A flaw that reveals votes

Georgia's voting equipment has a known weakness that lets someone match voters to the ballots they cast. Researchers say AI has made fixing it urgent before November.

Nobody is changing votes

The bug cannot alter results or cast doubt on a tally. It can expose how individual people voted, which under Georgia's constitution is a violation in itself.

AI does the technical work

The flaw has been public for years. What changed is that an off the shelf AI assistant can now handle the expertise that used to gate the attack.

“a bit of a wake-up call because it illustrates how much more easily vulnerabilities can be exploited now that AI can do all of the technical work for you”

Georgia is the perfect storm

Other places running the same Dominion, now Liberty Vote, equipment patched it or seal the needed records. Georgia runs it statewide with an open records law.

“It's really embarrassing that this is still a possibility”

How the shuffle breaks

Touchscreens print paper ballots that scanners tally, and the resulting records get randomized. The 2022 research showed the software lets you put them back in the order they were cast.

A Princeton test run

Max Springer fed a public AI assistant the research and Georgia's May primary records. It reversed the shuffle and told him exactly which other files it needed.

Names attached to ballots

He added the early voting list and the cast-vote record file, both obtainable by records request, then audit logs and check-in data. Most ballots resolved to specific voters.

“AI coding tools are essentially supercharging laymen people to exploit vulnerabilities”

Why secrecy is the point

A traceable ballot makes vote buying easier and opens the door to pressure from bosses, family, or officials. Campaigns would find the data valuable too.

“no person can see or know any other elector's votes”

The state pushes back

Gabriel Sterling of the secretary of state's office argues mail ballots are an easier path for a vote buyer, and that targeted outreach is cheaper for campaigns than this.

The board says no

Salleigh Grubbs moved to require the manufacturer's patch. State lawyers cited missing certification, months of work, and no funding, and the board rejected it.

“Each (voter) has one vote, and no one is entitled to know how it was cast”

Redaction instead of repair

Georgia is routing records requests upward, blacking out details, and hiring a vendor to re-scramble files. Critics want the tracing data never recorded at all.

“the only legal and acceptable answer is to stop recording that information”