Re: Voting with digital pen

From: Ronald Crane <voting_at_lastland_dot_net>
Date: Mon May 21 2007 - 19:36:50 CDT

Jan Karrman wrote:
> Germany:
The pen is a compact scanner. The paper "ballots" do help avert
presentation and procedural attacks, but the paper does not discuss
audits, and apparently does not envision that the "ballots" will be used
after marking, except when the selections are ambiguous. On security,
the paper says, "The countermeasures are summarized as security
objectives, e. g. every voter can check whether the pen is manipulated
and whether his ballot is counted [8]." Note 8 then says, "Remark: Here
it is enough that the computer displays that the vote was successfully
stored in the electronic ballot box (of course without any information
about the content)." "Enough" for what purpose? Note 7 says, "Note that
the digital electoral pen system is equipped with a security feature
that comes for free: It is impossible to manipulate, e. g. invalidate a
ballot during validation." The "e.g." is perhaps true, but the general
principle is not: an attacker can program the pen to record selections
incorrectly, and is likely to get away with it because there are no audits.

OVC-discuss mailing list
= The content of this message, with the exception of any external
= quotations under fair use, are released to the Public Domain
Received on Thu May 31 23:17:04 2007

This archive was generated by hypermail 2.1.8 : Thu May 31 2007 - 23:17:05 CDT