Voter-verified paper audit trail

Last updated

Voter verifiable paper audit trail (VVPAT) or verified paper record (VPR) is a method of providing feedback to voters using a ballotless voting system. A VVPAT is intended as an independent verification system for voting machines designed to allow voters to verify that their vote was cast correctly, to detect possible election fraud or malfunction, and to provide a means to audit the stored electronic results. It contains the name of the candidate (for whom vote has been cast) and symbol of the party/individual candidate. While it has gained in use in the United States compared with ballotless voting systems without it, it looks unlikely to overtake hand-marked ballots. [1]

Contents

The VVPAT offers some fundamental differences as a paper, rather than electronic recording medium when storing votes. A paper VVPAT is readable by the human eye and voters can directly interpret their vote. Computer memory requires a device and software which potentially is proprietary. Insecure voting machine [2] records could potentially be changed quickly without detection by the voting machine itself. It would be more difficult for voting machines to corrupt records without human intervention. Corrupt or malfunctioning voting machines might store votes other than as intended by the voter unnoticed. A VVPAT allows voters to verify their votes are cast as intended and this system can serve as an additional barrier to changing or destroying votes.

The VVPAT includes a direct recording electronic voting system (DRE), to assure voters that their votes have been recorded as intended. It is intended, and some argue necessary, as a means by which to detect fraud and equipment malfunction. Depending on election laws the paper audit trail may constitute a legal ballot and therefore provide a means by which a manual vote count can be conducted if a recount is necessary. The solution was first demonstrated (New York City, March 2001)[ citation needed ] and used (Sacramento, CA 2002) by AVANTE International Technology, Inc.[ citation needed ].

In non-document ballot voting systems – both mechanical voting machines and DRE voting machines – the voter does not have an option to review a tangible ballot to confirm the voting system accurately recorded his or her intent. In addition, an election official is unable to manually recount ballots in the event of a dispute. Because of this, critics claim there is an increased chance for electoral fraud or malfunction and security experts, such as Bruce Schneier, have demanded voter-verifiable paper audit trails. [3] Non-document ballot voting systems allow only a recount of the "stored votes". These "stored votes" might not represent the correct voter intent if the machine has been corrupted or suffered malfunction.

A fundamental hurdle in the implementation of paper audit trails is the performance and authority of the audit. Paper audit systems increase the cost of electronic voting systems, can be difficult to implement, often require specialized external hardware, and can be difficult to use. In the United States, 27 states require a paper audit trail by statute or regulation for all direct recording electronic voting machines used in public elections. [4] Another 18 states do not require them but use them either statewide or in local jurisdictions. [5] Five US states basically have no paper trail. [6]

In India, the voter-verifiable paper audit trail (VVPAT) system was introduced in 8 of 543 parliamentary constituencies as a pilot project in 2014 Indian general election. [7] [8] [9] [10] VVPAT was implemented in Lucknow, Gandhinagar, Bangalore South, Chennai Central, Jadavpur, Raipur, Patna Sahib and Mizoram constituencies. [11] [12] [13] [14] [15] [16] Voter-verifiable paper audit trail was first used in an election in India in September 2013 in Noksen (Assembly Constituency) in Nagaland. [17] [18] VVPAT along with EVMs was used on a large-scale for the first time in India, [19] in 10 assembly seats out of 40 in 2013 Mizoram Legislative Assembly election. [20] VVPAT -fitted EVMs was used in entire Goa state in the 2017 assembly elections, which was the first time that an entire state in India saw the implementation of VVPAT. [21] [22] voter-verified paper audit trail (VVPAT) system which enables electronic voting machines to record each vote cast by generating the EVM slip, was introduced in all 543 Lok sabha constituencies in 2019 Indian general election. [23] [24]

History

VVPAT used with Indian electronic voting machines in Indian Elections EVM VVPAT.jpg
VVPAT used with Indian electronic voting machines in Indian Elections

When a voter casts a vote on a direct-recording voting machine, the voter "has no knowledge through his senses that he has accomplished a result. The most that can be said, is, if the machine worked as intended, then he ... has voted." [25] This observation was made by Horatio Rogers in 1897, and it remains as true with DRE voting machines as it was with the early mechanical voting machines that Rogers spoke about.

