How OXPoll’s vote protection works, and where it doesn’t

OXPoll is designed to be straightforward and honest about its vote protection mechanisms. We offer multiple tiers of protection, each with its own strengths and limitations. Our goal is to provide you with the tools you need to gather honest feedback while being clear about where those tools fall short. Below, we break down each tier of vote protection, explain how they work, and where they might fail.

What are the different tiers of vote protection in OXPoll?

OXPoll offers five distinct tiers of vote protection, each designed to address different levels of security needs:

1. None: No protection, anyone can vote as many times as they like.
2. Basic: Protection via cookie and localStorage.
3. Standard: Protection via cookie, IP address, and browser fingerprinting.
4. Strict: One vote per verified email address.
5. Private: Invite-only, single-use links.

How does the ‘None’ tier work and where does it fall short?

The ‘None’ tier is as simple as it sounds: there is no protection against multiple votes. This tier is ideal for casual polls where vote integrity is not a concern, such as quick opinion checks or informal surveys. However, it is important to note that anyone with the poll link can vote multiple times, making the results potentially unreliable for any serious decision-making.

What does the ‘Basic’ tier offer, and what are its limitations?

The ‘Basic’ tier adds a layer of protection by using cookies and localStorage to track voters. This means that once a user votes, their browser will remember their vote and prevent them from voting again from the same device and browser. However, this method is easily circumvented by:

• Clearing cookies and localStorage.
• Using a different browser or device.
• Switching to private/incognito mode.

While this tier is a step up from ‘None’, it is still not suitable for polls where vote integrity is critical.

How does the ‘Standard’ tier improve upon ‘Basic’, and what are its weaknesses?

The ‘Standard’ tier enhances security by combining cookie and localStorage tracking with IP address tracking and browser fingerprinting. This means that in addition to preventing multiple votes from the same device and browser, it also attempts to prevent multiple votes from the same IP address and browser configuration. However, this method has its own set of limitations:

• Shared IP addresses: Users behind the same network, such as in an office or school, may share an IP address, potentially preventing multiple legitimate votes.
• Dynamic IP addresses: Some internet service providers assign dynamic IP addresses, which can change frequently, making it difficult to track votes accurately.
• VPNs and proxies: Users can use VPNs or proxy servers to mask their IP addresses, allowing them to vote multiple times from different IP addresses.
• Browser fingerprinting limitations: While browser fingerprinting can help identify unique users, it is not foolproof and can be spoofed or altered by tech-savvy users.

Despite these limitations, the ‘Standard’ tier provides a reasonable level of protection for most casual to semi-professional polling needs.

What makes the ‘Strict’ tier the most secure option?

The ‘Strict’ tier is the most secure option offered by OXPoll. It requires each voter to have a unique, verified email address. This means that each vote is tied to a specific, identifiable person, making it extremely difficult to cast multiple votes. However, even this tier has its limitations:

• Email verification: While email verification adds a strong layer of security, it is not impossible to create multiple email accounts. Users with the resources and motivation can still find ways to cast multiple votes.
• User experience: Requiring email verification can deter some users from participating in the poll, as it adds an extra step to the voting process.

Despite these challenges, the ‘Strict’ tier is the best option for polls where vote integrity is of utmost importance, such as in professional or academic settings.

How does the ‘Private’ tier work, and when should it be used?

The ‘Private’ tier uses invite-only, single-use links to ensure that only intended participants can vote. Each link is unique and can only be used once, making it impossible for anyone to vote multiple times. This tier is ideal for:

• Surveys where participant anonymity is required.
• Polls with a predefined set of participants.
• Situations where vote integrity is critical and the number of participants is known.

However, this tier requires more effort to set up, as it involves generating and distributing unique links to each participant. It is also not suitable for open polls where anyone can participate.

How does OXPoll handle anomalies and suspicious activity?

OXPoll employs anomaly detection to flag potential issues, such as sudden spikes in voting activity. When such anomalies are detected, they are flagged for review rather than being silently discarded. This allows you to make an informed decision about whether the votes are legitimate or not. Additionally, we flag votes from datacentre and VPN IPs, as these are often associated with fraudulent activity. However, we do not block these votes outright, as there may be legitimate reasons for using such services.

Frequently asked questions

Can I upgrade my poll’s protection tier after it has been created?

Yes, you can upgrade the protection tier of your poll at any time. However, downgrading is not possible once the poll has been created.

How do I know if my poll is receiving fraudulent votes?

OXPoll’s anomaly detection system will flag any suspicious activity, such as unusual voting patterns or spikes in voting activity. You can review these flags and take appropriate action.

Can I prevent users from voting multiple times from the same device?

Yes, the ‘Basic’ and ‘Standard’ tiers use cookies, localStorage, and browser fingerprinting to prevent multiple votes from the same device and browser. However, these methods are not foolproof and can be circumvented.

Conclusion

OXPoll is committed to providing you with the tools you need to gather honest feedback while being transparent about the limitations of our vote protection mechanisms. While no public online poll is fully vote-proof below the ‘Strict’ tier, our tiered approach allows you to choose the level of security that best fits your needs. For those who require the highest level of vote integrity, the ‘Strict’ and ‘Private’ tiers offer robust protection. For more casual polls, the ‘Basic’ and ‘Standard’ tiers provide a reasonable balance between security and convenience. Remember, the key to a successful poll is understanding the strengths and weaknesses of your chosen protection tier and using it appropriately.

Ready to create your own poll? create a poll with OXPoll today and experience the difference of honest, straightforward polling.