Georgia’s state elections board convened an emergency meeting on Thursday to address a cybersecurity vulnerability discovered by Princeton researcher Max Springer that could allow artificial intelligence systems to expose voters’ secret ballot selections through publicly available election data.
Springer demonstrated that using a $20 AI subscription and data obtained through an Open Records Act request, he could analyze and identify secret ballots across Georgia counties. His analysis showed he could recover the voting patterns for approximately 1.52 million ballots, or 98.9% of in-person ballots, in 114 of 139 counties examined. In smaller counties with fewer voters, Springer indicated the AI could match most early voters to specific ballots or narrow the matches to single alternatives. The vulnerability stems from how voting machines assign sequential identifying numbers to each ballot during scanning, which when combined with voter check-in records or other available data, can be used to trace ballots back to individual voters.
Georgia’s outgoing Secretary of State Brad Raffensperger responded by ordering the redaction of ID numbers from cast vote record data released to the public following elections, a step cryptographer Ben Adida characterized as substantially addressing the flaw. However, elections board member Salleigh Grubbs raised concerns that this redaction approach may conflict with Georgia’s transparency requirements for election records, and proposed an alternative involving poll workers shuffling printed ballots before scanning. Other board members, including Republican Janelle King, raised objections to the alternative proposal.
The issue carries heightened significance as the state approaches a closely contested midterm election occurring later this month. State officials indicate funding requests to upgrade Georgia’s voting software have remained unaddressed for three years amid political disputes. Representatives from the secretary of state’s office noted that other states using similar Dominion software have either applied patches or restricted access to vulnerable voting data. The identified flaw reflects longstanding tension between Georgia law’s constitutional requirement for ballot secrecy—cited as among the nation’s strongest—and transparency mandates for election records implemented following 2020 election disputes.
Article Attribution | Read More at Article Source
Article summary produced by Claude AI