Skip to content

HACK SIV — Wed Aug 7th — End Of Day Report #180

Description

@arianabuilds

Here's today's update:

  1. Another few thousand views on twitter, now past 17k. More email signups for mock elections, and some more Signal group joiners.
  1. Only one issue submission today. Sadly not very high quality though (in our opinion). The report suggested a new vote-buying vector, if we implemented a particular proposed solution (…to another known hypothetical attack, which we find far more interesting). There are a number of problems with the submitted vote-buying issue though. We wrote up a detailed response. You can see the submission & response right after it, both here: Vulnerability of "Recycled Verification # Attack" #115 (comment)

  2. Since opening yesterday, we’ve had 3 submissions, 2 from @cjackett & 1 from @phish. Sadly phish’s is outside our eligibility criteria for HACK SIV prizes (see detailed content rules: https://hack.siv.org/rules).

  1. Tomorrow morning, in-person DEF CON begins. Very excited. Find us at the Voting Village. We’ll also launch a mock election. Suggest questions if you have ideas!

  2. Again, even before Live Mock Elections begin, you are invited to:
    a. Search for vulnerabilities in the SIV Protocol, the foundation of the Secure Internet Voting system - https://docs.siv.org/technical-specifications. After all, if the blueprint of the system is not sound, the implementation can’t possibly help.
    b. For a lighter start to the protocol, here’s a simpler illustrated overview: https://siv.org/protocol
    c. And of course, you can run the SIV code on your own machine for local testing: https://github.com/siv-org/siv

So, can you find novel ways to…?

  1. Vote multiple times
  2. Change someone else's vote, without detection
  3. Destroy a vote already confirmed submitted
  4. Learn how someone voted, without their help
  5. Learn other personal info about voters

Bonus: Convince us of major score updates to docs.siv.org/compare

Happy Hacking! :)

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions