remote voting: what can we do? - usenix · pdf file let's talk about remote voting tuesday,...

Remote Voting: What Can We Do?
David Wagner
Tuesday, August 13, 13

voting technology is in a period of stasis

voting technology is in a period of stasis
...now's the perfect time to innovate!

I hope to inspire you, by sharing exciting research opportunities

let's talk about remote voting

vote-by-mail

40-50% of voters vote by mail, in several Western states

What can we do to improve vote-by-mail?

not-quite-remote voting

it might be time to re-consider the precinct model

it might be time to re-consider the precinct model
imagine if you were only allowed to drop off outbound mail at your home post office

Can we enable voters to vote at any polling place of their choice?

voters would like to be able to research candidates and make their choices, at a time and place of their convenience

voters would like to be able to research candidates and make their choices, at a time and place of their convenience (e.g., on their phones/computers)

voters would like to be able to research candidates and make their choices, at a time and place of their convenience
... but voting over the Internet is risky.
(e.g., on their phones/computers)

Can we establish a technology foundation for pre-voting?

accessibility

15% of US voting-age have disabilities (≥ 30 million eligible voters)

45-72% of polling places have impediments to access
Source: GAO 2009.

poll workers often have difficulty setting up accessible voting machine

Can we help disabled voters vote from home?

overseas voting

there are 6 million eligible US voters abroad (civilian + military)

for ≈ 25% of overseas voters who wanted and tried to vote,
their vote didn't count.
Source: OVF 2013.

15% of overseas voters returned their ballot electronically
(email, fax, or web – no paper).
Source: OVF 2013.

Can we help overseas and military voters?

it is time to study how to make Internet voting work.

In 2004

Internet voting is not safe!
In 2004

Today

Let's try to make Internet voting safe enough for overseas
voters
Today

is it even possible?

‟if only voting weren't anonymous, it would be easy”

just publish everyone's vote

just publish everyone's vote
Anne: Grace:
Charlie: ....
vanilla chocolate vanilla

overseas ballots already aren't 100% anonymous

publish everyone's vote
10923: 92301: 46388:
....

10923: 92301: 46388:
....
tracking number

10923: 92301: 46388:
....
tracking number
vote

problem solved

problem solved?

wait a minute: does this provide privacy?

wait a minute: does this provide privacy?
No!

10923: 92301: 46388:
President: Obama, Mayor: Brown, ... President: Romney, Water District 3: ... President: Romney, School District 7: ...

if Alice is the only overseas voter with a particular ballot style, she has no privacy.
10923: 92301: 46388:

if Alice is the only overseas voter with a particular ballot style, she has no privacy.
10923: 92301: 46388:
in one county: 4% of voters would be uniquely identified 28% of voters would have anonymity set < 20

one tracking number isn't safe

one tracking number isn't safe
so give 'em two!

10923: 92301: 46388: 75190: 23209: 44852:
President: Obama Water District 3: Jones School District 7: Smith Mayor: Brown President: Romney President: Romney

10923: 92301: 46388: 75190: 23209: 44852:
President: Obama Water District 3: Jones School District 7: Smith Mayor: Brown President: Romney President: Romney
Anne's tracking numbers

another approach: end-to-end (open-audit) cryptographic schemes

another approach: remotely-supervised remote voting
See: Juan Gilbert's research.

there might be hope for making Internet voting auditable

caveat:

caveat:
usability

caveat:
usability > auditability

caveat:
usability > auditability > security

caveat:
we don't know how to build a secure bulletin board.

suppose 20% of voters verify their vote against the public website (BB), right after voting.

if website is hacked,

if website is hacked, it can change everyone's votes

if website is hacked, it can change everyone's votes
after voters verify them but before they're counted.

ok, so some crypto geeks need verify their votes didn't change.

ok, so some crypto geeks need verify their votes didn't change.
if (voter == "Josh Benaloh") do_not_cheat = True

public website (BB) knows who you are, and can show something different to each person

Can we build a public bulletin board that is worthy of our trust?

Can we make Internet voting safe enough for o

remote voting: what can we do? - usenix · pdf file let's talk about remote voting tuesday,...

Documents

Tuesday 31 August 2010

August 19, 2014 (Tuesday)

Tuesday 10th August NOTTINGHAM

August 12, 2014 (Tuesday)

Tuesday 24 August 2010

Tuesday August 16

Tuesday, August 21, 2012

Track 2 – Session 1 Tuesday, 13 August 2013 (13:30 – 15:30)

Term 3 Week 4 Tuesday, 13 August, 2019 PRINCIPAL S MESSAGE · PDF file 2019-10-12 · 1 Term 3 - Week 4 Tuesday, 13 August, 2019 DIARY DATES Week 4 Tues 13 August St 1 School House

August 4, 2015 (Tuesday)

Tuesday August 13, 2013

TUESDAY, AUGUST, 19 WEDNESDAY, AUGUST, .TUESDAY, AUGUST, 19 001. 4S Publications Meeting. ... Mozart

August 11, 2015 (Tuesday)

Tuesday, August 13th

Pioneer, Delhi Tuesday 18th August 2015, Page: 9 ... Deccan Herald, Delhi Tuesday 18th August 2015, Page: 13 Width: 4.49 cms, Height: 6.77 cms, a4, Ref: pmin.2015-08-18.28.130

| August 22, 2017, Tuesday State Harassment of eves ... · PDF file Greater Kashmir Srinagar | August 22, 2017, Tuesday 13 GOVERNMENT OF JAMMU & KASHMIR OFFICE OF THE SUPERINTENDING

DATES TO REMEMBER Monday 19 August Tuesday 20 August · PDF file 2019-10-13 · DATES TO REMEMBER . Friday 16 August . Athletics Carnival . Monday 19 August . P&C Meeting . Tuesday

Collington’s Weekly Courier Courier 6 August 28 – September 3, 2017 TUESDAY AFTERNOON MOVIE, “Ghost,” 1990, PG-13 (2HR 9MIN) TUESDAY, AUGUST 29, 1:30PM – ARBOR GREAT ROOM:

Tuesday, August 21 st

THE USCHAIRMAN’S SERIES & IRAN · PDF file 1.30pm Tuesday, 13 August 2019 3.00pm 3.30pm. NUS MEI 5 Conference Schedule 3.45pm 5.30pm Tuesday, 13 August 2019 6.45pm THIRD SESSION: