4 ms·
If there is going to be online voting, then at a bare minimum there must be a public anonymous API that can be used with the voters key material to validate the
by LinuxBender 5y ago
If there is going to be online voting, then at a bare minimum there must be a public anonymous API that can be used with the voters key material to validate their entire voting choices actual choices not counts so that random people at random times can validate that every specific detail they entered was not tampered with, even if this requires semi-technical people to validate, then fraudsters will know there is a risk of being caught. Even one invalid record must trigger an audit by a truly independent third party. Voter keeps a copy of what they submitted along with checksums and cryptographic signatures. Audit logs must be proven immutable with a chain of custody and attestation throughout the entire system. Even admins of the system must not be able to tamper with it even if their life depended on it. Look to vaulting appliances for some mediocre examples on how to start this process. This will need to be a better implementation than the vaulting appliances however and I can not imagine anyone building this for $1.5M.
Whatever is built must be submitted to the public for penetration testing along with a large bug bounty program. Invite the best penetration testers from all around the world and encourage them to use whatever hacking and social engineering methods they can dream up and provide them with full legal immunity and a low bar to entry.
- manfre 5y agoThe ability to prove you made a specific vote will never happen. This is to prevent vote selling.
- LinuxBender 5y agoUnderstood. I've actually heard that before, though it does not change my personal belief that anything short of what I described is not a voting system. It has always been my opinion that every voting system in human history has by design been a facade. But that is an unpopular opinion. Buying millions of votes is risky at best. Hacking millions of votes is trivial if the system is purpose built to facilitate this. Every few years an engineer testifies before congress they were required to make the system weak and then the public quickly forgets because the higher priority is for the public to have confidence in the system. I do not know how to break the public out of this loop. Maybe this is how it is supposed to work.
- snapcaster 5y agoCan you link some info? Would like to read more about this