Free Republic
Browse · Search
General/Chat
Topics · Post Article

Skip to comments.

Voting System Proposal
ZPRC ^ | 12/05/2020 | Zeugma

Posted on 12/05/2020 9:13:41 PM PST by zeugma

Voting System Proposal

The recent Presidential election has brought up a lot of issues surrounding voting and the tallying of these votes. After thinking about it a bit, I figured I'd write up what I think would be a proposal for a way to have voting and vote tabulating systems that would be verifiable, open, and transparent.

  1. All voters shall be positively identified via standard state or national ID, i.e., drivers licenses, state ID cards, military ID, or passport). Each positively identified individual shall be logged both locally and reported immediately to a centralized location to combat fraud. This list of individuals will be consulted to validate any mail in ballots. Mail in voting shall be restricted to military or expatriate individuals. If you want to vote, show up.

  2. All actual ballots shall be paper. They shall be human readable, and also able to be processed easily by machines for tabulation.

  3. Ballots shall be printed on demand via laser printers at leach polling location. The only thing that should be necessary at the polling places is toner and paper.

  4. All ballot printing devices shall be identical to the maximum degree possible. The computer used to produce ballots shall have no local hard drive, and shall be booted from read-only media such as CD-ROM or DVD. Information about ballots that will be used to print them shall be contained in XML or CSV format that is human-readable and verifiable. All config files shall have a cryptographic hash that can be verified and validated by any concerned party. (See PRINTING below.)

  5. All tabulating systems shall be identical to the maximum degree possible. All software on the tabulating systems should be open source, so that they can be validated by any organization that cares to do so.

  6. Tabulating systems would be booted from read-only media such as CD-ROM or DVD

  7. Tabulating systems should have no local storage, except for removable media, such as SD cards, which will be individually numbered. Micro-SD cards are too small to be individually numbered, so they should not be used.

  8. Each SD cards would initially be identical, and verifiability so. All configuration files shall have a cryptographic hash that can be validated both before and after the election. Each configuration file would be human readable, as either XML or CSV data.

  9. Upon the conclusion of all voting, a copy shall be made of each SD card used by any printing and/or tabulating device. (see IMAGING below). Once this copy is made, all cards shall be sealed in a tamper-evident enclosure. A copy of the results of each cryptographic hash and actual disk images shall be provided to any interested party. A copy of each of these should also be provided to each candidate listed on the ballot if requested.


 

Printing

As mentioned above, there will be no pre-printed ballots. This prevents issues arising of not having enough ballots at a particular location. A given polling location might want to use touchscreens. That is OK, but the ballots produced by these touchscreen devices must be human-readable. Ideally, the only difference between a touchscreen ballot and a standard paper ballot would be that all of the squares or boxes used to indicate a voter's preferences would be filled in by the printer as it is produced.

The individual choices available on the ballot will be determined when the voter presents his ID. If a touchscreen is used, the voter will be handed a slip of paper that will contain whatever information is necessary to display/print the correct ballot. In those locations using strictly a paper system the printed ballot given to the voter would be generated in a similar manner.

I live in Texas, so I am going to use the information found on my voters registration card as an example. My address indicates exatly which races/districts and whatnot are appropriate for me. Here's the information I get on my card (None of the numbers are actually the numbers on my personal card):

Voter number:1234567890
GenderM
Valid from01/01/2020
Valid Through12/31/2021
Year of Birth1968
  
Prec. No4112-01
CONG020
St. Sen011
St. Rep050
Comm003
JP/Con016
City032
City Ward000
St. Edu12
QR Code

Using the data from the above table, the exact proper ballot can be printed. This information should be printed on the ballot in both human readable and an easily verifiable machine readable format (such as a QR Code, which can be read by almost any cellphone.) The voter number would not be printed on the ballot (else you'd be able to correlate a particular voter to a particular ballot) Perhaps a random unique string could be used and logged so as to facilitate forensics, as long as the number could not be associated with an individual voter. If the number printed on the ballot is not in the logs, it would be an invalid vote. Only the information above starting with "Prec. No" would be used along with that unique random number. One way to keep from being able to do this would be to have a stack of 10 or so identical ballots. The voter would pick randomly from the stack, and another blank for that precinct added to the stack. Once all voting is completed. Each unused ballot in the stack would be marked as spoiled (which would be a checkbox on the ballot) and either placed aside, or fed into the counting machine as a spoiled, null, ballot. Thus a log entry for every valid and invalid votes would be maintained.

