When discussing electronic voting, it is very important that we look back on history. We should be very cautious when we introduce new technology and remember why laws have been established in certain ways.
When it comes to electronic voting, the weak links are everywhere. I have been hacking every single aspect, which are all weak in their own way.
First of all, if you look at the phase involving optical scanners – the machines where paper ballots are scanned – I have shown how it is possible to falsify the machine’s records, which means that they produce incorrect results when people vote.
Then there are the touch screen or physical electronic pen machines, where the same problem can be observed: I can modify the machine so it shows the wrong results. And since there are no audit trails, you cannot audit the results. Then we have the essential tabulation phase where, again, the results are easily falsifiable. Examples of weaknesses are everywhere.
Last but not least, we stumble upon the horrible idea of internet voting. We simply do not have the technology for it today. Internet voting is possible only if you have no secret ballot or accept that the voting is un-auditable and therefore do not know what the results are. We are decades away from finding a suitable encryption method for secure internet voting.
Yet another problem is that a great deal of legislation, for example in Germany, stipulates that election methods have to be auditable and understandable by common citizen, with no extra tools or knowledge. So, until we inhabit a Star Trek-like world where teenagers casually talk about quantum physics, I do not think we will see a situation in which the common man or woman can understand homomorphic encryption, especially when we take into account that there are currently less than 500 people in the world who currently understand these concepts.
The Estonian internet vote
As a part of the team that supervised Estonian internet voting, I can confirm that this system is at the level of a high-school project. If you wanted to organise a high-school presidential election with such a system, it might be acceptable. However, this approach should not be used for anything more serious. They have not even tried to make it more secure: the whole system lacks fundamental basic principles which any secure system should have.
A digital electronic voting system is not feasible in Europe during our lifetime. I think electronic and digital systems may have a role to play in elections; in some countries, the voting is so complex that computers are useful. But you always need to rely on the paper ballot and always need a process to audit the results.
I fully support the idea of using technology in elections in a responsible way. But I do not consider it conceivable to introduce a trustworthy digital voting system that will solve all of our problems. The required technology simply does not exist. Even if there were perfectly programmed systems, it would not work because there would be a gazillion other mistakes.
When it comes to the paper vote we still have a lot of problems: it is easy to argue that it is not perfect. But we also have hundreds of years of practice and experience using this system. Today, we have no alternative system that is better or more secure than paper ballots.
Not a way to fight abstention
Young people do not vote online. The reason for this is very simple. Everybody who has grown up during the internet era, playing World of Warcraft or had their accounts hacked or stolen understands how the electronic world works. Young people know better than the older generation how unsafe this world is. If they choose to vote they want their vote to count, and that is why they choose to vote on paper.
This is not just an opinion: it has been shown in results both in Norway and Estonia. Only retired citizens can be counted among a growing group of electronic voters. But since this is also a group that is already actively voting, it does not have an effect on abstention.
The claim often made by politicians and populist groups according to which electronic voting will encourage young people to vote has been proved wrong by every single result of every electronic vote every carried out.
My recommendation for secure voting is very simple: stick to paper ballots, but make voting accessible by allowing people to vote, in person, at a convenient location of their choice with the possibility of voting during an extended pre-vote period.
Flexibility and accessibility
In Finland, we have an ‘early voting’ system whereby you can vote in any post office and your vote will be counted as if you were in the polling station on polling day. We live increasingly hectic lives, so people should be given more options. I do not believe in home voting: a vote needs to be cast in secret in a secret booth, where no one can influence you or know how you voted.
It is also very important to provide information and historical background. The problem is that whether you are in Brussels, Helsinki or Berlin, you may forget that a lot of people in Europe live in small rural communities. There are a lot of people in Europe who simply do not feel comfortable voting: for them, elections are neither secret nor accessible. Europe is divided into different groups and it is very easy for highly educated people, and young people who are familiar with technology, to forget the realities lived by other societies. Democracy only really works when people can vote and have the confidence to vote in whatever way they want.
Finally, what is really important is to keep in mind that everything we say about the problems in voting systems can potentially provoke apathy. And apathy is equally as dangerous for democracy as getting the wrong results. Even if you do not trust the system right now, it is not an excuse to stop voting.
XThis website uses cookies. Some cookies are necessary for the proper functioning of the website and cannot be refused if you wish to visit the website.
Other cookies are used for Advertisement and Analytics (Sharing on social networks, video playing, analysis and statistics, personalized advertising ...) You can refuse them if you want to. REJECTACCEPTCookie settings
Manage consent
Privacy Overview
This website uses cookies to improve your experience while you navigate through the website. Out of these cookies, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may have an effect on your browsing experience.
Necessary cookies are absolutely essential for the website to function properly. These cookies ensure basic functionalities and security features of the website, anonymously.
Cookie
Duration
Description
cookielawinfo-checkbox-advertisement
1 year
Set by the GDPR Cookie Consent plugin, this cookie is used to record the user consent for the cookies in the "Advertisement" category .
cookielawinfo-checkbox-analytics
11 months
This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checkbox-functional
11 months
The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checkbox-necessary
11 months
This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-others
11 months
This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-performance
11 months
This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
csrftoken
past
This cookie is associated with Django web development platform for python. Used to help protect the website against Cross-Site Request Forgery attacks
JSESSIONID
session
The JSESSIONID cookie is used by New Relic to store a session identifier so that New Relic can monitor session counts for an application.
viewed_cookie_policy
11 months
The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data.
Functional cookies help to perform certain functionalities like sharing the content of the website on social media platforms, collect feedbacks, and other third-party features.
Cookie
Duration
Description
__cf_bm
30 minutes
This cookie, set by Cloudflare, is used to support Cloudflare Bot Management.
S
1 hour
Used by Yahoo to provide ads, content or analytics.
sp_landing
1 day
The sp_landing is set by Spotify to implement audio content from Spotify on the website and also registers information on user interaction related to the audio content.
sp_t
1 year
The sp_t cookie is set by Spotify to implement audio content from Spotify on the website and also registers information on user interaction related to the audio content.
Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.
Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics the number of visitors, bounce rate, traffic source, etc.
Cookie
Duration
Description
CONSENT
2 years
YouTube sets this cookie via embedded youtube-videos and registers anonymous statistical data.
iutk
session
This cookie is used by Issuu analytic system to gather information regarding visitor activity on Issuu products.
s_vi
2 years
An Adobe Analytics cookie that uses a unique visitor ID time/date stamp to identify a unique vistor to the website.
Advertisement cookies are used to provide visitors with relevant ads and marketing campaigns. These cookies track visitors across websites and collect information to provide customized ads.
Cookie
Duration
Description
NID
6 months
NID cookie, set by Google, is used for advertising purposes; to limit the number of times the user sees an ad, to mute unwanted ads, and to measure the effectiveness of ads.
VISITOR_INFO1_LIVE
5 months 27 days
A cookie set by YouTube to measure bandwidth that determines whether the user gets the new or old player interface.
YSC
session
YSC cookie is set by Youtube and is used to track the views of embedded videos on Youtube pages.
yt-remote-connected-devices
never
YouTube sets this cookie to store the video preferences of the user using embedded YouTube video.
yt-remote-device-id
never
YouTube sets this cookie to store the video preferences of the user using embedded YouTube video.
yt.innertube::nextId
never
This cookie, set by YouTube, registers a unique ID to store data on what videos from YouTube the user has seen.
yt.innertube::requests
never
This cookie, set by YouTube, registers a unique ID to store data on what videos from YouTube the user has seen.