<$BlogRSDURL$>

Friday, July 15, 2016

Ottawa Citizen - Why not fight about online voting instead? - comment

@kady has written an article in the Ottawa Citizen: Craving a break from the referendum-or-not debate? Why not fight about online voting instead?

I would have to turn on Facebook Platform apps to leave a comment on the Citizen, which isn't going to happen, so I'm putting my comment here instead:

COMMENT

Kudos to Chief Electoral Officer Mayrand for stressing caution.

I'd like to quote part of Mayrand's testimony that illustrates the many challenges with introducing online voting:
"...we have to be careful.  We need to look also at security.  There are certain characteristics of the vote that we want to preserve: it is confidentiality, it is secrecy, the reliability and the integrity."

There is extensive evidence that we do not currently have the technology to meet the security requirements needed for online voting, nor the ability to maintain the confidentiality we currently get with the paper secret ballot.

A 2014 report from the BC Independent Panel on Internet Voting ( http://www.internetvotingpanel.ca/ ) indicated that
"Internet voting has some significant inherent risks"
and recommended
"Do not implement universal Internet voting for either local government or provincial government elections at this time."

An extensive investigation conducted by the Parliament of Australia in 2013 ( http://www.aph.gov.au/Parliamentary_Business/Committees/Joint/Electoral_Matters/2013_General_Election/Second_Interim_Report/Chapter_4#safety ) indicated that
"Internet voting is considered by experts to be the most risky and difficult mode of electronic voting to implement."
and concluded that any potential benefits do not outweigh the risks.

You can find a lot more information about this topic in my blog "Paper Vote Canada" ( http://blog.papervotecanada.ca/ )

ENDCOMMENT

(The quote from Mayrand is from my manual transcription of his July 7, 2016 testimony, as the official transcript is not yet available.)

You can see previous comments I have left on newspaper articles by selecting the label: newspaper comment.

Labels: , , ,

Thursday, July 07, 2016

Financial Times - A vote for online elections - comment

Here is the comment I posted on the Financial Times article A vote for online elections (June 10, 2016)

COMMENT
Considering that the Financial Times itself reports "The tools for cyber attacks are so accessible that individuals and private groups, as well as states, can carry out such offensives" it seems extraordinarily unwise to open up voting to these kinds of attacks.  (FT quote from Germany points finger at Kremlin for cyber attack on the Bundestag http://www.ft.com/intl/cms/s/0/668a131e-1928-11e6-b197-a4af20d5575e.html )

Sophisticated and in some cases state-sponsored attackers have broken in to White House computers and the Canadian National Research Council.  We know this because some of the breaches have been detected and (to the extent possible) repaired.  (BBC News - White House computer network 'hacked' http://www.bbc.com/news/technology-29817644 ; BBC News - Canada National Research Council 'hacked by Chinese spies' http://www.bbc.com/news/world-us-canada-28548925 )

Elections cannot be repaired after the fact, and they shouldn't have to be. Online voting increases risk enormously, without providing any benefits.  Even if online voting security were extremely good, there would still be the issue of coercion.  But time and again when voting technology is examined, the security is inept at best.

The Estonian example is illustrative, for while "officials say that their decade-long experiments have gone very well", an independent report on e-voting in Estonia identified serious concerns including "staggering gaps in procedural and operational security, and the architecture of the system leaves it open to cyberattacks from foreign powers, such as Russia" (Independent Report on E-Voting in Estonia, https://estoniaevoting.org/ )

It is key to choose appropriate technology, not just technology for technology's sake.  The paper secret ballot is still the appropriate technology for voting, as no computer system has yet been created that can provide the same combination of security and privacy.  I realise this may "seem peculiar" but it is the reality, as leading computer security experts have repeatedly stated, including most recently David Dill of Stanford University (Stanford Engineering, Why Online Voting is a Danger to Democracy http://engineering.stanford.edu/news/david-dill-why-online-voting-danger-democracy )
ENDCOMMENT

permalink to comment is http://on.ft.com/25RBV2F - it was posted June 11, 2016

Labels: , , ,

Wednesday, July 06, 2016

The Economist - Online voting could transform Britain’s electorate - comment

Here is the comment I posted on The Economist article Online voting could transform Britain’s electorate - April 18, 2015

COMMENT

Considering that The Economist itself reports "Companies, markets and countries are increasingly under attack from cyber-criminals, hacktivists and spies", it seems extraordinarily unwise to open up voting to these kinds of attacks. (Economist quote from Defending the digital frontier http://www.economist.com/news/special-report/21606416-companies-markets-...)

Sophisticated and in some cases state-sponsored attackers have broken in to White House computers and the Canadian National Research Council. We know this because some of the breaches have been detected and (to the extent possible) repaired. (BBC News - White House computer network 'hacked' http://www.bbc.com/news/technology-29817644 ; BBC News - Canada National Research Council 'hacked by Chinese spies' http://www.bbc.com/news/world-us-canada-28548925)

Elections cannot be "repaired" after the fact, and they shouldn't have to be. Online voting increases risk enormously, without providing any benefits. Even if online voting security were extremely good, there would still be the issue of coercion. But time and again when voting technology is examined, the security is inept at best. For example, the recent analysis of a voting system in Virginia revealed multiple serious, exploitable flaws. (The Guardian -
Voting machine password hacks as easy as 'abcde', details Virginia state report http://www.theguardian.com/us-news/2015/apr/15/virginia-hacking-voting-m...)

This is in addition to the specific issues with Internet voting that Barbara Simons reports in her comment.

I trust the Economist to have a high standard of research and evidence in its articles. I do not see the usual standard of care applied in this fallacious article about online voting.

ENDCOMMENT

Comment permalink http://www.economist.com/comment/2714876#comment-2714876

Labels: , , , ,

The Australian - Election cliffhanger prompts e-Voting rethink - comment

Here is the comment I posted on The Australian article Election cliffhanger prompts e-Voting rethink by Supratim Adhikari on July 5, 2016.  The comment has not (yet?) been accepted.

COMMENT

While the counting of paper ballots is slow, all of the complexity is visible to everyone.  With an Internet voting system, you would be greatly increasing the complexity and all of the associated possibilities for very complex systems to fail, but hiding all of that increased complexity from voters.  This simply distances the voting system even further from citizens.  To quote the 2013 Parliamentary inquiry: “It is important that in embracing technology, the secret ballot is not undermined, voter behaviour is not negatively impacted, and confidence in the electoral process and electoral outcomes is not damaged. At a time of debate about community disengagement with political processes, it would be greatly concerning if the method of voting—the one act of participatory democracy that all Australian citizens will definitely engage in—was to further disengage the community from these processes.” [1]

That is not to mention the risk of the election being hacked, including by other nation states.  This is a reality already - China was blamed for a massive hack on a Bureau of Meterology computer [2] resulting in the government spending an additional $230 million on cybersecurity [3] .

This leads to the last point, about claimed cost savings.  The current paper-based system can be used again and again, year after year, with at most minor modifications.  That is not at all the case for any kind of universal electronic voting system.  Technology and cyberattacks are constantly changing, which means that any electronic voting system is obsolete the day that it launches.  Such a system would have to be continuously and expensively updated for every election, to reflect technology changes and to defend against new types of attacks.  That kind of continuous expenditure on information technology is great for the Information Industry, but terrible for government budgets.

[1] http://www.aph.gov.au/Parliamentary_Business/Committees/Joint/Electoral_Matters/2013_General_Election/Second_Interim_Report/Chapter_4#comment section 4.80
[2] http://www.abc.net.au/news/2015-12-02/china-blamed-for-cyber-attack-on-bureau-of-meteorology/6993278
[3] http://phys.org/news/2016-04-australia-hack-boosts-cyber.html

ENDCOMMENT

With the slow paper-based count, there has been a flood of articles about Australian e-voting.  Unfortunately I'm not able to respond to them all, but the above comment applies generally.

Labels: , , , , ,

<- Older Posts - Newer Posts ->

This page is powered by Blogger. Isn't yours?