3 ms·
Might be a reason to long-term require all software used be open source and for that matter make it easy for a user to confirm that the system in use real-time
by nxzero 11y ago
Might be a reason to long-term require all software used be open source and for that matter make it easy for a user to confirm that the system in use real-time is the system that's open-sourced too.
- tajen 11y agoHow do you allow a user to confirm this in real time? Hash displayed on th screen?
- nxzero 11y agoYes, that's correct, being able to download the code, hash it, and then compare it to the hash displayed real-time would be a first step towards enabling this.
- stepanhruda 11y agothe software can easily be modified to display the hash you are expecting
- nxzero 11y agoTo start, something is better than nothing. Long-term remote inbound two part authitacation combine with like measures for hardware via meta-programming would make bypassing this very, very hard for the average hacker.
- Spivak 11y agoUsers wouldn't confirm this in in real time just like users have no way of verifying in real time that their paper ballot was actually counted. A better outcome for this type of system would be a pre-election and post-election verification of each machine (which isn't unreasonable since the number of machines is far less than the number of ballots) in which interested agents from each party/group could be present during the verification process (and use their own machine if they desire) to ensure that all the digital signatures match and there's no foul play.
- HappyTypist 11y agoperhaps use a Merkle hash to verify your vote was counted?