In 1899, Joseph Gray addressed this problem with a mechanical voting machine that simultaneously recorded votes in its mechanism and punched those votes on a paper ballot that the voter could inspect before dropping it in a ballot box. Gray explained that "in this manner, we have a mechanical check for the tickets [ballots], while the ticket is also a check upon the register [mechanical vote counter]." [26] This check is only effective, of course, if there is an audit to compare the paper and mechanical records.

The idea of creating a parallel paper trail for a direct-recording voting mechanism remained dormant for a century, until it was rediscovered by Rebecca Mercuri, who suggested essentially the same idea in 1992. [27] The Mercuri method, as some have called it, was refined in her Ph.D. dissertation in October 2000; in her final version, the paper record is printed behind glass so that the voter may not take it or alter it. [28]

The first commercial voting systems to incorporate voter verifiable paper audit trail printers were the Avante Vote Trakker and a retrofit to the Sequoia AVC Edge called the VeriVote Printer. [29] Avante's system saw its first trial use in 2002, and in 2003, the state of Nevada required the use of VVPAT technology statewide and adopted the Sequoia system. It is notable that, in Avante's design, the shield preventing the voter from taking the paper record was an afterthought, while in Sequoia's design, the paper record for successive voters were printed sequentially on a single roll of paper.

Application

A Diebold Election Systems AccuVote-TSx DRE voting machine with VVPAT attachment Desi accuvote-tsx vvpat.jpg
A Diebold Election Systems AccuVote-TSx DRE voting machine with VVPAT attachment
An ES&S DRE voting machine with VVPAT attachment IVotronicVVPAT.jpg
An ES&S DRE voting machine with VVPAT attachment

Various technologies can be used to implement a paper audit trail.

Systems that allow the voters to prove how they voted do not conform to the generally accepted definition of voting by secret ballot, as such proof raises the risk of voter intimidation and vote selling. As such, systems that allow such proof are generally forbidden under the terms of numerous international agreements and domestic laws.

Professor Avi Rubin has testified in front of the United States House Committee on House Administration in favor of voting systems that use a paper ballot and disfavoring systems that use retrofitted VVPAT attachments. He has said on his personal blog that "after four years of studying the issue, I now believe that a DRE with a VVPAT is not a reasonable voting system." [31]

An auditable system, such as that provided with VVPAT, can be used in randomized recounts to detect possible malfunction or fraud. With the VVPAT method, the paper ballot can be treated as the official ballot of record. In this scenario, the ballot is primary and the electronic records are used only for an initial count or, in some cases, if the VVPAT is damaged or otherwise unreadable. In any subsequent recounts or challenges the paper, not the electronic ballot, would be used for tabulation. Whenever a paper record serves as the legal ballot, that system will be subject to the same benefits and concerns of any paper ballot system.

Matt Quinn, the developer of the original Australian DRE system, believes that in the future there should be a,[ clarification needed ] "There's no reason voters should trust a system that doesn't have it, and they shouldn't be asked to. Why on earth should [voters] have to trust me – someone with a vested interest in the project's success? A voter-verified audit trail is the only way to 'prove' the system's integrity to the vast majority of electors, who after all, own the democracy." [32]

In India, in an instance VVPAT was helpful in resolving an issue pertaining to a tally of votes in Kancheepuram (State Assembly Constituency) in 2016 Tamil Nadu Legislative Assembly election as the number of votes entered in the Form 17C of a polling booth and the total number of votes recorded in the EVM control unit of that booth did not tally. [33] In June 2018, Election Commission of India introduced a built-in-hood on top of the contrast sensor and paper roll that does not soak humidity in all VVPATs to prevent it from excess light and heat. [34] [35] In case of a discrepancy between the information on VVPATs and the EVMs, the paper slips of the particular polling station in question are recounted. [36] If the discrepancy persists, the count established by the VVPAT paper slips prevails over the vote count registered on the EVMs. [37]

Challenges and concerns with VVPAT

Common problems

Common VVPAT problems are:

  1. Video of voter behavior during an actual election revealed that most voters do not verify their choices by reading the VVPAT. [38]
  2. Research indicates voters who do check ballot summaries overlook discrepancies. [39]
  3. A manual VVPAT recount/audit is labor-intensive and expensive, and likely unaffordable to most candidates seeking it.
  4. And while VVPAT is designed to serve as a check on DRE (Direct Recording Electronic) vote recorders, it relies on the same proprietary programming and electronics to produce the audit trail.

