Back door in Diebold voting systems?

The election is won by getting the most electoral votes from the Electoral College (Which are delegates from each state whom "normally" vote based on how the popular vote is trending. The silly rule is that if you have a state with 10 electoral votes (The amount of electoral votes each state has is based on population of each state at the time of the election Each state has the same number of electoral college members as the total of its senators and representatives.) and 6 go to Bush, 4 go to Gore then all 10 in the end go to Bush instead of splitting up the votes.

Anyway we all know that by redistricting you can sway votes because people assume that a district that is heavily pro one party will all most always give their electoral votes to the party they support. This is what they recently did in TX. They redistricted so the Republican Party could merge large clumps of Republican voters into blocks and get more voting power and more electoral votes in those areas of that state. Even with a paper trail you could tamper with the voting in borderline areas (Or Swing states) to make one party or the others look like a bigger block in areas where the dominant party has the base and most people would not notice. (This has never been proven to have happened. But no one knows if it has happened)

This computer crap just makes it more easy to tamper.

Post note: The winner-take-all system in the US awards all of a state's electoral votes to the candidate receiving the greatest number of statewide popular votes. (This may be a plurality rather than a majority.) Conversely, this means that a candidate who finishes second by a narrow margin gets no electoral votes at all. One effect of this system is to reinforce the established parties' hold on power, because it is more difficult for a third-party upstart to win a majority of electoral votes or even to influence the outcome of a presidential election by winning enough electoral votes to throw an election into the House. Groups that might otherwise have started their own parties have therefore had an incentive to work through the major parties rather than to confront them. Farmers, labor unions, and business groups, as well as ethnic and religious minorities, are thus encouraged by the winner-take-all system to find a home within the two-party system. The winner-take-all system reinforces the existing power structure, and it is no surprise that it has been strongly supported by the two major parties that benefit from it.

The winner-take-all system has been criticized in that it lessens the likelihood of multiparty choices and thereby limits the ability of voters to "let off some steam" by voting for a candidate with a philosophy that might be closer to their own. The fewer candidates in the field, the greater the likelihood that a voter will feel alienated by the lack of a real choice. In some circumstances, it is suggested, the safety valve afforded by alternative party choices could prove useful in maintaining governmental legitimacy.

Another disadvantage of the winner-take-all system, according to its critics, is that it tends to exclude the population of some states from the national political dialogue. In every presidential election, some states are "in play" and others are not, meaning that one political party has effectively conceded the state to its opponent. As a result, neither party tends to spend much money in that state on political advertising or do much campaigning, which would go for naught. If electoral votes were awarded on a district-by-district basis, it has been argued, more advertising and campaigning would occur and therefore more Americans would be included in the national election-year dialogue. Of course, some districts would also not be "in play," but it is likely that candidates would have to campaign in more states, thereby involving more of the population in the election-year dialogue.

(Sorry about the rant)

Read the next paragraphs, please. My point is that electronic balloting will not be permitted to swing elections results if enough many eyes are on the ball. It won't make it better nor worse. Bear with me, please.

• http://lwn.net/Articles/98671/
  ---> by hummassa

Brasil, too, has e-voting, and it /works/.
(Posted Aug 20, 2004 13:40 UTC (Fri) by hummassa)

Yes, I said this all before, but...

I live in Brasil. We have had voting machines in the last 12-14 years (yes, twelve to fourteen -- it depends the size of the city you are in). Brazilians here: the first election here in Belo Horizonte to use the machines were the mayoral (and city council, state representation, governor, house and senate) before FHC was elected (as I count it, 2 years + 8 years + 1 1/2 = 11,5 years). I know it, because I was "mesário" (election "table" official? election "clerk"? what is a good English translation?) in the previous election, and in the two subsequent elections). IIRC, there were electronic ballot boxes in Rio and Sao Paulo in the election before that (the only two cities larger than Belo Horizonte).

Our voting machines are mainly of three different (internally) models: (a) the old ones, that use VirtuOS (*) as the OS, (b) the new ones, that use WinCE as the OS, and (c) the newest and deprecated ones that have the second printer to print your vote, show it to you inside a clear acrilic case, and mix it with others inside the machine.

Externally, all of them look roughly the same: a box similar to the old "portable computers" of the eighties, with a 5-6" diagonal LCD and a big numerical keypad in the right side of the screen, that has, besides the 0-9 keys, "confirma" (ok), "erro" (cancel), and "branco" (white).

The electoral process (from the point of view of the voter) begins ... when you get your first job. If you are a mandatory voter (literate person with age 18 to 65) you have to go to Electoral Court and register to vote. In the process of registering, you receive the "Título de Eleitor" (voter id card), in which you have the number of you voting section. To change jobs, and specially to get a government job, you have to prove you are a registered and regularized voter (you voted in the last election, or regularized your voting situation after it).

In the election day -- normally the first Sunday of October for the first round and the first Sunday of November in case of needing a second round (**), you scan the newspapers (or the Superior Electoral Court website), search for the address of your section, and go there. No, there is no transit (absentee) vote, you can only vote at that address. If you can't get there, you'll have to "justify" your absence to an Electoral Judge, to regularize your voting situation.

At the section, you will present your voter id card to one the "mesários", and if you don't have it on you, you can still vote (you can show other valid id), but will be delayed. The mesário will search for your name in the vote-ticket sheet, and annex it to your id while you vote. You will sign a receipt in a sheet, and proceed to the voting "booth". Another "mesário" will type your voter id # in a remotely connected keypad, setting the machine in the "ready to vote" mode.

