Message from @Mersenne
Discord ID: 653298971174764587
I don't trust computers to do this.
It would require legislation similar to HIPPA or CCPA. I would trust a system that provides instant validation over an archaic paper ballot distribution that will always yield errors and be subject to exploitation.
As far as security, Defcon's take on current ballot systems and their wide disparity in make/model currently in place is far more terrifying that an overarching architecture.
People with older model phones will claim they are oppressed because the app is slower and it caused him to miss a vote
They couldn't listen to mumble rap and vote at the same time on the same device, this is clearly racist
I support the idea of being able to *check your vote* on the phone - but still required attendance at a physical location to *cast your vote*
How often does an update for software totaly break it?
You think that wouldn't happen with this system?
If all states work on standardized hardware - that require patching before being placed in operation - it's pretty foolproof.
Banks operate on the same model.
If you want real security put live streams at the counting places.
Take it back to the CIA model - Confidentiality to only be able to check who you voted for with a provided voter registration number and phone number as 2-factor auth.
Integrity - Systems must adhere to latest patch level, votes require registration number, votes cannot be case without auth.
Authorization - voters are only able to cast a ballot once registered, present at booth, and validate themselves.
so all the systems are the same makeing hacking rather easy and only tested full scale during a vote.
All systems are in a closed network - same as current models.
nothing is hacker prof
Sure - but the current paper model is *much more* easy to exploit than a distributed E-vote
how so?
you can't hack paper once it is in the ballot box.
and the people doing the counting are being watched be people form bolth sides.
And states having a wide disparity in voter registration requirements.
Shit, you could go register at your local office and exploit absentee ballots with zero technical skill.
That just happened in NC's 9th Congressional District
ok, and one person could do how meany of those?
all that is argueing for is removeal of the absentee ballot and improveing ID checking.
not replacement for a untested system.
Improved ID checking at the ballot requires validation. States have a shit record for this, and have remarkably different means of checking.
Some have no ID requirements at all.
all you have to do is keep track of the people while they are voteing, filter before they even get a ballot.
if you are REALLY worried make the ballots on a special paper like we do with money.
I'm not proposing a completely new system - I'm talking about taking the system *which already exists* and standardizing make/model of voter ballot boxes and databases.
I'm simply advocating for Voter ID enactment and a system of validation for districts
E-voteing is a bad idea, people are getting into just as important systems all over the place, that's why you NEVER use the same password on two sites.
Here's the problem - the same thing happens with paper ballots - you just have no means of knowing when it occurs.
and I don't trust the govenrmet to do any of that closed system crap, they are just going to buy off the shelf gear and plug it in 9 times out of 10.
but paper ballots can only be changed by being there, a computer can be changed form almost anywhere.
Unfortunately you're right. It's almost impossible to create a perfect system.
so stick with the one that doesn't scale.
I wouldn't even mind paper ballots if all states could agree on voter registration and ID requirements.