a phone. They won't see 'the evil person' in the room watching you vote

user

a month ago

[deleted]

crote

a month ago

> If the system is transparent enough and provides mechanisms for verification and control

That "if" is doing an awful lot of work here!

You can literally explain paper voting to children - it was part of my mandatory Civics classes. On the other hand, I'm pretty sure you need a cryptography PhD to even begin understanding why the various digital protocols are supposed to be secure. Even worse, as a software developer I am aware that things like "how do I know the compiler is trustworthy" and "how do I know the computer is in fact running the right binary" are very much open problems in the industry, so I know that any computer is untrustworthy.

Sure, if it's transparent and verifiable there's no reason to distrust it, but we don't live in a world where a transparent and verifiable digital voting system has been invented yet, so there are plenty of reasons not to trust them.

luxcem

a month ago

Not only that but paper in a voting booth is so simple that anyone can check that it is done properly.

It may be a burdensome process, but very simple to understand. Every modernization of the process has major drawbacks.

– Electronic voting machines cannot be verified by just any voter, and the vote count is not transparent.

– Remote voting (even paper-based) does not guarantee freedom of choice: it cannot be ensured that the person is not under pressure at home, or even that it is truly that person who is voting.

- Voting alone in a private booth ensures that no one can verify who a person voted for. It is therefore difficult to buy votes, since it is impossible to confirm that a person followed any instructions.

The fact that any voter can verify and ensure that everything is conducted properly, without having to trust a third party, is essential to guaranteeing the integrity of the vote.

KurSix

a month ago

With online systems, you can follow every visible procedure and still have no idea whether anything went wrong

gpt5

a month ago

The most important feature of public elections is trust. Efficiency is one of the least important feature.

When we moved away from paper voting with public oversight of counting to electronic voting we significantly deteriorated trust, we made it significantly easier for a hostile government to fake votes, all for marginal improvements in efficiency which don't actually matter.

Moving to internet voting will further deteriorate the election process, and could move us to a place where we completely lose control and trust of the election process.

We should move back to paper voting.

maxerickson

a month ago

The US overwhelmingly uses paper voting (often paired with electronic tabulation). We can't "move back", it's where we are.

Electronic tabulation introduces little risk when the ballots are paper.

Brybry

a month ago

Yep, I believe Louisiana is the only US state that does electronic voting without a paper trail. [1]

And not all paper systems are good either. I'm sure everyone remembers the disaster that was the punch card system used by Florida in the 2000 election...

[1] https://ballotpedia.org/Voting_equipment_by_state

firesteelrain

a month ago

Florida basically now uses scan tron technology. Color in a circle and when done you turn it over and the ballot is scanned right in front of you.

user

a month ago

[deleted]

SV_BubbleTime

a month ago

>Electronic tabulation introduces little risk when the ballots are paper.

Do European and other first world countries favor electronic tabulation?

Is it possible that introduction of all electronic factors reduce trust?

pa7ch

a month ago

Risk limiting audits are why this work. You physically sample ballots at random. The number you sample grows as the gap in the electronic tally shrinks to reach high confidence the election was tabulated correctly.

abdullahkhalids

a month ago

The normal person has no knowledge of stats. I am a professional physicist, and I struggle with stats. The methods you suggest can convince a stats professional that the tally is correct. It cannot convince a normal person of the same.

creata

a month ago

> It cannot convince a normal person of the same.

But you don't need everyone to be convinced of it first-hand. You just need everyone to trust someone who is convinced of it.

crote

a month ago

Election security should not hinge on a "trust me bro" - especially when people are being convinced the other way by Russian propaganda talking heads on social media.

Manual counting requires zero trust. In my country anyone is welcome to observe the entire process from start to finish, if they wish to do so. A few years back a fringe far-right party tried importing the voting integrity distrust over here, and recruited people to watch their local polling stations to "expose the fraud". Which was totally fine because they were always allowed to do so, and it fizzled out because zero evidence of fraud was found, and that party still didn't get a significant number of votes.

creata

a month ago

Don't these two situations (watching vote counts; understanding a complicated statistical argument that the vote is tamper-free) require the same kind of trust?

1. In both cases, everyone is theoretically capable of checking it themselves; they're theoretically zero-trust. In the former scenario, I'm theoretically capable of attending the vote count, and in the latter scenario, I'm theoretically capable of learning the statistics needed to verify the argument.

2. In both cases, most people cannot (or will not) practically check it themselves, and is trusting that someone they trust is doing the checking for them.

I'm not saying they're the exact same situation, but they both ask for a large amount of trust from most of the voters.

creata

a month ago

For their upper house elections (which can have giant ballots), Australia uses computers in its counting, but there are humans in the process. [Here's a video from the Austalian Electoral Commission.](https://youtu.be/9AqN-Y25qQo)

jcrawfordor

a month ago

Good data is hard to come by, but from a brief survey electronic precinct tabulation (the most common system in the US) is also in at least partial use in Canada, Mexico, India, the Phillipines, and Russia, and a laundry list of smaller countries.

Now, you might contend that this is not a list of first-world countries exactly (but rather I sampled the largest countries). You must keep in mind that the use of electronic tabulation in the United States is mostly a response to the very limited budget on which elections are carried out; electronic tabulation is much less expensive than significantly increasing staffing. As a result, globally, electronic tabulation tends to be most common in poorer countries or countries with newer election systems, while hand tabulation is most common in wealthier countries with long-established election procedures.

For this reason, the countries you might go to for comparison (like France and Germany) have largely manual election processes that have often seen few changes since the Second World War.

The Help America Vote Act (2002) had a de facto effect of making the United States a country with much newer election processes, as HAVA requires strict accessibility measures that most European election systems do not meet (e.g. unassisted voting for blind and deaf people). Most US election systems didn't meet them either, in 2002, so almost the entire country had to design new election processes over a fairly short span of time and on a shoestring budget. Understandably, election administrators leaned on automation to make that possible.

It's also important to understand that because of the US tradition of special-purpose mill levies and elected independent boards (like school boards), the average US ballot has significantly more questions than the average European ballot. This further increases the cost and complexity of hand tabulation, even ruling out entirely the "optimized" hand tabulation methods used in France and Ireland.

popalchemist

a month ago

As we learned from Dominion... depends who manufactures the machine.

RunningDroid

a month ago

> As we learned from Dominion... depends who manufactures the machine.

Dominion, the company that doubled it's net worth by winning a defamation suit against Fox over claims their machines had been compromised?

That Dominion?

fsckboy

a month ago

>We can't "move back", it's where we are.

vote by mail (and similar ballot harvesting, bulk ballot dropoffs with hazy chain-of-custody as from a nursing homes and immigrant communities) are new, based on paper, and open to abuse.

It's not where we were.

traditional absentee balloting was a small scale thing used by college students, military personnel, etc. and if it was messed up, it was not likely to change outcomes or a threat to counting accurately (no election is perfect)

PaulDavisThe1st

a month ago

So the question(s) to ask are:

1. why did absentee voting/vote by mail expand? What was the claimed intention and purpose? What has been the actual result (and based on what evidence) ?

2. who has an interest in underming confidence in vote by mail and why? What evidence do they offer that it actually is a problem?

fsckboy

a month ago

those are not questions I have, nor answers I feel that I am lacking, and it fits a familiar online debate technique of bogging down discussions when you don't like the direction they are going in, wasting the time of your interlocutor. are you really so unimaginative and out of touch that you don't know the answers to your questions?

legitimately elected politicians cheat left and right all over the place, and there is every reason to rhink illegimate election is just as attractive to them as the fruits of the power they seek, it's human nature, it's in the bible, it's in the koran, it's why we have laws. I would prefer a voting system that was guaranteed as secure as we can because the power to vote them out of office is our best hope.