The voting "booth" is really only a desk with the voting machine over it, facing nobody else in the room, and sometimes with a cardboard "cover" around it. You will "dial" the numbers of the candidates, in order. when you dial all the digits of one candidate, a star-trek-like chime rings, his/her face will show up in the screen, and if you digited it right, you hit "ok". otherwise, you hit "cancel" and start over. After typing all the candidates, you hit "ok" one last time, the machine chimes again, and goes to "stand by" mode. You have voted. If you don't want to vote for nobody for some office, you can hit "white" instead of the candidate ## (accounted as a "white vote", or "none of the above" -- this is the equivalent of putting your paper ballot in the box without marking anything), or if you really want to protest you can type 9999 or other non-existent-candidate-#, and your vote will be accounted as a "null vote", or "I'm really pissed of" (the equivalent of drawing pictures or writing "improper expletives" in a paper ballot)

Then, you get your id back, your ticket (keep it together with your voter id!! -- it's the proof that you are a regularized voter!), and you go home. Ah, bars do not open (theoretically) in the election day, so hope you have bought your beer/wine/other-booze in the day before).

From the point of view of election officials, things are more complicated. The machines arrive to the Electoral Judge (yes, a Judge of Law) pre-prepared one to two months before the election day, along with boxes of diskettes (where the results will go) and Flash ROM cards (where the software and the candidates names/photos will go). All Electoral Judge Offices already have Flash readers, to make some verifications on this Flash ROMs.

The electoral Judge has the personal responsability of, in the meantime before the election day, testing *ALL* of the machines and checking their Flashes with some checking software. He has to set the clock to the election opening date/time, emit the "zerésima" (0th report), that is a report saying "this box has no votes on it", make some votes, close the box, emit the totalling report, check if those were the votes, repeat the procedure a random number of times, and sign the machine as "ok" in a list. He should do it in a way that prevents "date/time" hacks, "number of activation times" hacks to be done. Some machines even get tested for a full day, to test for "number of votes" hacks. He can delegate some of the work, but it's his responsability -- he better delegate it to trusted people, in case of fraud it's his neck on the line.

In the evening of the election day, he must make sure the clocks are ok for all of the machines.

In the election day, the "mesários" in each section must emit the 0th report, annex it to the official election papers, and the box is ready to be used. At the end of the election day, the "mesários" emit 6 or more copies of the totalling report for each box. Three of them go with the official election papers, one is affixed in the outside of the section, and the others go to party appointed officials. Some electoral judges appoint press members to receive them, too.

The totalling is already in a diskette, that is inside a sealed compartment in the box. Some Electoral Judge Office employee breaks this seal (marking he's done so), and the diskettes are read in a computer in the Office, their contents (probably signed cryptographically) sent (directly by a dial-up line, not over the Internet) to the Regional Electoral Court, where they are processed against all other ballot boxes.

I should say, at this point, that all of this is accompanied by the Electoral Judge and the District Attorney, which are not elected officials in Brasil, and the elected officials have no power over them. Or at least, should not have.

The press and the parties' officials all have the intermediate per-box results, immediately after the election closed, so they can do the math, too. And they do -- in small towns the result of the mayoral elections is usually known far before the official announcement, because people sum the per-box results by hand, instead of waiting for the Big Computer at the Regional Court add for them.

Quoting (mis-quoting?) Gangs of New York, "ballots do not win elections -- counting does!", the counting/summing part is verifiable.

At this point, I should say I consider our system very very reliable, because of the distributed nature of the checkings that are done in the machines. I have worked at a District Attorney's office, and the fiscalization of the procedures to be done to the machine by the Electoral Judge was partly delegated to me, so I know what I'm talking about. The Judges and their guys usually fiddle with the clock, make a lot of votes, and thoroughly check the machines before they are used. This is taken very seriously.

Even in the few instances where it's not done so seriously, the overall bad effect is not great. Yes, it should be relatively easy to rig a mayoral election in a small town (100 machines or less -- each machine in the range from 500-10000 voters) -- but just with the DA's and the Judge's help. And they usually won't help, normally they have nothing in it for them, and the risk is very big [election fraud penalties are reasonably high]). But I think impossible the effort to rig, p.ex., an election like our last presidential one -- and, to boot, won by the opposition party.

You must notice that this is only allowed by our unified electoral system. The voter database is also a single one and it's very difficult to vote twice or more in our system.

I think the electronic system is better than the paper-ballots one (at least here in Brasil, but probably everywere) because counting ballot papers is hard, slow, error- and fraud-prone and no-one wants to recount them. It's easier, in my opinion, to rig some pre-printed million paper ballots and distribute them in a lot of ballot boxes than to distribute a million swing votes in 1000 machines.

I think the snafu in the last USofA election is really due to few people watching the counts, etc. Our multi-party (c. 20-30 parties now, but there were 50 at some point in the 90's) system makes every count/recount have at least 100 party officials doing the same. The voting machines were reasonably scrutinized by party-appointed experts.

Yes, paper trail (now deprecated here) is good, but only if you have a good, OCR-like way of counting the paper ballots. This is expensive. Our paper-trail machines had a second (thermal?) printer, that printed your vote and displayed it inside a clear plastic case before it was dropped in a box inside the machine, all sealed. But... as I said before, who is gonna recount them? It's easier to trust the distributed nature of the election and the audits made by the parties officials. If the paper trail were made in big, OCR-able letters, or with some bar-code, the tickets would have to be fixed-size, bigger than they were, and more expensive, in general.

Finally, yes, I would like the boxes to be all-free-software, so every citizen could independently verify the reliability of them, and even to check criptographically in some sense that the voting box he is using is "pristine", if possible, but... we did not get there yet.

(*) a DOS-clone-enhanced with possibility of multitasking and multiuser operation. a nice system, and it was always far better than MS-DOS.

(**) we have many political parties, so for the majority-vote offices (normally executive ones), if a candidate does not win 50%+1 of the valid votes, another electoral round is made with only the two most-voted candidates.