I'm tempted to say that there should also be a QR Code image of the information on the ballot, but that would tempt someone who might be interested in bribing folks to vote a certain way, because the person paying for the vote could actually validate what was voted. This is something that has to be considered in any voting system. Of course, these days it's also possible for the voter to take a picture of his vote given that just about every phone on the planet has a camera built in, so maybe that might be less of a concern than it might have been in the past. I would lean against it in any case.


 

Imaging

As mentioned above, the only thing in the Printing / Tabulating systems that can be written to are removable media such as SD cards. One thing that those interested in the integrity of the vote would be interested in would be a verifiable way to obtain copies of all data relevant to the vote. The following is a method that might be useful to generate such documentation.

All hardware would be designed in such a way that a given device can be used at any polling location. The information printed or displayed to the voter would be based on config files contained on the removable media, which for our purposes at the moment, we'll assume are SD cards. I'm also going to focus below primarily on cards utilized for tabulation purposes. Those used for printing ballots would all be identical. Using the same methods below, this could be trivially validated.

With observers present. The procedure below will create a validated image of the card that can be saved, and provided to anyone who wants to look at it from a forensics or data perspective.

All of the following can be performed from just about any Unix/Linux computer, and is completely read-only on the card itself. At no point is the card even mounted for writing. In the following, lines that start with "###" are my comments explaining what is being done. Lines that start with "$" are the actual commands being issued.

### First, create an empty directory
$ mkdir votecards

### change to that directory $ cd votecards/

### verify the directory is empty $ ls -l total 0

### Without mounting the card, create an image of it on the local hard disk $ sudo dd if=/dev/sdd1 of=card0001.img 246175+0 records in 246175+0 records out 126041600 bytes (126 MB, 120 MiB) copied, 16.2103 s, 7.8 MB/s

### verify that the image file exists. $ ls -l total 123092 -rw-r--r-- 1 root root 126041600 Dec 5 19:49 card0001.img

### Get a cryptographic hash of the image. Have all observers write this hash down. $ sha256sum card0001.img 6f4624afb94125a4ca0ac0c3a1cde7b4e9566f5de89f26eb1125d2977b44cf08 card0001.img

### Do the same thing, except this time dump the results into a file. $ sha256sum card0001.img >> card0001.img.sha256sum.txt

### Validate the contents of the hash file. Observers can compare against written value. ### If the number above and the number below do not match, something is wrong. $ cat card0001.img.sha256sum.txt 6f4624afb94125a4ca0ac0c3a1cde7b4e9566f5de89f26eb1125d2977b44cf08 card0001.img

### Mount the image file $ sudo mount -o loop card0001.img /mnt

### Check contents of the mounted filesystem $ ls -lR /mnt /mnt: total 6 drwxr-xr-x 2 root root 2048 Dec 5 17:23 config drwxr-xr-x 2 root root 2048 Dec 5 17:14 logs drwxr-xr-x 2 root root 2048 Dec 5 17:13 votedata

/mnt/config: total 14 -rwxr-xr-x 1 root root 73 Dec 5 17:21 precinct-001.cfg -rwxr-xr-x 1 root root 73 Dec 5 17:21 precinct-002.cfg -rwxr-xr-x 1 root root 73 Dec 5 17:21 precinct-003.cfg -rwxr-xr-x 1 root root 73 Dec 5 17:21 precinct-004.cfg -rwxr-xr-x 1 root root 73 Dec 5 17:21 precinct-005.cfg -rwxr-xr-x 1 root root 73 Dec 5 17:22 precinct.cfg -rwxr-xr-x 1 root root 494 Dec 5 17:23 precinct.sha256.txt

/mnt/logs: total 2 -rwxr-xr-x 1 root root 84 Dec 5 17:14 logfile.01.txt

/mnt/votedata: total 2 -rwxr-xr-x 1 root root 82 Dec 5 17:13 votes.txt

### Get a cryptographic hash of each individual file. Write these down or take screen shot. ### Note, piping the output through sort will make sure all files are displayed in the same ### order each time. $ find /mnt -type f -exec sha256sum {} \; | sort -k2 4511277a6fd1f513ef6448e7b89e554aa155351960501c69f050b77434aac0c5 /mnt/config/precinct-001.cfg 0e940e44a02c22217af9f40eab2f55c1bb763a85baf84f7c78068ab9a95d8e87 /mnt/config/precinct-002.cfg f87612e4c850324a3dd7999d1b48078a154d35319989c304d8681c7b64a0d953 /mnt/config/precinct-003.cfg eb7b5c0bba630a60abba2919543fb4374b0d392f6aa9fd2de0fa6deb93035321 /mnt/config/precinct-004.cfg 5b6eb9e719edb9b53675cec35a19fcc0d68c012e068a47ded4f141cab25b790e /mnt/config/precinct-005.cfg 0e940e44a02c22217af9f40eab2f55c1bb763a85baf84f7c78068ab9a95d8e87 /mnt/config/precinct.cfg b940d2ae1447984dd41285a63b056270ff2f1b5df32525944c7ad95cbfb384a9 /mnt/config/precinct.sha256.txt a9b71823d534f6f7dcb04af1f4975057d4045b27c1e795e828b513790afae881 /mnt/logs/logfile.01.txt acb1018d99ec642ffcc006b2885f9bc5ff0ef70ce4b3f070d3b9ac3c8d1ef9f5 /mnt/votedata/votes.txt

### Get cryptographic hash of each individual file, and store it in a file. $ find /mnt -type f -exec sha256sum {} \; | sort -k2 > card0001.files.sha256sum.txt

### Check contents of file hashes. Make sure the contents of the file matches ### the written hashes or screenshot. $ cat card0001.files.sha256sum.txt 4511277a6fd1f513ef6448e7b89e554aa155351960501c69f050b77434aac0c5 /mnt/config/precinct-001.cfg 0e940e44a02c22217af9f40eab2f55c1bb763a85baf84f7c78068ab9a95d8e87 /mnt/config/precinct-002.cfg f87612e4c850324a3dd7999d1b48078a154d35319989c304d8681c7b64a0d953 /mnt/config/precinct-003.cfg eb7b5c0bba630a60abba2919543fb4374b0d392f6aa9fd2de0fa6deb93035321 /mnt/config/precinct-004.cfg 5b6eb9e719edb9b53675cec35a19fcc0d68c012e068a47ded4f141cab25b790e /mnt/config/precinct-005.cfg 0e940e44a02c22217af9f40eab2f55c1bb763a85baf84f7c78068ab9a95d8e87 /mnt/config/precinct.cfg b940d2ae1447984dd41285a63b056270ff2f1b5df32525944c7ad95cbfb384a9 /mnt/config/precinct.sha256.txt a9b71823d534f6f7dcb04af1f4975057d4045b27c1e795e828b513790afae881 /mnt/logs/logfile.01.txt acb1018d99ec642ffcc006b2885f9bc5ff0ef70ce4b3f070d3b9ac3c8d1ef9f5 /mnt/votedata/votes.txt

### Pro Tip: ### Rather than staring at that huge mass of random characters, pipe the entire ### output through sha256sum so that only one line of output prints. If the two lines ### below are the same, then the data is the same in both raw output and the file. $ find /mnt -type f -exec sha256sum {} \; | sort -k2 | sha256sum 85aee5b269910bcf47bf9096a136e8cc80722142826e40cd99cfea5c1d4e41fa -

$ sha256sum card0001.files.sha256sum.txt 85aee5b269910bcf47bf9096a136e8cc80722142826e40cd99cfea5c1d4e41fa card0001.files.sha256sum.txt

### Unmount the image file

$ sudo umount /mnt

### take a look at the files that now exist in the directory. $ ls -l total 123100 -rw-rw-r-- 1 amp amp 845 Dec 5 19:59 card0001.files.sha256sum.txt -rw-r--r-- 1 root root 126041600 Dec 5 19:57 card0001.img -rw-rw-r-- 1 amp amp 79 Dec 5 19:51 card0001.img.sha256sum.txt

See the section below about cryptographic hashes for more detail why the above hashes are so incredibly useful.