PaulDavisThe1st

a month ago

The reality is that in the USA there just isn't any evidence of widespread election fraud, and lots of evidence to support the claim that our voting systems, while not perfect, are secure enough to trust the results.

So unless you believe there's a whole layer of election fraud that nobody - not the losing party, not pro publica, not the FBI, not state investigators, not reddit - has been able to even detect, there's just really nothing to talk about here.

fsckboy

a month ago

you keep trying to change the subject. Here's how the to understand the difference in our positions:

if security researchers find vulns in network software, should they be fixed, or should a hypothetical researcher PaulDavidThe2ndSmartestPersonInThisThread quash the discussion by saying "there is no evidence that these vulns are being exploited"?

fsckboy thinks they should be fixed

https://thegeorgiasun.com/government/your-vote/inside-the-fu...

https://thegeorgiasun.com/government/your-vote/inside-the-fu...

understand that politicians who would benefit from fraud would also control the investigation, making your "see no evil" monkey brain's position as questionable as the election system security is

PaulDavisThe1st

a month ago

Nobody, certainly not myself is suggesting that discovered vulnerabilities should not be fixed.

However, vulnerabilities that have demonstrably led to the wrong person being elected are entirely different to vulnerabilities that are invoked only in hypothetical scenarios for which there is no evidence that they've ever happened.

There are lots of things in this world that ought to be "fixed", but I'd prefer we prioritize the ones that are actively, demonstrably causing harm rather than the ones which "could cause harm if A, B & C even though A, B & C have never been observed to occur together".

So sure, fix the vulnerabilities, all of them, but don't lie about their status or impact on actual elections.

mullingitover

a month ago

> open to abuse.

This claim is frequently made and never backed job with any compelling evidence.

fsckboy

a month ago

you don't need to have "compelling evidence" to show that something is "open to abuse", you simply need to point out the threat vectors

as we know from all over the internet and from various financial frauds, rug pulls, insurance frauds, etc., if there is something to gain, there is no shortage of people who will abuse any system.

ajam1507

a month ago

This argument would apply to any voting method regardless of how secure it was. If the "threat actors" are the only important factor then the voting method is irrelevant.

mullingitover

a month ago

If you don’t have compelling evidence, you have hand-waving, which is all the concern trolling about massive absentee voting fraud always ends up doing.

Mail-in voting has been operating for decades. Nobody fear mongering about for all these years has ever delivered a shred of evidence to back their claims. It’s flat earth-grade conspiracy nonsense.

habinero

a month ago

No, that's just fear-mongering and spreading propaganda.

Our elections are designed to handle everything you said. I wrote another comment explaining, but you can also literally go watch it done yourself.

Everything's a conspiracy when you don't know how anything works.

xmprt

a month ago

> We should move back to paper voting.

We already use paper voting. If you mean go back to a time before voting machines, then I fear that would actually reduce trust because the amount of tabulation errors, data entry, and spoilt ballots would skyrocket. The only people who are increasing doubt in voting machine are the same people who are trying to disenfranchise voters and not accepting the results of past elections.

The last presidential election where doing a paper recount might have helped was in 2000 and believe it or not, the same party that's calling for abolishing voting machine today was the one who sued to avoid a paper recount then.

plagiarist

a month ago

They did start a recount! IIRC SCOTUS, at that time already taken over by partisans, illegally ruled to force the original results on us instead of correctly ruling for all FL districts to use the same methodology when performing the tallies.

cael450

a month ago

Yeah. The Republicans blatantly sabotaged the recount and everyone shrugged and moved on.

piou

a month ago

The majority of the U.S. votes on paper: https://verifiedvoting.org/verifier/. Most of the rest of the country votes using Ballot Marking Devices that produce paper ballots; less than 5% of the population lives somewhere where the only or default choice is electronic voting.

robomartin

a month ago

[flagged]

boredatoms

a month ago

We’re less worried about a low-scale low impact fraud my many people that is unlikely to alter results, than a systematic mass fraud by few people who can choose a result

robomartin

a month ago

That's the wrong perspective. The minute votes go into the mail system there is no way to know just how many mail-in votes might be subject to fraud. In other words, your characterization has no basis in evidence. Note that I am not asserting that massive fraud has been committed anywhere. That statement would be as impossible to support with evidence as yours.

The only thing you can state with absolute certainty is that mail-in ballots can be subject to manipulation and that this manipulation can reach enough scale to affect results in elections where the margin is so narrow that a few hundred or a few thousand votes can determine who wins.

Simple example: We receive eight ballots. There's absolutely nothing to prevent me from filling out all eight of them as I see fit and mailing them. Nothing.

There's also nothing to prevent bad actors from destroying ballots in large quantities.

Again, do not mischaracterize my statements here. I am not asserting that any of this has happened. I am saying that mail-in ballots enable potentially serious manipulation and are insecure.

This is like saying that short passwords are insecure. Lots of people use them safely and never get hacked. We all know they are unsafe. The fact that they might not be insecure enough for the general public to understand the issue (because you don't have news every day showing how many thousands of people are getting hurt) is immaterial. The truth of the matter is independent of the perceived consequences. Short passwords are insecure. Mail-in ballots are insecure.

toast0

a month ago

> There's also nothing to prevent bad actors from destroying ballots in large quantities.

Around here (WA state), you can check to see if your ballot was received and accepted. If a bad actor destroys ballots in large quantities on their way to voters, many voters will notice and complain. If a bad actor destroys ballots in large quantities on their way to to the counting facility, some voters are likely to notice and complain.

Same goes if you return ballots for other people. Either the actual voter notices their ballot is missing or the vote counters notice they got two ballots from the same voter or a larger than usual number of bad signatures.

Is it foolproof? No. And there's usually no established procedure to cure a tampered election, either. But large scale tampering is likely to leave signs. And small scale tampering would only rarely make a difference in results.

In person voting might be more secure, but it takes a lot more people, and if you want an ID requirement, you need to figure out how to make ID acheivable for all the voters or it's really just a tool to disenfranchise people who have trouble getting ID. In the US, there is no blanket ID requirement, so there are a lot of eligible voters without ID.

what

a month ago

No one has trouble getting an ID. You need an ID to drive, to work, to open a bank account, to buy liquor or tobacco, etc. The idea that someone can’t get an ID is absolute nonsense.

habinero

a month ago

It's not. Plenty of people do none of those things.

defrost

a month ago

> There's absolutely nothing to prevent me from filling out all eight of them as I see fit and mailing them. Nothing.

Just as there is nothing to prevent a person threatening or physically coercing 8 members of their household to vote as they direct.

This is hard to scale up into the hundreds.

WRT mail-in ballots, these are common place in Australia.

You post in a provided envelope to the AEC address, that outer envelope indentifies you against the voter rolls, just as you are identified when you attend a physical voting location.

The inner sealed envelope contains your voing slip - this is removed and passed on to the "votes from district" counting bucket .. just as all the voting slips from physical voting locations are.

In the checksumming of the election the same person being marked down as having voted multiple times, whether at various locations or by multiple mail in ballots, gets caught and investigated.

At this point voters are marked off against registration rolls and actual votes are anonymous.

This is important in an Australian election as no one should know that someone drew a crude suggestive image of their local member and submitted that.

