DARPA Is Building a $10M, Open-Source, Secure Voting System
motherboard.vice.com
DARPA Is Building a $10M, Open-Source, Secure Voting System
1–10 of 303 posts
Re: DARPA Is Building a $10M, Open-Source, Secure Voting System
#2Open source, open hardware? What a joke. Neither are resistant to chip/compiler level attacks such as https://www.schneier.com/blog/archives/2018/03/adding_backdo... and https://www.win.tue.nl/~aeb/linux/hh/thompson/trust.html
That's all assuming the voting machine is actually running the software/hardware they tell you - how would a voter check?
The article briefly mentions "That receipt does not permit you to prove anything about how you voted, but does permit you to prove that the system accurately captured your intent and your vote is in the final tally,". But if that receipt doesn't let you prove anything about how you voted, how can you tell from it that your vote was captured 'correctly'? The machine can print anything on the receipt!
Then there is the question - what problem is e-voting trying to solve? Hand-counting scales perfectly and is extremely difficult to covertly tamper with. So the only 'problem' e-voting solves is that of being unable to covertly and fully subvert elections.
Re: DARPA Is Building a $10M, Open-Source, Secure Voting System
#3>The systems Galois designs won’t be available for sale. But the prototypes it creates will be available for existing voting machine vendors or others to freely adopt and customize without costly licensing fees or the millions of dollars it would take to research and develop a secure system from scratch.
I guess the devil is always in the details. "freely adopt and customize" to me says that the code will not be verifiable or open source anymore? Or that the implementation could be flawed. Open sourcing the code, and then letting commercial entities change it, cut corners, make money, etc seems to be a good way to ensure that all the hard work that went into designing the system is rapidly compromised.
Re: DARPA Is Building a $10M, Open-Source, Secure Voting System
#4My ideal voting system would allow me to have a real time feed of votes as they come in, so that at the end of the night I can check my records vs the "official" records. Names can be detached, all I need is a Ballot id. BallotId can be something as simple as the hash of RegisteredVoterId + password + Salt + ElectionId.
As long as the voter remembers their password, they can look up their record, and the record can be a fully public record with anominity.
Re: DARPA Is Building a $10M, Open-Source, Secure Voting System
#5Open source, open hardware? What a joke. Neither are resistant to chip/compiler level attacks such as https://www.schneier.com/blog/archives/2018/03/adding_backdo... and https://www.win.tue.nl/~aeb/linux/hh/thompson/trust.html That's all assuming the voting machine is actually running the software/hardware they tell you - how would a voter check? The article briefly mentions "That receipt does not permit you to prove…
[deleted]
Re: DARPA Is Building a $10M, Open-Source, Secure Voting System
#6I'm a fan of Galois, so I'll keep tabs on this project.
Re: DARPA Is Building a $10M, Open-Source, Secure Voting System
#7My ideal voting system would allow me to have a real time feed of votes as they come in, so that at the end of the night I can check my records vs the "official" records. Names can be detached, all I need is a Ballot id. BallotId can be something as simple as the hash of RegisteredVoterId + password + Salt + ElectionId. As long as the voter remembers their password, they can look up their record, and the record can b…
A feature/detriment of per vote verification is that it opens up the entire system to vote buying - are you describing verifying that your vote happened, or who it was cast for?
Re: DARPA Is Building a $10M, Open-Source, Secure Voting System
#8> Kiniy said Galois will design two basic voting machine types. The first will be a ballot-marking device that uses a touch-screen for voters to make their selections. That system won’t tabulate votes. Instead it will print out a paper ballot marked with the voter’s choices, so voters can review them before depositing them into an optical-scan machine that tabulates the votes. Galois will bring this system to Def Con this year.
This sounds great: paper trail, no chance of "hanging chads" or bad handwriting, verifiable by the voter at the moment before scanning and hand-countable if necessary.
Re: DARPA Is Building a $10M, Open-Source, Secure Voting System
#9My ideal voting system would allow me to have a real time feed of votes as they come in, so that at the end of the night I can check my records vs the "official" records. Names can be detached, all I need is a Ballot id. BallotId can be something as simple as the hash of RegisteredVoterId + password + Salt + ElectionId. As long as the voter remembers their password, they can look up their record, and the record can b…
Your ideal voting system is vulnerable to coercion ("log in and show me who you voted for or else") and phishing.
Voting systems should provide confidence to voters that votes are counted correctly, but not permit anyone, including the voters themselves, to learn how they voted after the ballot is cast.
Re: DARPA Is Building a $10M, Open-Source, Secure Voting System
#10Software is perfectible, skinware is not. As long as corruptible human beings are in charge, there will be room for fraud.