DMCA Security Research Exemption and Election Security
Breaks down the Digital Millennium Copyright Act (DMCA) Section 1201 security research exemptions that protect independent voting system audits at the Voting Village.
Summary
The DMCA Section 1201 Landscape
Section 1201 of the Digital Millennium Copyright Act (DMCA) criminalizes circumventing technological protection measures controlling access to copyrighted software, historically chilling independent security research.
The Voting System Research Exemption
Tori Noble details the specific triennial DMCA exemption granted by the US Copyright Office for good-faith security research on voting machines, election hardware, and voter registration systems.
Enabling Community Audits at the Voting Village
This crucial legal safe harbor allows cybersecurity researchers at the DEF CON Voting Village and academic institutions to physically audit voting hardware and disclose vulnerabilities without fear of civil or criminal copyright liability.
Future Policy Reforms for Permanent Safe Harbors
While triennial exemptions provide temporary relief, advocates continue to push for permanent statutory reforms protecting public interest security research.
Related talks
Voting Village·15 min
Miracle Owolabi
Advocates for expanding legal safe harbor protections for election security researchers globally, drawing on lessons from research barriers in Nigeria.
Voting Village·21 min
Susan Lerner
Susan Lerner reviews the legal challenge in Common Cause NY v. Kosinski against the ES&S ExpressVote XL over barcode vote encoding and voter verifiability laws.
War Stories·46 min
Renderman · Tom Dang
Renderman and Tom Dang share first-hand accounts of facing legal retaliation when reporting government vulnerabilities, urging reform in public disclosure policies.