Specifically pertains to voting systems in GA.
"a security vulnerability disclosed back in 2022 shows the shuffle can be reversed, and some states have not applied the software update that resolves it."
"a team of researchers published a report showing that certain ballot scanning machines used throughout the US had a critical privacy failure in how they anonymized ballots"
"Specifically, the machines would assign a seemingly random number to each electronic ballot record at the time of scanning to label each ballot for later auditing."
I can tell you that before WA went to all-mail voting it wouldn't have happened, because I served as a pollworker and election site inspector. There was a optical scan ballot reader / counter, my confidence is high it only kept running totals. The ballots fell into a bin, at the end of the day the bin was unlocked and the ballots were tossed into bags (no particular order) which were then sealed. As inspector I printed a copy of the tape which went downtown with the bag(s); they would have been able to print a new tape until the machine's memory was wiped (at which point they still had "hardcopy backup"). The ballots were not marked upon by the scanner in any manner. There was an incident where one of the ballot printing / counting companies (because they both typically had to come from the same manufacturer) started printing sequence numbers on ballots (not just ballot styles) and that went to court.
I've not witnessed what happens with all-mail voting, but there is no sequence number on the ballots. ;-) The count is not supposed to start until the polls close. Before that the ballots are ostensibly separated from their identity (the envelope) in an identity confirmation ceremony. My impression is that they're scanned at this point and the scans are utilized for counting / optical scan, but I'm not certain about this or that it's the same everywhere. I don't know what happens to the physical ballots; back in the day what I know is that if a ballot needed to be corrected (defacement or damage renders it unreadable) then a new ballot was prepared under the supervision and adjudication of election observers and the old ballot was destroyed; but that's the exception which proves the rule that physical, anonymized ballots were retained.
The voting process is in the hands of the individual (United) States; in WA it's largely in the hands of the County administrators and varies to a degree Statewide.
"a security vulnerability disclosed back in 2022 shows the shuffle can be reversed, and some states have not applied the software update that resolves it."
"a team of researchers published a report showing that certain ballot scanning machines used throughout the US had a critical privacy failure in how they anonymized ballots"
"Specifically, the machines would assign a seemingly random number to each electronic ballot record at the time of scanning to label each ballot for later auditing."
I can tell you that before WA went to all-mail voting it wouldn't have happened, because I served as a pollworker and election site inspector. There was a optical scan ballot reader / counter, my confidence is high it only kept running totals. The ballots fell into a bin, at the end of the day the bin was unlocked and the ballots were tossed into bags (no particular order) which were then sealed. As inspector I printed a copy of the tape which went downtown with the bag(s); they would have been able to print a new tape until the machine's memory was wiped (at which point they still had "hardcopy backup"). The ballots were not marked upon by the scanner in any manner. There was an incident where one of the ballot printing / counting companies (because they both typically had to come from the same manufacturer) started printing sequence numbers on ballots (not just ballot styles) and that went to court.
I've not witnessed what happens with all-mail voting, but there is no sequence number on the ballots. ;-) The count is not supposed to start until the polls close. Before that the ballots are ostensibly separated from their identity (the envelope) in an identity confirmation ceremony. My impression is that they're scanned at this point and the scans are utilized for counting / optical scan, but I'm not certain about this or that it's the same everywhere. I don't know what happens to the physical ballots; back in the day what I know is that if a ballot needed to be corrected (defacement or damage renders it unreadable) then a new ballot was prepared under the supervision and adjudication of election observers and the old ballot was destroyed; but that's the exception which proves the rule that physical, anonymized ballots were retained.
The voting process is in the hands of the individual (United) States; in WA it's largely in the hands of the County administrators and varies to a degree Statewide.