Transparent, Verifiable Online Non-government And Government Elections

By Author: richardrich
Total Articles: 31
Comment this article

The ease with which the D.C. Internet voting pilot was hacked surprised many and captured the attention of global media ("Will Online Voting Turn Into an Election Day Debacle?", Alex Altman, Time magazine, Oct. 15, 2010). However, it did not surprise engineers at online voting firm, BigPulse.com. The D.C. hack confirms what long-term successful professionals in the online voting industry all know -- there are no shortcuts to a secure Internet voting system. It takes many years to create a secure online voting system and it's been done.

Rapid meshing of an open source system by the District of Columbia Board of Elections and Ethics (DCBOEE) with other technologies created a new untested system. Even with the best engineers a new voting system is many years and thousands of real high security non-government elections short of being ready for a government election.

Another precondition for any high security online system, whether for voting, banking or anything else, is a paranoid-like sensitivity to security. Clearly this was not the case with engineers managing the DCBOEE online voting project. The computer scientist ...
... who led the hacking test, University of Michigan's Professor J. Alex Halderman, exposed a low security system. The DCBOEE system was destined to fail with security apparently so poor it was indistinguishable from a deliberate intent to be hacked. Halderman reported a master password had not been changed from the original system default published in the owner's manual, code injection errors and other basic errors. Apparently no intrusion detection was in place.

Professor Halderman and his team performed a valuable public service exposing a low security voting system pretending to be a high security system. However the public statements that followed by Professor Halderman and others suggesting that all Internet voting systems are insecure and similarly exposed to hacking is an unscientific hack conclusion. The successful hacking of a low security voting system simply demonstrates the importance of asking the right questions. A simple ten point security checklist with a one minute response time would have exposed the DCBOEE online voting system as low security.

Clearly Internet systems can be made safe from hacking. The global banking system would collapse in a day if it were not secure from hacking. Secure online voting systems do exist. BigPulse.com is one of a few international Internet voting systems with a ten year track record in non-government online voting. That's thousands of high security real online elections -- all without security incident, not a single lost or miscounted vote. In U.S. universities, online elections are now more common than paper elections, particularly for hacker infested student elections. Many NGOs and professional associations have conducted online board elections using BigPulse for many years.

Practical transparency is fundamental to security in voting systems. Open source code did not make the DCBOEE system safe or transparent. Open source remains obscure to most people. Even technically brilliant observers cannot be sure which code actually counted the votes. The essential feature for real transparency is a take-home vote receipt. Take-home vote receipts are standard practice in non-government elections. The BigPulse system enables election officials to publish the full list of vote receipts after the vote close time, without compromising anonymity. Published vote receipts create a transparent audit trail open to anyone, not just a few selected auditors or scrutineers. This is the practical meaning of a transparent election. This is why BigPulse is confident it has been tested.

Online voting, with vote receipts, can produce truly transparent, verifiable, accessible, efficient, low cost government elections. The obstacle for government elections is not technical but political -- that is, outdated irrational opposition to vote receipts in government elections.

BigPulse.com online voting, Election services company. Secure Online voting system and survey technology