01/01/2024


Maine Secretary of State Discussed “Election Sabotage” and the ACLU,

The Federal District Court for the Northern District of Georgia unsealed the 96-page Halderman Report in June 2023, which was a Security Analysis of Georgia’s ImageCast X Ballot Marking Devices.
University of Michigan Professor of Computer Science and Engineering J. Halderman and Security Researcher and Assistant Professor at Auburn University Drew Sringall collaborated on this report and says he discovered many exploitable vulnerabilities in the Dominion Voting Systems’ ImageCast X system.
Judge Amy Totenberg had sealed and concealed the results of this investigation on Dominion voting machines in Georgia, but it was eventually released last summer after being hidden from the public for two years by then-Secretary of State Brad Raffensperger.
The report states that votes can be altered in these Dominion voting machines, as their software is vulnerable to hacking.
The information contained within the Halderman Report was available to all as of June 2023.
Professor Halderman wrote about his findings in a blog post after the report’s release.
Back in September 2020, the Courtgranted the Curling Plaintiffs access to one of Georgia’s touchscreen ballot marking devices (BMDs) so that they could assess its security. Drew and I extensively tested the machine, andwe discovered vulnerabilities in nearly every part of the systemthat is exposed to potential attackers.The most critical problem we found is an arbitrary-code-execution vulnerability that can be exploited to spread malware from a county’s central election management system (EMS) to every BMD in the jurisdiction.This makes it possible to attack the BMDs at scale, over a wide area, without needing physical access to any of them.
Our report explains how attackers could exploit the flaws we found to change votes or potentially even affect election outcomes in Georgia, including how they could defeat the technical and procedural protections the state has in place. While we are not aware of any evidence that the vulnerabilities have been exploited to change votes in past elections, without more precautions and mitigations, there is a serious risk that they will be exploited in the future.
Professor Halderman also tweeted out that Georgia Secretary of State Brad Raffensperger will not install Dominion’s security patches before the 2024 election.