News for hackers. Stuff that matters.
Re:The Ken Thompson Hack by EthanHeilman on Sunday February 08, 2015 @12:06PM (#9017732)
In my experience Trusting Trust is required reading in many CS programs.
Re:The Ken Thompson Hack by Roboprog on Sunday February 08, 2015 @02:04PM (#9018133)
Well, it wasn't required reading back when I was in CS in the 80s, but it was a discussion that we had in class.

I nervously laugh whenever somebody talks about "open source electronic voting"

Re:The Ken Thompson Hack by magicalist on Sunday February 08, 2015 @02:12PM (#9018152)
> I nervously laugh whenever somebody talks about "open source electronic voting"

Uh, why? I don't think anyone has seriously asserted that open source voting systems would be foolproof. On the other hand, we have actual cases where open source voting systems would have at least made serious flaws public before they were used for voting.

Besides, when you're talking "Trusting Trust", you have to worry just as much about the hardware you're voting on. Who designed and built that?

Don't let the perfect be the enemy of the good.

Re:The Ken Thompson Hack by slasaus on Monday February 09, 2015 @06:58AM (#9020716)
> Don't let the perfect be the enemy of the good.

Also, don't replace a secure, well-tested and practically proven system that works (paper and a ballot box), with something that fosters large scale malice (electronic voting) in the name of modernizing or, even worse, preventing small scale malice.

Voting is a process with unique constraints not seen elsewhere. Not with banking, not with aviation, you name it. Mainly because each voter must be able to cast his/her vote and be able to verify if the vote is counted correct and exactly once without letting anyone else know what he/she voted for.

Re:The Ken Thompson Hack by palmer_eldritch on Monday February 09, 2015 @08:15AM (#9020969)
With paper and ballot box, you need to trust the people doing the counting.

And since you usually need a lot of them when it's done manually, it's very probable that there's always some amount of fraud.

Now, it's probably easier to fraud if you can hack the voting machines. But let's not say that the current system really prevents fraud because it doesn't.

Re:The Ken Thompson Hack by slasaus on Monday February 09, 2015 @08:40AM (#9021062)
Hence my argument about large scale fraud (only possible with electronics) vs. small scale fraud. Fraud with paper and ballot boxes is extremely hard to organize at large, because it would involve a couple of orders of magnitude more people to conspire.
Re:The Ken Thompson Hack by restalis on Monday February 09, 2015 @08:50AM (#9021100)
The electronic voting has its advantages and given the context of the discussion about trust and security, your laugh is related to the means of ensuring such security, not to the idea of electronic voting. The means should and can be treated separately.
Re:The Ken Thompson Hack by fnordfnordfnord on Sunday February 08, 2015 @04:05PM (#9018564)
As opposed to "closed source electronic voting"?
Re:The Ken Thompson Hack by harry8 on Sunday February 08, 2015 @06:34PM (#9019038)
Perhaps as opposed to not doing it at all.

If you must have assistance for people who can't mark a ballot paper due to disability, have the machine mark their ballot paper and count it as per normal.

Everyone knows what cheating looks like in ballot counting, the evidence of ballot stuffing is harder to hide, easier to spot and generally understood.

Even if electronic voting could be made absolutely secure, safe and fair it would not be understood by most voters, that means it really shouldn't be used. But as pointed out, it can't be made secure so just don't use it. Ban it. Destroy it. Elections must be fairly counted, seen to be fairly counted and understood how they are counted fairly.

Re:The Ken Thompson Hack by dredmorbius on Sunday February 08, 2015 @04:30PM (#9018657)
I read the comment as "open source doesn't ensure trustable" rather than "open source is inherently worse than closed".

It's that even OS would not be sufficient.

Re:The Ken Thompson Hack by Roboprog on Monday February 09, 2015 @10:58AM (#9021788)
You heard right!