On Thu, 3 Mar 2005, Student Council wrote:
> First, let me express my personal apologies for the delay to the start
> of the Student Council and Young Trustee elections. The election is
> delayed due to concerns raised by students about the integrity of the
> system and is not a fault of the Board of Elections.
Last year I was involved in a movement to make public memos from the Diebold corporation that showed their voting machines were frightfully insecure. The focus was not that the ele *would* be thrown by malicious actors, but rather that the American public should not tolerate the possibility. Voting integrity is important to me.
> Over the past few months, the Board of Elections has worked to resolve
> the issues of the past. To resolve some of these issues, a more formal,
> independent and secure on-line voting system is being used.
> Additionally, it was determined by the University to disallow Social
> Security numbers, J-Card or JHED login, in any form, as personal
> identifiers to address questions over the use of vital personal
> information.
This is the problem. Plain and simple, JHED integration should be what is used here. This is a secure username and password that everyone already knows. At schools like Yale, integration with the “CAS” centralized login system is encouraged. This makes school services *more* secure. You can read about it at http://tp.its.yale.edu/tiki/tiki-index.php?page=UsingCasAtYale . Dr. Avi Rubin at the Information Security Institute asked his students to write electronic voting software last semester, and surely that could have been used here.
Since last we talked, I've enrolled in the masters degree program at the JHU Information Security Institute. Making users remember or generate multiple passwords for systems does not make them more secure. As we'veseen, “generating” passwords based on information available in the student directory is not a secure solution. On a side note, I've been extremely disappointed with JHU's IT. For how
busy IT@JH is, there are a great number of resources students at other universities have that we lack. Meanwhile, the resources that students used to use have been decaying from lack of attention. The reason for this is that since JHU's Homewood IT merged with the medical school's, as far as I can tell undergrads have not been a priority. I've been following IT for students here and comparing it with my friends' experiences at other colleges. Frankly, IT@JH is hurting the undergraduate learning environment here.
> Thank you for your patience and cooperation. I hope you will visit the
> election site http://votehopkins.org and cast your vote.
I fully intend to. Thank you for the attention you have paid to students' concerns. I'm glad we have someone like you who both trusts students and values the integrity of the vote.
– Asheesh.