Vulnerable to chosen hosting service - Githubissues

siv-org / siv

Secure Internet Voting protocol

https://siv.org

Other

12 stars 9 forks source link

Vulnerable to chosen hosting service #220

Open dglittle opened 2 months ago

dglittle commented 2 months ago

Also, what service is actually intended to host the SIV server? If it’s a third party (e.g. aws), it has control over the election as well. [...] The goal is not to cast aspersions on the vendor, but to point out that the system is fundamentally trusting them in a way that might not be safe in the case of nation-state level adversaries.

Originally posted by @mspecter in https://github.com/siv-org/siv/issues/195

arianabuilds commented 2 months ago

Entry Summary for HACK SIV @ DEF CON 2024

Thanks again for participating! This submission earned $158.73 from SIV and $83.60 from the Public Vote, for a total of $242.33.

Here's what we noted in our evaluation:

What's interesting about this submission

Yes.
Good amount more thought needed here to really feel strong on this issue.

What takes away from it

Officially, the design is supposed to protect you against this, by being able to verify to see whenever the server is cheating.

Issue to track getting paid: https://github.com/siv-org/hack.siv.org/issues/11