National: An Uber Millionaire Wants You To Vote On The Internet – Despite The Inherent Vulnerabilities | Spenser Mestel/The Intercept
In the fall of 2010, the District of Columbia was preparing to do something bold: allow overseas voters to cast their ballots online. A few weeks ahead of the November general election, it conducted a mock internet election and invited the public to try and hack the system. Within a few days, computer scientists at the University of Michigan had gained near complete control of the election server. The team took control of webcams mounted inside the server room that housed the pilot, used login information to match specific ballots to specific voters, and changed not just votes that had been cast, but also ones that would be. “There is little hope for protecting future ballots from this level of compromise, since the code that processes the ballots is itself suspect,” the team wrote in a follow-up paper. Afterward, D.C. officials confirmed that they had failed to see the attacks in their intrusion detection system logs, didn’t detect their presence in the network equipment, and only realized what had happened after seeing the group’s calling card: the University of Michigan fight song playing on the “Thank You” page that appeared after voting. Technology has improved significantly since 2010, but internet voting presents a unique challenge. With paper, voters can verify that their ballot is correct before they mail it or insert it into a scanner. Once that ballot is tabulated, there’s no way to connect it back to the voter. It is irretrievable. When you cast a vote electronically, how do you ensure that the ballot the election office receives is the same ballot that you submitted — while also maintaining anonymity, producing an independent paper trail, allowing for some way to audit the results, providing publicly verifiable evidence if errors are detected, and ensuring that candidates can contest the results?
Full Article: Uber Millionaire Pushes Voting via Internet, Despite Vulnerabilities