Other hurdles in the implementation of paper audit trails include the performance and authority of the audit. Paper audit systems increase the cost of electronic voting systems, can be difficult to implement, often require specialized external hardware, and can be difficult to use. In the United States twenty-seven states require a paper audit trail by statute or regulation for all direct recording electronic voting machines used in public elections. [4] Another eighteen States don't require them, but use them either statewide or in local jurisdictions. [5]

Security concerns

The introduction of malicious software into a VVPAT system can cause it to intentionally misrecord the voter's selections. This attack could minimize detection by manipulating only a small percentage of the votes or for only lesser known races. [40]

Another security concern is that a VVPAT could print while no voter is observing the paper trail, a form of ballot stuffing. [41] Even if additional votes were discovered through matching to the voters list, it would be impossible to identify legitimate ballots from fraudulent ballots.

Alternatively the printer could invalidate the printed record after the voter leaves and print a new fraudulent ballot. These ballots would be undetectable as invalidated ballots are quite common during elections. [42] Also, VVPAT systems that are technically able to reverse the paper feed could be open to manipulated software overwriting or altering the VVPAT after the voter checks it.

Usability and ergonomic concerns

For the voter, the printed record is "in a different format than the ballot, in a different place, is verified at a different time, and has a different graphical layout with different contrast and lighting parameters." [43] In November 2003 in Wilton, CT, virtually all voters had to be prompted to find and verify their receipt, increasing the time required to vote and the work for the pollworkers. The VVPAT adds to the complexity of voting, already a deterrent to voting. [43]

In addition, a VVPAT component may not be easily usable by poll-workers, many of whom are already struggling with DRE maintenance and use and new elections law requirements. In the 2006 primary election in Cuyahoga County, Ohio, a study found that 9.6 percent of the VVPAT tapes were either destroyed, blank, illegible, missing, taped together or otherwise compromised. In one case the thermal paper was loaded into the printer backwards leaving a blank tape, [44] [45] which was not realized by voters who couldn't verify the paper trail. The Cuyahoga Election Review Panel proposed in its final report to remove the opaque doors covering the VVPAT except the ones equipped with equipment for blind voters. [46] In general collecting and counting these printed records can be difficult. [43]

Records printed on continuous rolls of paper is more difficult than counting standard paper ballots or even punch cards. [43]

Privacy concerns

DRE VVPAT systems that print the ballot records out in the order in which they were cast (often known as reel-to-reel systems) raise privacy issues, if the order of voting can also be recorded. VVPAT printers that cut the paper after each ballot to form individual ballots can avoid this concern. If there are multiple voting machines it would be more difficult to match between the full voter list and the VVPATs.

Alternatively, an attacker could watch the order in which people use a particular voting system and note the order of each particular vote he is interested in. If that attacker later obtains the paper ballot records she could compare the two and compromise the privacy of the ballot. This could also lead to vote selling and voter intimidation. [47]

In 2007, Jim Cropcho and James Moyer executed and publicized a proof of concept for this theory. Via a public records request, the two extracted voter identification from pollbooks, and voter preference from VVPATs, for a Delaware County, Ohio, precinct with multiple voting machines. Because both sets of records independently established the order of electronic ballots cast, they directly linked a voter's identification to his or her preference. [48] Over 1.4 million registered voters in ten Ohio counties were affected. The situation was resolved before the next election by omitting the consecutive numbers on Authority To Vote slips from pollbook records. However, similar vulnerabilities may still exist in other states.

Effectiveness concerns

Also problematic is that voters are not required to actually check the paper audit before casting a ballot, which is critical to "verifying" the vote. While the option to look at the paper may provide comfort to an individual voter, the VVPAT does not serve as an effective check on malfunction or fraud unless a statistically relevant number of voters participate.

Accessibility concerns

Current VVPAT systems are not usable by some disabled voters. Senator Christopher Dodd (D-CT) testified before the United States Senate Committee on Rules and Administration at a June 2005 hearing on Voter Verification in Federal Elections "The blind cannot verify their choices by means of a piece of paper alone in a manner that is either independent or private. Nor can an individual who has a mobility disability, such as hand limitations, verify a piece of paper alone, if that individual is required to pick up and handle the paper." [49]

Reliability concerns

VVPAT systems can also introduce increased concern over reliability. Professor Michael Shamos points out that "Adding a paper printing device to a DRE machine naturally adds another component that can fail, run out of ink, jam or run out of paper. If DREs are alleged already to be prone to failure, adding a paper trail cannot improve that record." [50] In Brazil in 2003, where a small number of precincts had installed paper trails, failure of the printers delayed voters by as much as 12 hours, a figure that would be catastrophic in the U.S. [51]

Current implementation of VVPAT systems use thermal printers to print their paper ballot records. Ballot records printed on the thermal paper will fade with time. Also, heat applied to the paper before or after the election can destroy the printing. [43]

Implementation concerns

It can be significantly more difficult to implement a VVPAT as an after-the-fact feature. For jurisdictions currently using direct recording electronic voting machines that lack a VVPAT, implementation can be expensive to add and difficult to implement due to the specialized external hardware required. To add a VVPAT component to a DRE machine, a jurisdiction would be required to purchase the system designed by the vendor of the DRE machine with a no bid, sole source purchase contract. That assumes the vendor has designed a component that is compatible with the DRE machine in use. The vendor may not have developed a VVPAT component that is compatible with the DRE machine in use, thus requiring the jurisdiction to purchase an entirely new voting system.

For jurisdictions not currently using direct recording electronic voting machines, the introduction of a new voting system that includes a VVPAT component would have less implementation challenges. Some implementations of the VVPAT place a high cognitive burden on the voter and are extraordinarily error prone. [52]

One important question of VVPAT systems is regarding the time of the audit. Some have suggested that random audits of direct recording electronic voting machines be performed on Election Day to protect against machine malfunction. However, the partial tallying of votes before the polls have closed could create a problem similar to the occurrence in American national elections where a winner is declared based on East Coast results long before polls have closed on the West Coast. In addition, the partial tallying of votes before the polls have closed may be illegal in some jurisdictions. Others have suggested that random audits of direct recording electronic voting machines be performed after the election or only in the event of a dispute.

In the event an audit is performed after the election and a discrepancy is discovered between the ballot count and the audit count it is unclear which count is the authoritative count. Some jurisdictions have statutorily defined the ballot as the authoritative count leaving the role of an audit in question. Because VVPAT is a recent addition to direct record voting systems the authority question remains unclear.

See also

Related Research Articles

A voting machine is a machine used to record votes in an election without paper. The first voting machines were mechanical but it is increasingly more common to use electronic voting machines. Traditionally, a voting machine has been defined by its mechanism, and whether the system tallies votes at each voting location, or centrally. Voting machines should not be confused with tabulating machines, which count votes done by paper ballot.

Electronic voting is voting that uses electronic means to either aid or take care of casting and counting ballots.

<span class="mw-page-title-main">Electronic voting in India</span> Component of Indian electoral system

Electronic voting is the standard means of conducting elections using Electronic Voting Machines (EVMs) in India. The system was developed and tested by the state-owned Electronics Corporation of India and Bharat Electronics in the 1990s. They were introduced in Indian elections between 1998 and 2001, in a phased manner. Prior to the introduction of electronic voting, India used paper ballots and manual counting. The paper ballots method was widely criticised because of fraudulent voting and booth capturing, where party loyalists captured booths and stuffed them with pre-filled fake ballots. The printed paper ballots were also more expensive, requiring substantial post-voting resources to count hundreds of millions of individual ballots. Embedded EVM features such as "electronically limiting the rate of casting votes to five per minute", a security "lock-close" feature, an electronic database of "voting signatures and thumb impressions" to confirm the identity of the voter, conducting elections in phases over several weeks while deploying extensive security personnel at each booth have helped reduce electoral fraud and abuse, eliminate booth capturing and create more competitive and fairer elections. Indian EVMs are stand-alone machines built with Write once read many memory. The EVMs are produced with secure manufacturing practices, and by design, are self-contained, battery-powered and lack any networking capability. They do not have any wireless or wired internet components and interface. The M3 version of the EVMs includes the VVPAT system.

An electronic voting machine is a voting machine based on electronics. Two main technologies exist: optical scanning and direct recording (DRE).

Vote counting is the process of counting votes in an election. It can be done manually or by machines. In the United States, the compilation of election returns and validation of the outcome that forms the basis of the official results is called canvassing.

A DRE voting machine, or direct-recording electronic voting machine, records votes by means of a ballot display provided with mechanical or electro-optical components that can be activated by the voter. These are typically buttons or a touchscreen; and they process data using a computer program to record voting data and ballot images in memory components. After the election, it produces a tabulation of the voting data stored in a removable memory component and as printed copy. The system may also provide a means for transmitting individual ballots or vote totals to a central location for consolidating and reporting results from precincts at the central location. The device started to be massively used in 1996 in Brazil where 100% of the elections voting system is carried out using machines.

India has a parliamentary system as defined by its constitution, with power distributed between the central government and the states. India's democracy is the largest democracy in the world.

The Mercuri method is the most popular and notable form of a voter verified paper audit trail (VVPAT). It is a modification to direct-recording electronic (DRE) voting machines to provide a physical paper audit record that may be used to verify an electronic vote count.

End-to-end auditable or end-to-end voter verifiable (E2E) systems are voting systems with stringent integrity properties and strong tamper resistance. E2E systems often employ cryptographic methods to craft receipts that allow voters to verify that their votes were counted as cast, without revealing which candidates were voted for. As such, these systems are sometimes referred to as receipt-based systems.

An optical scan voting system is an electronic voting system and uses an optical scanner to read marked paper ballots and tally the results.

Electronics Corporation of India Limited is a Public Sector Enterprise under the Department of Atomic Energy, established on 11 April 1967 by A. S. Rao at Hyderabad, under the Prime Ministership of Smt Indira Gandhi, to create a strong indigenous base in electronics. ECIL is a multi-product, multi disciplinary organisation with focus on indigenous nuclear energy, space and defence sectors. ECIL also has a strong presence in indigenous electronic security, communications, networking and e-governance domains. ECIL has committed partnerships with nuclear energy establishments of India, particularly Bhabha Atomic Research Center (BARC), Nuclear Power Corporation of India Limited (NPCIL) and Indira Gandhi Centre for Atomic Research (IGCAR). ECIL also actively supports other strategic sectors such as indigenous Defence, Space, Civil Aviation, Information and Broadcasting, Telecommunications, Insurance, Banking, Police and Para-military Forces, Oil and Gas, Power, Space Education, Health, Agriculture, Steel and Coal.

Electronic voting by country varies and may include voting machines in polling places, centralized tallying of paper ballots, and internet voting. Many countries use centralized tallying. Some also use electronic voting machines in polling places. Very few use internet voting. Several countries have tried electronic approaches and stopped because of difficulties or concerns about security and reliability.

<span class="mw-page-title-main">Muzaffarpur Assembly constituency</span> Vidhan Sabha constituency

Muzaffarpur Assembly constituency is an assembly constituency in Muzaffarpur district in the Indian state of Bihar. In 2015 Bihar Legislative Assembly election, Muzaffarpur was one of the 36 seats to have VVPAT enabled electronic voting machines.

<span class="mw-page-title-main">Bankipur Assembly constituency</span> Assembly constituency in Bihar, India

Bankipore or Bankipur Assembly constituency is one of 243 constituencies of legislative assembly of Bihar. It is a segment of Patna Sahib Lok Sabha constituency. This constituency and seat is dominated by Kayastha Caste. In 2015 Bihar Legislative Assembly election, Bankipur will be one of the 36 seats to have VVPAT enabled electronic voting machines.

<span class="mw-page-title-main">2014 Haryana Legislative Assembly election</span> 2014 assembly elections in Haryana, India

A general election was held on 15 October 2014 to elect 90 members of the Haryana Legislative Assembly. The term of previous assembly elected in 2009 was to expire on 27 October 2014. The results were announced on 19 October. The BJP won the majority in the Assembly. Manohar Lal Khattar was chosen to head the new government.

<span class="mw-page-title-main">Biharsharif Assembly constituency</span> Constituency of the Bihar legislative assembly in India

Biharsharif Assembly constituency is one of 243 constituencies of legislative assembly of Bihar. It is a part of Nalanda Lok Sabha constituency along with other assembly constituencies viz. Islampur, Harnaut, Hilsa, Nalanda, Asthawan and Rajgir. In 2015 Bihar Legislative Assembly election, Biharsharif will be one of the 36 seats to have VVPAT enabled electronic voting machines.

<span class="mw-page-title-main">Buxar Assembly constituency</span> Constituency of the Bihar legislative assembly in India

Buxar Assembly constituency is one of the 243 assembly constituencies of Bihar Vidhan Sabha. It comes under Buxar for parliamentary elections. In 2015 Bihar Legislative Assembly election, Buxar will be one of the 36 seats to have VVPAT enabled electronic voting machines.

