siv-org / siv

Secure Internet Voting protocol
https://siv.org
Other
12 stars 6 forks source link

HACK SIV — Wed Aug 7th — End Of Day Report #180

Open arianabuilds opened 1 month ago

arianabuilds commented 1 month ago

Here's today's update: 1) Another few thousand views on twitter, now past 17k. More email signups for mock elections, and some more Signal group joiners.

2) Only one issue submission today. Sadly not very high quality though (in our opinion). The report suggested a new vote-buying vector, if we implemented a particular proposed solution (…to another known hypothetical attack, which we find far more interesting). There are a number of problems with the submitted vote-buying issue though. We wrote up a detailed response. You can see the submission & response right after it, both here: https://github.com/siv-org/siv/issues/115#issuecomment-2273475134

3) Since opening yesterday, we’ve had 3 submissions, 2 from @cjackett & 1 from @phish. Sadly phish’s is outside our eligibility criteria for HACK SIV prizes (see detailed content rules: https://hack.siv.org/rules).

4) Tomorrow morning, in-person DEF CON begins. Very excited. Find us at the Voting Village. We’ll also launch a mock election. Suggest questions if you have ideas!

5) Again, even before Live Mock Elections begin, you are invited to: a. Search for vulnerabilities in the SIV Protocol, the foundation of the Secure Internet Voting system - https://docs.siv.org/technical-specifications. After all, if the blueprint of the system is not sound, the implementation can’t possibly help. b. For a lighter start to the protocol, here’s a simpler illustrated overview: https://siv.org/protocol c. And of course, you can run the SIV code on your own machine for local testing: https://github.com/siv-org/siv

So, can you find novel ways to…? 1) Vote multiple times 2) Change someone else's vote, without detection 3) Destroy a vote already confirmed submitted 4) Learn how someone voted, without their help 5) Learn other personal info about voters

Bonus: Convince us of major score updates to docs.siv.org/compare

Happy Hacking! :)

arianabuilds commented 1 month ago

HACK SIV — Day 1 — Launch Day — End of Day Report https://github.com/siv-org/siv/issues/179