News for hackers. Stuff that matters.
Re:To Protect Voting, Use Open-Source Software by BurningFrog on Wednesday August 09, 2017 @01:38PM (#14971643)
With electronic banking I can verify that my money are where they should be.

With electronic voting, I can't be sure my vote got counted, and even less sure others weren't tampered with.

Re:To Protect Voting, Use Open-Source Software by EugeneAZ on Wednesday August 09, 2017 @01:47PM (#14971756)
That's right.

And now do both things _publicly_! For money (or others things you own) you will need a Torrens-like title system with a replicated database among your fellow-citizens. For voting - it will be a database replicated on DVDs (or something that can be read, say, by a microscope:)

You may be astonished how secure that will be.

Re:To Protect Voting, Use Open-Source Software by _joel on Wednesday August 09, 2017 @02:07PM (#14971960)
How do you verify the entities that are registered on the chain are who they are supposed to be? It may show a commit log of Citizen X voted in a certain way, but how do you verify it was Citizen X that actually voted or that they even exist?
Re:To Protect Voting, Use Open-Source Software by EugeneAZ on Wednesday August 09, 2017 @02:18PM (#14972092)
The same way as you supposed (not:) to check it under a paper-ballots voting system. By the Citizens Database - when every citizen's biometric data (photos, eye or ear scans, body measurements, etc.) and contact data is published on holographic discs, magnetic tapes (IBM has one with 330 TB storage). It will allow anyone to verify there are no fake identities there. One may store just a hash table for all entries, if he can't afford those storage mediums.

Have they told you about it?

Re:To Protect Voting, Use Open-Source Software by _joel on Wednesday August 09, 2017 @02:38PM (#14972284)
I'm sorry but I'm having difficulty understanding what you're trying to say. You still need a body to oversee adding entries, otherwise anyone could add anything? How do you verify exactly, you've just got a bunch of data, which may or may not be legitimate. It still boils down to the best way to protect voting, isn't by the more exotic systems whereby fudging can be done at scale. It's by making the exploits not scale and keeping anonymity by having another process for voter registration.

I'm not sure what the choice of media has to do with anything.

Who has told me what about what now?

Re:To Protect Voting, Use Open-Source Software by EGreg on Wednesday August 09, 2017 @02:54PM (#14972427)
No one requires these biometrics to make bank transactions. The bank can give you a simple security device, but with smartphones even that is optional now.

Biometrics, seriously?

Biometrics are only a one-time proof when eg you are issued a token. They can be replayed later and can't be used anywhere except where there's a physical security guard preventing tampering. And even then you trust the security guard.

Re:To Protect Voting, Use Open-Source Software by EGreg on Wednesday August 09, 2017 @02:53PM (#14972416)
The same way you verify that the person using the banking app is the one they are supposed to be. Or any other service.

Obviously you use your device, and you can lock it with a password. You can use two factor authentication.

It's straightforward, really. You sound like identity has never been solved electronically.

If anything, holding a physical paper id document is far less secure than a personal device with your private keys in the Secure Enclave.

Re:To Protect Voting, Use Open-Source Software by _joel on Thursday August 10, 2017 @10:06AM (#14979784)
It's not been solved though, at least here in the UK where people are against mandatory ID cards.
Re:To Protect Voting, Use Open-Source Software by EGreg on Thursday August 10, 2017 @10:14AM (#14979867)
That's a separate issue. Why would you want to allow voting without any ID?
Re:To Protect Voting, Use Open-Source Software by _joel on Friday August 11, 2017 @10:33AM (#14990008)
It's definitely not a separate issue, it's fundementally linked. Voter registration is separate and not tied to any electronic ID, so you saying it's a solved problem isn't true.
Re:To Protect Voting, Use Open-Source Software by EGreg on Wednesday August 09, 2017 @02:51PM (#14972404)
Sure you can. If you signed your vote and all votes got included in a markle tree then you can for sure verify that your vote is counted.

Imagine bitcoin but with votes instead of transactions. Boom.

Re:To Protect Voting, Use Open-Source Software by BurningFrog on Wednesday August 09, 2017 @04:16PM (#14973167)
I don't know the technology, but I assume that system could be built.

The bad part about that is that if I can validate my vote after the fact, someone else can also demand to see what I voted for, and that opens the door for vote buying, intimidation etc.

Re:To Protect Voting, Use Open-Source Software by EGreg on Wednesday August 09, 2017 @04:30PM (#14973289)
No, not at all. You can vote anonymously and verify your vote but no one else can map that back to your identity.

As for rubber hose crypanalysis, that is possible now.

Buying votes is already done.

Re:To Protect Voting, Use Open-Source Software by BurningFrog on Wednesday August 09, 2017 @07:50PM (#14974894)
You can buy the promise of a vote now, but it can't be verified on the individual level. On the precinct level you can, and that happens.