Saturday, May 2, 2020

Coronavirus Boosts Push for Online Voting Despite Security Risks


Three States will let Some of Voters Cast Ballots Online in the coming weeks, a Trend that has Gained Momentum from the Coronavirus Pandemic but threatens to introduce New Security Risks into the Nation’s already Vulnerable Elections.

Delaware said this week that it will Allow Residents with Disabilities to Vote Online during its June Primaries. The Online System is provided by a Seattle Company called Democracy Live.

New Jersey said it would do the Same for May's Nonpartisan Municipal Elections. "If you're doing an all-[vote-by-mail] election, you have to provide an alternative for disabled voters,” said Alicia D'Alessandro, a Spokesperson for New Jersey, Secretary of State, Tahesha Way, whose Office Canceled In-Person Voting for this May’s Municipal Contests. New Jersey is Not Planning to allow Internet Voting in its July Presidential Primary, but D'Alessandro, the Election Office Spokesperson, said the Limited Rollout in May “is essentially a pilot for if we need to use it more broadly in the future.”

West Virginia, whose Primary is also in June, previously announced Plans to offer Internet Voting for Overseas Residents, Military Service Members, and Voters with Disabilities.

The modest Increase in Internet Voting is yet another Example of how the Pandemic has Upended Priorities across the U.S, Four years after Russian Hacking inspired a Nationwide Effort to Deploy more Secure, Paper-based Voting Machines. Now, the Virus is turning In-Person Voting, some with Photo Voter ID, into a Health Risk, and some Election Officials are Exploring Online Voting as One Alternative, despite Extensive Warnings from Cybersecurity Experts that the Technology poses Dangers No one has been able to Solve.

“I hope that other states will exercise caution rather than jumping on the bandwagon,” said Dan Wallach, a Computer Science Professor at Rice University who helps Draft Federal Voting-System Standards. “We need to defend our elections against nation-state adversaries. Moving toward online voting is the wrong direction to defend our democracy.”

Lawrence Norden, Director of the Brennan Center for Justice’s Election Reform Program, added, “While I understand the temptation, particularly when vendors are pushing this solution and election officials are under tremendous strain, we must resist it.”

Wallach, Norden, and more than 70 other Experts Signed a Letter to State Officials, this month, Warning them Not to Adopt Internet Voting in the Midst of the Pandemic. “At this time, internet voting is not a secure solution for voting in the United States, nor will it be in the foreseeable future,” they said in the Letter, Organized in early April by the American Association for the Advancement of Science.

But States may Not heed that Advice, especially if the Public urges them to Ignore it. According to One recent Survey, 49% of Americans Support Internet Voting. The Internet’s increasing prevalence in daily life has led many Americans to Question why they aren’t already Voting Online. Proponents of the idea often argue that if People can Bank Online, they should be able to Vote that way too.

That argument makes Voting Security Experts want to tear their hair out. Elections pose Unique Challenges, they say, including the Legal and Political Impossibility of Routine Do-Overs and the need to keep Voters’ Choices a Secret. The Financial System Requires Transactions to be Linked to People’s Accounts; the Electoral System requires Votes to be Disconnected from Voters’ Identities. And while Banks must constantly deal with Financial Fraud that requires the Reversal of Transactions, Election Results Cannot be Overturned nearly as Easily.

“Every year billions of dollars are lost to online theft, cyberfraud, and malicious hacking, despite huge sums invested in trying to secure those systems,” wrote Susan Greenhalgh, a Senior Adviser on Election Security at the Activist Group Free Speech for People, and Hans von Spakovsky, a Senior Legal Fellow at the Heritage Foundation. “Financial institutions can (and do) factor the expected level of fraud into the cost of doing business, but we can’t do that with elections.”

Internet Voting Vendors and their Supporters Dismiss Experts’ Arguments as the Protestations of Hidebound, Myopic Worrywarts. Some of them have even Impugned Experts’ Motives". “Everyone who doesn't want this to happen is never going to say, ‘We oppose mobile voting because we don't want higher turnout,’” They're going to say, ‘It's not safe.’ And if we have proven 30, 40, 50 times over that it is safe, it's a lot harder for those objections and arguments to fly.” said Bradley Tusk, a Philanthropist who has Funded some Internet-Voting Pilot Projects.

In fact, the Evidence consistently Demonstrates that Internet Voting Platforms are Unsafe today.

The most Prominent Mobile-Voting Provider is a Small Massachusetts Company called Voatz. West Virginia used Voatz’s App in 2018 for its First-in-the-Nation Test Run. On its Website, Voatz says that Security “has been our utmost priority since day one.” But Audits by the Massachusetts Institute of Technology and the Security Firm Trail of Bits revealed Multiple Serious Flaws and Vulnerabilities, including some that Left Votes Visible to Interlopers and Exposed Them to Tampering. Voatz largely Dismissed the Findings, but West Virginia Ditched the Company in favor of Democracy Live for its Upcoming Primary.

Experts see Voatz as a Cautionary Tale. “We simply don't have the technology to vote online securely, as illustrated by the dramatic security problems recently discovered in Voatz and other Internet voting platforms,” said J. Alex Halderman, a Computer Science Professor and Leading Voting Security Expert at the University of Michigan.

Democracy Live has tried to Sidestep the Controversy by contending it does Not offer Internet Voting, even though its System Allows Voters to obtain, Fill Out, and Cast their Ballots Online using a Computer, Tablet, or Smartphone. Because Election Officials eventually Print-Out the Digitally Transmitted Ballots, the Company says, the Process involves a Paper Element and should not be described in Terms that suggest an Internet-Only System. “Really what this is, is a secure portal. If anything, it's a document storage application. When people think of online voting, they're thinking it’s all being tabulated online. Bryan Finney, the Company’s Chief Executive said.

On the Product page for its OmniBallot Online system, the Company reiterates that “the ballot that is counted and tabulated is on paper.” Anthony Albence, Delaware’s Election Commissioner, made the same Argument when Defending his State’s use of the Democracy Live system. “The system is not internet or online voting. When [the] Elections [Commission] downloads the voter’s marked ballot, a printed ballot is always generated for tabulation.” Pressed on the fact that Delaware’s system receives votes over the internet, Albence said, “I don’t agree with that description.”

But that Assurance is Meaningless, the Security Experts say. Because Voters Fill-Out the Ballots Electronically and Submit them over the Internet, there is No Way to Prevent Third Parties from Tampering with them before they Reach the Election Office for Printing. In Case of a Recount, the Only Paper Trail in Existence would be of Questionable Value.

Hackers could Install Malware on a Voter’s Computer, Tablet, or Smartphone that silently Changes Vote Choices when the Vote Clicks the “Submit” Button. “The best security people have no idea how to solve that problem,” said Wallach. “We just don’t know what to do.”

Even if the Device used to Fill-Out the Ballot isn’t Infected, the Ballot is Vulnerable as it Travels across the Internet on its way to the Election Office. “How do we know that the bits that went into the browser or the smartphone are the same as the bits that came out on the other end?” Wallach asked. “What if there’s malware somewhere in the middle doing tampering?”

MD: One way would be for the Voter to see the Scanned Choices and then Approve them.

Researchers are Developing ways to Technologically Verify that a Ballot hasn’t Changed between Submission and Receipt, using Blockchain Technology, but that Technology isn’t ready for Internet Voting yet.










NYC Wins When Everyone Can Vote! Michael H. Drucker


No comments: