On privacy v Accuracy

From: David Webber \(XML\) <"David>
Date: Mon May 23 2005 - 12:05:07 CDT


Good points. To me this is the crux of what we are working on.

I.e. the difference between electronic banking and its accuracy
      and electronic voting and accurate counts is the fact that
      we absolutely require secret ballots, unlike banking systems
      where the transactions are exposed.

So - to remediate this we need to have a system that provides
accounting levels of reconcilation by induction, while at
the same time retaining absolute separation between counting
sources so they represent independently gathered totals.
These three sources are - electoral roll counts, paper ballots,
and electronic entry records. Crosschecking between the
three then provides the ability to diagnose and track the
process itself.

Another fundamental accounting principle is the one
involving crosschecking between two or more actors
in the process. Again - by linking citizens and election staff
physically into the process - we ensure that opportunities
for solely machine directed fraud are minimized. This is
why it is so important for voters to directly verify voting
on multiple levels - not delegate it to machines.

This is one key factor I see in enforcing cast paper ballots.
A machine cannot "walk" ballots into a ballot box - it has
to have a human intermediary.

Conversely - if humans manipulate the paper ballots in the
ballot box, you have to have the machine "know" about
those manipulations too.

And providing a 100% built-in audit system that requires
every vote to be counted and those totals crosschecked
between the three counting sources as a matter of course,
not as an occasional exception.

All this is woven into the fabric of the TLV approach.

Nothing is ever 100% - but certainly my hope is that it
represents a vastly better improvement compared to
today's systems that lack these fundamental pillars
of trust.

Cheers, DW

> >
> > What we need is more facts. Perhaps someday we can secure
> > ballots, using open software and a robust audit capability, to
> > the point where the results are not routinely called into
> > question, without having to provide for routine outside
> > analysis.

OVC discuss mailing lists
Send requests to subscribe or unsubscribe to arthur@openvotingconsortium.org
= The content of this message, with the exception of any external
= quotations under fair use, are released to the Public Domain
Received on Tue May 31 23:17:46 2005

This archive was generated by hypermail 2.1.8 : Tue May 31 2005 - 23:17:52 CDT