安全与密码学2018defcon.org
DEF CON 关于美国选举基础设施漏洞的报告
DEF CON report on vulnerabilities in US election infrastructure
入门 · 约 45 分钟读完前置知识：美国选举制度基础、信息安全基础概念
导读
DEF CON 投票村（Voting Village）发布报告，汇总两年来对美国选举基础设施漏洞的攻防测试结果。报告指出供应链不安全、可远程攻击等四项“严重且不可否认”的发现，并呼吁国会为选举安全提供资金支持。
HN 关注点：美国选举系统是否可被黑客攻击，以及报告结论是否可信、政策层面是否有实际回应。
HN 评论精选
这几条评论里：支持 1 补充 2 亲历 1
支持引用报告结论，强调供应链不安全等四项严重发现
结论：过去两年投票村发现了数十个漏洞，其中四项关键发现严重且不可否认：1) 供应链不安全——投票机零部件供应链是全球性的，几乎没有安全流程验证零件是否可信或被预置后门，若对手通过供应链植入芯片，可远程一次性攻破全美整类机器；2) 远程……（原文截断）。DEF CON 遵循启蒙运动以来的原则：通过理性探究获取事实，并将新事实公之于众。
texuf查看英文原文
The conclusion: Over the last 26 years, DEF CON, and for the last two years, the Voting Village, have operated under two core principles: 1. It is important to derive facts through reason and inquiry rather than blind faith. 2. When we discover new facts, it’s important we share this information with the general public so individuals can decide how best to use the information. We did not make these principles up ourselves. Rather, these principles are the foundation of the Enlightenment, which has guided modern science to achieve the medical, engineering, and IT advances, among others, that underpin the modern world. Since these principles have largely guided the human race toward progress for the last 500 years, we plan to continue to follow them. These principles matter most when we put them into practice. Therefore, it is relevant to ask what new facts all the poking and inquiring into our voting systems has identified since the Voting VIllage was established. Among the dozens of vulnerabilities identified in the last two years, four key DEF CON Voting Village findings are grave and undeniable: 1. Supply Chain Insecurity: The voting machine parts supply chain is global and has essentially no security procedures to determine whether the machine parts are trustworthy or pre-hacked before the machine is assembled. Thus if an adversary compromised chips through the supply chain, they could hack whole classes of machines across the U.S., remotely, all at once. 2. Remote Attacks Proven: Despite insistence the fact that machines are “air gapped” from the Internet protects against all remote attacks, both DEF CON 25 and 26 found exploits to hack machines remotely, requiring physical access to the machine. 3. Hacking Faster Than Voting: This year DEF CON also demonstrated that while, on average, it takes about six minutes to vote, machines in at least 15 states can be hacked with a pen in two minutes. It is thus possible for someone to hack a machine while voting in a polling place on Election Day. 4. Hacks Don’t Get Fixed: Finally, we discovered that even when vendors are told about serious flaws in machines by their customers, those flaws go unfixed.
亲历亲历：纸质选票+光学扫描是更安全的可行方案
弗吉尼亚州几年前就改回纸质选票加光学扫描了。唯一缺点是选举后选票要保存若干年（占空间），但这种方式安全得多，人人都会用——就像高中考试一样，用铅笔涂圈。
w8rbt查看英文原文
Virginia went back to paper ballots and optical ballot scanning several years ago. I think the only drawback to this approach is storing the ballots for X years after an election (takes up space). But, it's far more secure and easy for everyone to do. Just like taking a high school test... pencil in the circle. https://en.wikipedia.org/wiki/Optical_scan_voting_system
补充报告呼吁国会拨款，但相关提案已被共和党否决
报告“下一步”部分写道：国会必须为选举安全拨款——国防不是州和地方政府的职责，任何州或地方政府都不可能筹集足够资金抵御有决心的民族国家攻击。然而我们试过了：共和党人否决了延长选举安全拨款的提案（附 PBS 链接）。
kadendogthing查看英文原文
From the "Next Steps" section in the report: >Congress Must Fund Election Security: National defense is not the role of state and local government. Further, no state or local government will ever be able to raise enough capital to defend itself from a determined nation state. Thus, having codified the basic security standards developed by local election officials above, Congress must finance the implementation of these security standards. Well. We tried: https://www.pbs.org/newshour/politics/republicans-block-bid-to-extend-election-security-grants
补充建议用信息图让报告结论更易被公众理解
这份文件文字太多。我们需要一些信息图，把结论提炼成没时间通读的人也能轻松理解的形式：一张显示易受攻击州的地图、展示绕过某系统有多容易的图片、易受攻击机器的百分比，以及不用翻几十页文字就能判断我所在选区的机器是否有风险的方法。
rotten查看英文原文
There are a lot of words in this document. What we need is some infographics that boil it down into something people without the time to read and parse all of those findings can understand easily. A map showing vulnerable states, some pictures showing how easy it is to circumvent a particular system. Something that shows what percentage of machines are vulnerable and an easy way to know if the machines in my district are susceptible without having to wade through pages and pages of text.
历次讨论
- 2018Hacker News 讨论帖546 分 · 135 评
同领域还值得读
如何入侵一台已关机的电脑：在 Intel ME 中运行未签名代码
How to hack a turned-off computer, or running unsigned code in Intel ME
这篇 Black Hat 2017 白皮书讨论 Intel Management Engine（ME）的安全问题：如何在 ME 中运行未签名代码，以及攻破处于关机状态的电脑的相关…
安全与密码学2017 · 543 分 · 107 评专业 · 约 40 分钟编辑精选比特币：一种点对点的电子现金系统（2008）
Bitcoin: A Peer-to-Peer Electronic Cash System (2008)
中本聪 2008 年发表的比特币白皮书，提出了无需可信第三方的点对点电子现金系统。
安全与密码学2017 · 536 分 · 394 评入门 · 约 45 分钟编辑精选GPRS 加密算法 GEA-1 的密码分析表明存在故意弱点
Cryptanalysis of GPRS Encryption Algorithms GEA-1 suggest intentional weakness
首次公开了对 GPRS 加密算法 GEA-1 和 GEA-2 的密码分析攻击。
安全与密码学2021 · 487 分 · 107 评专业 · 约 90 分钟编辑精选Signal 消息协议的形式化安全分析
A Formal Security Analysis of the Signal Messaging Protocol
用形式化方法分析 Signal 消息协议（TextSecure）的安全性：作者在多阶段密钥交换模型下，借助自动化证明工具对协议的密钥协商与 Double Ratchet 密钥更新…
安全与密码学2016 · 353 分 · 230 评专业 · 约 120 分钟编辑精选A2：模拟恶意硬件
A2: Analog Malicious Hardware
论文研究如何在芯片设计阶段植入模拟电路形式的恶意硬件后门，使其难以被常规检测发现。
安全与密码学2016 · 315 分 · 94 评专业 · 约 75 分钟编辑精选