I've finally got it together to finish the celtic font logo, looking a bit less thrown together. http://homepage.eircom.net/~cathalmcginley/ifso-logo.html
I've also scribbled up a draft of the letter giving an IFSO perspective to the e-voting system. http://homepage.eircom.net/~cathalmcginley/e-voting/draft-letter.html
I figure most of us aren't online all day; perhaps we should figure out when would be a good time to have IRC meetings (excellent for discussing small details). I vote evenings, for phone-bill cheapness.
Hey all, I'm _very_ interested in this issue and will hopefully have time over the next few days to help on it (I'm in Spain for three months though). This letter is exactly what I've failed to write for the past month. The only thing I would say is remove the '!' (personal distaste for them in written communication). Good work.
Cathal Mc Ginley wrote:
I've also scribbled up a draft of the letter giving an IFSO perspective to the e-voting system. http://homepage.eircom.net/~cathalmcginley/e-voting/draft-letter.html
I think it's worth emphasising that if this new system comes in, the election process will be in the control of a pair of private companies who are not even indigenous to Ireland. Also, I feel politicians don't realise that they will lose all practical ability to properly be part of the process -- especially when it comes to concerns.
For example, I would say in the last sentence of the first paragraph:
"To that end, I would like to raise some serious concerns which stem from the fact that the software used for the system will remain wholly in the control of private, foreign companies, and, therefore, secret, hidden from the general public."
I echo Aiden's suggestion of removing the '!' at the end of the sentence after you quote Mr. Lessig. Understatement works better there.
Perhaps you might put after "...a backwards step in terms of democracy, and it is natural that people are opposed to it." the following:
"Consider that with the current system every citizen, including your own election agent, has the opportunity and right to scrutinise and contest the manner in which votes are being counted. With the proposed electronic system, this will not be possible and any nagging doubts will never be confirmed, because the implementation of the process is closed to all citizens and independent organisations."
Replacing "including your own election agent" with "including election agents" may be a better notion, though I prefer highlighting the politician's own election prospects.
I'm concerned that the paragraph that covers anonymity of voters isn't correct. With the proposed system, the marking of the voter on the register will still be on paper, and the voter will enter the booth as anonymously as they do in the current system. We run the risk of invalidating the whole of the letter[1] if we are seen to be spreading FUD. Anonymity *is* at risk with the proposed system, as the ICTE has detailed very well in its submission with the Commission on Electronic Voting, but in a manner different to how you describe and which requires some social engineering as well as computing know-how to pull off.
The following two paragraphs are very strong, though.
The section on the counting software is also strong.
I would add to the point about the audit the following: "The source code for the computer programs used in June's forthcoming election will not be handed over to the Department of the Environment until after September. How is the department, or any of the consulting companies it uses, to know for certain that the code it will receive then was the code used in June? Just a few lines of code can make the difference to an election and only the writers of the code, if even them, will know."
Lastly, can I suggest that we cast more doubt on a candidate's confidence in the proposed system. Just before the last paragraph we could add:
"Elections are often won and lost by a handful of votes. Previously, as more recounts were called, ballots were more thoroughly scrutinised and the counting process more vigourously examined by agents of the candidates and the public. With the proposed system, a few lines of code could 'slip in' -- by accident or deliberately -- which would effectively change the result of an election if even only by a handful of votes. Because the programming code of the software is not available to all for scrutiny, because it was a 'close-run election anyway', no one would ever know that the wrong person was put onto the seat by dint of software failure or sabotage."
Dramatic, maybe, but I genuinely think that politicians understand the drama of electoral mishap better than the arguments based on bit-inversion errors and how non-random the storage of the ballots actually is.
I particularly like that last sentence: "Irish democracy is important; we must not allow it to be treated as a trade secret."
Good work, Cathal, thanks.
Éibhear
[1] It was reported a few days ago on the mailing list of the Irish Citizens for Trustworthy E-voting that Minister Cullen is now referring to the group as anti-globalisation anarchists, and "McGaley's crowd". He gives them no credit and believes them to be disruptive for the sake of it. Adding fuel to his fire by opposing the proposed system with arguments that aren't water-tight would be regressive, in my opinion.
Thanks for your feedback & suggestions, Éibhear; I've incorporated most of it into a new draft, which I've uploaded to the same page: http://homepage.eircom.net/~cathalmcginley/e-voting/draft-letter.html
Éibhear wrote:
I think it's worth emphasising that if this new system comes in, the election process will be in the control of a pair of private companies who are not even indigenous to Ireland.
A valid point, but hard to make without sounding Euro-phobic. I think we must remain focused on the software concern - if a foreign company had produced Free Software for this system, the problems I refer to would go away (although all the others would remain).
Perhaps you might put after "...a backwards step in terms of democracy, and it is natural that people are opposed to it." the following:
"Consider that with the current system every citizen...
Thanks, I've included a variation of this. A direct appeal works very well here.
I'm concerned that the paragraph that covers anonymity of voters isn't correct ... requires some social engineering as well as computing know-how to pull off.
Quite right, it requires complicity on the part of the election officials as well as non-random vote recording. I hadn't made this clear. I've moved this point to the second paragraph and re-worded it. This is actually one concern that won't be solved by the Voter Verified Audit Trail, but only by being able to study the code and ensure that it's the same code running on the machines. (Perhaps I should mention this in the letter). I think this is a valid concern but I certainly don't want to undermine our case. If it can't be put plainly, we can take it out.
I would add to the point about the audit the following: "The source code for the computer programs used in June's forthcoming election will not be handed over to the Department of the Environment until after September....
I've put this in too. It leads me to think of putting: "Why is the Department of the Environment privileged over all other Irish citizens in being allowed to see this code?", but I think the general gist of that point has already been made elsewhere in the letter. Perhaps a line for the conclusion?
"Elections are often won and lost by a handful of votes...
I've included this as part of the conclusion, it nicely emphasizes the flaws of the system in a way that should worry politicians. Excellent.
- Cathal.
On Thu, 2004-04-08 at 16:04, Cathal Mc Ginley wrote:
Thanks for your feedback & suggestions, Éibhear; I've incorporated most of it into a new draft, which I've uploaded to the same page: http://homepage.eircom.net/~cathalmcginley/e-voting/draft-letter.html
Well, I know it isn't a popular opinion on this list, but I think that making the e-voting source code public is a distant second to voter verified audit trails and I am concerned that advocating the "nice-to-have" will only reduce our chances of getting the "need-to-have". In effect, we are prioritising the narrow goals of advocating free software over the wider goal of protecting democracy.
Opening the source code gives a false sense of security, if your compiler, or BIOS has been compromised, you can review the source all you want and you won't know that someone has stolen your election.
Voter verified audit trails are secure because their operation is obvious and transparent. I would only have marginally more trust in an election which used open software over one which did not (which isn't much), but I would have almost total trust if there was a V.V.A.T.
Ian.
Ian Clarke wrote:
Well, I know it isn't a popular opinion on this list, but I think that making the e-voting source code public is a distant second to voter verified audit trails and I am concerned that advocating the "nice-to-have" will only reduce our chances of getting the "need-to-have". In effect, we are prioritising the narrow goals of advocating free software over the wider goal of protecting democracy.
My letter doesn't advocate a Free Software solution, it criticizes a non-Free Software solution, while also (twice or more) drawing attention to the problem of knowing that the program you've reviewed is the program being used.
Essentially, I agree with Jason Kitcat, of the free e-democracy project:
"Electronic voting is a bad idea - it's the inappropriate use of technology in the wrong place."
The full quote is here - http://www.evoting.cs.may.ie/opinion.shtml
The ICTE submissions summary lists 9 instances asking for source code. The possibility of an "open source" solution has been raised in an article in the Irish Times (mentioned by Éibhear). The possibility of a "false sense of security" with a compromise solution is certainly high. I thought there would be a place for IFSO to offer a solid critique of the problems of e-voting with private software, in terms of loss of freedom and threat to democracy, without actually explicitly advocating e-voting at all.
Just my 1.57513p
- C.
On Thu, 2004-04-08 at 22:26, Cathal Mc Ginley wrote:
My letter doesn't advocate a Free Software solution, it criticizes a non-Free Software solution, while also (twice or more) drawing attention to the problem of knowing that the program you've reviewed is the program being used.
Well, my reading of your letter is that it does advocate a free software solution (perhaps I am not appreciating some subtlety, but if I don't - I suspect its intended audience won't either), but even if it didn't, a criticism is largely useless unless you advocate a better idea, so if you aren't advocating a free software solution, why muddy the water?
"Electronic voting is a bad idea - it's the inappropriate use of technology in the wrong place."
I think e-voting ok, but only with a voter verified paper audit trail. Simply saying that nothing should change makes us sound like Luddites, and will only serve to make it easier for them to dismiss us.
The ICTE submissions summary lists 9 instances asking for source code. The possibility of an "open source" solution has been raised in an article in the Irish Times (mentioned by Éibhear).
To be blunt, I really couldn't care less whether the source code is open, provided that there is a voter-verified paper audit trail. Advocating the former can only serve to distract attention from the latter - and that is bad for democracy.
Ian.