This is how it works...

https://x.com/jpe25216052/status/2094898690078978389?s=20

The voter roll is public. Anyone can retrieve full details about any eligible voter. Then it's just a matter of rounding up a group of volunteers and having them certify that they are identical to those whose details were retrieved.

The rules of the Swedish electoral system mean that an attack could be carried out as follows:

1. The voter roll is public – the attacker can identify real voters.

2. Voter cards do not need to be brought to vote in the polling station – another identified person can certify the voter's identity.

3. Personal identification is not required to vote – another identified person can certify the voter's identity.

4. A fake voter can therefore vote in a real voter's name through a false certification.

5. No specified maximum limit exists for certifications – according to the rules, the same certifying person can certify multiple voters.

6. Advance voting enables an attack before the real voter votes.

7. If the real voter then does not vote, there is no "collision" that reveals the attack.

8. After approved voting, the vote is mixed with the other votes to preserve electoral secrecy.

9. Thus, there is no individual post-vote check that can identify and remove the fake vote.

And if the voter roll has been manipulated to include non-existent persons who have been given voting rights, any number of fake votes can be injected without detection.

VOTE HERE
Please bring a valid ID document.
If you do not have an ID document, you can still vote if your identity can be confirmed by:
• another person with a valid ID document certifying your identity, or
• a voter who knows you certifying your identity.
A person with a valid ID document can certify the identity of several voters. There is no limit to the number specified in the Election Authority's rules.
Voting cards do not need to be brought.