<html><body><span style="font-family:Verdana; color:#000000; font-size:10pt;"><div>Larry,</div><div><br></div><div>You got hold of wrong end of sticks - please see below.<br></div><div><br></div><div>Thanks, David<br><br></div>
<blockquote id="replyBlockquote" webmail="1" style="border-left: 2px solid blue; margin-left: 8px; padding-left: 8px; font-size:10pt; color:black; font-family:verdana;">
<div id="wmQuoteWrapper">
-------- Original Message --------<br>
<br>
<!--[if !mso]><style>
#wmQuoteWrapper v\:* {behavior:url(#default#VML);}
#wmQuoteWrapper o\:* {behavior:url(#default#VML);}
#wmQuoteWrapper w\:* {behavior:url(#default#VML);}
#wmQuoteWrapper .shape {behavior:url(#default#VML);}
</style><![endif]--><style>
#wmQuoteWrapper /* Font Definitions */ @font-face {font-family:"Cambria Math"; panose-1:2 4 5 3 5 4 6 3 2 4;}
#wmQuoteWrapper @font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4;}
#wmQuoteWrapper @font-face {font-family:Verdana; panose-1:2 11 6 4 3 5 4 4 2 4;}
#wmQuoteWrapper /* Style Definitions */ p.MsoNormal, #wmQuoteWrapper li.MsoNormal, #wmQuoteWrapper div.MsoNormal {margin:0in; margin-bottom:.0001pt; font-size:12.0pt; font-family:"Times New Roman",serif;}
#wmQuoteWrapper a:link, #wmQuoteWrapper span.MsoHyperlink {mso-style-priority:99; color:black; text-decoration:underline;}
#wmQuoteWrapper a:visited, #wmQuoteWrapper span.MsoHyperlinkFollowed {mso-style-priority:99; color:black; text-decoration:underline;}
#wmQuoteWrapper p.msonormal0, #wmQuoteWrapper li.msonormal0, #wmQuoteWrapper div.msonormal0 {mso-style-name:msonormal; mso-margin-top-alt:auto; margin-right:0in; mso-margin-bottom-alt:auto; margin-left:0in; font-size:12.0pt; font-family:"Times New Roman",serif;}
#wmQuoteWrapper p.msochpdefault, #wmQuoteWrapper li.msochpdefault, #wmQuoteWrapper div.msochpdefault {mso-style-name:msochpdefault; mso-margin-top-alt:auto; margin-right:0in; mso-margin-bottom-alt:auto; margin-left:0in; font-size:12.0pt; font-family:"Times New Roman",serif;}
#wmQuoteWrapper span.emailstyle17 {mso-style-name:emailstyle17;}
#wmQuoteWrapper span.EmailStyle20 {mso-style-type:personal; font-family:"Calibri",sans-serif; color:black; font-weight:normal; font-style:normal; text-decoration:none none;}
#wmQuoteWrapper span.EmailStyle21 {mso-style-type:personal; font-family:"Calibri",sans-serif; color:windowtext; font-weight:normal; font-style:normal; text-decoration:none none;}
#wmQuoteWrapper span.EmailStyle22 {mso-style-type:personal-compose; font-family:"Calibri",sans-serif; color:black; font-weight:normal; font-style:normal; text-decoration:none none;}
#wmQuoteWrapper .MsoChpDefault {mso-style-type:export-only; font-size:10.0pt;}
#wmQuoteWrapper @page WordSection1 {size:8.5in 11.0in; margin:1.0in 1.0in 1.0in 1.0in;}
#wmQuoteWrapper div.WordSection1 {page:WordSection1;}
</style><div class="WordSection1"><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-family:"Calibri",sans-serif">David Webber wrote:<o:p></o:p></span></div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-family:"Calibri",sans-serif">> </span><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black">With a digital system you want built in verification and auditing.<o:p></o:p></span></div><div class="MsoNormal" style="font-size:12pt;"><span style="font-family:"Calibri",sans-serif"><o:p> </o:p></span></div><div class="MsoNormal" style="font-size:12pt;"><span style="font-family:"Calibri",sans-serif">Sure. Our credit union had that too! Nothing wrong with letting the system check itself also.<o:p></o:p></span></div><div class="MsoNormal" style="font-size:12pt;"><span style="font-family:"Calibri",sans-serif"><o:p> </o:p></span></div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-family:"Calibri",sans-serif">> </span><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black">We just need the State to produce its digital elector registration database - ready to be imported into the voting system. That we can provide software to assist with.<o:p></o:p></span></div><div class="MsoNormal" style="font-size:12pt;"><span style="font-family:"Calibri",sans-serif"><o:p> </o:p></span></div><div class="MsoNormal" style="font-size:12pt;"><span style="font-family:"Calibri",sans-serif">No way! There is no reason for a state to publish a list of voters.</span></div><div class="MsoNormal" style="font-size:12pt;"><span style="font-family:"Calibri",sans-serif"><br></span></div><div class="MsoNormal" style="font-size:12pt;"><span style="font-family:"Calibri",sans-serif">>>> No no no! Not PUBLIC. Of course its secret - internal database to be used - this is so the CAVO open source system (as used in Virginia election) can send those people their ballots. We're not going to make that list ourselves, nor manage it <<<<br></span></div><div class="MsoNormal" style="font-size:12pt;"><span style="font-family:"Calibri",sans-serif"><o:p> </o:p></span></div><div class="MsoNormal" style="font-size:12pt;"><span style="font-family:"Calibri",sans-serif">Since this CAVO list was created, I've been bothered that we're trying to create some <u>grand</u>, secure, open source voting system that will magically replace the current system. NO. That's not my goal. I want a <u>simple</u>, secure, open source voting system, no magic required, to allow more people to vote without paper ballots stuffed into boxes and scanned by proprietary machines.