<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:black;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:black;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
p.msochpdefault, li.msochpdefault, div.msochpdefault
{mso-style-name:msochpdefault;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
span.emailstyle17
{mso-style-name:emailstyle17;}
span.EmailStyle20
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:black;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
span.EmailStyle21
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
span.EmailStyle22
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:black;
font-weight:normal;
font-style:normal;
text-decoration:none none;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=black vlink=black><div class=WordSection1><p class=MsoNormal style='margin-left:.5in'><span style='font-family:"Calibri",sans-serif'>David Webber wrote:<o:p></o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:"Calibri",sans-serif'>> </span><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'>With a digital system you want built in verification and auditing.<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri",sans-serif'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri",sans-serif'>Sure. Our credit union had that too! Nothing wrong with letting the system check itself also.<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri",sans-serif'><o:p> </o:p></span></p><p class=MsoNormal style='margin-left:.5in'><span style='font-family:"Calibri",sans-serif'>> </span><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'>We just need the State to produce its digital elector registration database - ready to be imported into the voting system. That we can provide software to assist with.<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri",sans-serif'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri",sans-serif'>No way! There is no reason for a state to publish a list of voters. As long as I get my unique ballot from them just because I'm registered, and I can vote it anonymously and electronically, and the process is verified, you don't need to publish my name at all. I also pay my taxes without the IRS publishing anything! My emails with the IRS are private.<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri",sans-serif'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri",sans-serif'>Since this CAVO list was created, I've been bothered that we're trying to create some <u>grand</u>, secure, open source voting system that will magically replace the current system. NO. That's not my goal. I want a <u>simple</u>, secure, open source voting system, no magic required, to allow more people to vote without paper ballots stuffed into boxes and scanned by proprietary machines.<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri",sans-serif'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri",sans-serif'>I can register the copyright for that elections software with the Library of Congress with a simple online transaction. But you won't let me run it without three levels of independent record in every county elections office. That's over-kill.<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri",sans-serif'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri",sans-serif'>/Larry<o:p></o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri",sans-serif'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-family:"Calibri",sans-serif'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal style='margin-left:.5in'><b><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'>From:</span></b><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'> David RR Webber (XML) [mailto:david@drrw.info] <br><b>Sent:</b> Sunday, June 5, 2016 4:06 PM<br><b>To:</b> CAVO <cavo@opensource.org><br><b>Subject:</b> Re: [CAVO] Auditing electronic voting<o:p></o:p></span></p></div></div><p class=MsoNormal style='margin-left:.5in'><o:p> </o:p></p><div><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'>Larry,<o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'>All those same statistical tools are in play for election results "auditing" today that States perform and hire independent experts to perform.<o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'>I don't like any of them. It's too much fishing and hoping.<o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'>With a digital system you want built in verification and auditing.<o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'>That is why I mentioned 3 independent systems of record.<o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'>Now imagine (sigh I hate all these financial system comparisons - but what the) that your Credit Union accounts had 3 systems of record - one internally, a second held by the State, and a third held by an independent 3rd party (non-profit service provider). Transactions are triple blind integrated into each system and mirrored.<o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'>Now if someone is doing something shady - they have to corrupt all three systems - not just one.<o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'>You want all 3 systems to agree on balance totals. You run a batch query against all accounts once a month (or more). If not - you audit to find out why. Notice this is much more effective than annual guessing - by which time the digital horse could have left 100 barns not just 1!<o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'>BTW - money laundering is not detected by your annual audit either - in this case money is deposited in one State - then withdrawn in another routinely. This would be akin to ballot stuffing.<o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'>I'm glad you were reassured by the annual hand-holding exercise at your Credit Union - frankly I view that as pure window dressing and legal liability avoidance. Oh we lost your money? Sorry, but we have all these safeguards (cough worthless) in place but it looks and sounds great. Welcome to America.<o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'>Cheers, David<o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'><o:p> </o:p></span></p></div><blockquote style='border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 6.0pt;margin-left:6.0pt;margin-top:5.0pt;margin-bottom:5.0pt' id=replyBlockquote><div id=wmQuoteWrapper><p class=MsoNormal style='mso-margin-top-alt:0in;margin-right:0in;margin-bottom:12.0pt;margin-left:.5in'><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'>-------- Original Message --------<br>Subject: [CAVO] Auditing electronic voting<br>From: "Lawrence Rosen" <</span><a href="mailto:lrosen@rosenlaw.com"><span style='font-size:10.0pt;font-family:"Verdana",sans-serif'>lrosen@rosenlaw.com</span></a><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'>><br>Date: Sun, June 05, 2016 3:05 pm<br>To: "'CAVO'" <</span><a href="mailto:cavo@opensource.org"><span style='font-size:10.0pt;font-family:"Verdana",sans-serif'>cavo@opensource.org</span></a><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'>><br>Cc: Lawrence Rosen <</span><a href="mailto:lrosen@rosenlaw.com"><span style='font-size:10.0pt;font-family:"Verdana",sans-serif'>lrosen@rosenlaw.com</span></a><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'>><o:p></o:p></span></p><div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-family:"Verdana",sans-serif;color:black'>Sometime after an election, before the votes are certified or perhaps only after a candidate has raised an express challenge to the posted results, electronic voting systems will need to be audited by an independent agency.<o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-family:"Verdana",sans-serif;color:black'> <o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-family:"Verdana",sans-serif;color:black'>I was once chair of a federal credit union whose tens of thousands of accounts needed to be audited every year. That required sampling and confirmation procedures by a federal auditor. That required intelligent comparisons between cash deposited and cash distributed. And random credit union members were asked specifically – by the auditor – to verify their bank balances by comparing the credit union's records to their own. (This is like randomly comparing a voter's printed ballot with the vote actually counted.) The auditors had account numbers to work with, not personal names or individual wealth/poverty data. Even we board members didn't have access to individual account data.<o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-family:"Verdana",sans-serif;color:black'> <o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-family:"Verdana",sans-serif;color:black'>This was a required process. It was local, in our own offices. It was relatively brief every year. And it was thorough and reassuring to everyone. But it wasn't rocket science.<o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-family:"Verdana",sans-serif;color:black'> <o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-family:"Verdana",sans-serif;color:black'>/Larry<o:p></o:p></span></p></div><div><p class=MsoNormal style='margin-left:.5in'><span style='font-family:"Verdana",sans-serif;color:black'> <o:p></o:p></span></p></div></div><div style='margin-left:.5in'><div class=MsoNormal align=center style='text-align:center'><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'><hr size=3 width="100%" align=center></span></div></div><p class=MsoNormal style='margin-left:.5in'><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'>_______________________________________________<br>CAVO mailing list<br></span><a href="mailto:CAVO@opensource.org"><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:blue'>CAVO@opensource.org</span></a><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'><br></span><a href="https://lists.opensource.org/cgi-bin/mailman/listinfo/cavo"><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:blue'>https://lists.opensource.org/cgi-bin/mailman/listinfo/cavo</span></a><span style='font-size:10.0pt;font-family:"Verdana",sans-serif;color:black'><o:p></o:p></span></p></div></blockquote></div></body></html>