November 06, 2012

After Sandy New Jersey Becomes Unwilling Test Case for Internet Voting - Arik Hesseldahl - News - AllThingsD

After Sandy New Jersey Becomes Unwilling Test Case for Internet Voting - Arik Hesseldahl - News - AllThingsD


After Sandy, New Jersey Becomes an Unwilling Test Case for Internet Voting

Holding an election is complicated. Holding an election eight days after a historically significant disaster? Probably exponentially so. This is the circumstance in which the state of New Jersey will find itself tomorrow.
Gov. Chris Christie has orderedcounties to provide ways for people who have been displaced by Hurricane Sandy to vote in Tuesday’s election by fax and email. The system will follow in part a similar scheme developed for New Jersey residents serving overseas in the military to cast their ballots.
To say that no one is going to be happy with the result, no matter what it is, is probably understating it. To the extent that the process is understood — it was at this writing still in the process of being implemented — it will work like this.
On Election Day, those who have not yet taken advantage of early voting opportunities must by 5 pm local time print and return either by email or fax an Electronic Ballot Application. (Some counties are using or accepting other forms. See this story at NJ.comfor more on that.) Once you’ve filled out and returned that form, you’ll get a response with instructions for how to vote, a secrecy waiver form and a ballot, all of which must be returned by 8 pm local time.
Military personnel are required to file a paper ballot by mail after sending an electronic vote, but right now there is some lack of clarity as to whether or not that will be required of displaced email and fax voters.
Alternately, if you are displaced, you can still vote in person by finding the nearest polling place and voting with a provisional ballot.
Laying aside the obvious fact that many people in New Jersey have more immediate concerns — staying warm, staying fed, rebuilding their lives in the wake of the disaster — the opportunities for difficulty and the risk of problems are, in theory, numerous.
Voting via the Internet can be done successfully when there is sufficient infrastructure in place to support it. The nation of Estonia, a former Soviet Republic, has allowed electronic voting since 2005 when it launched a pilot project to coincide with some municipal elections. That year only 9,800 people, or less than 2 percent of the more than 1 million eligible voters, voted electronically. Last year, the figure had risen above 140,000, or more than 15 percent of eligible voters.
Estonia has something that New Jersey doesn’t: A mandatory smart card ID. It looks like a state drivers license with a chip in it. The chip contains a set of cryptographic keys used to protect and authenticate the stored data, which includes the name, gender and other information about the person.
Email is by its nature inherently insecure. It can be spoofed, hacked, used to introduce malware into a target system and as the delivery mechanism for numerous other very bad things. There are an awful lot of people who work in the computer security business who will recoil at the very idea of the sanctity of democracy in New Jersey being entrusted to email.
There are additional security concerns: The servers receiving the votes will be connected to the Internet, and therefore vulnerable to remote attack. Shared computers in libraries and community centers where displaced people might vote will not have been properly secured in a way that will guarantee against tampering.
And even if secured in some way, what’s to stop some digital trouble makers — like, say, Anonymous to name but one — from launching a disruptive denial of service attack on some unsuspecting county, or indeed the entire state, as a way of proving some inane ideological point? The mind reels at all the ways that this could go wrong.
But let’s focus for a minute on what could go right. Despite the protestations of certain politically affiliated groups who would have you believe that voter fraud is a pervasive and widespread problem on a national scale, the American voting system tends to work pretty well. If you accept that the potential for voter fraud exists within a system that is far from perfect, people have tended not to take advantage of it. A five-year federal inquiry into voter fraud that ended in 2007 found that it happens so rarely as to be statistically non-existent.
Voting via traditional methods is by and large an honor system. Every time I stand in line at a polling place clutching my state drivers license and passport just in case, I’m always surprised that I rarely have to show it. New York is not a state with a voter-I.D. law. Neither is New Jersey. So when a person shows up at the proper polling place and his or her name appears on the list of registered voters, that person is allowed to vote. That same presumption of honesty should be broadly applied here, under the circumstances.
There will be losers, and they will be unhappy and will likely challenge the result. They will probably resort to the courts and demand complicated recounts if the results in various races are close. Nationally, New Jersey is not a swing state and it’s essentially a given that President Obama can count on winning its 14 electoral votes. The challenges will likely come in statewide and local races, but this is what courts are for: Settling disputes.
Barring a technical failure — the risk of which is admittedly real — there is no reason that electronic voting, selected as probably the least bad of a series of bad options, cannot be effective.
But the situation in New Jersey raises the question about why the voting process hasn’t modernized with the rest of society. New Jersey has become an unwilling test case to see if Internet voting can work in the country that invented the Internet.

No comments: