In 7 Months, 90% of Americans Will Vote on Easily Hackable Machines That Leave No Evidence of Tampering

Key Takeaways

• Court demo shows machines compromised with cheap tools.
• Georgia refuses patches, leaving unpatched machines for 2026 election.
• Three vendors control roughly 90% of US voting hardware.
• Certification relies on private labs, trade‑secret agreements limit oversight.
• Risk‑limiting audits and paper trails are not federally mandated.

Summary

In January 2024, Princeton researcher J. Alex Halderman demonstrated in federal court that a Dominion voting machine could be hijacked using a ballpoint pen, a $20 card reader and a $30 homemade smart card, exposing a vulnerability that leaves no audit trace. Despite the vendor issuing patches, Georgia’s Republican legislature declined funding, meaning the same unpatched machines will likely be used in the November 2026 midterms. The U.S. voting‑machine market is dominated by three private firms—ES&S, Liberty Vote (formerly Dominion), and Hart InterCivic—who face minimal federal oversight and can keep security flaws secret. Ongoing failures in certification, lack of mandatory paper trails, and absent risk‑limiting audits keep the nation’s elections vulnerable.

Pulse Analysis

The technical demonstration by Halderman underscores how low‑cost, readily available tools can subvert modern voting equipment. By forcing a machine into Android Safe Mode and loading custom malware, the attack bypassed built‑in logs, proving that even sophisticated hardware can be reduced to a vulnerable software platform. This raises urgent questions about the resilience of electronic voting systems that lack transparent, tamper‑evident designs, especially when the underlying code is publicly accessible and unpatched in key jurisdictions.

Market concentration compounds the security dilemma. ES&S, Liberty Vote, and Hart InterCivic together control the vast majority of ballot‑marking devices used across the United States, operating under private‑sector profit motives rather than public‑interest mandates. Their certification process, outsourced to labs bound by non‑disclosure agreements, shields vulnerabilities from independent scrutiny. The result is a de facto monopoly where security flaws can be weaponized without accountability, and where state and local election officials often lack the resources or authority to demand corrective action.

Policy remedies exist but face political inertia. Federal legislation like the SAFE Act, which would mandate paper ballots, risk‑limiting audits, and ban internet‑connected machines, has stalled repeatedly in the Senate. Meanwhile, governors can invoke emergency powers to require hand‑marked ballots and independent audits, a strategy employed successfully in several states. Internationally, countries such as Germany, Canada, and the Netherlands rely on transparent, paper‑based counting processes, demonstrating that robust election integrity does not require proprietary technology. Adopting similar safeguards in the U.S. would restore voter confidence and protect democratic outcomes.