Return of Software Vulns in Brazilian Voting Machines

### Security Vulnerabilities in Brazilian Electronic Voting Machines At 00:00, Professor Diego Aranha (Aarhus University) presents the findings of official public security testing evaluating the software and cryptographic architecture of Brazil's paperless Direct-Recording Electronic (DRE) voting machines.

### The Architecture of the Brazilian DRE Terminal At 05:00, Aranha analyzes the Brazilian voting hardware. Deployed nationwide in fully paperless elections, each terminal loads its operating system, cryptographic keys, and ballot definition files from external flash memory cards prior to election day.

### Decades of Closed-Source Proprietary Code At 10:02, the speaker critiques the institutional governance of the Superior Electoral Court (TSE). For decades, the voting software was developed behind closed doors without independent third-party code review, academic audits, or public verification.

### Physical Inspection Limits and Cryptographic Lapses At 15:00 and 20:00, Aranha outlines severe cryptographic vulnerabilities discovered during inspection. Encryption keys protecting internal databases and firmware signatures were hardcoded directly into the C source code, shared identically across half a million voting machines nationwide, and seeded with weak pseudorandom number generators.

### Breaking the Secrecy of the Digital Ballot Box Concluding at 25:00, Aranha details how his research team successfully broke ballot secrecy. By exploiting flaws in the software's vote-shuffling algorithm, researchers reconstructed the exact chronological order of cast ballots, proving that paperless DRE systems fail to guarantee constitutional ballot confidentiality.

(AI summary — Gemini Flash)