Voting Village Interview with Harri Hursti
CauseEffect interviews election security expert Harri Hursti at the DEF CON 31 Voting Village regarding voting machine vulnerabilities and audits.
Summary
In this in-depth hardware teardown from the DEF CON 31 Voting Village, election cybersecurity expert Harri Hursti provides an eye-opening physical inspection of three generations of voting equipment. At 02:00, he examines a legacy optical scan precinct counter, explaining that while its core operating software is burned immutably into EEPROM chips, the entire system relies on external memory cards susceptible to integer overflows and ballot definition manipulation.
At 03:00, Harri investigates a high-speed central paper ballot scanner used in major metropolitan election centers, revealing that the unit runs on the QNX operating system and automatically executes arbitrary binaries placed on legacy Zip drives with full root privileges. At 05:00, he critiques paperless direct-recording electronic (DRE) touchscreen terminals running Windows CE, demonstrating at 07:00 that unseating the smart card reader drops the machine directly into unauthenticated supervisor mode. He concludes at 09:00 by asserting that hand-marked paper ballots, optical scanners, and mandatory Risk-Limiting Audits (RLAs) represent the only verifiable defense against election infrastructure tampering. (AI summary — Gemini Flash)
Related talks
Village Interviews·13 min
The Voting Machine Hacking Village returns to DEF CON 34 to evaluate the security and resilience of critical election equipment.
Voting Village·29 min
Jody Westby
A policy and legal framework for compelling vendors and election officials to remediate known vulnerabilities in voting infrastructure.
Voting Village·34 min
Drew Springall
Reviews publicly documented physical security controls and tamper-evident seals on deployed voting systems, exposing critical weaknesses in hardware defenses.