The real downside of mail in voting is missing out on a sausage sizzle with others in your district at a voting location on voting day.

baggy_trough

a month ago

> Just as there is nothing to prevent a person threatening or physically coercing 8 members of their household to vote as they direct.

You are wrong. In person voting in the sanctity of the private voting booth prevents this.

robomartin

a month ago

You arguing with the wrong person. I am saying that we need to go to in-person paper ballots.

The comment you responded to was about the scenario of someone getting a bunch of ballots and filling them out at home or making their household fill them out at home the way he or she might want to.

mr_toad

a month ago

> There's absolutely nothing to prevent me from filling out all eight of them as I see fit and mailing them. Nothing.

Until the other seven people try and cast votes.

robomartin

a month ago

Think that through for a moment.

Hint: They never see the ballots.

My point wasn't to paint a water-proof scenario. It is to illustrate just how unreliable and dangerous mail-in voting can be. There are other vectors for manipulation.

mr_toad

a month ago

Not seeing the ballots won’t necessarily stop them from trying to vote. They might ring up to complain that they never got them. They may try and go in vote in person. Trying to vote using someone else’s name or ballot can very easily land you in hot water.

hansvm

a month ago

> Person who shows up to vote is legally allowed to vote

How does that work though? What's the root of trust identifying me as me to a government who, at most, has a written record somewhere of my birth, and definitely not enough information to tie that to any particular face or body.

robomartin

a month ago

I have to present my passport to get on a plane, enter into another country, register into a hotel and return to this country. I have to show either my passport card (another passport-like ID in the US) or my RealID-equipped drivers license to fly within the US. They also make me stand in front of a camera.

Nearly every nation on earth does this. It's nothing new. We have the technology and the means. This isn't a problem.

trothamel

a month ago

In a lot of places, it's a photo ID. Usually that required a birth certificate to get, and often a few more pieces of corroborating information to make it harder.

hansvm

a month ago

Without a root of trust though, how much good is that? When I needed a copy of my birth certificate to get a CA driver's license, I just sent my home state $10-$20 and pinky promised that I was me. Getting utility bills or whatever delivered to your favorite name isn't hard either. It's cheap and easy to bootstrap your way into somebody's identity.

Maybe the payout isn't worth it, but (a) empirically, people seem to be willing to spend a lot more than that per vote if necessary, and (b) it's not substantially harder or riskier to do that than to risk prison voting for a dead person or whatever else some fraudster might cook up; if we think this is an important system which people are trying to rig then the proposed cure just keeps honest people honest.

Fezzik

a month ago

Do you have a citation for voting by mail being demonstrable problematic? None of the things you describe are even true. We’ve been voting by mail in Oregon for decades and the demonstrated instances of voter fraud are effectively zero. The Heritage Foundation, which is opposed to vote by mail, has a great list here: https://electionfraud.heritage.org/search?state=OR.

I encourage you to click the ‘Read’ tab to see the actual circumstances resulting in the convictions as most are for trying to game ballot signatures and have nothing to do with votes being cast. It just doesn’t happen because the system is secure.

Never once has anyone, outside of their expansive imagination, proven that voting by mail is not secure and effective.

WillPostForFood

a month ago

France is an example. They allowed mail in voting, had issues with fraud, then banned it.

https://politics.stackexchange.com/questions/57152/why-isnt-...

Fezzik

a month ago

… in 1975.

I have EXCELLENT, current news for you, comrade. Since then, I can point you to six States in the USA that have implemented mail-in voting that is demonstrable secure and gives far more people the ability to vote than mandatory in-person voting. Isn’t that simply wonderful to hear? And, to boot, lest you worry about volume, one of those States alone (sunny California) is nearly the same population as France was in 1975! So even having large populations vote entirely by mail is proven to be a non-issue! Phew, I’m glad we can stop trotting out fear mongering and speculative arguments of unproven inevitable doom to stupidly disenfranchise voters!

WillPostForFood

a month ago

There are open accusations of mail-in fraud in California, not a settled issue. France is an interesting example because there was fraud, settled issue.

It seems obvious, no?

1: Vote in person, with ID

2: Mail ballots out, mail ballots in

Which will have more fraud?

trentnix

a month ago

Citations aren’t necessary when the incentives for fraud are so great and the means of executing fraud so easy. It’s not demonstrably problematic, it’s inevitably problematic.

Fezzik

a month ago

Citations are needed when I can point you to six States that have vote-by-mail systems and there’s no evidence of meaningful fraud in those systems. And citations are especially needed when the very think tanks that are spending millions of dollars trying to disenfranchise voters by banning mail-in voting are unable to find meaningful cases of fraud to bolster their argument and instead rely on nonsense like ‘it’s inevitable that something bad will happen, trust me bro!’

shimman

a month ago

Oh nice an anecdote with zero evidence that also implies voting by mail should be illegal (something where there is zero widespread fraud).

comrh

a month ago

The US has had mail in voting for 100 years with no widespread fraud. You're going to have to present more evidence then "what if bad actors use it this way"

IAmGraydon

a month ago

> He has refused every single such requests because, as he put it, if you do for one side or the other, sooner or later you get burned (or worse) and it's over.

I have to admit, it's a bit disturbing that his reason for not doing it is because he might get "burned" or caught. How about...you know...because he believes in upholding democracy?

fzeroracer

a month ago

> I have a friend somewhere else in the world who is in the business of providing electronic voting machines to governments (cities and countries) to run elections. I won't mention where in the world because there are only so many of these companies and his is very prominently known in the region he serves. They develop the machines, write the software and provide the service.

> He told me stories of various elections across the region where governments or specific political parties ask him to tilt the playing field in their favor by secretly altering the code. He has refused every single such requests because, as he put it, if you do for one side or the other, sooner or later you get burned (or worse) and it's over. He happens to be one of the honest and responsible players. That's not necessarily the case for others.

Just to be clear, if you are actually telling the truth you have a fundamental duty to reveal the company in question and who is making these requests, as doing so can constitute a felony in many countries across the world. So I recommend you telling us where this is happening.

idiotsecant

a month ago

Oh yeah? Your source for why mail voting is a shaggy dog friend of a friend definitely real story?

Mail voting has routinely been proven to be extraordinarily difficult to exploit at scale. For as much feverish dedication there is to the idea of how terrible it is (for quite obviously partisan benefit) there is absolutely no evidence of any kind of substantial fraud. It's a right wing fever dream exercise in post hoc logic to justify depriving the 'right' people in our society of their vote. Simple as that.

Mail voting is common in many systems, it's convenient, and worst of all ... More people vote!! All of which is very dangerous to the power of a certain class of politicians.

torton

a month ago

Even the most cursory research into mail-in voting shows a number of safeguards designed into the process; one summary can be found at https://responsivegov.org/research/why-mail-ballots-are-secu.... Instances of mail based voting fraud are extremely rare despite the extremely high motivation of some actors (such as the current US federal leadership) to find any evidence to the contrary.

robomartin

a month ago

[flagged]

yandie

a month ago

Because you can’t make me sign my ballot? Because without my signature the ballot is void. I can also show up in person to cure my vote if you force me to sign it at home btw.

It’s not impossible - I won’t deny it. But we haven’t had any substantial evidence despite the current administration trying to claim otherwise.

If we are to roll back mail in ballot, let’s also make voter ID free and easy, and also make Election Day the weekend or a public holiday, rather than the various frictions including long lines at the poll.

robomartin

a month ago

> But we haven’t had any substantial evidence despite the current administration trying to claim otherwise.

Take politics out of it. My comments are not at all based on politics or ideology. It's purely a matter of process issues. It's like saying that short passwords are insecure.