Once all of the above is complete on each card, the originals should be sealed until the all of the legal issues have been dealt with. The state can by a new stack of fresh cards/drives or whatever to use in the upcoming election.

Any competent Unix/Linux nerd can validate the above procedure. The disk images can be provided to any person or organization that would like to take a look at them. One of the cool things about using the 'dd' command to image the cards is that it actually provides a byte-for-byte copy of the card itself. There are tools you can use to see deleted files and other information on the card. It does not just copy the files/directories of the file, but is actually an exact image of the card itself.

Anyone can validate after that point that the hashes match. The hash data should be publicly published so that anyone can look at it. In fact, I would strongly argue that the individual images should also be make publicly available. The computer used to generate all of this data can be a completely stand-alone box that has no network connection, and for the truly paranoid, could be installed from validated media immediately before this imaging process is initiated.


 

Cryptographic Hashes

A Cryptographic Hash is a strong one-way function that can be used to validate that specified data has not been altered. Wikipedia has a pretty good article about it, that explains it in much better detail than I can. However, the following is an attempt at explaining it in general terms that hopefully is understandable by most folk.

A 'cryptographic hash' is a humnan-readable string of hexidecimal digits. The number of digits is dependant upon the type of hash being used. In the examples below, I'm using a program called 'sha256sum' that will take any data input and reduce it to a 64 character string. This string will be unique for any input. It is theoretically possible for two different files to create the same hash, but the likelyhood of this happening by chance is really astronomical. Picture yourself standing on one of Jupiter's moons, and hitting a golfball that flies across the almost unimaginable distance to Earth, and lands directly in the cup on the first hole of your favorite golf course. It's roughly the same likelihood. One of the cool things about a hash of this type is that it is completely independent of the amount of data that is fed into it. No matter how big the file is, you always get exactly 64 characters as output. It can be easily written down, or otherwise saved, and then used as a comparison at a later date.

Here's a quick example of using a hash to see if a file has been altered...

The following is something that you can do using just about any standard Linux or Unix computer. I am pretty sure the tools also exist for MS-Windows, but I do not believe they are standard tools. In the following, the lines that start with '##' are my comments about what is being done. The lines that start with '$' are the actual commands being executed.

## The following is the original file. It is the Project Gutenberg version of 
## the King James version of the bible.
$ ls -l
total 4844
-rw-r--r-- 1 amp amp 4959549 Nov 28 20:30 The_Bible-KJV.txt

## This is the hash generated via the 'sha256' program. $ sha256sum The_Bible-KJV.txt 6d1c5625cad6b6f619bd8b5cb5e77ea20dcf052082743f27bc8c8be2fb7e8a55 The_Bible-KJV.txt

## Now I make a copy of that file. $ cp The_Bible-KJV.txt The_Bible-KJVa.txt

## I check the hash of both files, and they show as being identical $ sha256sum The_Bible-KJV.txt The_Bible-KJVa.txt 6d1c5625cad6b6f619bd8b5cb5e77ea20dcf052082743f27bc8c8be2fb7e8a55 The_Bible-KJV.txt 6d1c5625cad6b6f619bd8b5cb5e77ea20dcf052082743f27bc8c8be2fb7e8a55 The_Bible-KJVa.txt

## I edit the copy... $ vi The_Bible-KJVa.txt

## The following is a listing of the first 3 lines of each file. ## Note only difference is the first line starts with "T" in the first ## and "t" in the second. $ head -3 The_Bible-KJV.txt *This King James' Bible is the SECOND Project Gutenberg Version* This 10th edition should be labeled biblea10.txt or biblea10.zip ****This edition is being officially released on Easter 1992****

$ head -3 The_Bible-KJVa.txt *this King James' Bible is the SECOND Project Gutenberg Version* This 10th edition should be labeled biblea10.txt or biblea10.zip ****This edition is being officially released on Easter 1992****

## Now, lets check the hash again... $ sha256sum The_Bible-KJV.txt The_Bible-KJVa.txt 6d1c5625cad6b6f619bd8b5cb5e77ea20dcf052082743f27bc8c8be2fb7e8a55 The_Bible-KJV.txt 2cedfa1ddd401af877a03c9f9e84f675c89f86a3474372b2e45b0e777dd88c21 The_Bible-KJVa.txt

## Note that even the tiniest of changes to the file generates a completely different hash. ## You'll also note below that the two files are still exactly the same size, yet ## produce much different output even if that difference is only a single character. $ ls -l -rw-r--r-- 1 amp amp 4959545 Nov 28 20:44 The_Bible-KJVa.txt -rw-r--r-- 1 amp amp 4959545 Nov 28 20:42 The_Bible-KJV.txt

None of the above is rocket science to anyone who knows anything about security. Not only can you generate a hash for each individual file on the card, but after doing so and saving the resulting list of hashes, you can hash that resulting file as well, so that if any individual file is changed that overall has will fail as well. You can print, save, email and otherwise disseminate these hashes so everyone involved will have confidence in the data.

I'd also note, that if I were setting up something to assist with validating election results, not only would you have strong cryptographic hashes of all data, but the files on the computer as well, such that any change made would be readily apparent. I'd also implement digital signatures using strong cryptographic functions like those available with the PGP or GPG encryption programs, but that is a much longer discussion for another day.


Bonus!
Nully's modest proposal to end voter and election fraud:

Of course, all this would only apply to Federal elections, for federal offices, as that is the legitimate concern of the federal government.

Let the states who have local authority use whatever system they wish to force the elections of their favorite sons and daughters to alderman, mayor or goobernor. They can do it the cheap way, by just following the federal rules for all voting, or they can have separate ballots for local and federal. Their call. It's a free country, ain't it?


TOPICS:
KEYWORDS: fetidvanity; goplayintraffic; ridiculosvanity; validation; votingmachines
Navigation: use the links below to view more comments.
first previous 1-2021-4041-6061-8081-92 next last
To: zeugma

No, the original tallies need to be hand counted—with plenty of local businesses.

The tech you propose is still an invitation to fraud. I’d go so far as to call it an attractive nuisance for political critters.


61 posted on 12/06/2020 12:45:36 PM PST by 9YearLurker
[ Post Reply | Private Reply | To 59 | View Replies]

To: Terry L Smith
So, are you suggesting that those of us who cannot ‘show up’ because we are infirmed and housebound, cannot vote?

Not entirely, but I'd tend to lean that way. If voting is important to you, and knowing that your vote is going to be accurately counted is important to you, you should make every effort to attempt to show up. Mail in voting should be severely restricted because it simply opens up too many avenues for fraud. I'm sure there would be exceptions made, but those should be exactly that, exceptions, not the rule.

The reason I support mail in voting for the military should be obvious, as they have little to no control over their movement, and are performing an important enough service to the nation, that I think it would be criminal to restrict their ability to vote.

62 posted on 12/06/2020 12:46:01 PM PST by zeugma (Stop deluding yourself that America is still a free country.)
[ Post Reply | Private Reply | To 28 | View Replies]

To: JustaTech
Your comments on similarities between electronic commerce and voting are fairly common. There are issues with voting though, that are not present with commerce. The main one is that in commerce, strong validation is possible because detailed records of the transaction are made that link buyer, seller, goods, and the actual monetary consideration involved.

Bruce Schneier, (who I don't particularly care for from a political standpoint) is an actual cryptographer who has written about the comparisons between commerce and voting rather extensively over the years. I still think this article is one of the better ones at outlining the issues. It was written in 2004, and is still relevant today.

63 posted on 12/06/2020 12:52:21 PM PST by zeugma (Stop deluding yourself that America is still a free country.)
[ Post Reply | Private Reply | To 26 | View Replies]

To: JustaTech
2FA is secure enough for online banking

No it isn't. None of my banks or brokerages require me to use it and I don't because it doesn't add much security. It's security theater.

How much effort do you think some nefarious entity is willing to expend to gain access to ONE vote?

How many records of personal (unchangeable) information did China hack from OPM? 23 million.

The email address would be part of the information you provide when appearing in person at a government office to set up or renew your voter account.

Then I will appear in person pretending to be you. But more likely I won't need to do that, I will do it by mail or internet and that's much lower effort. Like you said, how much effort do I want to expend to get one vote? That's really your only protection against masquarading.

Changing your email address would have be done while logged in to your account.

None of that stops China from getting into 23 million accounts using personal information like mother's maiden name, city and date of birth, etc.

64 posted on 12/06/2020 12:52:31 PM PST by palmer (Democracy Dies Six Ways from Sunday)
[ Post Reply | Private Reply | To 57 | View Replies]

To: FreedomPoster

Thanks for the link. That’s considerably longer than my write up. :-) I’ll dig through it. Looks interesting.


65 posted on 12/06/2020 12:54:36 PM PST by zeugma (Stop deluding yourself that America is still a free country.)
[ Post Reply | Private Reply | To 24 | View Replies]

To: HotHunt
So I disagree that absentee mail-in ballots should be limited to just the military. You just assume everybody else can just "show up", which is not the case.

See comment 62 above. I think mail-in balloting needs to be severely restricted, perhaps not entirely eliminated, but we should start from a more restrictive standpoint and only make exceptions where it makes the most sense to do so. Convenience isn't really a valid reason to mail your vote in IMO. OTOH, some folks can't get out, and we'd have to deal with that.

66 posted on 12/06/2020 1:00:51 PM PST by zeugma (Stop deluding yourself that America is still a free country.)
[ Post Reply | Private Reply | To 18 | View Replies]

To: zeugma
Absolutely. Registration and validation are a huge part of the problem. I'm a nerd. I'm primarily concerned about the mechanics of how one accurately and transparently tracks valid votes. Making sure that an individual is a valid voter is another whole ball of wax.

No, it's the same ball of wax. Apply your same nerd skills. Think about how an privacy protecting system could check for duplicate registrations such as a hash of key personal information used to register. You would choose information that can be validated like SSN and DOB but concatenate them and store as one-way hashes so records can be checked for duplicates everywhere in the country.

One of our biggest problems with voting in this country is that everything is managed individually by the states

Doesn't have to be problem. The alternative could be worse. Think cheating democrats nationwide.

...must be cooperation amongst the states...Death records should be ... Illegal voting should have real punishment, and be swift and sure.

It won't be swift and sure unless you put the nerd hat back on and solve the registration problem. It's not easy and certainly not as easy as securing the vote itself. Tackle the hard problem first and you will find the less hard problem will be solved too.

Again, this proposal is mostly concerned with mechanics of...

Voting. That's easy. Back to the drawing board.

67 posted on 12/06/2020 1:01:27 PM PST by palmer (Democracy Dies Six Ways from Sunday)
[ Post Reply | Private Reply | To 58 | View Replies]

To: zeugma

My comment: Until the Republican Party is destroyed, nothing positive such as your most excellent suggestion can ever happen.


68 posted on 12/06/2020 1:03:04 PM PST by Jim Noble (Lo there do I see the line of my people, back to the beginning)
[ Post Reply | Private Reply | To 2 | View Replies]

To: WildHighlander57
All absentee ballots must be received by 7pm on election day; no exceptions.

Added. I'll be making more additions to the page. Note the postmark caveat I added.

All absentee ballots must be received (not just postmarked) by 7pm on election day; no exceptions. H/T WildHighlander57

69 posted on 12/06/2020 1:04:55 PM PST by zeugma (Stop deluding yourself that America is still a free country.)
[ Post Reply | Private Reply | To 19 | View Replies]

To: zeugma
You are not the arbitrator of who gets to vote in our elections. The US Constitution is.

