Black Box Voting: Why Is It Hard to Verify?

Black box voting refers to electronic voting systems whose internal vote-counting processes are not transparent or easily auditable, making it difficult for voters and election officials to independently verify that the recorded outcome matches the actual votes cast. This article explains the specific technical and procedural reasons why these systems resist verification, and what that means for election integrity.

Formula

The calculator above computes your average pace and speed for a given run or ride. The formulas are:

• Average pace (min/km) = finish time (minutes) ÷ distance (km)
• Average speed (km/h) = distance (km) ÷ (finish time (minutes) ÷ 60)

Where:

• t = finish time in minutes (e.g., 50 minutes)
• d = distance in kilometers (e.g., 10 km)

Pace tells you how many minutes it takes to cover one kilometer; speed tells you how many kilometers you cover in one hour.

Worked Example

Using the default values: finish time = 50 minutes, distance = 10 km.

1. Pace = 50 ÷ 10 = 5.00 min/km
2. Speed = 10 ÷ (50 ÷ 60) = 10 ÷ 0.8333 = 12.00 km/h

The calculator shows an average pace of 5.00 min/km and an average speed of 12.00 km/h.

What Is Black Box Voting?

Black box voting is a term used for electronic voting machines (DREs – Direct Recording Electronic systems) where the software that records and counts votes is proprietary, meaning the source code is not public. The machine behaves like a “black box�: you can see what goes in (your vote) and what comes out (the totals), but you cannot inspect the internal logic that connects the two. This lack of transparency is the core reason verification is hard.

Why Is It Hard to Verify?

Several factors combine to make verification difficult:

• Proprietary software: The code that runs the machine is owned by the vendor and not released for independent review. Without source code, auditors cannot check for bugs or malicious code.
• No paper trail: Many DREs record votes only electronically. There is no physical ballot to recount, so if the software is wrong, there is no independent record to compare.
• Complexity: Modern voting machines run full operating systems with networking, touchscreens, and peripherals. More complexity means more places for errors or tampering.
• Lack of voter verification: On most DREs, the voter sees a summary screen before confirming, but that screen is generated by the same software that counts the vote. If the software is compromised, the confirmation screen may not reflect what is actually stored.
• Limited audits: Even when audits are done, they often rely on the same electronic records that are being audited, providing no independent verification.

Background: How Voting Machines Evolved

Paper ballots and lever machines were the norm for most of the 20th century. In the 1990s and 2000s, many jurisdictions switched to DREs to reduce errors and speed up counting. The Help America Vote Act of 2002 provided funding for new machines, leading to widespread adoption of DREs. However, studies and real-world incidents revealed security flaws, prompting a movement toward voter-verified paper trails and mandatory audits.

Common Problems and Real-World Examples

Several well-documented issues illustrate the verification problem:

• Software bugs: In a 2003 case, a DRE in Fairfax County, Virginia, recorded votes for the wrong candidate due to a programming error. The error was only caught because the race was close and a recount was requested – but the recount used the same flawed machines.
• Malware risks: Security researchers have demonstrated that DREs can be infected with viruses that alter vote counts while displaying correct confirmation screens. Because the software is closed, such malware could go undetected.
• Lost votes: In some elections, DREs have lost votes due to memory card failures or power surges, with no way to recover the lost data.

How to Verify an Election

Verification is possible if the system is designed with auditability in mind. Key methods include:

• Voter-verified paper audit trail (VVPAT): The machine prints a paper record that the voter can check before finalizing. The paper is the official ballot for recounts.
• Risk-limiting audits: After the election, a random sample of paper ballots is compared to the electronic results. If the sample matches, the result is confirmed; if not, a full recount is triggered.
• Open-source software: Some systems use publicly available code that can be reviewed by anyone. This does not guarantee security, but it makes independent analysis possible.
• Parallel testing: Before the election, test votes are cast on the machines and compared to expected results.

Alternatives to Black Box Systems

Many jurisdictions have moved away from DREs entirely. Alternatives include:

• Optical scan paper ballots: Voters mark a paper ballot, which is then scanned and counted by a machine. The paper is the official record, and the machine can be audited against it.
• Hand counting: Used in small jurisdictions, this is slow but fully transparent.
• End-to-end verifiable systems: These use encryption to let voters verify that their vote was recorded correctly without revealing how they voted.

Frequently Asked Questions

Can a black box voting machine be hacked?

Yes, security researchers have shown that DREs can be compromised, either by physical access or by malware introduced through memory cards or network connections. The lack of a paper trail makes such attacks difficult to detect.

Why don’t all voting machines print a paper receipt?

Cost is a major factor – retrofitting existing machines or buying new ones is expensive. Some jurisdictions also worry about paper jams or voter confusion. However, many experts now consider a paper trail essential for auditability.

Is a paper trail enough to guarantee a correct election?

No, but it is a necessary foundation. Paper ballots must be securely stored and audited properly. A paper trail without a robust audit process still leaves room for error or fraud.

What is a risk-limiting audit?

It is a statistical method where a random sample of paper ballots is compared to the electronic results. The sample size is chosen so that if the true outcome is wrong, the audit has a high chance of detecting it. If the sample matches, the result is confirmed; if not, more ballots are audited.

Are electronic voting machines still used today?

Yes, but their use has declined in favor of paper-based systems. Many states now require a voter-verified paper trail or use optical scan ballots instead of DREs.

Can voters trust the results of a black box election?

Trust is a matter of confidence in the system. Without independent verification, there is no way to prove the results are correct. That is why many election integrity advocates push for paper ballots and audits.

Related

• iMessage Free? Cost, Data Use & How It Works
• Fixed File Transfer Stops in Windows: Fixes
• GitLab Time Tracking: Estimates, Spent Time & API

in t | Finish time | min | 50 | 0
in d | Distance | km | 10 | 0
out pace | Average pace | min/km | t / d | 2
out speed | Average speed | km/h | d / (t / 60) | 2