62
votes
Is automated and digitized ballot processing inherently more dangerous than manual pencil and paper?
Great answers already about supply-chain attacks, complexity, transparency. I'll give an answer in a different direction: accountability and auditability (basically; how easy is it to do a from-the-...
58
votes
How could I make the results of a yes/no vote inaccessible unless it's unanimous in the affirmative, without a trusted third party?
The theory
This could be implemented in several ways, by applying the principle of idempotency.
You want a system that only produces a result (binary 1) if all the inputs are active, that is, it tells ...
38
votes
Accepted
How could I make the results of a yes/no vote inaccessible unless it's unanimous in the affirmative, without a trusted third party?
This sounds like a classic case for cryptographically secure Multi-Party Computation.
The functionality to be realised using SMPC would be an AND tree-reduction which requires N-1 AND gates and has a ...
26
votes
How could I make the results of a yes/no vote inaccessible unless it's unanimous in the affirmative, without a trusted third party?
A very low-tech method: give each voter a card with a hole punched in one end, offset from the center. Make a container that holds the cards, and has a hole punched through it that lines up with where ...
15
votes
How could I make the results of a yes/no vote inaccessible unless it's unanimous in the affirmative, without a trusted third party?
There's a cat in a box with a vial of poison gas. The vial is rigged to a button (marked "No") that will release the gas. Right next to that button, there's also a dummy button that makes an ...
15
votes
Accepted
Is automated and digitized ballot processing inherently more dangerous than manual pencil and paper?
Most answers seem to focus on why automatic systems aren't used or aren't considered a good idea. I'll try to address the core question of what makes them inherently less/more secure.
The central ...
14
votes
How could I make the results of a yes/no vote inaccessible unless it's unanimous in the affirmative, without a trusted third party?
This is actually a tough problem! So here's my paper-and-pencil solution, trying to keep it as simple as possible.
Every person gets 3 slips of paper. They secretly write down a different 2-digit ...
13
votes
How could I make the results of a yes/no vote inaccessible unless it's unanimous in the affirmative, without a trusted third party?
Required utensils: Pen and paper.
As a group, pick a big prime p.
Everybody picks a secret pair of numbers ai, bi with aibi ≡ 1(mod p). For example, pick ai randomly in the range 1…p − 1 and find bi ...
13
votes
Is automated and digitized ballot processing inherently more dangerous than manual pencil and paper?
The point here is trust and control.
If you can trust the digitized voting system, the risk of fraud and errors is much weaker than in a manual procedure. But... if you can trust...
In a manual ...
10
votes
Accepted
Why is e-voting still a problem?
Technically, your solution is pretty similar to CGS97 (note the date) which is the base of Helios and its descendants. As a general approach it's very reasonable, but completely lacking wrt to ...
10
votes
How could I make the results of a yes/no vote inaccessible unless it's unanimous in the affirmative, without a trusted third party?
Can't comment because I am newbie.
To add/comment @reeds and @securityOranges answers:
This seems like it could be easily done with switches as semi low tech option.
Make circuit such as:
Battery to ...
10
votes
How could I make the results of a yes/no vote inaccessible unless it's unanimous in the affirmative, without a trusted third party?
This is a really cool and interesting question. I really like this.
So, I think we should start by breaking down what you're trying to do in the most abstract, information theory-y way possible. Here'...
10
votes
How could I make the results of a yes/no vote inaccessible unless it's unanimous in the affirmative, without a trusted third party?
This improves securityOrange's thoughts, but in a more reliable form without waiting.
Chemical solution using a pH indicator
Let's look at different pH indicators, halochromic chemical compounds i.e. ...
8
votes
How could I make the results of a yes/no vote inaccessible unless it's unanimous in the affirmative, without a trusted third party?
With household items:
Everyone prepares a glass of water, distilled would be best. If you want to vote no, dissolve any amount of salt in your glass. Everyone must stir their glass to prevent ...
7
votes
Is automated and digitized ballot processing inherently more dangerous than manual pencil and paper?
Whether it is digitally automated or manually operated by hand, supply chain attack works in both cases regardless of the voting method used. Therefore, some level of trust has to be established with ...
7
votes
Is automated and digitized ballot processing inherently more dangerous than manual pencil and paper?
tl;dr– Voting requires a mix of privacy and publicity.
Simple solutions fail to provide both, while robust solutions would likely confuse voters.
I'd split possible electronic voting systems into ...
6
votes
How could I make the results of a yes/no vote inaccessible unless it's unanimous in the affirmative, without a trusted third party?
Use layers of encryption, where each family member has a key to only one of the layers.
Step 1: Encryption
At the beginning of a vote, have one member of the family encrypt a simple message that says ...
6
votes
How could I make the results of a yes/no vote inaccessible unless it's unanimous in the affirmative, without a trusted third party?
Trying to keep this as low-tech as possible.
Everyone is given two small pellets, a steel BB and a plastic airsoft pellet (equal size but different composition).
Inside the voting booth are two slots,...
5
votes
Identifying a Cheater in Public Voting Campaign
My question is, is there anyway to lookup the owner of an IP address?
Yes, search for Reverse IP Lookup and you will find a couple free services with varying amount of information. It won't be that ...
5
votes
Electronic Voting System Proposal: What are the flaws?
I haven't analyzed your protocol but there are glaring flaws in your methodology which make it unlikely that you achieved a decent voting protocol.
Your post has a detailed description of the ...
4
votes
Electronic Voting System Proposal: What are the flaws?
I'd like to second Gilles' point wrt methodology. When considering many somewhat standard properties in the area (Privacy, Integrity, Verifiability) it is often not clear what the requirement is and ...
4
votes
How could I make the results of a yes/no vote inaccessible unless it's unanimous in the affirmative, without a trusted third party?
I think this problem can be solved in the following simple low-tech way. Give each voter two rocks, a heavy rock which stands for yes and a light rock which stands for no. Voting is done by putting ...
4
votes
Is automated and digitized ballot processing inherently more dangerous than manual pencil and paper?
Digital ballot processing is inherently worse because of the complexity and lack of the transparency compared to the good old paper and pencil approach. If paper is replaced with a fully digital ...
4
votes
How can a "cosmic radiation bitflip" possibly change the election results?
Yes, it's physically possible to change anything at all by a high-energy particle hitting a computer chip in a certain way. It's not previsible, cannot be done on purpose, you cannot guarantee what ...
3
votes
Accepted
Possible setup for a direct democracy voting system to prevent fraud
It sounds like you may be asking about in person or online voting, so I will provide some info in both areas.
General
I would read the research from past conferences such as USNIX EVT/WOTE. DefCon ...
3
votes
Possible setup for a direct democracy voting system to prevent fraud
In a perfect way you can't. There is always a group of people that could conspire to rig the system. It isn't feasible to allow every member of the public the opportunity to manually vet and observe ...
3
votes
Why is e-voting still a problem?
This algorithm you have proposed is surely a good one. But perhaps it lacks the concept of privacy. This perhaps is the reason, why e-polling is avoided overall.
Privacy here refers to the set of ...
3
votes
Why can't Google Forms be used for elections?
In general, we can't use a third-party vendor's website for public systems, since anything can happen beyond our control.
If we host a site similar to Google Forms and it was managed by us, we may ...
3
votes
Accepted
Electronic Voting System Proposal: What are the flaws?
Disclaimer: I might well have misunderstood or missed some critical point.
As I understand point #13, the list of NR's (NR = {nonce, random ballast}) is disclosed after the vote to allow verification ...
3
votes
How could I make the results of a yes/no vote inaccessible unless it's unanimous in the affirmative, without a trusted third party?
What you're asking is a system that outputs V = v(1) AND v(2) AND ... AND v(n) where v(i) is the binary vote of the same person. By DeMorgan Law, V = NOT W where W = w(1) OR w(2) OR ... OR w(n) and w(...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
electronic-voting × 34anonymity × 5
cryptography × 4
government × 3
homomorphic-encryption × 3
privacy × 2
audit × 2
google-apps × 2
encryption × 1
authentication × 1
webserver × 1
digital-signature × 1
databases × 1
server × 1
google × 1
forensics × 1
physical × 1
integrity × 1
identity × 1
bcrypt × 1
opensource × 1
algorithm × 1
risk-analysis × 1
saml × 1
fraud × 1