With regards to your lack of evidence observation, this is actually one of the problems with mail-in voting. There is now way at all to know who filled out the ballot. None. It happens privately. If, on the other hand, voting is in person and with proper identification, there is no doubt.

So, lack of evidence is not evidence of a lack of manipulation at all.

I'll give you a personal example: As my father succumbed to dementia a couple of years before passing, my mother, who was also pretty old but still mentally functional, would fill out his ballot and have him sign it. I told her many times that she should never do that and that he, due to his dementia, had no business voting. She didn't want to hear it. Before someone says "you should have reported it!". First, you are an asshole. Second, I'd like to see you report your 94 year old mother with pancreatic cancer and your 96 year old father with dementia at the edge of death.

Now, if in-person paper voting was required he would not have been able to vote and the same may have been true of her towards the end.

I'd be willing to bet this kind of thing happens with some frequency in households. Another one is children who just turn 18 and the parents telling them how to vote. That's just as fraudulent and manipulated. Another friend of ours who isn't interested in being informed and hates politics tells his wife to just fill out the ballots any way she wants.

what

a month ago

Ballot harvesting is a thing. Activists “kindly” “help” the elderly and dementia addled fill out their ballots.

idiotsecant

a month ago

You don't think those 8 people you stole votes from might ask some questions? This is a self-correcting problem, as evidenced by the fact that the few voting fraud cases that do happen (generally nutbag conservatives convinced they are 'balancing out' fraud by commiting it) are usually quickly found and prosecuted l.

jayGlow

a month ago

those 8 people could sell their votes and show proof of it before mailing in their ballots, that's a lot more difficult to do with in person voting.

idiotsecant

a month ago

I signed my ballot poorly last year because I had nothing hard to put behind it when signing. It was compared to previous years and rejected. At a minimum you need to know what someones signature looks like, which reduces the possible scale of this attack from 'small' to 'vanishingly small'. You can also get rich stealing peanuts from squirrels, if you can find enough squirrels. Good luck with that.

mmooss

a month ago

The issue is that the paper ballots are counted electronically. There may be a paper version for double-checking the vote, but it's rarely used. The vote relies almost entirely on electronic technology.

firesteelrain

a month ago

There are many state-mandated post-election audits that involve random selection of ballots or precincts. There are state statutes and procedures that require a post-election audit of ballots after every election. These audits are designed to verify that voting equipment and tabulations operated correctly and that reported totals are accurate

liveoneggs

a month ago

Just do both like we do here in GA. You vote on a computer, it prints out a piece of paper, you walk the paper over to some kind of scanner, and then it is deposited into a giant trash can. (maybe they keep the paper records, idk) - these are the dominion systems.

(memories..)

When I lived in NYC there was a giant lever you got to use - it was pretty fun - but positioning the actual paper was kind of tricky.

I think Georgia used to have Diebold machines where you would get a little receipt but I'm pretty sure they were very hackable. Anyway half of them were always broken.

velcrovan

a month ago

Minnesota has a better system. You fill in a paper ballot using a pen, and the paper ballot gets optically scanned.

Besides avoiding any issues (real or imagined) with touchscreens, it makes it extremely cheap to stand up more polling places with more booths, since only one tabulator is needed; the booths themselves can just be little standing tables with privacy protectors.

nonethewiser

a month ago

>Minnesota has a better system. You fill in a paper ballot using a pen, and the paper ballot gets optically scanned.

>Besides avoiding any issues (real or imagined) with touchscreens,

Wait... I don't think these are the complaints being made against internet voting at all. The problem is with a computer counting and reporting it, right? Centralized, less transparent, etc.

I dont view writing my vote on paper and scanning it to be paper voting if it's just immediately fed into a computer.

zugi

a month ago

> I dont view writing my vote on paper and scanning it to be paper voting if it's just immediately fed into a computer.

The paper ballots are retained for recounts, and most places with this system automatically recount a random subset of the paper ballots to ensure it matches the computer totals. This guards against both shenanigans and mistakes. For security the scanning machines are not networked! A person carries around a little SD card (not USB as it's too hackable) to collect the totals.

The paper ballot with in-precinct immediate scanning system is the best system I've seen. It reports results quickly and leaves a full paper trail for recounts and accountability.

wesgarrison

a month ago

They are USB on the machines we use. That said, that’s not a concern to me.

The machine also prints a paper tally that goes with it to verify. We used sealed bags so they can’t be messed with in transit. They tabulate the results and compare it to the total from the tape. Personally, I wish there was a hash of the results that would make it simple to say “yep, that’s the same” but practically that’s not necessary.

A second copy of the receipt goes back separately with the paper ballots. Same sealing and chain of custody handoffs.

I like the electronic ballot marking device. I can understand the argument that they’re not worth the cost, though.

sjm-lbm

a month ago

This was common in Texas, but becomes challenging when one polling place serves voters that might have different elections to vote for - say, at a polling place on the line between two school districts or something like that. You can't just print one sheet of paper, and it to everyone, and call it a day. Toss in a few different jurisdictions that don't directly overlay each other, and the number of combinations become nontrivial.

(the machines used in Texas vary by county, in my county we use Hart InterCivic machines that are touchscreen but produce a paper trail - honestly I think it works well)

velcrovan

a month ago

That just sounds like you don’t have enough polling places.

sjm-lbm

a month ago

To be fair, that is true. Texas is around the 5th most difficult state to vote in per the Cost of Voting Index.

autoexec

a month ago

This really is the best way to do it. Scantron gives fast results and you get a paper physical record which shows the actual ballot exactly as it was presented to the voter along with what their vote was.

dylan604

a month ago

<devilsAdvocate>How many people spend time making their selections on the computer, then compare every single selection on the print out? Deniers could say the computer randomly prints votes to skew in certain candidate/party direction knowing not everyone would catch it.</devilsAdvocate>

all it would take is one person saying their printed ballot does not match their specific selection, and the whole thing would become chaos.

zerocrates

a month ago

The person you replied to is talking about ballots that are just on paper, filled in with a pen, and scanned. So there's no computer making printouts.

dylan604

a month ago

Same but different issues. Now you have to know that the dots were filled in correctly to be readable. Having someone make an obvious attempt at selection but not readable by the reader is also problematic. No reason to not count their vote. You may laugh about not being able to do it correctly, but it happens.

Only if the scantron shows that each position on the ballot was counted and the voter is not allowed to leave until the person monitoring the scan confirms with the voter their ballot was scanned would this give confidence. Any issues with the scan, and the voter is allowed to correct the issue. There should never be an issue of reading the ballot by the scanner as an acceptable outcome.

of course, all of this is assuming in person voting only

autoexec

a month ago

We agree. Don't use computers. Scantron is only there to get a fast count for the news agencies. Manual counting of physical paper ballots would still be done anyway.

dylan604

a month ago

To manually count by hand every ballot would mean not finding out a complete tally well until after Jan 20. When election day and inauguration day was selected, the number of ballots to count were a mere fraction of today's count.

Manually counting votes is so error prone that I'd have less confidence in it than a scantron type of ballot. At this point, I'm more in favor of giving each voter a ball/bead/chip to drop into a bucket for each position on the ballot. After checking in, you go to each position to receive your one token. If you don't visit a position, you do not get a token to pass to someone else. Tallying the votes could be as quick as weighing the bucket as the weight of the bucket/token will be known. Each election can change size/weight/color of tokens to be unique. If the weights total an irrational weight, it would be deemed suspect and a hand sort of the tokens can be done to find the odd token.

Spooky23

a month ago

The New York mechanical machines by the 2000s were all worn out, there was a statistically higher occurrence of certain numbers (I believe 9) because the gearing was worn down.

Alupis

a month ago

> The most important feature of public elections is trust.

Agreed.

However, in some states, such as California, mail-in voting has become the default.

What's used to verify identity and integrity? Your signature from your voter's affidavit of registration, a signature from any past voter form, or literally an "X"[1]. Your signature doesn't even need to match, it just must have "similar characteristics". You can print your name or sign in cursive, you can even just use initials. They're all accepted.

We're firmly on the "honor system".

Pair that with lack of voter ID laws, and we have a system that's designed to be untrustworthy.

Yes, I agree, a state issued ID should be free...

[1] https://codes.findlaw.com/ca/elections-code/elec-sect-3019/

andyferris

a month ago

Do you not have in-person early voting?

In Australia you can postal vote if necessary, but "prepoll" voting is much more popular (I believe 37.5% of registered voters, 90% of which actually voted, in 2025). It's just so convenient, with the same crowd of volunteers and officials as actual polling day.

Alupis

a month ago

In 2020's national election, nearly 87% of California votes were by mail[1].

California offers day-of in-person voting, and has ballot-drop boxes (unmonitored) and drop-off (monitored) locations for at least several weeks (I believe it was a full month in the past election).

[1] https://abc7.com/post/election-2024-21-californias-registere...

mcmoor

a month ago

I wonder how correlated is this to how (un)contested California results are (?). I think the main test will be whenever a case like Bush vs Gore happens.

anon291

a month ago

I volunteered at Fairview development center in Costa Mesa CA, which is a place where dozens of disabled residents lived. These people could not talk, move, etc. They were essentially quadriplegics; mentally completely not there; etc. I was a high school student helping move residents to Sunday service and back and doing activities with them (volunteer hours). I clearly remember seeing nurses and others mark ballots of residents that were in no fit state to vote (unable to communicate at all; those who could were often not mentally competent enough to make their own medical decisions, let alone decide who to vote for). I don't think anyone cares to be totally honest. I was shocked the residents even got absentee ballots. Of course, competent adults should be able to vote, but at the point where you're essentially a child mentally? I mean ... how can anyone possibly figure it out. I did lodge a complaint, but nothing came of it.

seanmcdirmid

a month ago

> The most important feature of public elections is trust. Efficiency is one of the least important feature.

If efficiency is low enough to significantly affect turn out, you cannot trust the results.

> We should move back to paper voting.

Nowhere in the US is electronic voting used from what I know of. Estonia is the only country I know of that does internet voting, but my info could be out of date.

seattle_spring

a month ago

You're conflating "efficiency" with "disenfranchising voters."

Mail-in voting enabled citizens who otherwise simply couldn't vote, to vote. Citizens who, more often than not, were from already disadvantaged backgrounds.

closewith

a month ago

Many countries with far higher participation rates do not allow mail-in voting, which definitely should be banned to prevent voter manipulation.

seattle_spring

a month ago

Ok, now compare other things they do to enable voting. Is voting day a holiday and/or do workers get guaranteed paid time to vote? Are the ballot boxes equally accessible for most people, and not strategically placed to disenfranchise certain voters?

teleforce

a month ago

One of the main aims of voting system (physical or online) is to increase the participation of the voters, since the average turnout of global voters are less than 70% (filter by continents for simpler aggregated average) [1].

For example even in country with pervasive internet connectivity (99%) like in Netherland the voter turnout in 2024 is only 77%.

Security technology of trust management in the centralized voting system and architecture has already been solved and well understood, and now we are even moving into zero trust with multi-factor authentications.

All this while the venerable Kerberos has been around for decades with its secure derivatives, and its secure alternatives are numerous. For the more challenging fully distributed arguably has already been solved recently by blockchain, immutable data, etc.

This is the classic example is not that you can't (as claimed by the the article), but you won't. This is what political will is all about and since this is on political voting this lame attitude is kind of expected.

[1] Voter turnout of registered voters, 2024:

https://ourworldindata.org/grapher/voter-turnout-of-register...

dbcurtis

a month ago

Mostly agree, but we don’t have to give up the benefits of direct digital tabulation for quick results. I would like a paper audit trail. Print my ballot-as-cast for on a paper roll that scrolls by under a window. I can verify it before leaving the voting booth. Recounts and challenges can be a computer scan of the paper roll. None of this is hard. Costs a bit more, but buys trust in the system.

jcrawfordor

a month ago

This is the system used in the majority of the United States. Direct-recording electronic voting systems were never that common, briefly peaked after the Help America Vote Act as the least expensive option to meet accessibility requirements, and have become less common since then as many election administrators have switched to either prectinct tabulators or direct-recording with voter-verified paper audit trail.

In the 2026 election, only 1.3% of voters were registered in jurisdictions that use direct-recording electronic machines without a voter verifiable paper audit trail (https://verifiedvoting.org/verifier/#mode/navigate/map/voteE...). 67.8% of voters are registered in precincts that primarily use hand-marked ballots, and the balance mostly use BMDs to generate premarked ballots.

LiamPowell

a month ago

You don't necessarily need any sort of electronic counting for quick results. Federal elections in Australia are usually called late on the voting day and I imagine the same is true for other countries that are paper-only.

lawtalkinghuman

a month ago

Same in the UK.

Votes close at 10pm. Might be a few stragglers left in the queue, so call it 10:15pm. (Exit poll results are embargoed until 10pm.)

Ballot boxes are transferred from individual polling station to the location of the count. The postal votes have been pre-checked (but the actual ballot envelope has not been opened or counted) and are there to be counted alongside the ballots from the polling stations.

Then a small army of vote counters go through the ballots and count them and stack together ballots by vote. There are observers - both independent and appointed by the candidates. The returning officer counts the batches up, adjudicates any unclear or challenged ballot, then declares the result.

The early results come out usually about 1 or 2. The bulk of the results come out about 4 or 5. Some constituencies might take a bit longer - it's a lot less effort to get ballot boxes a mile or two down the road in a city centre constituency than getting them from Scottish islands etc. - but it'll be clear who has the majority by 6 or 7 the next day.

I can appreciate that the US is significantly larger than the UK, but pencil-and-paper voting with prompt manual counts is eminently possible.

anon291

a month ago

Oh but you see in America, it takes us more than three weeks to count ballots.

tptacek

a month ago

That's how it works in Cook County and a lot of other places: it's touchscreen voting, using "ballot marking devices", which produce a paper ballot you hand to an EJ to submit.

deathanatos

a month ago

Some paper jurisdictions have this, essentially. E.g., where I live: the ballot is a paper ballot. You vote by filling in a circle/bubble. (If you're familiar with a "scantron" … it's that.)

It looks like a paper document intended for a human, and it certainly can be. A machine can also read it. (And does, prior to it being cast: the ballot is deposited into what honestly looks like a trashcan whose lid is a machine. It could presumably keep a tally, though IDK if it does. It does seem to validate the ballot, as it has false-negative rejected me before.)

But now the "paper trail" is exactly what I submit; it's not a copy that I need to verify is actually a copy, what is submitted it my vote, directly.

autoexec

a month ago

> I would like a paper audit trail. Print my ballot-as-cast for on a paper roll that scrolls by under a window. I can verify it before leaving the voting booth.

Why should you be forced to trust that what you're shown is also what was being counted? The paper record should be the actual ballot itself, with your actual vote on it.

ss1996

a month ago

I agree with the risks, the overall theme being it's much easier to potentially manipulate a million internet votes than physical. In other worlds, internet vote manipulation scales significantly more than physical.

But I could make the argument with any high trust internet system.

Let's take another high trust activity we do on the internet - banking. Internet banking gives a hacker the ability to steal millions while sitting across the world. This is the same argument the authors make about changing a million votes.

So it really comes down to the pros vs cons. That's the more important discussion imo.

Do the benefits of internet voting outweigh the cons?

protocolture

a month ago

>Malware on the voter’s phone (or computer) can transmit different votes than the voter selected and reviewed. Voters use a variety of devices (Android, iPhone, Windows, Mac) which are constantly being attacked by malware.

Yeah see this is where I thought this was going.

Phones can be insecure, but in aggregate they are secure enough for literally every other component of life to be conducted on them.

>Malware (or insiders) at the server can change votes. Internet servers are constantly being hacked from all over the world, often with serious results.

Again, great point. Accepting this point will the government erase all the private identifiable data it has collected on me from its systems? Probably not, because they have made a cost/benefit analysis that suggests the risk is middling compared to the reward.

>Malware at the county election office can change votes (in those systems where the internet ballots are printed in the county office for scanning). County election computers are not more secure than other government or commercial servers, which are regularly hacked with disastrous results.

This seems like a weird seppo thing.

Currently the risk of an election being seen as fraudulent is high, and the reward of online voting is low.

But we dont have to conceptualise the modern boring election when we look at online elections. We can look at alternative models, closer to real time use and other gains that tip things back in its favor.

Actually the biggest issue I see with online democracy is apathy and minimum quorum sizes.

Panzer04

a month ago

To some extent, I think the cost of paper voting is almost a feature. It takes more work and effort to corrupt a paper voting system enough to change an electoral outcome, it helps more people gain familiarity with the electrical process and places an additional weight on the decisionmaking,

elbasti

a month ago

Voting is not a monolithic process. It's actually a combination of 3 things:

- How votes are cast

- How votes are counted

- How votes are custodied

In order for an election to be trusted, all three steps must be transparent and auditable.

Electronic voting makes all three steps almost absolutely opaque.

Here's how Mexico solves this. We may have many problems, but "people trust the vote count" is not one of them:

1. Everyone votes, on paper, in their local polling station. The polling station is manned by volunteers from the neighborhood, and all political parties have an observer at the station.

2. Once the polling station closes, votes are counted in the station, by the neighborhood volunteers, and the counts are observed by the political party observers.

3. Vote counts are then sent electronically to a central system. They are also written on paper and the paper is displayed outside the poll both for a week.

The central system does the total count, but the results from each poll station are downloadable (to verify that the net count matches), and every poll station's results are queryable (so any voter can compare the vote counts displayed on paper outside the station to the online results).

Because the counting is distributed, results are available night-of in most cases.

Elections like this can be gamed, but the gaming becomes an exercise in coercing people to vote counter to their preference, not "hacking" the system.

**

Edit: Some people are confused about what I mean by "coerced." Coerced in this case means "forced to vote in some way."

The typical way this is done is as follows:

- The "coercer" obtains a blank ballot (for example, by entering the ballot box and hiding the ballot away).

- The blank ballot is then filled out in some way outside the poll station.

- A person is given the pre-filled ballot and threatened to cast it, which they will prove by returning a blank ballot.

- Rinse and repeat.

This mode of cheating is called the "revolving door" for obvious reasons.

alanwreath

a month ago

It’s not that it’s impossible - it’s that the established players are already questionable. And any new entry would require more than any simple company could provide. Heavy investment and collateral is required.

Our livelihoods are increasingly (almost entirely) digital and endure great efforts to abuse. But banking and/or retail operate on a different spectrum. For one they make money. The costs associated allowing their business online may never make sense for a non-profit based activity like voting.

Do we have any examples of internet activity as tempting to infiltrate/pervert that is secure and doesn’t extract value?

Anyways it seems greater damage will be done before we even reach a provably secure system. So paper/pencil voting would be better.

But fear not - even if we abolish voting machines we aren’t out of the hole just yet. We have good company with concepts like Citizens United as well as activities like sweepstakes that try to sway the populace to throw away a vote for a chance at a million. Illegal - sure - but that won’t stop the ostensible infinitely wealthy from enduring a slap on the wrist - or more appropriately a verbal reprimand (which is all that happened last time) for their part in electioneering. And if that didn’t work we have an onslaught of reAlIty and bots that poison our conversations in order to form our world views.

I’m jaded. I’m overly pessimistic. I’ll go now.

tonymet

a month ago

paper & pen has tremendous value as a recording mechanism. Although it's slower at counting and indexing, it is far better at reproducibility and durability:

* records last > 500 years with no electricity . corruption is obvious at first glance. ( bad records don't appear to be good).

* counting is easily distributed by number of workers

* readily visually inspected with no special tools . ideal for auditing

* records stay in order at rest.

* easy to detect & protect against tampering

* easy to train new users . CRUD tooling costs pennies per operator

* cheaper to scale writes & reads

TCO and risk-assessment for paper records exceeds digital on nearly every measure.

zwranadikos

a month ago

So my internet banking is secure for my funds, but internet voting is not for my vote. Right... OK, we got the message.

mspecter

a month ago

Hey all, coauthor here. Interesting to see it on Hacker News.

I'm a professor in Georgia Tech's CS dept that works on problems related to security, privacy, and public policy. (CV: https://mikespecter.com/)

Happy to answer any questions you all have.

casey2

a month ago

If half the points here were true than internet banking and ecommerce would have already failed. Does the current system prevent fake votes? Did old banking and commerce prevent more fraud?

Here is the thing you are missing. With Internet voting we can have votes way more often. Limiting the damage caused by fraud. Yeah you could have malware on your phone that changes your inputs to a sandboxed voting app, and the malware also tracks your real votes so when you request an audit it shows you what you actually voted for. In reality that is extremely difficult to pull off over a long period of time.

I don't care about any of the names on the list, as far as I'm concerned they are missing the forest for the trees.

Kim_Bruning

a month ago

Estonians seem to have funny ideas on this. They're very VERY digital-forward.

charcircuit

a month ago

>Voters should not be able to prove to anyone else how they voted – the technical term is “receipt-free” – otherwise an attacker could build an automated system of mass vote-buying via the internet. But receipt-free E2E-VIV systems are complicated and counterintuitive for people to use.

This can easily solved be done via letting people forge receipts. Then anyone can forge a vote to give to someone offering to buy them.

The receipt is in fact the best part of such systems as with paper voting it is impossible to verify if your ballot was counted or if it got "lost."

user

a month ago

[deleted]

travisgriggs

a month ago

So where is the thought on mail in these days? It’s what we have in Washington and I rather like it.

JanisErdmanis

a month ago

> It’s difficult to make an E2E-VIV checking app that’s both trustworthy and receipt-free. The best solutions known allow checking only of votes that will be discarded, and casting of votes that haven’t been checked; this is highly counterintuitive for most voters!

Actually, Benaloh's challenge also does not offer receipt freeness. The adversarial strategy in such a model is to outsource the challenger itself in a hash function which decides whether to accept or discard the vote. It may look impractical at first, but one can build an app that could do that efficiently.

It can be said that all existing end-to-end verifiable remote e-voting systems compromise individual verifiability when reconciling it with receipt-freeness by introducing an assumption about the hardware-based protection of voters' secrets. If they leak or are predetermined by a corrupt vendor implementation, the malware on the voter's client can manipulate the vote at submission, and the adversary later fakes verification for the voter by exploiting that knowledge.