<span class="mw-page-title-main">Noksen Assembly constituency</span> Legislative Assembly constituency in Nagaland State, India

Noksen Assembly constituency is one of the 60 Legislative Assembly constituencies of Nagaland state in India. It is part of Tuensang District and is reserved for candidates belonging to the Scheduled Tribes.

<span class="mw-page-title-main">Election audit</span>

An election audit is any review conducted after polls close for the purpose of determining whether the votes were counted accurately or whether proper procedures were followed, or both.

Direct Recording Electronic with Integrity and Enforced Privacy (DRE-ip) is an End-to-End (E2E) verifiable e-voting system without involving any tallying authorities, proposed by Siamak Shahandashti and Feng Hao in 2016. It improves a previous DRE-i system by using a real-time computation strategy and providing enhanced privacy. A touch-screen based prototype of the system was trialed in the Gateshead Civic Centre polling station on 2 May 2019 during the 2019 United Kingdom local elections with positive voter feedback. A proposal that includes DRE-ip as a solution for large-scale elections was ranked 3rd place in the 2016 Economist Cybersecurity Challenge jointly organized by The Economist and Kaspersky Lab.

References

  1. ↑ "America Moves Decidedly Toward Paper-Based Elections". Governing. 2022-07-10. Retrieved 2022-12-09.
  2. ↑ See page 3 of: Ariel J. Feldman; J. Alex Halderman; Edward W. Felten (September 13, 2006). "Security Analysis of the Diebold AccuVote-TS Voting Machine" (PDF). J Halderm.
  3. ↑ Schneier, Bruce (November 10, 2004). "The Problem with Electronic Voting Machines" . Retrieved 2006-12-22.
  4. 1 2 See: "Voter-Verified Paper Record Legislation". Verified Voting Foundation. December 21, 2006. Archived from the original on December 14, 2006. Retrieved December 22, 2006.
  5. 1 2 Forbes.com: Paper Jams a Problem for Electronic Voting [ dead link ]
  6. ↑ "How hackers could prey on election vulnerabilities (with transcript)". PBS NewsHour . September 15, 2016. Retrieved September 16, 2016.
  7. ↑ "EVM-paper trail introduced in 8 of 543 constituencies".
  8. ↑ "LS polls: Voters to get 'automated-receipts' at Gandhinagar". Business Standard India. Press Trust of India. 29 April 2014.
  9. ↑ "VVPAT machine to be on demonstration for 10 days". The Hindu. 4 April 2014.
  10. ↑ "VVPAT to be introduced in Jadavpur constituency". 2 April 2014.
  11. ↑ 8 seats having VVPAT facility
  12. ↑ "VVPAT, a revolutionary step in voting transparency". DNA. 2014-04-27. Retrieved 2014-04-27.
  13. ↑ "Patna Sahib electorate can see who they voted for - Times of India". The Times of India . 7 April 2014.
  14. ↑ "EVM slip will help verify your vote - Times of India". The Times of India . 28 April 2014.
  15. ↑ "Sahib Pataliputra: 400 EVMs on standby for Patna Sahib, Pataliputra | Patna News - Times of India". The Times of India . 17 April 2014.
  16. ↑ "VVPAT to Debut in B'lore South". Archived from the original on May 3, 2014.
  17. ↑ "Nagaland first to use VVPAT device for voting". Business Standard India. Press Trust of India. 4 September 2013.
  18. ↑ "India devises flawless ballot mechanism". Archived from the original on 2014-01-03.
  19. ↑ "VVPAT training in Tripura". Archived from the original on November 7, 2017.
  20. ↑ "VVPATs to be used on large-scale for 1st time in Mizoram polls". The Hindu. 2013-11-24. Retrieved 2013-12-09.
  21. ↑ "AnnexureVI VVPAT Page 24" (PDF).
  22. ↑ "Poll panel to introduce paper trail for Goa polls". The Times of India .
  23. ↑ "Paper slips of VVPATs will be counted last: Election Commission". The Times of India . 20 May 2019.
  24. ↑ "What is VVPAT". The Economic Times.
  25. ↑ Horatio Rogers, (19 R.I. 729) opinion of the Justices in re voting machine: dissent. Reports of Cases Argued and Determined in the Appellate Division of the Supreme Court of Rhode Island, Vol. XIX, E.L. Freeman & Sons, Providence (1898); 732-735, quotation from the bottom of page 734.