</span></div><div class="MsoNormal" style="font-size:12pt;"><span style="font-family:"Calibri",sans-serif"><br></span></div><div class="MsoNormal" style="font-size:12pt;"><span style="font-family:"Calibri",sans-serif">>>> Larry - wait - you think this software is going to write itself? And you think the people who have written all the flawed systems currently - are suddenly going to start getting it right now? This is NOT how it works. </span></div><div class="MsoNormal" style="font-size:12pt;"><span style="font-family:"Calibri",sans-serif"><br></span></div><div class="MsoNormal" style="font-size:12pt;"><span style="font-family:"Calibri",sans-serif">We have the SIMPLE, SECURE and TRUSTED solution - as shown by what Virginia used. </span></div><div class="MsoNormal" style="font-size:12pt;"><span style="font-family:"Calibri",sans-serif"><br></span></div><div class="MsoNormal" style="font-size:12pt;"><span style="font-family:"Calibri",sans-serif">You want to know what happened there? Vendor ugly re-established itself. Microsoft got a new contract. It's like we were giving away simple cars that are easy to repair and maintain - hell Ford and GM and Chevy will put a stop to that quickly. <<<<br></span></div><div class="MsoNormal" style="font-size:12pt;"><span style="font-family:"Calibri",sans-serif"><o:p> </o:p></span></div><div class="MsoNormal" style="font-size:12pt;"><span style="font-family:"Calibri",sans-serif">I can register the copyright for that elections software with the Library of Congress with a simple online transaction. But you won't let me run it without three levels of independent record in every county elections office. That's over-kill.</span></div><div class="MsoNormal" style="font-size:12pt;"><span style="font-family:"Calibri",sans-serif"><br></span></div><div class="MsoNormal" style="font-size:12pt;"><span style="font-family:"Calibri",sans-serif">>>> Larry - you ask for all kinds of things - and when I tell you that 3 levels of trust are needed - you dismiss it.<br></span></div><div class="MsoNormal" style="font-size:12pt;"><span style="font-family:"Calibri",sans-serif"><br></span></div><div class="MsoNormal" style="font-size:12pt;"><span style="font-family:"Calibri",sans-serif">Again - I did NOT say that every county elections office needs 3 levels of records. The EXACT opposite - they only keep one. The 3 levels are ONLY needed for digital online ballot casting piece of the system - which is the part you are going to audit and you need to trust and verify. The county office will load their elector database into the vote casting system - and it will present and verify all the ballots cast. Think of the ballot casting system as the ATMs in your Credit Union. <br></span></div><div class="MsoNormal" style="font-size:12pt;"><span style="font-family:"Calibri",sans-serif"><<<<br></span></div><div class="MsoNormal" style="font-size:12pt;"><span style="font-family:"Calibri",sans-serif"><o:p> </o:p></span></div><div class="MsoNormal" style="font-size:12pt;"><span style="font-family:"Calibri",sans-serif">/Larry<o:p></o:p></span></div><div class="MsoNormal" style="font-size:12pt;"><span style="font-family:"Calibri",sans-serif"><o:p> </o:p></span></div><div class="MsoNormal" style="font-size:12pt;"><span style="font-family:"Calibri",sans-serif"><o:p> </o:p></span></div><div><div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in"><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> David RR Webber (XML) [<a href="mailto:david@drrw.info">mailto:david@drrw.info</a>] <br><b>Sent:</b> Sunday, June 5, 2016 4:06 PM<br><b>To:</b> CAVO <<a href="mailto:cavo@opensource.org">cavo@opensource.org</a>><br><b>Subject:</b> Re: [CAVO] Auditing electronic voting<o:p></o:p></span></div></div></div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><o:p> </o:p></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black">Larry,<o:p></o:p></span></div></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black"><o:p> </o:p></span></div></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black">All those same statistical tools are in play for election results "auditing" today that States perform and hire independent experts to perform.<o:p></o:p></span></div></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black"><o:p> </o:p></span></div></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black">I don't like any of them. It's too much fishing and hoping.<o:p></o:p></span></div></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black"><o:p> </o:p></span></div></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black">With a digital system you want built in verification and auditing.<o:p></o:p></span></div></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black"><o:p> </o:p></span></div></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black">That is why I mentioned 3 independent systems of record.<o:p></o:p></span></div></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black"><o:p> </o:p></span></div></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black">Now imagine (sigh I hate all these financial system comparisons - but what the) that your Credit Union accounts had 3 systems of record - one internally, a second held by the State, and a third held by an independent 3rd party (non-profit service provider). Transactions are triple blind integrated into each system and mirrored.<o:p></o:p></span></div></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black"><o:p> </o:p></span></div></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black">Now if someone is doing something shady - they have to corrupt all three systems - not just one.<o:p></o:p></span></div></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black"><o:p> </o:p></span></div></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black">You want all 3 systems to agree on balance totals. You run a batch query against all accounts once a month (or more). If not - you audit to find out why. Notice this is much more effective than annual guessing - by which time the digital horse could have left 100 barns not just 1!