Thank you. I value your opinion.
I proposed a limit of 7 days prior to the election for early voting if a state allows it at all. I didn't put any restrictions on who is eligible for an absentee ballot other than they must show proof of who they are when they apply for one and return one. The more stringent policy was to register to vote. We need much stronger regulation on that than what is the current situation.
Ah, here we go (had to find the thread again).
Sorry I didn't have time to amplify earlier, but here goes -
I am a "credentialed security expert", I look at this issue the same way as if I'd been called into a corporation to deal with a hack or a data breach.
First thing I do is assess, and determine what kind of security you already have in place. (there are formal levels and protocols for compliance and etc)
Then I figure out how the hack happened, what vulnerability exactly was being exploited, and how it was exploited and for what reason. Detective work.
Then I start earning my money, by creating a plan that will actually work, to meet both the stated need and the actual need as I understand it
And finally, with the approval of the board we implement the new plan, and then we TEST it, exhaustively, with red teams and a dozen other ways.
So for instance - one of the key and most successful concepts in corporate security is "two factor authentication". If you're a bank or a hospital or a government agency, maybe you need to identify someone and be "absolutely certain" they are who they say they are. The banks, use the debit card - and the two factors there are that you a) have to be in physical possession of the card, and b) have to know the PIN.
That, is not perfect. It's "better than nothing", but it's not perfect. For example a criminal could steal someone's wallet and then force them to reveal the PIN. To get any better security-wise, the unnameable agencies use things like biometrics - fingerprints, retina scans, things that "only you" can possess. And, that's not perfect either (the process can be compromised during enrollment), but it's a LOT better. Maybe we move from 90% confidence to 99% confidence, with biometrics.
In the case of voting, the system has to be enabling and permissive, just like bank cards, but it also has to be secure - "at least as" secure as a bank card. Right?
Our primary interests are:
1. Ensuring that we know who's voting
2. Ensuring they're eligible to vote
3. Making sure they don't vote twice
It SOUNDS pretty simple, right?
So, the idea of two factor authentication CAN be implemented in a reliable way with mail in ballots. Switzerland has been doing it for years. You get a PIN when you register, and then they send you a postcard when it's time to vote, with a magic code on it. When you vote, you have to enter both the PIN and the code, in addition to answering some personal questions and some you selected at the time of enrollment. This system has worked well for 30 years. (Switzerland has other problems, they got hacked on the back end at one point, but the back end of all this is a whole separate discussion - that would be the counting piece and the Dominion piece and how we handle all that).
We definitely don't want to allow every Tom Dick and Harry to drop absentee ballots into a box, that's just stupid.
Anyway, if you'd like to continue the discussion at this level we could talk about the counting part for a while too.
