Or the compromise (or cooperation) of a few of the software supply chain components used to program the chipset of the voting machines. Or the development machines used to write and upload the voting software. Or the foundry used to cast the chips. You think if e.g. China devoted ~5 years of their best hacking group's time to this, they couldn't do it? Because that's a very low price to pay to sway the election of a country such as Brazil.
> They are audited by members of parties and the civil society.
Audited how? Do they plug in a USB, download the software, and verify that it matches the (hopefully open-source, ideally formally verified) code it's supposed to be running?
Let's say it matches - how can they trust that the code the USB port emitted, is what is actually running?
> They are audited by members of parties and the civil society.
Audited how? Do they plug in a USB, download the software, and verify that it matches the (hopefully open-source, ideally formally verified) code it's supposed to be running?
Let's say it matches - how can they trust that the code the USB port emitted, is what is actually running?