<o:p></o:p></span></div></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black"><o:p> </o:p></span></div></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black">BTW - money laundering is not detected by your annual audit either - in this case money is deposited in one State - then withdrawn in another routinely. This would be akin to ballot stuffing.<o:p></o:p></span></div></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black"><o:p> </o:p></span></div></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black">I'm glad you were reassured by the annual hand-holding exercise at your Credit Union - frankly I view that as pure window dressing and legal liability avoidance. Oh we lost your money? Sorry, but we have all these safeguards (cough worthless) in place but it looks and sounds great. Welcome to America.<o:p></o:p></span></div></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black"><o:p> </o:p></span></div></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black">Cheers, David<o:p></o:p></span></div></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black"><o:p> </o:p></span></div></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black"><o:p> </o:p></span></div></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black"><o:p> </o:p></span></div></div><blockquote style="border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 6.0pt;margin-left:6.0pt;margin-top:5.0pt;margin-bottom:5.0pt" id="replyBlockquote"><div id="wmQuoteWrapper"><div class="MsoNormal" style="font-size:12pt;mso-margin-top-alt:0in;margin-right:0in;margin-bottom:12.0pt;margin-left:.5in"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black">-------- Original Message --------<br>Subject: [CAVO] Auditing electronic voting<br>From: "Lawrence Rosen" <</span><a target="_blank" href="mailto:lrosen@rosenlaw.com"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">lrosen@rosenlaw.com</span></a><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black">><br>Date: Sun, June 05, 2016 3:05 pm<br>To: "'CAVO'" <</span><a target="_blank" href="mailto:cavo@opensource.org"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">cavo@opensource.org</span></a><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black">><br>Cc: Lawrence Rosen <</span><a target="_blank" href="mailto:lrosen@rosenlaw.com"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif">lrosen@rosenlaw.com</span></a><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black">><o:p></o:p></span></div><div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-family:"Verdana",sans-serif;color:black">Sometime after an election, before the votes are certified or perhaps only after a candidate has raised an express challenge to the posted results, electronic voting systems will need to be audited by an independent agency.<o:p></o:p></span></div></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-family:"Verdana",sans-serif;color:black"> <o:p></o:p></span></div></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-family:"Verdana",sans-serif;color:black">I was once chair of a federal credit union whose tens of thousands of accounts needed to be audited every year. That required sampling and confirmation procedures by a federal auditor. That required intelligent comparisons between cash deposited and cash distributed. And random credit union members were asked specifically – by the auditor – to verify their bank balances by comparing the credit union's records to their own. (This is like randomly comparing a voter's printed ballot with the vote actually counted.) The auditors had account numbers to work with, not personal names or individual wealth/poverty data. Even we board members didn't have access to individual account data.<o:p></o:p></span></div></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-family:"Verdana",sans-serif;color:black"> <o:p></o:p></span></div></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-family:"Verdana",sans-serif;color:black">This was a required process. It was local, in our own offices. It was relatively brief every year. And it was thorough and reassuring to everyone. But it wasn't rocket science.<o:p></o:p></span></div></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-family:"Verdana",sans-serif;color:black"> <o:p></o:p></span></div></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-family:"Verdana",sans-serif;color:black">/Larry<o:p></o:p></span></div></div><div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-family:"Verdana",sans-serif;color:black"> <o:p></o:p></span></div></div></div><div style="margin-left:.5in"><div class="MsoNormal" style="font-size:12pt;text-align:center" align="center"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black"><hr align="center" size="3" width="100%"></span></div></div><div class="MsoNormal" style="font-size:12pt;margin-left:.5in"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black">_______________________________________________<br>CAVO mailing list<br></span><a target="_blank" href="mailto:CAVO@opensource.org"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:blue">CAVO@opensource.org</span></a><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black"><br></span><a target="_blank" href="https://lists.opensource.org/cgi-bin/mailman/listinfo/cavo"><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:blue">https://lists.opensource.org/cgi-bin/mailman/listinfo/cavo</span></a><span style="font-size:10.0pt;font-family:"Verdana",sans-serif;color:black"><o:p></o:p></span></div></div></blockquote></div><hr>_______________________________________________<br>
CAVO mailing list<br>
<a href="mailto:CAVO@opensource.org">CAVO@opensource.org</a><br>
<a href="https://lists.opensource.org/cgi-bin/mailman/listinfo/cavo">https://lists.opensource.org/cgi-bin/mailman/listinfo/cavo</a><br>
</div>
</blockquote></span></body></html>