From: Nicholas Bernstein <nicholas.bernstein@xxxxxxxxxxxx>
To: Robert Mcgrath <mcgrath_mcnally@xxxxxxx>
CC: evan@xxxxxxxx, cmehesy@xxxxxxxxxxx, davide475@xxxxxxxx,
david.ellington@xxxxxxxxxxx, summerstorm03@xxxxxxxxxxx,
donna@xxxxxxxxxxxx, jpezzillo@xxxxxxxxx, mlambie@xxxxxxxxx,
texico86@xxxxxxx, peter.raich@xxxxxxxx, TresCeeA@xxxxxxx,
pklammer@xxxxxxx, AlKolwicz@xxxxxxxxx, cvv-discuss@xxxxxxxxxxxxxxxxx
Subject: Null Hypothesis
Date: Fri, 16 Apr 2004 11:08:13 -0600
Bob,
I think you've hit upon a very trenchant issue. I would repose it like
this, "In looking at electronic voting systems, who has the burden of
proof? Is it up to proponents of electronic voting to prove the superiority
of electronic systems, or the detractors to prove the fallibility?"
Proponents say, "Just look at Florida in 2000. Paper doesn't work!"
Detractors say, "Just look at the security holes in Deibold machines.
Electronics can't be trusted!"
I would claim that they are both right. Neither method should be trusted
based solely on the failures of the other. The only way to reliablilty
compare the two is to have them go head-to-head. And the only way to do
this is with a paper printout.
Call it a "ballot" or a "receipt". The difference is moot. Until one system
has proven its superiority over the other, there should be a complete count
of paper and electronic ballots. If a unique ballot ID can link the two,
anomolies can be investigated on a case by case basis.
There are those people who are afraid of such a head-to-head comparisons
because they worry that the electronic count will trump the paper one. I
think the question of which method should be trusted in case of anomolies
is minor compared to coming up with a measure of the relative accuracy. If
we get nothing else, we learn that there is an x% discrepancy rate. That,
in itself, is very valuable.
If we really want to unambiguously resolve discrepancies, then we need a
method for letting the voters themselves resolve them. I have proposed
variations on this theme before, but here is another try. At the voting
place, a SECOND RECEIPT is printed that contains ONLY THE UNIQUE ID. The
user can take that home. Discrepant ballot IDs are posted. If your ballot
is one of those in question, your second receipt provides you admission to
a session where you can cast a clarification ballot. Obviously there are
many details to work out, but this system would maintain anonymity, guard
against miscounts, and let voters know when their ballot has been
invalidated.
Nick
--
If you're not outraged, you're not paying attention.