Slightly off-topic but as I stop to think about it, I think this is one of the only times I have ever seen code in non-English. I'm confident enough in Python that I know the only difference is in reference names, and that has nothing to do with the computational logic or structure...but I'm taken aback by how non-trivial -- even with the syntax highlighting -- it is to tell my brain that it's just Python, and to treat it like any other code with strange naming conventions. I don't know what the takeaway is here...that proper naming conventions and self-documenting code is even more important than I realized...and/or that not having familiar context (i.e., what are these variables referring to) is a substantial mental drain...even though it's not particularly important to debugging the code.

It definitely makes me respect all non-English coders even more, for happily putting up with the ASCII status quo...especially those from non-Latin languages, such as Matz.

You should try your hand at deobfuscation of a VM bytecode like actionscript (flash), CLR, or JVM. I suspect that will give you good practice with dealing with "strange naming conventions" ;)

You should try to read Cyrillic code comments...

Wow. I find it stunning that in 2015,there is still engineers who execute user inputs without any kind of sanitization.

The input is sanitized: https://github.com/prometheus-ar/vot.ar/blob/master/msa/voto...

It's just that people are too eager to scream "vulnerability!" without properly checking it before.

Correct me if I am wrong but client side sanitization does not really count. It is really easy to bypass that check (send packets directly to the backend or use dev tools for example)

No, because it's not a website with a network between the backend and frontend. It's a desktop app, with no network connection, just using html for the gui. Nobody can send packages to it.

Argentinian here. The bitcoin is not that big around here, there are some enthusiast but it's not something you see every day.

No. I was talking about the people, not the use.

In Argentina we have the top development team of BitPay, developing cutting edge stuff like Copay, Bitcore Wallet Service, etc. People like Matias Alejo Garcia, and Manuel Araoz (now a BitPay alumni). Look at: https://github.com/bitpay/bitcore-wallet-service and other projects.

We have Sergio Lerner, one of the top security researchers and the official Bitcoin Core security reviewer. Look at his blog: https://bitslog.wordpress.com/

We have also projects like Xapo.

And many many others like https://streamium.io/

Not mainstream by any stretch of the imagination, but we still have the strongest Bitcoin userbase in the region, with Brazil in close second.

That exploit won't work.

If Alfredo says it, I am sure he is right and he can find other bugs.

Lol yes, there are many more bugs ;)

Analyzing your second paragraph, it only makes perfect sense for you to note "that the computer security and bitcoin scene are very strong" if bitcoin means "untraceable criminal currency". Because then you are making a valuable comment that election fraud through purchasing hacks of the voting system are especially possible in Argentina, due to a strong computer security scene, and a strong criminal untraceable currency scheme.

Otherwise, why would you juxtapose the irrelevant mention of bitcoins? It's not hard to pay someone (i.e. this is completely irrelevant) except if the payment is for criminal activity - then it's hard.

This is sad, as bitcoin and other blockchain technology is cool. Your comment is just a data point (I won't list other ones, just keep an eye out for them in the future) that shows that a functional society requires a legal layer baked into the peer to peer currency protocol (at a minimum self-reporting regarding identities involved). Nobody wants to live in a world where people can anonymously purchase election counting source code from an employee of that company, using the online equivalent of a suitcase full of cash, (except probably without anyone knowing and nothing else being involved except network traffic) then the same night turn around and purchase the untraceable services of a security firm located in a totally different city (or who knows where), again using the online equivalent of a suitcase full of cash. I am positive nobody wants that.

That means that there is a huge, huge market opportunity for a non-criminal distributed online currency. I bet half the people I know would prefer to use that over bitcoin. Yes, because they have nothing to hide: but also, because they do not trust that criminals who are able to buy elections have nothing to hide.

I realize that technical solutions are preferable to legal solutions; but there are some things technology can't solve, and "untraceably buying elections from the people tasked with computer counting them, by untraceably bribing employees for source code and then surreptitiously supplying it to blackhat security firms and purchasing an attack vector, without any connection to the former" is one of these.

Bitcoin is absolutely great. It will be better when it comes with a social contract.

This page - https://bitcoin.org/en/download

should have 2 versions "[ ] With social contract", "[ ] Client only", where the one with the social contract lets governments trace your transactions the same as they can with bank transfers. (Not sure of the mechanism.) I don't mind making bank transfers, or the government seeing this, and I don't prefer cash to using my card etc etc etc. An online currency is supremely cool, far more convenient, and I would have no problems downloading the version with the social contract. (I think governments should have the same level of access as they do to bank transfers.)

I consider it a genuine problem that I don't even have this choice.

It's not about having a currency for criminal activities but to have a currency at all that is widely accepted in outside countries. Only in tourist areas of Brazil, Chile, Uruguay and other bordering countries you can change your pesos into something else but definitely not at the official exchange rate.

Also with an annual inflation rate of 25% - 35% you don't want to have your savings in pesos. That's why many people buy dollars on the street if they can't get it in legal ways. Also BitCoin is usable as it can change in any kind of currency without to much red tape.

If you read my other comment you can understand that I mentioned the bitcoin scene as part of the security scene and I was not talking about the bitcoin use but the excellence of people working on cryptocurrency projects. People who can do state of the art security reviews and provide good feedback about electronic voting systems.