Online Voting System Used in Florida and Elsewhere Has Severe Security Flaws, Researchers Find

Significant problems with Democracy Live’s OmniBallot internet voting program could result in doctored ballots as voters gear up for election season in the era of Covid-19

Kim Zetter
OneZero

--

Photo: Mark Ralston/Getty Image

New research shows that an internet voting system being used in multiple states this year is vulnerable to hacking, and could allow attackers to alter votes without detection.

On Sunday, researchers published a report that details how votes in OmniBallot, a system made by Seattle-based Democracy Live, could be manipulated by malware on the voter’s computer, insiders working for Democracy Live, or external hackers. OmniBallot is currently used in Colorado, Delaware, Florida, Ohio, Oregon, Washington, and West Virginia. Though online voting has typically been used by overseas military and civilian voters, it could expand to more voters in the future due to the pandemic.

The researchers found that bad actors could gain access to ballots by compromising Democracy Live’s network or any of the third-party services and infrastructure that the system relies on, including Amazon, Google, and Cloudflare.

--

--

Kim Zetter
OneZero

Journalist — cybersecurity/national security; author of Countdown to Zero Day: Stuxnet and the Launch of the World’s First Digital Weapon — @KimZetter