Critics blast Georgia’s plan to delay software updates on its voting machines

Jun 15, 2023, 12:36 PM

ATLANTA (AP) — Critics of Georgia’s plan to wait until after next year’s presidential election to install a software update to address security flaws on the state’s voting equipment called that irresponsible, saying the machines would be left open to attack.

The vulnerabilities in the Dominion Voting Systems equipment were identified by an expert witness in a published an advisory based on those findings that urges election officials to take steps to mitigate the risks “as soon as possible.”

Georgia election officials say they’re doing just that. But the time and labor required to install the latest Dominion software makes it unrealistic to do it before the 2024 election cycle, they say. They insist the state’s elections are secure.

University of Michigan computer scientist J. Alex Halderman spent 12 weeks examining the ImageCast X voting machines used statewide in Georgia and by at least some voters in more than a dozen other states. His report was filed with the court and kept under seal for nearly two years. A redacted version was made public Wednesday.

“No grand conspiracies would be necessary to commit large-scale fraud, but rather only moderate technical skills of the kind that attackers who are likely to target Georgia’s elections already possess,” the report says. Even if no attack happens, Halderman wrote, the existence of vulnerabilities “is all but certain to be exploited by partisan actors to suppress voter participation and cast doubt on the legitimacy of election results.”

Gabriel Sterling, chief operating officer for the Georgia secretary of state’s office, dismissed Halderman’s claims as “theoretical in many ways.”

“We have to operate in the real world, and that’s what we’re doing,” he said. “We continue to act as responsibly as possible. We’re protecting our systems, protecting the voters.”

Nearly all in-person voters in Georgia use the voting machines, making it a more attractive target for an attack than many other places where the machines are used only for people who can’t physically complete a ballot by hand, Halderman wrote. Georgia also has become a pivotal swing state in recent elections.

Dominion has filed numerous lawsuits over false claims about its machines by supporters of former President Donald Trump who allege that the 2020 election was stolen. The company maintains that its equipment is secure.

“While we are constantly working to offer the latest security features and innovations to our customers, the CISA advisory clearly states that exploitation of any of the issues raised can be mitigated by following standard procedural and operational security processes for administering elections,” the company said in an emailed statement.

Halderman called the revelation that Georgia wouldn’t install the software upgrade until 2025 “stunning.” That gives potential attackers time to plan and execute attacks in 2024 elections, he said.

Georgia’s touchscreen voting machines print a paper ballot with a QR code and a human-readable list reflecting the voter’s selections, and votes are tallied by a scanner that reads the QR code. Halderman wrote that in examining a Dominion ImageCast X voting machine and associated equipment, he “played the role of an attacker and attempted to discover ways to compromise the system and change votes.”

A longtime critic of electronic voting machines, Halderman advocates using hand-marked paper ballots read by scanners along with robust post-election audits. His findings mean Georgia voters cannot be confident their votes are secured and correctly counted or that future elections using the current system will be safe from attack and produce the correct result, the report says.

Malware could be installed on individual voting machines by people with temporary physical access, such election workers or voters, the report says. Halderman also said that by modifying certain files that election workers copy to voting machines before each election an attacker could spread malware to every voting machine in a county, or the whole state, without physical access to individual machines. The attacks would likely not be detected by Georgia’s current practices and protocols, the report says.

Last year, Dominion commissioned a report by the Mitre Corporation’s National Election Security Lab to assess the risks Halderman identified. In that report, which was also made public Wednesday, Mitre deemed the potential attacks “operationally infeasible.”

Mitre said it based its analysis on the difficulty and the technical skill and time required for the proposed attacks. Most would affect “a statistically insignificant number of votes on a single device at a time,” and the attack that could spread malware to many machines requires unrealistic access to Dominion software and machines, the Mitre report says.

Georgia Secretary of State Brad Raffensperger touted the Mitre report as proof that the state’s voting system is secure.

“Secretary Raffensperger’s claim that Mitre found no meaningful risk to voters is highly misleading,” said David Cross, a lawyer who represents some of the voters in the lawsuit challenging Georgia’s election system and who engaged Halderman to examine the machines. “Mitre didn’t even examine the voting equipment or software and was told to assume that bad actors can’t access Georgia’s voting system.”

Cross said that assumption was invalidated when a computer forensics team hired by Trump allies traveled to Coffee County in south Georgia in January 2021, was allowed to access voting equipment and copied software and data. Evidence shows that material was uploaded to a server and accessed by an unknown number of people.

The lawsuit that spawned Halderman’s report was initially filed in 2017 by individual voters and the Coalition for Good Governance, which advocates for election security. They originally challenged the outdated paperless voting machines Georgia used at the time but shifted to target the new system purchased in 2019, saying it is also vulnerable to attack.

U.S. District Judge Amy Totenberg, who’s overseeing the lawsuit, had resisted making Halderman’s report public, saying she was concerned it could be exploited by bad actors. But in an order last week instructing that it be made public, she noted that the parties and CISA had all agreed that proposed redactions provided appropriate safeguards against election security concerns.

United States News

Part of a stegosaurus skeleton is displayed at Sotheby's New York in New York, Wednesday, July 10, ...

Associated Press

Stegosaurus fossil fetches nearly $45M, setting record for dinosaur auctions

NEW YORK (AP) — The nearly complete fossilized remains of a stegosaurus fetched $44.6 million at auction Wednesday, Sotheby’s said. The buyer’s name was not disclosed. The fossil, dubbed “Apex,” is considered to be among the most complete ever found, according to the auction house. The price blew past a pre-sale estimate of $4 million […]

34 minutes ago

President Joe Biden and Maritza Rodriguez, Biden for President Latina adviser, greets patrons at Li...

Associated Press

President Joe Biden tests positive for COVID-19 while campaigning in Las Vegas

President Biden tested positive for COVID-19 while traveling Wednesday in Las Vegas and is experiencing “mild symptoms” from the infection.

1 hour ago

Ukraine's Minister of Defense Rustem Umerov arrives for a social dinner for defense ministers atten...

Associated Press

Ukraine defense chief says his nation will find battlefield solutions no matter who wins US election

ASPEN, Colorado (AP) — Ukraine will find a way to battle Russia’s invading forces even if former President Donald Trump wins a second term and imperils vital U.S. support for its defense, Ukraine’s defense minister said Wednesday. In carefully framed comments to an audience of U.S. policymakers and journalists, Defense Minister Rustem Umerov reflected the […]

1 hour ago

Associated Press

Thousands of Nebraskans with felony convictions could be denied voting rights under AG’s opinion

OMAHA, Neb. (AP) — Thousands of Nebraskans with felony convictions could be denied voting rights under an opinion from the state attorney general released Wednesday. Nebraska Attorney General Mike Hilgers issued an opinion that says a law passed earlier this year to immediately restore the voting rights of people who’ve finished serving their felony convictions […]

1 hour ago

Republican presidential candidate former President Donald Trump is surrounded by U.S. Secret Servic...

Associated Press

Multiple failures, multiple investigations: Unraveling the attempted assassination of Donald Trump

BUTLER, Pa. (AP) — The young man was pacing around the edges of the Donald Trump campaign rally, shouldering a big backpack and peering into the lens of a rangefinder toward the rooftops behind the stage where the former president would stand. His behavior was so odd, so unlike that of the other rallygoers, that […]

2 hours ago

Follow @ktar923...

Sponsored Content by Sanderson Ford

3 storylines to get you revved up for the 2024 Arizona Cardinals

Arizona Cardinals training camp is just a couple weeks away starting on July 25, and Sanderson Ford is revved up and ready to go.

Sponsored Articles


Sanderson Ford

3 storylines to get you revved up for the 2024 Arizona Cardinals

Arizona Cardinals training camp is just a couple weeks away starting on July 25, and Sanderson Ford is revved up and ready to go.



Desert Institute for Spine Care is the place for weekend warriors to fix their back pain

Spring has sprung and nothing is better than March in Arizona. The temperatures are perfect and with the beautiful weather, Arizona has become a hotbed for hikers, runners, golfers, pickleball players and all types of weekend warriors.



Here are 5 things Arizona residents need to know about their HVAC system

It's warming back up in the Valley, which means it's time to think about your air conditioning system's preparedness for summer.

Critics blast Georgia’s plan to delay software updates on its voting machines