search

yfgeek / BlockVotes

An e-voting system based on blockchain using ring signature
GNU General Public License v3.0
276 stars 113 forks source link

Bad single point of failure #25

Open NickP005 opened 2 years ago

NickP005 commented 2 years ago

There is no way for the standard user to know if the code they are running has been compromised or not. I suggest making a downloadable public client. The web code could be easily modifiable by the manager of the web server as hoc to all or to specific users (through ip or cookies) to reveal or obtain the private keys/vote.

Plus the system is not an open blockchain, but a closed one saved in MySQL I guess and there is no way of mining it/running it decentralised. This is why I have decided to make a similar project but with various improvements (actually got the idea and started working on it way a long time ago, just found this and was going to stop working on my project but then realised this has big point of failure and there is still a big room for improvements).

chess254 commented 2 years ago

This is a school project, it is a proof of concept. chill On Sunday, November 21, 2021, 02:30:21 PM GMT+3, NickP05 @.***> wrote:

There is no way for the standard user to know if the code they are running has been compromised or not. I suggest making a downloadable public client. The web code could be easily modifiable by the manager of the web server as hoc to all or to specific users (through ip or cookies) to reveal or obtain the private keys/vote.

Plus the system is not an open blockchain, but a closed one saved in MySQL I guess and there is no way of mining it/running it decentralised. This is why I have decided to make a similar project but with various improvements (actually got the idea and started working on it way a long time ago, just found this and was going to stop working on my project but then realised this has big point of failure and there is still a big room for improvements).

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or unsubscribe.

NickP005 commented 2 years ago

Also mine is a school project (in reality a friend project) by me and my friend. But I don’t like you claim the “blockchain” aspect. Also I would like that the readme explicits this is not a trustable system of voting. Bro voting is a serious thing.

I wrote this as issue so you can improve, it’s not professional to just ignore the problem once you know it. If this “proof of concept” of a voting system has problems (as the ones described before, but there are more), there is proof of nothing.

chess254 commented 2 years ago

fork it and Improve, or build a better one, then share. its not my project