Hacker News new | ask | show | jobs
by twright0 3497 days ago
In general, any process that allows an individual to verify their vote after the fact will enable coercion over voting. For example, in your proposal, an unscrupulous boss could make a demand before the election: "You must tell me the one-time ID you're voting with. If you choose not to, or if that ID doesn't show up in the registry having cast a vote for <candidate>, you're fired." I think that, no matter what the process is, if I can check how I voted I can also be made to check how I voted while someone watches over my shoulder and threatens consequences.
5 comments

One solution is to make blackmailing people's votes illegal. Then the risk of someone recording him with a phone or hidden recorder would discourage your boss from blackmailing you. You could also make it illegal to reveal your vote to anyone else, to make it easier to spot coercion.

In extremely dishonest countries where the local courts, police, and election officials are all corrupt, a large mafia-style presence could coerce a lot of people into voting a certain way. But if any of these are at all trustworthy, it seems difficult to coerce anyone. And even then, the mafia abusing too many people(>5%) would cause them to riot.

@jjuhl answered that question somewhere else in the thread with homomorophic encryption (Numberphile : https://m.youtube.com/watch?v=BYRTvoZ3Rho ): The hash out of the machine doesn't tell who you voted for, but the sum of the hashes do tally properly. It's still unclear for me, but it's sure that there are mathematical solutions.
Potentially, a canary id, "show this one and it'll claim you voted for ____ and also alert the state election board that it was accessed"
That solves the boss problem. What about the government?
vote manipulation by a foreign government is solved by having a verifiable id/token in the first place.

vote manipulation by the government the election is happening for isn't really something you can solve because in that case the election isn't the problem.

what if an ID was generated and printed just before voting with an option to print an arbitrary number of additional ID's of already voted people. the boss never knows what ID(s) he'd receive.
So you come into work on Monday thinking that everything will be peachy-keen, and get an all-hands email telling you that any employee that can not prove that they voted for the "correct" candidate will forced to resign.

Any system that can be abused, will be.

Verifiable vote technology generally does not reveal who the vote was cast for, only that the vote was cast and included in the tally. This makes issues of coercion or vote selling moot.