Just because if have bad knees, have trouble driving and can't stand for very long at one time, doesn't mean I lose my constitutional right to vote. My wife and I have been voting absentee all through our 20 years in the military and ever since. It worked fine until this election when the democRATS, not my wife and I, decided to engage in massive election fraud. Go after policies and procedures and processes that will prevent them from doing what they did again and stop trying to blame people like my wife and I.

I suggest you take your idea of disenfranchising us from being able to vote in the country we served for 40 years between us in the military and take it to Venezuela where they would be glad to implement your bad idea.

70 posted on 12/06/2020 1:33:59 PM PST by HotHunt
[ Post Reply | Private Reply | To 66 | View Replies]

To: zeugma

Great, zeugma. The silver lining in all this is education of the public. It has been sadly missing!

Once the dust settles, a good project of Free Republic is to spearhead creation of an informational website where people can learn the principles of good voting procedure.

It’s really the same thing as protecting your on-line identity with proper passwords and practices. Or stopping phishing attacks in your email.

This is a good use of the brainpower of FReepers.


71 posted on 12/06/2020 1:56:19 PM PST by poconopundit (Hard oak fist in an Irish velvet glove: Kayleigh the Shillelagh we salute your work!)
[ Post Reply | Private Reply | To 60 | View Replies]

To: palmer

If you’re not using 2FA, you are less secure than you could be. My credit union has required it for literally 20 years. My brokerage accounts require using an authenticator browser extension or an authenticator fob. There is no credible argument that it’s impossible to secure an online account sufficiently to protect ONE vote.

I have no doubt the Chinese, or you and anyone else willing to pay the price, have my security clearance application. Nothing on it would give you the slightest advantage in hacking into my online accounts, unless you are willing to get on the phone and attempt social engineering to hijack my account because you know my SSN and mother’s name. A hell of a lot of work for ONE vote, and I would be instantly notified by email of any changes to my account, so you would not get far my friend.

We have mastered the procedures for doing secure business online, and I consider this an “expert” opinion because I’ve been doing online business daily for 20 years without incident.


72 posted on 12/06/2020 2:22:04 PM PST by JustaTech (A mind is a terrible thing)
[ Post Reply | Private Reply | To 64 | View Replies]

To: cymbeline
That wouldn’t be secret balloting.

I thought of that, but was too lazy to explain my work around on that.

What if *one* "sample ballot" was printed for every voter, and each ballot is one of 10-100 or more *different* potential combinations of ballots--the only difference being random spacing/location of the fill-in circles/punches on the voters' particular ballot? The voter's particular combination is given to them after they leave the booth, on a sheet of paper, and their ballot has a specific "voter id" number assigned to it.

When the count is over, the rolls are run again through the machine, and the voter gets mailed a printed punched-paper "receipt" with their designated random "voter id" number instead of their name on the receipt. They put the "receipt" on top of the sheet they are given on election day, and they should match up.

73 posted on 12/06/2020 2:30:52 PM PST by Captainpaintball
[ Post Reply | Private Reply | To 40 | View Replies]

To: JustaTech
Mainly what makes your online interaction secure is security at the institution you do business with. Almost nothing you do makes any real difference. Sure, you can type crap from your phone into the computer every time you log in and pretend that adds security but it doesn't.

Yes, the fob is secure because it uses PKI and the private key cannot be stolen from the fob. Ewerything else you use, from passwords to questions to text messages to any kind of software can be compromised and under the right conditions compromized en masse. Not just one vote, millions of votes if 2FA is your voting "security"

You won't get notified by email either or if on the odd chance you do I'll make sure you get dozens of notifications so you will ignore the useful one (actually Google does that already when I use the same account on multiple laptops and phones).

If you really want a purely tech solution then hand each voter a PKI fob in person upon presentation of ID and credentials. I've written browser extensions, both PKCS #11 and Microsoft CSP. Software tokens are not secure, only hardware is secure. I've also written the server side java and client javaascript to use FIDO U2F to secure web accounts. FIDO U2F fobs are secure just like the PKI fobs (some fobs do both).

