[FactolSarin]

Yeah, the human component is definitely a lot easier to attack. I'm curious how this is handled. Does the person doing the random number generation have anyone else standing over their shoulder at the time? There should definitely be witnesses and/or records of something this important.

And according to the article, I notice they said that only 10k make it past the lottery stage to the vetting stage. That seems like a pretty easy anti-immigration attack surface: just submit a lot of low quality requests to block out potential acceptances.