  26. ↑ Joseph A. Gray, Voting-machine, U.S. patent 620,767 , issued Mar. 7, 1899; quoted from lines 103-105, page 2.
  27. ↑ Rebecca T. Mercuri, Physical verifiability of computer systems, Proc. 5th International Computer Virus and Security Conference. Reposted on the web with added notes in 2005.
  28. ↑ Rebecca T. Mercuri, A better ballot box, IEEE Spectrum, Oct. 2002; pages 46-50.
  29. ↑ Douglas W. Jones and Barbara Simons, Broken Ballots, CSLI Publications, 2012; see Section 5.5, pages 111-115.
  30. ↑ AVANTE International Technology, Inc. "Patents & IP". Archived from the original on 2008-05-03. Retrieved 2008-06-21.
  31. ↑ Today's Congressional hearing, March 7, 2007 from Avi Rubin's blog
  32. ↑ Zetter, Kim (November 3, 2003). "Aussies Do It Right: E-Voting". Wired News. Retrieved 2011-08-17.
  33. ↑ "VVPAT saves the day". The Hindu. 20 May 2016.
  34. ↑ "EC makes small changes to prevent failure of VVPAT machines". The Times of India . 12 August 2018.
  35. ↑ Vishnoi, Anubhuti. "All VVPATs in 2019 to come with hood to keep light at bay". The Economic Times.
  36. ↑ "What happens when there is a mismatch between EVMs and VVPATs?". 25 October 2022.
  37. ↑ "In case of a mismatch between EVM and VVPAT machine counts, the latter will be held valid: EC".
  38. ↑ "Making Electronic Voting Machines Tamper-proof: Some Administrative and Technical Suggestions". The Hindu Centre for Politics and Public Policy. August 30, 2018. Retrieved June 3, 2019.
  39. ↑ Everett, Sarah P. (2007). The Usability of Electronic Voting Machines and How Votes Can Be Changed Without Detection (PDF) (PhD). Rice University. Retrieved June 3, 2019.
  40. ↑ VVPR Attack with Misprinted VVPAT, David L. Dill October 2, 2003
  41. ↑ Paper Trail Manipulation I, Professor Michael Ian Shamos October 5, 2005
  42. ↑ Paper Trail Manipulation II, Professor Michael Ian Shamos October 5, 2005
  43. 1 2 3 4 5 Selker, Ted; Goler, Jon (April 2004), Security Vulnerabilities and Problems with VVP (PDF), Caltech/MIT Voting Technology Project / NIST , retrieved 17 August 2011
  44. ↑ Hertzberg, Steven, ed. (2006), DRE Analysis for May 2006 Primary Cuyahoga County, Ohio (PDF), San Francisco, CA: Election Science Institute, archived from the original (PDF) on 5 March 2016, retrieved 17 August 2011
  45. ↑ Fessler, Pam (September 13, 2006). "Problems Found in Ohio Computer Voting". National Public Radio . Retrieved 2007-02-04.
  46. ↑ Final Report (PDF), Cuyahoga County, OH: Cuyahoga Election Review Panel, 20 July 2006, p. 50, archived from the original (PDF) on 28 September 2011, retrieved 17 August 2011
  47. ↑ Wack, John (2005), Threat to voter privacy with voter verified paper audit trail voting systems using spooled paper rolls (PDF), NIST , retrieved 17 August 2011
  48. ↑ McCullagh, Declan (20 August 2007). "E-voting predicament: Not-so-secret ballots". CNET News. CNET. Retrieved 17 August 2011.
  49. ↑ Hearing on Voter Verification in Federal Elections Archived 2009-02-26 at the Wayback Machine , 109th Cong. (2005). testimony of Senator Christopher Dodd. Retrieved February 3, 2007, from Senate Rules website.
  50. ↑ Michael Shamos (April 2004). "Paper v. Electronic Voting Records – An Assessment" (PDF). Computers, Freedom and Privacy Conference. Retrieved 2007-02-03.
  51. ↑ Mira, Leslie, "For Brazil Voters, Machines Rule," Wired News, January 24, 2004.
  52. ↑ Warren, Stewart. VoteTrustUSA Archived 2018-10-16 at the Wayback Machine . Eminent Computer Scientist Criticizes ES&S "Real Time Audit Log" Archived 2018-10-17 at the Wayback Machine . June 21, 2006.

Research

Advocacy and commentary

This page is based on this Wikipedia article
Text is available under the CC BY-SA 4.0 license; additional terms may apply.
Images, videos and audio are available under their respective licenses.