Re:Hackers at convention to ferret out election system bugs
by jessaustin on Friday August 10, 2018 @02:13PM
(#17735589)
Linked arXiv seems pretty straightforward?
Re:Hackers at convention to ferret out election system bugs
by benchaney on Friday August 10, 2018 @03:32PM
(#17736142)
It is straightforward yes, but it doesn't allay any of my concerns. I doesn't describe the algorithms used, and it doesn't have a threat model or anything resembling security analysis. It is more about gauging the reactions and social implications of the work, than a hard technical paper.
This is a very important part of the process, but it doesn't address the issues I raised.
Re:Hackers at convention to ferret out election system bugs
by jessaustin on Friday August 10, 2018 @03:47PM
(#17736236)
Yeah I agree they should release their source, but it's silly to hold that against the comment that didn't impress you.
Re:Hackers at convention to ferret out election system bugs
by benchaney on Friday August 10, 2018 @03:54PM
(#17736276)
> but it's silly to hold that against the comment that didn't impress you.
I don't see why. I am still convinced there are security issues. The comment under discussion made all sorts of grandiose yet completely unsupported claims. If the paper he linked had backed up his assertions, I'd be inclined to give him the benefit of the doubt, but it doesn't. Therefore I don't believe him.
The rest of his comment falls back to a fairly common computer security fallacy: We used it once and nothing terrible happened, so it is probably secure.