Still, I believe it's a solvable problem which needs more attention. Bingo evoting system is almost there, for instance, with verifiably random generated trackers, but needs a voting booth with a Bingo machine taken at home.

DJBunnies

a month ago

I believe the piece we're missing is the government (citizen?) service which issues (manages, replaces, revokes) constituents' cryptographic tokens for use with such things.

Then our voting systems could be electronic, secure, open, verifiable, and mostly private; assuming effective oversight / this organization does not issue fraudulent tokens or leak keys or identities (big assumption, but I don't think it's impossible.)

victor_vhv

a month ago

I live in Spain, and we have paper-based elections. Similar to what I've read from other comments, in our system, people are randomly selected to participate in oversight and counting. Different actors in the elections are able to oversee the process and count. Counts are performed by the randomly selected people and sent to headquarters from the site itself. Then, each ballot box count is available for display right after the counts are completed. Ballots are transported by the police to a safe location in case a recount is needed or randomly selected.

I'm leaving out other measures and details, but you get the general idea.

I used to flirt with the idea of a digital voting system, but now I clearly see that it is a problem of scale. It's very difficult to interfere with an election at scale when many independent actors and parallel flows are in place. This is what provides the system with its trustworthiness.

However, I think fraud is moved elsewhere (with campaign funding, fake news, and other methods...), but that's a whole different topic

nerocap

a month ago

If we can’t create a secure online voting system why do we use it for passports, banking, medical records, drivers licenses, criminal and law record keeping.

This is just an attempt at control using the majority of cases that most websites and applications are insecure. If enough effort and time is invested of course we can create a fairly robust and secure voting system.

legutierr

a month ago

The article talks about being “receipt free” as a required feature of any electronic voting system.

Fine. But by that standard, in a world where someone can bring their phone or AI glasses into the voting booth to record the whole voting process, how can any voting system be deemed secure? Anyone can show anyone else how they voted.

tedk-42

a month ago

Voting is one of those things that people care very little about but it's extremely important as it can determine who is the head of state (a position that has a lot of power an influence).

A single compromise once can have incredibly bad long term consequences for the majority of a ruling elite gain power indefinitely.

terminalshort

a month ago

Which of these vulnerabilities do not apply to any other internet system? And yet all of everyone's money is accessible over the internet and that seems to be working fine. If they really care about security at this level then they should ban all non in person voting methods.

StoneAndSky

a month ago

Agree with everything being said here.

However, it is no longer even remotely paranoid to be concerned that the current administration plans to do one or more of:

1. Put its thumb on the scale by "guarding" urban polling places with paramilitary forces on election day,

2. Declare mail-in ballots illegitimate and seize them,

3. Seize voting machines or attempt to stop vote counts before all votes are counted,

4. Intimidate state legislatures by threats or economic blackmail to disregard results.

I don't see an alternative to trying to figure out how to make online voting secure. That won't solve (4) but it will at least mitigate some of the more direct methods of election fraud.

burnt-resistor

a month ago

In person and by mail voting with a blockchain ledger-based receipt is how to prove one's vote is counted anonymously.

There must always be a paper trail and a blockchain ledger provides the most reliable and secure means to maintain integrity.

foolfoolz

a month ago

* “all your money lives on the internet and it’s safe”

* “internet voting is insecure”

who wins?

jcynix

a month ago

Electronic processes are way to easy to rig one way or the other.:

Tom Scott: Why Electronic Voting Is Still A Bad Idea https://youtu.be/LkH2r-sNjQs

Sure, there are ways to cheat with paper votes too. But counting paper ballots should always be open to watch for voters interested in observing the process. And voting should be done in secret, disallowing photos, to make it hard to "prove" the vote to possible buyers.

SilentM68

a month ago

With the world the way it is now a days and software/firmware being insecure, it is difficult to see Internet Voting as a secure means of voting. Paper ballots with multiple biometric tools or AI to measure a voter's physiological state of mind, honesty, confirm identity may be something that should be considered.

mbf1

a month ago

If I can photograph a $10,000+ check with my phone and deposit it into my bank via an app, then people can surely create a secure voting app with the same technology. Maybe we should use blockchain technology to store public ballots in an open fashion. Who cast the ballots would be a secret like it always is.

plasticeagle

a month ago

I applied for my passport online. If it's secure enough for that, then it's secure enough for voting.

touwer

a month ago

You need a private, secure booth, as you cannot guarantee really free (of mind, body) voting via internet, because of coersion, threats. Women threatened by their men to vote-anti women. Religious coercion. Internet voting will always be anti-democratic.

PeterStuer

a month ago

True.

Mail in voting suffers from some of the same issues. We go to great lengths (cabins, curtains, no pictures allowed etc.) to ensure people can verifiably cast a free will vote, then open a giant loophole for potentially coerced, non private or transactional voting.

parentheses

a month ago

The problem is that nothing is immutable about computing. Software itself is mutable. So is data. The transferability of software makes hardware mutable also.

It seems like pen and paper is currently the best verifiable and immutable voting approach.

KurSix

a month ago

This feels like one of those cases where the technical consensus has been clear for years, but the policy and media narratives keep resetting to "maybe this time it's different."

snvzz

a month ago

Vote should be in person at a designated place, based on a census.

There's absolutely no justification (or excuse) for anything else.

It is much better to have less votes than to allow any avenues for manufacturing the results.

pepa65

a month ago

My take: this is a paid-for hit piece to discredit a way of voting that makes total sense and is not all that hard to secure and make verifiable.

kayamon

a month ago

This is an alarmist headline and should be reconsidered before being posted anywhere.

niteshpant

a month ago

And Nepal elected its current interim prime minsiter using Discord, apparently...

biglost

a month ago

More important it should be a right first. Where i live it's not optional

tzs

a month ago

It is possible to have a system that works as follows:

1. People vote on paper ballots by filling in an oval next the candidate they wish to vote for. They fill the oval with a marker provided by the election officials.

2. These ballots can be counted by hand, but they can also be counted by optical scan machines to get fast results. Optical scan machines do not have to be computerized--they have been around since the 1950s long before there were computers small enough and/or cheap enough to use for this. No computer means no software to get hacked.

Almost half of registered voters live in districts that already use that kind of ballot and already count it with optical scan machines.

3. By the use of some nifty chemistry and some clever cryptography an end-to-end auditable voting system can be overlayed on this.

End-to-end auditable voting systems (also called end-to-end voter verifiable systems) have these properties:

• Individuals can verify that their ballot was included in the final count and they vote was attributed correctly.

• Any third party can verify that the ballots were counted correctly. The candidates, the parties, news organization, civil rights groups, and anyone else can check.

• Voters cannot prove to third parties who they voted for. This is called coercion-resistance.

Here is such a system, developed by several well known cryptographers including David Chaum and Ron Rivest [1]. Here's a paper in HTML with the details [2]. Here's a PDF of that paper [3]. Here's a paper showing that it is coercion-resistant.

This is compatible with existing optical scan machines, so the places already using them don't need new machines.

The magic happens in printing the ballots. Inside each oval they print a code in a special invisible ink. When the special marker provided by the election officials is used to fill in the oval that code becomes visible.

If you want to be able to later verify that your particular vote was included and counted correctly you memorize or write down that code. If you don't care about this you can ignore it.

After the voting is done officials can publish all the codes that were revealed and voters can check to make sure their code was included. They officials publish other information that through the use of clever cryptographic techniques allows anyone to use the published codes to verify the totals for all the candidates without revealing the mapping from codes to candidates.

