The UUID thing is an attractive thought but it also would act as an incentive to sell ones vote. Secret ballots protect from coercion and vote selling, as you can't verify someone voted how you paid them to. With validation you could see people literally buying votes. Just something to think about. I totally agree it would be nice to have a post vote validation. Maybe you get a UUID but have to submit that in person with an ID check to view the results? That would seem to meet the intended goal and minimize the hazards but with a cost to convenience.
> With validation you could see people literally buying votes.
I think this is an area where you don't need a technological solution, just a legal one.
Vote selling/buying just needs to be as illegal as blackmail, fraud, etc. Fines and jail terms. (As I assume it already is?)
The thing is, it's going to be incredibly easy to catch, because if you're attempting to pay a group of people (employees, villagers, whatever) to sway their vote, there's always going to be at least one person who doesn't want to and inform the law. (Or else you don't need to be paying in the first place.) Hell, set up punitive damages so a whisteblower is guaranteed 50x whatever price they were being offered for their vote.
Personally, I don't understand why buying votes in this way is bad. I should be able to sell my vote if I want. Rich people can skew elections either way, at least this way ordinary people might get a cut of the corruption.
With fancy cryptography (e.g. zero-knowledge proofs), you can allow the public to verify that the tally is correct while keeping votes secret. It's called end-to-end verifiable voting, and this is a good introduction: https://www.microsoft.com/en-us/research/publication/end-end...
The idea is that people post their votes publicly, but encrypted, and there's a procedure (based on zero-knowledge proofs) that allows to check that an encrypted vote is correctly accounted for in the tally without decrypting said vote. If sufficiently many voters post their encrypted votes (and if it's not too predictable who will do so), a wrong tally will be detected with high probability.
It's not much of an incentive if you just publish all the UUIDs on a public website and who they voted for. If my employer says 'let me see your UUID and if you voted for Bob Jones you get an extra day off!' I can just find a UUID that voted for Bob Jones and give my employer that and they won't be any the wiser, regardless of who I voted for in reality. Recording results is no big deal as long as they aren't provably my results.
I don't know how to make it work with in person ID verification. They could just give you a faked UUID. I'd put it on the ballots when they're generated, so it was just as untraceable as the ballot itself.
My assumptions are that 1) individual votes have almost no value on their own, so coercion or vote selling should be limited by low appeal, and 2) we still have a justice system, if someone forces you to vote a certain way, report it. Buying any significant number of votes would be exceedingly difficult to keep secret. Especially given how little compensation could be offered for them.
An anecdote I share, recognizing the risk of downvoting: I've been an anarchist for years, and so do not normally cast votes.
I have offered to sell my vote to anyone in my area (a swing area of New Hampshire) who wants another vote for their side in any election at any level. I've never even set a price.
Not one person has ever offered a cent for it.
I mention this just by way of making the point that small-scale vote buying, which would be the hardest kind to detect, isn't happening.
Theoretically at least, detecting and preventing vote-buying at a scale significant enough to change the outcome of an election should be much easier.
Would-be buyers have to get word out to enough people for it to matter, but if most people assume this is unethical (or even just undesirable), it shouldn't be hard to get nearly everyone else to be willing to rat out the buyers.
I don't think the problem is nearly as hard to solve as you're thinking it is.
The odds of your vote swinging an election at any level are lower than the risk of being struck by lightning twice. Nobody wants to buy one vote. They need to buy hundreds or thousands before it will matter, and that makes them easier to catch.
Maybe I'm missing your point entirely, but that's one of the useful aspects of voter secrecy. Given that your vote is secret, your self-reported vote is worth approximately nothing. You could easily sell your vote to two or more parties, with none of them the wiser.
So your result is the expected one. But the outcome would not be the same with most types of harebrained "let's just vote with our phones" that people come up with regularly.
This is also why it is in most countries illegal to take photos or film around the voter booth.
Ah. Right. Relevant context: In 2016, a federal appeals court ruled that a 2014 New Hampshire law banning photo booth selfies and punishing them with fines up to $1,000 was unconstitutional.[0]
A photo of me with my completed ballot, in the voting booth, has always been part of the offer, since that was the same year I finally quit bothering to cast my own ballot.
You know, you're right about the ID verification - I didn't really think that through. You don't want your ID encoded with the ballot in a way that they can be associated.
Currently we only have sale of majority votes contingent on wins: If you vote for me, I will give you X. Enabling vote sales will enable sale of minority votes and not contingent on wins. This is better for people with minority opinions and allows them to correctly line up their desires with monetary reward.
If you hate abortion, but like $100 more than you hate abortion, then why shouldn't we just give you $100?
Of course, there is the knock-on effect of wanting inequality so you can control people and keep the vote price low, that's true. But that's just a question of the vote economics. I'm sure we can work something out.
Well, that is always the case given that no candidate who raises 100 M+ loses to a candidate who raises less than 100 M, irrespective of per-donation size. Once we have a market, everyone can participate in this rather than just the big donors. It's a democratization of the voting market!
Vote by mail also easily allows selling votes. You can sell your ballot and signed envelope to somebody. The best way to avoid this is only having in person voting.
