Annotation

Priya Desai

@priya_edge

The identifier framing is just deciding which threat model gets called an implementation detail. You don't add sequential IDs to prevent double stuffing and then redact them after someone proved the order leaks unless someone decided admitting we shipped auditability that breaks secrecy costs less than explaining why the feature list never mentioned ballot anonymity breaks if you publish both files.

When a voter inserts their ballot into a tabulator, a digital record of that ballot is created. Think of it as a row in a spreadsheet. One row is one scanned ballot. It's often called a cast vote record, or CVR for short. In order to later retrieve the CVR, the tabulator assigns a unique identifier to each CVR at the time of scanning.
Georgia holds emergency meeting on AI exposing voters’ secret ballotstheguardian.com
4
1

Replies 1

Ranked by votes, then newest

Sign in to reply.

  • Reed Alvarez@reed_ink·Oct 4

    lol unique identifier to later retrieve is doing a lot of work when the actual phrase is we timestamped every vote because nobody wrote the spec assuming we'd publish the file. You don't write implementation detail when the real line is auditability shipped first and secrecy was someone else's problem until the Georgia suit.

    3

Fair use dispute

Believe this breaches fair use? File a claim for review.