Fox having to pay a substantial damages settlement to Dominion is a just outcome; their amplification of lies about malicious backdoors and rigged elections was contemptible and dangerous.

But we shouldn't conclude from this that US voting systems are perfectly or even adequately protected against attack. While great progress has been made, there's still a great deal of work left to do to make our elections truly secure and robust.

The best thing that Dominion could do with their infusion of cash from Fox - for both their reputation and for the good of democracy - would be to invest it into developing more robust, auditable election technology, such as optical scan systems with features to facilitate Risk-Limiting Audits.

@mattblaze hand marked scantron is the only realistic solution. Allows quick results and a verifiable paper ballot for recounts.

Any *private* non-public source code counting our votes is absolutely undemocratic.

@pixelpusher220 @mattblaze
how does that differ from the Dominion ICX (ImageCast Evolution) already in use which literally tabulates paper ballots electronically for near-term tabulation while the verifiable paper ballot is retained in the event an audit or recount?

@apenguininspace @mattblaze that's the problem. We don't know.

A paper trail is better than nothing but there's just precious little benefit to having a software program do the voting part.

If they open source their code so it's reviewable, that would be ok...but still overkill for what's needed, simple scan n read.

Next up is the blatant security failure of these *private* machines. Sure they've been improved, but why incorporate the risk if you don't have to?

https://m.slashdot.org/story/298229

Slashdot

@pixelpusher220 @apenguininspace Here’s the problem: today’s elections in the US are incredibly complex compared with the rest of the world. We vote on a ton of different races, and it’s simply not feasible in most of the US to tally ballots without automation. But automation is inherently unreliable and insecure.

Risk limiting audits are an efficient way to get the benefits of automation while also assuring against errors or compromises of the tally system.

@mattblaze @apenguininspace yes, scantron is automation.

My issue is unaudited, untested machines running unaudited code. The examples of bad (or basically no) security are legion as any private actor will only do the minimum.

I still posit that the software voting machines provide no significant benefit, let alone when weighed against the increased risks.

Edit: *publicly audited

@apenguininspace @pixelpusher220 You can’t audit software sufficiently well to provide assurance, whether open source or not. What you can do is audit the tally. This is why election security experts are focused on things like RLAs rather than the impossible task of making software and hardware perfect and impenetrably secure.

@mattblaze @apenguininspace

Agreed it adds layers of risk...that are almost entirely avoided by scantron counting.

Risk limiting audits can be done regardless of the counting method.

What measurable increase in reporting does software voting provide?

@apenguininspace @pixelpusher220 No, that’s wrong. Optical scan systems are just as vulnerable to tampering and software errors as any other complex system. An optical scanner is made of software, which can have errors, be compromised, or be maliciously replaced. Their benefit isn’t that they’re more secure. It’s that you can audit (with RLAs) the ballots that went through them to verify the tally that they produced.

@mattblaze @apenguininspace @pixelpusher220 I was really bothered when I took a look at the ballots printed by our Dominion ballot printers here in Santa Cruz.

It had both human (and probably machine readable) vote choices, but also had a QR code that was damnably difficult to read using standard QR reading software and all one got was a binary blob that had to be interpreted via a Dominion proprietary decoding table. And to add butter to the popcorn the QR code was used by the ballot readers as the primary representation of voter choices.

It seems to me that a ballot to be scanned should have exactly one - not multiple - representation of the voter's choices, and that representation should be comprehensible by people using normal human senses.

@karlauerbach @mattblaze @apenguininspace @pixelpusher220 To be sure, a discrepancy between the QR code and the human-readable text is the exact sort of thing that an RLA would catch. The bigger issue, even without the QR code, is that we know that people do not properly check machine-printed ballots to see if they agree with what they entered on the device touch-screen.
@SteveBellovin @karlauerbach @apenguininspace @pixelpusher220 Yes, exactly. Ballot marking devices (originally intended as an assistive technology for those who can't read or mark paper), introduce new issues. In particular, they depend on voters checking, and the (relatively few) studies on this have not been encouraging that they actually do, at least right now.