This gives us all the good points of paper systems that can be hand counted, plus fast machine counting that can be done with simple single purpose machines that have no software to be hacked, yet with the kind of end-to-end auditing that usually requires computerized voting systems to achieve. And it is inexpensive to implement and operate.

[1] https://en.wikipedia.org/wiki/Scantegrity

[2] https://www.usenix.org/legacy/event/evt08/tech/full_papers/c...

[3] https://www.usenix.org/legacy/event/evt08/tech/full_papers/c...

[4] https://eprint.iacr.org/2010/502.pdf

tamimio

a month ago

I think this relies on the old argument that anything connected to the internet is potentially insecure. While it might have some truth, practically we all do very sensitive stuff securely while connected to the internet. The risk is there, always, but you put all the measures to mitigate it and even prevent it.

The idea that a malware could be on a phone “altering things automatically” feels like a 90s FUD cliche. If an online voting system existed, it won't be like a poll that you see on Twitter, for instance; it will be far more involved. For example, we can have blockchain as the network, and not just transparent to all, but even after you vote you can still check your vote and see if it was potentially altered, and a proper electronic chain of custody can also ensure that the vote was counted per the process, and all of that is visible to anyone who would like to check and even count ALL the votes yourself, again, just like how transparent blockchain is.

And saying paper voting is more secure isn't true at all, because these votes will be counted electronically at some point, either by a machine or just a simple Excel sheet, opening the same risks as the previous one except here, if it would happen, you will never know and you as a voter can't trace the vote from when you voted all the way until it was counted. The voting process should be designed in a way with zero trust in mind, just like how secure systems are designed now, like storage, encryption, vpn, etc., and voting should too.

I personally believe that we can build a very secure, robust, and trustworthy system that can be used for voting online, but I think no one wants that for all sorts of political purposes, either by actually altering the results that could go unnoticed, or at least keeping the window open to blame the results on a faulty system.

uptownhr

a month ago

2 factor vote. Vote in app, still go in person to validate result.

arjunchint

a month ago

Honestly we should just have block chain based PUBLIC voting.

This article is right about secret internet voting: it’s fundamentally incompatible with unsupervised devices and global networks. But secrecy is the constraint that breaks everything.

If you instead require public, verifiable voting, most of the "unsolved" problems disappear. The core requirement becomes: everyone can independently verify inclusion and correct tallying.

That’s where blockchains are a genuine game-changer: - They provide a public, append-only, tamper-evident system of record.

- Anyone can recompute the tally from first principles — no trusted servers, no “checker apps,” no special dispute resolution.

- Server compromise or insider attacks stop being catastrophic; fraud becomes immediately visible rather than silently scalable.

- Malware can still affect an individual’s vote, but it can’t secretly change the election at scale — the main failure mode highlighted in this post.

If trust is the goal, opacity is the wrong primitive. The secret ballot is mistaken path solving a non existent and purely theoretical problem of vote buying.

In a world where we expect everything to be easily accessible, the hardships placed by all the steps required to vote (registration, confirming residency location, waiting in line for polling booth) is seriously impacting voter participation. We need to get with the times and modernize this voting infrastructure.

parentheses

a month ago

With the recent success of AI, I feel the more insidious issue is preventing the use of AI in reading paper ballots. There's a lot of room to engineer bias.

ronbenton

a month ago

This is usually a smart crowd. I’m utterly mystified at the number of comments in this thread confidently stating that the US must go back to paper ballots when 99% of the country already uses them. It just takes a quick google search to know this.

ripped_britches

a month ago

Voter turnout might increase drastically if we solve security, so it’s a worthy problem to solve

FeistySkink

a month ago

Is this just an abstract and is there more to this post? I found it quite shallow.

ValveFan6969

a month ago

Internet voting in general in not only insecure but an human rights act violation against our species. Look none other than the fascist utopia that is YCombinator where some rando can remove your comments simply because they do not like your joke or opinion.

randomcatuser

a month ago

what about crypto voting schemes? zero knowledge and all that

if we assume the user connection is secure (ie, about as secure as banking), can we have secure internet voting?

artyom

a month ago

Premise: there's people that will try to game and cheat on anything that's important, including democratic elections. No matter your voting method, those people will exist.

Solution: the basic unit (paper ballot in this case) can be understood by any adult with basic education, which means anyone can detect cheating, not just a technical wizard. The only skill you need is reading.

Give me a solution that follows the same principle and I'd consider it.

Nobody cares about results coming faster except journalists that have to fill 2-3 TV hours with nonsense until there's some numbers.

No engineer that's worth of the title would advocate for electronic voting -- unless they're in the business of selling electronic voting. See the Premise.

thegrim000

a month ago

You know, kind of an interesting test here. This was posted 13 minutes ago and the comments so far are mostly all supportive of not wanting internet/insecure voting methods, all supportive of pen and paper. I wonder if after an hour or two the propaganda hoses will have been turned on and all the top comments start to have the reverse messaging in them, saying internet voting is perfectly fine, and such initial comments downvoted into oblivion.

manoDev

a month ago

Imagine that: thinking the technology used to cast votes is how elections get manipulated.

quilombodigital

a month ago

In Brazil we have been using electronic voting for decades.

See, here we always had issues with corruption, and thats why we had to implement it.

The thing is that we always had major issues at the city level elections, because many small groups dominate different regions, and they just controlled the election officials, influenced voters, disappeared with ballot bags, and did all types of crazy stuff. It was pretty common at the eighties exchange votes for gas, dentures or even tubal ligation.

For all this reasons, a specific voting registry was created in 1985, and an electronic voting machine was used for the first time in municipal elections in 1995. This solved most issues, and elections started to be a lot easier, there was A LOT of confusion in the past. After it was available in all cities in the country, they started to do national elections.

The main idea here is that this is a government endeavour, not a private company. There are so many security layers that I think that only another external government actor would have resources to attack it.

These machines have special hardware, the encryption keys are loaded at the election day by the government, the machines are there only for the 8 hours of voting, then came back to a government deposit, they account for every machine, they are audited before and after, they randomly choose the election officials, the machine prints a receipt for the voter and the stats of votes of that machine. Each person has an election location and room/machine, so schools are used. If a machine has problems, they have to on the fly generate new keys for a substitution. In 2024 they used 570.000 machines at the election.

When the election day finishes, they place at the door of the room the machine receipts, so any ONG or international organization can verify. After it they take the machine to a central place where they connect to them and trasmit the data, and in one hour we know the president. During these decades we had presidents from the right and from the left, and all cities and states, so you can say it works just by seeing all this power cycling all the time.

I agree with the article in the sense that we need paper confirmation, and that we cannot trust the voter machine, but I think Brazil solved this by making sure to control the machine, and printing receipts and making then available to any public organization.

I particularly think that only one thing is missing in this technology, technically speaking, I would like to have a personal key with an ecc key created by me, that would allow me to insert this card when voting, so it would encrypt my vote, store and send to the server, so I could, using my card (even online) check for my voting history, connecting all the endpoints. It is still anonymous, but verifiable by me.

More information here: https://international.tse.jus.br/en/electronic-ballot-box/pr...

pokstad

a month ago

While we’re on it, I don’t want the internet on my stove or car either.

irjustin

a month ago

Tom Scott made a solid video on this years ago[0].

I would love to go back to paper elections, even with all its problems (hanging chads anyone?). Let's make attack scaling as difficult as possible.

[0] https://www.youtube.com/watch?v=LkH2r-sNjQs