74 posted on 12/06/2020 2:47:33 PM PST by palmer (Democracy Dies Six Ways from Sunday)
[ Post Reply | Private Reply | To 72 | View Replies]

To: zeugma

Two things: in case you missed that page in the dictionary, yes, I said page, that defines ‘infirmed’, or, ‘housebound’, these are terms the average yokel, like you or me, would not hear unless coming from your doctor, or the guy your doctor sends you to

Here are my infirmities: lower leg edema brought on by congestive heart failure. This means i have to keep my feet elevated and wrappings applied by a visiting nurse a couple times a week. I have stage 4 kidney disease brought on by diabetes, which means for 31/2 hours 3 times a week, I have to sit connected to a dialysis machine. I cannot walk the aisles of a big walmart without near exhaustion.

I vote by absentee ballot, just like my military brothers and sisters do, and as I did, when they are overseas!


75 posted on 12/06/2020 2:50:10 PM PST by Terry L Smith
[ Post Reply | Private Reply | To 62 | View Replies]

To: HotHunt; yefragetuwrabrumuy
I suggest you take your idea of disenfranchising us from being able to vote in the country we served for 40 years between us in the military and take it to Venezuela where they would be glad to implement your bad idea.

It is not my intention to 'disenfranchise' anyone. Another Freeper suggested here a possible solution of:

4) Portable voting machines will be hand carried to voters that are infirm or who cannot vote in person.

This would work, though it would be necessary to have proper safeguards in place so you don't run into things such as someone voting for dozens of folk in a nursing home or something similar. 'Vote harvesting' is a real thing. Your identity should be validated in the same manner as would occur at a normal voting location, and your vote should be secured in a sealed, tamper-resistant box.

This early canvas should happen as close to the actual election date as possible, as it should be self-evident that all voters should have the same information available to them. This 'early voting' crap that goes on for weeks is bogus.

This should all be planned in advance. If you cannot get to a voting location, chances are, you know it ahead of time.

76 posted on 12/06/2020 2:52:08 PM PST by zeugma (Stop deluding yourself that America is still a free country.)
[ Post Reply | Private Reply | To 70 | View Replies]

To: null and void

Ok...well i always have the right info for myself...never vote for a dumblecrat at any level.

Early or on Election Day, it won’t matter.


77 posted on 12/06/2020 2:57:16 PM PST by Adder ("Can you be more stupid?" is a question, not a challenge.)
[ Post Reply | Private Reply | To 45 | View Replies]

To: Terry L Smith
See post 76. This might answer your concerns. What I want to get rid of is the widespread potential for fraud introduced by mail in voting. Again, one-offs and exceptions would exist, but they would be exceptions.
78 posted on 12/06/2020 2:57:44 PM PST by zeugma (Stop deluding yourself that America is still a free country.)
[ Post Reply | Private Reply | To 75 | View Replies]

To: Captainpaintball

“I thought of that, but was too lazy to explain my work around on that.”

I didn’t understand that scheme, but if you give a voter any way to see how he voted after he’s gotten home, it’s not a secret ballot.

Actually, a voter being able to see how he voted when he’s gotten home is of no use because he doesn’t know whether or not the vote was properly counted.

The only solution I can think of is the vote counting process is done by more than one group of vote counters, and the counters are not from the same political party.

If the counts don’t agree the two groups go over the data again until the counts agree.


79 posted on 12/06/2020 3:07:05 PM PST by cymbeline
[ Post Reply | Private Reply | To 73 | View Replies]

To: null and void

True. The biggest mistake many German-Jews had pre-Holocaust was saying, “Things are bad now, but they will get better.” Yes, but only after getting much, much worse.


80 posted on 12/06/2020 4:44:00 PM PST by unlearner (Be ready for war.)
[ Post Reply | Private Reply | To 46 | View Replies]


Navigation: use the links below to view more comments.
first previous 1-2021-4041-6061-8081-92 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
General/Chat
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson