That's good and all, but in the 4 states I've voted in, only one had a paper ballot. 3 were me showing up to the polling place and pressing buttons on a monitor. The 4th mails me a ballot, I fill things in, and send it back (so no receipt either).
Given my experience, and that several others tell me they do similar things, I don't understand your counter argument. We already do not have paper ballots to check. There is ZERO verification currently. If those ballots are printed out from the electronic machine that I voted on, well you still have to trust that a corporation did not mess with anything and printed out the wrong ballot, or just didn't print yours out. The way we are doing things and the way we used to do things don't enable the trust that you are suggesting.
But let's assume that the year is 2000 and we're voting on a paper ballot. We don't get to take a copy home. Once we leave we don't know what happens to that ballot in the box. Has our vote been counter? Did we fully punch out the paper chad? Did our ballot get lost when a country wide controversy started and my ballot got mailed around the state several times? Can I verify that the government's decision of how to count my vote reflected my actual intention?
The answer to these is that you can't do any verification of this. So I rather kinda like the idea of a website that I can go to and check that my vote was counted correctly and matches. The triviality of it from the voter side makes this process easy. Does it solve all verifiablity problems within the pipeline? No. Does it solve some? Yeah.
Personally I'd rather take a step forward, even if that step is small.
You are also able to volunteer to take part in the counting, or to observe the whole process. Sure, when you leave, you don't know that nothing bad happened, but you don't have to leave until the end of the process. In my jurisdiction, you can be part of the process that determines whether a vote is distinct (and should be voted) or not.
It sounds like you've already taken many steps backwards in your voting system, so this further step doesn't seem so bad, but it's still worse than a properly run paper system.
It sounds like you've already taken many steps backwards in your voting system
My voting system or the systems in the 4 states I've voted in? Which, I'll remind you, one uses paper ballots.
The year 2000 example I gave was literally what happened in Florida. Besides the chad part (which was a _MAJOR_ part of what I was suggesting as unverifiable), I'm also suggesting that given the close call there were many more opportunities for fowl play or accidents.
Really we don't care about verifiability in elections that went as expected. We care when they are close. Where mistakes make a difference. With thousands of ballots everywhere, it isn't hard for a few to get lost. Also, there were plenty of complaints about the ballot layout and how it confused people (Buchanan). You're also not going to be able to keep an eye on the ballots for 36 days (how long it took before the supreme court got involved).
Unless you have a receipt and a database you can easily access you can't really verify that your vote was counted. I'm not aware of any state that has this.
it's still worse than a properly run paper system.
I also cannot think of a case where this is being done. I'll also note that according to this list[0], I voted with "Paper and DRE without paper trail", but I definitely did not vote on a piece of paper. I was put in front of a machine, so I'm not sure why this is called paper.
Touchscreen BMDs are called "paper" because they produce paper ballots, which you can (presumably) inspect, and those are what is counted. The nightmare scenario for us in Cook County last cycle was a night where the counts in our pollbook didn't match up with the count of paper ballots we ended up with; we had to stay a bit late because of a minor snafu with them.
Thanks for that clarification with Touchscreen BMDs.
The problem here is that many of these don't have the receipts (see link). And I'm guessing the other ones the receipts are upon request, so I don't know if it is obvious for users to print them out. And that still doesn't solve the problem of a lack of a easy to access database to check your ballot.
As I understand it, if it doesn't have a paper artifact, it's not a BMD, it's a DRE. BMDs are suboptimal; DREs are actively harmful.
I strongly recommend people volunteer for their next election cycle to see this stuff firsthand. You'll definitely have better "this is how the election will be stolen" stories to tell than this mixnet verification stuff. At this point, I'm automatically skeptical of any story, positive or negative, about election security that doesn't include the word "pollbook".
Unless you have a receipt and a database you can easily access you can't really verify that your vote was counted. I'm not aware of any state that has this.
1. in the morning, the ballot box is shown to be empty and is then locked.
2. during the day, voters leave their paper ballots in the box.
3. in the evening, the box is opened, and all the ballots inside it are counted.
The entire process is public, and the ballot box never leaves the public eye. So you can verify that your vote went into the box, and that all votes in the box were counted.
You realize that this doesn't provide any verification, right? All that you have verified is that there are ballots in the box. Not who they belong to, if yours was counted, etc. You have no idea if those are even the same ballots. Sure, there is trust, but we're trying to create a system with minimal trust, right?
Sure it does? From the point where you put your ballot in the box, you can keep the box in sight until it is opened, at which point you can verify that all ballots contained in it were counted.
Since you say you don't understand the counterargument, I'll attempt to restate it: participation in the vote needs to be accessible at all levels, from the actual voting to the administration of polling places to the counting of votes. That's what we get with a paper ballot system (the touchscreens we have in Cook County are BMDs and produce paper ballots that are counted; you can volunteer for roles in the election administration) and what we potentially lose with a system that relies on algorithmic counting.
If you have strong opinions about how elections should be run, the best advice I've seen is Matt Blaze's: volunteer to be an election judge in your district, to get firsthand experience.
what we potentially lose with a system that relies on algorithmic counting.
I don't understand this argument. From my understanding the computers (I'm not using algorithmic counting because that's not a distinct enough word. By hand you're still doing an algorithm) are already counting and the paper is a backup. If we can still count up all the ballots after and have a verifiable method, then I don't see anything lost.
Comments
That's good and all, but in the 4 states I've voted in, only one had a paper ballot. 3 were me showing up to the polling place and pressing buttons on a monitor. The 4th mails me a ballot, I fill things in, and send it back (so no receipt either).
Given my experience, and that several others tell me they do similar things, I don't understand your counter argument. We already do not have paper ballots to check. There is ZERO verification currently. If those ballots are printed out from the electronic machine that I voted on, well you still have to trust that a corporation did not mess with anything and printed out the wrong ballot, or just didn't print yours out. The way we are doing things and the way we used to do things don't enable the trust that you are suggesting.
But let's assume that the year is 2000 and we're voting on a paper ballot. We don't get to take a copy home. Once we leave we don't know what happens to that ballot in the box. Has our vote been counter? Did we fully punch out the paper chad? Did our ballot get lost when a country wide controversy started and my ballot got mailed around the state several times? Can I verify that the government's decision of how to count my vote reflected my actual intention?
The answer to these is that you can't do any verification of this. So I rather kinda like the idea of a website that I can go to and check that my vote was counted correctly and matches. The triviality of it from the voter side makes this process easy. Does it solve all verifiablity problems within the pipeline? No. Does it solve some? Yeah.
Personally I'd rather take a step forward, even if that step is small.
Where I vote, we use paper ballots. They're still widely used, even in the 21st century. The state of election security in the USA is appalling. https://www.schneier.com/blog/archives/2018/11/buying_used_v... https://www.schneier.com/blog/archives/2018/04/securing_elec...
You are also able to volunteer to take part in the counting, or to observe the whole process. Sure, when you leave, you don't know that nothing bad happened, but you don't have to leave until the end of the process. In my jurisdiction, you can be part of the process that determines whether a vote is distinct (and should be voted) or not.
It sounds like you've already taken many steps backwards in your voting system, so this further step doesn't seem so bad, but it's still worse than a properly run paper system.
My voting system or the systems in the 4 states I've voted in? Which, I'll remind you, one uses paper ballots.
The year 2000 example I gave was literally what happened in Florida. Besides the chad part (which was a _MAJOR_ part of what I was suggesting as unverifiable), I'm also suggesting that given the close call there were many more opportunities for fowl play or accidents.
Really we don't care about verifiability in elections that went as expected. We care when they are close. Where mistakes make a difference. With thousands of ballots everywhere, it isn't hard for a few to get lost. Also, there were plenty of complaints about the ballot layout and how it confused people (Buchanan). You're also not going to be able to keep an eye on the ballots for 36 days (how long it took before the supreme court got involved).
Unless you have a receipt and a database you can easily access you can't really verify that your vote was counted. I'm not aware of any state that has this.
I also cannot think of a case where this is being done. I'll also note that according to this list[0], I voted with "Paper and DRE without paper trail", but I definitely did not vote on a piece of paper. I was put in front of a machine, so I'm not sure why this is called paper.
[0] https://ballotpedia.org/Voting_methods_and_equipment_by_stat...
Touchscreen BMDs are called "paper" because they produce paper ballots, which you can (presumably) inspect, and those are what is counted. The nightmare scenario for us in Cook County last cycle was a night where the counts in our pollbook didn't match up with the count of paper ballots we ended up with; we had to stay a bit late because of a minor snafu with them.
Thanks for that clarification with Touchscreen BMDs.
The problem here is that many of these don't have the receipts (see link). And I'm guessing the other ones the receipts are upon request, so I don't know if it is obvious for users to print them out. And that still doesn't solve the problem of a lack of a easy to access database to check your ballot.
As I understand it, if it doesn't have a paper artifact, it's not a BMD, it's a DRE. BMDs are suboptimal; DREs are actively harmful.
I strongly recommend people volunteer for their next election cycle to see this stuff firsthand. You'll definitely have better "this is how the election will be stolen" stories to tell than this mixnet verification stuff. At this point, I'm automatically skeptical of any story, positive or negative, about election security that doesn't include the word "pollbook".
With a paper ballot, you can.
Where's the database you can easily access?
You don't need it.
1. in the morning, the ballot box is shown to be empty and is then locked.
2. during the day, voters leave their paper ballots in the box.
3. in the evening, the box is opened, and all the ballots inside it are counted.
The entire process is public, and the ballot box never leaves the public eye. So you can verify that your vote went into the box, and that all votes in the box were counted.
You realize that this doesn't provide any verification, right? All that you have verified is that there are ballots in the box. Not who they belong to, if yours was counted, etc. You have no idea if those are even the same ballots. Sure, there is trust, but we're trying to create a system with minimal trust, right?
Sure it does? From the point where you put your ballot in the box, you can keep the box in sight until it is opened, at which point you can verify that all ballots contained in it were counted.
Since you say you don't understand the counterargument, I'll attempt to restate it: participation in the vote needs to be accessible at all levels, from the actual voting to the administration of polling places to the counting of votes. That's what we get with a paper ballot system (the touchscreens we have in Cook County are BMDs and produce paper ballots that are counted; you can volunteer for roles in the election administration) and what we potentially lose with a system that relies on algorithmic counting.
If you have strong opinions about how elections should be run, the best advice I've seen is Matt Blaze's: volunteer to be an election judge in your district, to get firsthand experience.
I don't understand this argument. From my understanding the computers (I'm not using algorithmic counting because that's not a distinct enough word. By hand you're still doing an algorithm) are already counting and the paper is a backup. If we can still count up all the ballots after and have a verifiable method, then I don't see anything lost.