Vulnerable to chosen hosting service

[dglittle]

Also, what service is actually intended to host the SIV server? If it’s a third party (e.g. aws), it has control over the election as well.
[...]
The goal is not to cast aspersions on the vendor, but to point out that the system is fundamentally trusting them in a way that might not be safe in the case of nation-state level adversaries.

Originally posted by @mspecter in #195

[arianabuilds]

Entry Summary for HACK SIV @ DEF CON 2024

Thanks again for participating! This submission earned $158.73 from SIV and $83.60 from the Public Vote, for a total of $242.33.

Here's what we noted in our evaluation:

What's interesting about this submission

• Yes.
• Good amount more thought needed here to really feel strong on this issue.

What takes away from it

• Officially, the design is supposed to protect you against this, by being able to verify to see whenever the server is cheating.

Issue to track getting paid: siv-org/hack.siv.org#11