Cyrus Farivar

How you can conduct a voter-verifiable election online, right now

Cryptographers around the world have come up with new theories about how to improve elections.

  • more
    • All Share Services

I’m sorry, but if you’re secretary of state in, let’s say, West Virginia, and you have to state publicly (as was the case yesterday) that there are no problems with your electronic voting machines, that makes me all the more suspicious. And that’s aside from the fact that I’m suspicious of electronic voting in general, at least in this country. (That said, I’ve been extremely impressed by the online voting system used in Estonia — but that system couldn’t work in the U.S. for reasons I won’t get into here.)

One of the basic problems of voting technology, whether electronic or not, is that there’s no real way for anyone to verify that their vote was counted properly. Regardless of whether I push a button on a screen, or I drop my paper in a ballot box, I’m essentially taking it on faith that my vote was recorded and tallied accurately. Even if voter monitoring groups had people in every precinct, it still wouldn’t be possible.

However, I’m here to tell you that there’s a new trend in voting technology that you’re going to start hearing a lot more about — it’s called end-to-end voter verifiability.

The premise is mind-bogglingly counterintuitive: to be able to be sure, with a high level of certainty, that your vote was recorded and counted accurately without revealing whom you voted for. And that you (yes, you) can verify that this happened exactly as it should have.

One of the strange things about E2E verifiable voting is that it involves cryptography — usually something used to keep things more secret — as a tool to make voting more open and more secure. (Weird, I know.)

Up until a couple of months ago, I’d never heard of voter verifiability. But I got an assignment from Communications of the ACM — a famous computer science journal trying to refashion itself as a popular magazine — to write about it. (You can read my article in the October 2008 issue, here.)

After spending a lot of time on the phone, on e-mail, over Skype and even some good old-fashioned in-person interviews with various people in this field, I started learning about E2E voter verifiable systems from people scattered across the country (and some  overseas). It took me a long time to finally understand it, and to understand all the players (mostly academics) who are involved in pushing this research forward.

It turns out that the first paper published on a voter verifiable system was actually written back in 1981, by one David Chaum, then a graduate student at the University of California, Berkeley. However, within the last few years, many mathematicians, cryptographers and computer scientists (including Chaum himself) have picked up where he left off.

To date,  various iterations have been trying to figure out how to make verified voting actually work. There have been a few examples of small, binding (although non-public sector) elections, but nothing on the scale of even a local city election.

How do these voting systems work?

The idea is that when you vote, your vote gets encrypted in some way, such that “Candidate A” gets turned into some meaningless string like “XYZ,” or “e3S4fqV5ft8q.” In other words, there’s no way to know once that value is encrypted whom exactly you voted for. Then those encrypted strings can either be shuffled around, or added in a particular way to be able to determine the total vote count. The exact method depends on whether you’re using Chaum’s latest proposal, known as Scantegrity II (which is awaiting approval for a trial run in an election in Takoma Park, Md.), or a similar, but rival, system called Helios, created by the cryptographer Ben Adida, who has a doctorate in cryptography at MIT. You can think of Chaum’s Scantegrity II, Adida’s Helios, and another similar system, being developed in England by professor Peter Ryan of the University of Newcastle upon Tyne, as essentially three variations on the same theme.

It can then be mathematically proven that they were encrypted and then decrypted accurately. Now, while it may take a fair amount of knowledge of mathematics to know exactly why it can be proven that this particular election system is working properly, and that your vote was encrypted and tallied accurately, it is something that, at its core, is fundamentally knowable.

OK, but pencil and paper is something that we all can understand. The vast majority of us aren’t going to get a Ph.D. in cryptography in order to understand a simple election. But in a phone interview yesterday, Adida told me that we don’t have to.

“It’s a wrong assumption that we’re shifting trust from the average person to something only a cryptographer can trust,” he says.

He points out that any group, be it the Republican Party, the ACLU or Joe the Professor, could study up on its own about the underlying math, or could find a cryptographer they  trust to make sure that the votes were formed and tabulated properly. This currently is not the case, even in an entirely analog system — there is no way for any group to be involved, even as an observer, in the entire voting process.

In fact, after a few different versions of his own E2E setup, Adida has recently come up with a new and easy way to conduct your own secure, safe and totally verifiable election — online. It’s called Helios and is open-source and free. Adida says that Helios isn’t quite ready for prime time, like something on the scale of a presidential election, so he aimed for a slightly lower target.

“Let’s target a different kind of election where you need the secrecy of the votes and you want verifiability but you’re not going to worry about people coercing you,” he says. “The market for Helios is your local book club that wants to elect a president, your synagogue or church or mosque that wants to elect an advisory board, [or] your online software community. [It's an election where] no one’s going to buy anybody’s votes but they still want to have a real election.”

In fact, Helios was recently used in the ICF Community Steering Members election, a software group that works on electronic ID card standards. In fact, you can verify that the election was conducted properly simply by copying and pasting the election fingerprint ID (agxoZWxpb3N2b3RpbmdyDwsSCEVsZWN0aW9uGIERDA) into the verifier page.

So what’s the point of Helios?

Adida says: “It’s to provide a feature that doesn’t exist today: verifiability. [Also,] to get people accustomed to what it means to verify their vote — when you experience it, a lot of folks get the feeling that something different is going on.”

While I conducted my own trial election with Adida by phone, I’d like to try this out with readers. The first 10 people who e-mail me [cfarivar at salon dot com] with the word “Helios” in the subject line, I will invite you to our little election, just so you can try it out for yourself.

Or heck, you don’t want me involved? Check it out yourself and report back, ya hear?

Now, I think there is an argument to be made that voting officials and perhaps even the voting public may have a hard time swallowing this idea. (To his credit, Chaum has ingeniously designed Scantegrity II so that it can run on top of an existing paper-and-pen optical scan system — it needn’t involve computers in the process of actually voting.)

Indeed, in order for public officials to definitively show that this cryptography works the way it’s supposed to, they would need to provide an advanced mathematical proof, known as a “zero-knowledge proof.” Even if the science is ultimately proved to be sound and bulletproof, David Wagner, a professor of computer science at U.C., Berkeley, pointed out to me in a previous interview: “Will voters accept something that uses mathematics that they won’t understand?”

It also doesn’t help matters that Adida and his MIT advisor Ron Rivest note in their 2006 paper that “the sheer size of the proof precludes printing it on the ballot alongside the ciphertexts.”

Both Adida and Chaum point out that there are lots of technologies that we use all the time that we don’t understand, ranging from airplanes to the Internet. Only a small number of people actually  care how they work, and can educate themselves about it, much the same way they can with these types of systems — in other words, it’s just math, plain and simple.

Still, Adida and Chaum have convinced me that their ideas are sound. We’ll see if they go anywhere in the public sector anytime soon.

Fake text messages give false voting information

Obama prevailed, but there were still troubling problems with the voting process. Isn't it time to standardize federal elections?

  • more
    • All Share Services

This election has been full of superlatives and firsts. I’ve never been prouder to be an American abroad than right now. The historic rise of this unlikely candidate, in the unlikely story that is America, fueled by this unlikely swelling of the online masses donating in unprecedented numbers, is nothing short of historic and astonishing.

But there were also a few troubling episodes on the technological front, with text messages and e-mails being used as a way to perpetuate false information.

Wired reported late last night that voters in Florida and New Mexico received a fake text message from 505-507-6041 that says things like: “Due to long lines if you are voting for Barack Obama you can vote tomorrow,” or “Due to the long lines today, all Obama voters are asked to vote on Wednesday.”

The AP adds that there have been reports of similar “robo-calls” and fake texts in Missouri and that the Missouri secretary of state and U.S. Attorney’s Office have been notified. I’m glad that this wasn’t widespread enough to have made a difference, but it’s still a troubling development.

But that’s not all. Thousands of students at George Mason University received an e-mail spoofed to look like it was from Provost Peter N. Stearns saying that “election day has been moved to November 5th. We apologize for any inconvenience this may cause you.” Apparently the FBI is on the case.

And finally, while the outcome of the election was by a pretty overwhelming margin, there were still problems with electronic voting in numerous states, although not enough to have any sort of real impact.

Still,  we as a country really need to have a single standard for federal elections, get rid of these awful e-voting machines, and streamline this whole process so we don’t have to deal with this kind of crap anymore.

On a more personal and professional note, I share with you the news that this is my last post in Machinist, which is going on hiatus beginning tomorrow.

I thank all of you for reading and for your thoughtful and critical comments. If you’d like to follow me and/or any of my other work on public radio or elsewhere, you can do so on my blog: cyrusfarivar.com (where I’ll be announcing the result of our little trial voter-verified election), and/or you can email me at cfarivar [at] cfarivar [dot] org.

Cheers!

Continue Reading Close

CNN debuts hologram technology to beam people in 3-D

Yellin to Blitzer: "[I feel] a bit like Princess Leia right now."

  • more
    • All Share Services

Among the wackiest technologies that I’ve seen during this election night is CNN’s hologram technology — something that was predicted back in the Star Wars era.

There’s not much info as to exactly how this stuff works, other than what USA Today has reported:

CNN will have 44 cameras and 20 computers in each remote location to capture 360-degree imaging data of the person being interviewed. Images are processed and projected by computers and cameras in New York. There’ll also be plasma TVs in Chicago and Phoenix that will let the people being interviewed see Blitzer and other CNN correspondents. Bohrman says the network can project two different views from each city so Blitzer can appear to be in the studio with two holograms.

Jessica Yellin was the first CNN reporter to be “beamed” to the New York newsroom, where Wolf Blitzer interviewed her — and she reported that there were only 35 cameras pointed at her, and that “talk to the cameras in New York.” Apparently representatives in the Obama campaign in Chicago and the McCain campaign in Phoenix will be interviewed as holograms later in the evening.

It’s still unclear who makes this hologram technology, nor how much it costs, nor how exactly it works — nor when I’m going to get it in my house. Man, and I was just getting used to Skype video chat. Still, scope out the video below.

Continue Reading Close

Top 10 songs to rock your Obama victory party

From reggaeton to techno, he's everywhere.

  • more
    • All Share Services

At the risk of being a bit premature, I decided to poke around the Internet to find what tunes I could spin to spice up my Obama victory party tonight. After consulting Wired, About.com and this massive list on YouTube, I’ve come up with my Top 10 Obama songs:

1) Mariachi Aguilas de Mexico – Viva Obama

This is without a doubt the best Obama song that I’ve seen so far. It’s got catchy lyrics — Viva Obama! — snappy outfits, a line about healthcare, and that female violin player? Muy caliente!

2) Extra Golden – Obama

This half Kenyan band (just like Obama!) rock out on this chillaxed benga track. Great guitar riffs.

3) Cocoa Tea – Barack Obama

Jamaican reggae star Coco Tea recorded this tune earlier this year, earning a small writeup in the Jamaica Observer at the time.

As he told the newspaper:

“If you notice, Obama is getting a lot of support from the young people, and when the younger generation begin to call for change, it usually comes, as they and the future, and Obama’s future is in their hands. Support for Obama is also coming from other quarters including the Kennedy family, as he is seen as the man with a plan, therefore I was guided by Jah on this one.”

How can you argue with Jah?

4) Docta Musica WashiWara – Barack Obama

This tune comes to us from Cameroon, and if you believe what the Docta says on his Web site: “The video has quickly becomed a big hit on Youtube.” Indeed.

5) crbballgal – BARACK THE VOTE!

How can I deny two fly girls, an ’80s-style synth, and rapping in front of a bathroom mirror? Well done, ladies.

6) Mighty Sparrow – Barack the Magnificent

Mighty Sparrow is the world’s leading calypso singer, hailing from the island of Grenada. Cop a read on the lyrics over here — I’m sure this is the first time that the phrase “Foreign Relations Committee” has worked its way into a calypso song.

7) Obama Song Spanish Reggaeton

I’m not sure who wrote this song, but nothing makes me want to sing “Si se puede!” louder than this reggaeton tune.

8) Bruce Springsteen – Working on a Dream

This song debuted just two days ago at a rally in Cleveland, so if you drop this joint at your fiesta, you’ll definitely be about 75 percent as cool as the Boss himself.

9) Barackapella – Yes We Can

Although college a capella may get mocked on Stuff White People Like, this cover of the famed will.i.am song is perfectly pulled off by Barackapella, a group from Lewis and Clark College in Oregon. (Also, don’t forget the parody, by john.he.is!)

10) Guru – Obama dance mix

I really, really hope that this is the first song that the Obamas dance to at the inagural ball. Or at least at the party in Chicago tonight.

Continue Reading Close

Where to watch election results live online

And people, please go vote.

  • more
    • All Share Services

Where to watch election results live online

CBS screen shot

If you’re like me, you’re going to spend Election Night pretty much glued to the Internet, waiting for news to pop up wherever it might — on Twitter, blogs, YouTube and, yes, that good ol’ stalwart, the mainstream media. Usually I don’t watch television, but there are a few instances — like today — when I actually do want to watch something like CNN with the graphics, the analysis, the whole shebang. Further, I’m abroad, so it’s not like I can simply hop over to my local bar to watch election results (here’s a handy map showing when the polls close). So where can I go to watch live coverage online?

CNN is offering live coverage here and here. I’ve also found CBS‘s coverage to be working well so far — as of this writing, CBS has a camera trained (sans commentary) on a gym in Chicago where Obama is voting. (See photo at top.)

Oh yeah, and don’t forget about the ever-reliable C-SPAN.

Apparently ABC and MSNBC will be offering live coverage online as well, but I haven’t been able to find the respective sites yet.

There’s also this gray-market online streaming site, Channel Chooser, which offers both American channels and foreign ones, including BBC, France 24, Al Jazeera English and Sky News Australia.

Alley Insider has a bunch of live feeds from the McCain and Obama camps and some conservative Christian groups as well.

For live radio coverage, there’s NPR and CBC.

The New York Times has built a neat little election dashboard that updates every two minutes, and Google has gotten in on the action with its own map-based results page.

And finally, of course, there’s Salon’s own coverage.

Happy voting!

Continue Reading Close

France flexes its tech muscle with pending bill, new policies

If Digital France 2012 passes, l'Hexagone could see a slew of new tech-related laws.

  • more
    • All Share Services

The French seem to be all over all kinds of new, far-reaching digital policy.

First, the French Senate “voted overwhelmingly” (297-15) late last week to create a sort of digital three strikes law, which after the third strike, would cut people off from the Internet. It’s not entirely clear how a law like this would be enforced, especially considering the fact that people can access the Internet from home, from their workplace, and also from free, public Wi-Fi hot spots, not to mention at other locations such as a public library.

The bill now heads to the French National Assembly for final approval.

But, as the BBC reported this morning:

If enacted, the law will put France on a collision course with Brussels, which rejected a call to impose such “three strikes” laws across Europe in April 2008.

Throwing people offline, it said, conflicted with “civil liberties and human rights”.

Second, late last month Eric Besson, a Sarkozy cabinet minister in charge of the “development of the digital economy,” presented a new 81-page Digital Plan 2012 for France, which apparently was one of Sarkozy’s presidential campaign promises.

If enacted, this would be one of the most ambitious technological policy plans in Western Europe in recent years. (And while I don’t mean to harp on Estonia, the Baltic powerhouse has had a few of these items, like digital ID cards and health records, for some time now.)

Among other things, the report says that “high-speed Internet,” like water and electricity , is “essential.” And as such, 2 million to 4 million French citizens are without it — and the government needs to work such that by 2010, every single citizen has 512 kbps that costs no more than 35 euros per month. Further, every French citizen should have access to high-speed mobile Internet as well, which only covers 85 percent of the citizenry as of today.

Other proposals include:

- allowing the old analog television signals to be opened up to wireless and mobile Internet access.

- an electronic national identity card for each citizen starting in 2009 (Estonia already has this).

- a doubling of cyber-crime law enforcement agents by 2012

- the promotion of telecommuting in the public sector

- a digital medical file for each citizen by 2012

- a Green IT and Cleantech prize

- a migration away from the American-dominated ICANN toward a more multilateral and international organization to run the infrastructure of the Internet.

As of yet, this remains but a proposal — but an interesting and ambitious one — and if Sarkozy is serious about keeping his campaign promise, especially while France holds the the Presidency of the Council of the European Union until the end of the year, it could be a boon to France.

Continue Reading Close

Page 1 of 16 in Cyrus Farivar