4 ms·
I usually like XKCD because it has much more depth than other comics. But I don't really like this one. The threat model for airplanes, elevators and voting ma
by LiKao 2y ago
I usually like XKCD because it has much more depth than other comics. But I don't really like this one.
The threat model for airplanes, elevators and voting machines is completely different. Airplanes and elevators are build and maintained by trusted parties that have at least some interest in security and safety (avoiding bad reputation) and the largest threat is accidental failure. Voting software is build by potentially untrusted parties with malicious attacks as the main threat including potential attacks by those in control and maintaining the machines.
Yes, we have very good solutions for the first problem. But to my knowledge we absolutely lack solutions for the second problem. There are some good ideas, but they all make a trusted party assumption somewhere, and we just haven't figured out how to justify this assumption.