Voting vs. Safety-Critical Systems
•“If we can trust computers to fly airplanes, why can’t we trust them to handle our votes?”
–Accountability:  Failures in safety-critical systems are detectable
–Standards and practices of safety-critical software are not used in voting machine development.
•“If we required that, we could only afford one voting machine for the state of Texas!”
–Safety-critical systems are not designed to be secure against attacks by insiders.