scott-long.com

Various stuff Scott Long happens to be interested in at the moment

Sunday, October 29, 2006

Voting Machines Need A Paper Trail

Could Hugo Chavez have control over U.S. voting machines? Voting Machines’ Venezuela Ties (mirror)

The bad thing about this is not whether he does or doesn't (I'm sure someone will make the usual open-ended "we know of no evidence" statement). It is that whether Vic has a back door into our voting machines or not, there is no technology reason he could not. It is only the artificial steps inserted into the process such as documenting the custody of the software, rigorous code review, etc. that can protect the elections. And a paper trail is an important part of this process.

Imagine telling buyers of lottery tickets: "No receipt but don't worry -- we know what numbers you picked -- if you win we will call you". If lottery machines get a paper trail, then voting, which is way more important, should get at least the same courtesy.

This is so obvious to most programmers. Oddly enough, anecdotally, it seems the closer we are to the business of writing software, the more likely we are to distrust the machines and want the paper trail. The electronic voting machine system needs a physical paper trail. There should be a dot-matrix line printer sitting there in a locked box, one per precinct, attached to the local network of voting machines, printing a couple lines everytime someone votes. It should be a trail such that in the case of a total system failure, total theft of the precinct's voting machines, etc, (or, a challenge to the reported results), that the results of that precinct's election could be totally recreated from the paper trail. It has to be a dot matrix printer because (a) it is the only kind of printer that prints a line immediately when requested instead of saving up lines in memory and printing only when it has enough data to make a whole page and (b) you get audible feedback that the printer is still working.

There is a lot more to it, of course. The software should be secure enough that the entirety of the source code can be made available to anyone who wants to see it without compromosing security one bit. Any programmer should be able to review all the code and point out vulnerabilities. If the security of any system depends on people not knowing how the software works, it is fundamentally insecure. This is known as "Security Through Obscurity" which really means "not secure". C'mon this would be so easy.

Tuesday, October 17, 2006

Dear Georgia Voter

The letter sent to 300,000 Georgia voters telling them how to get free picture id to vote if they don't have one, or how to vote without picture id if they don't want to get picture id is still here on the Georgia Secretary of State website (as of today 10/17/2006) http://www.sos.state.ga.us/elections/ga_photo_ID_letter.pdf
Mirrored here just in case.

100,000 went out before a sudden ruling saying well no in fact nobody needs to identify themselves with a picture to vote. But the train kept rolling and 200,000 more went out afterwards.
"Voters who cast their votes in person must show one of six forms of photo identification. If you vote ABSENTEE BY MAIL, you do NOT need a photo ID. These rules ONLY APPLY if you vote IN PERSON by absentee or on Election Day.

Here are the acceptable forms of photo identification:

1. A Georgia driver’s license or Department of Driver Services identification card;
2. A valid U.S. military identification card containing your photograph;
3. A valid photo identification card issued by any branch, department, agency, or entity of Georgia, any other state, or the U.S. authorized by law to issue personal identification;
4. A valid state or federal employee identification card containing your photograph issued by a branch, department, agency, or entity of the U.S., this state, or any county, municipality, board, authority or other entity of this state;
5. A valid U.S. passport; or
6. A valid tribal identification card containing your photograph.

If you do not have a Georgia driver’s license or Georgia identification card, you can receive a FREE Georgia Voter Identification Card TODAY. You can get your FREE Georgia Voter Identification Card at your County Voter Registrar’s office in the county where you live."

Tuesday, October 10, 2006

Roswell One of the Most Bicycle-Friendly Cities in America

The League of American Bicyclists includes Roswell in their list of The Most Bicycle-Friendly Cities in America

No big surprise, but nice to hear -- we can ride out of our garage and cruise along the river forever (with a few breaks of course in one or more riverside playgrounds that we pass along the way). Monday it was 5 hours. And we just noticed another new 1/3 mile or so bike trail that hugs the bank of the river right up to the Ace Sand Company! This is one of the best things about our Mayor and City Council. Though i must say it is the Mayor who seems to be leading the charge in expanding the trail system.