Dominion ICX Simple Hacks Daunting Recoveries
Demonstrates real-time ballot manipulation on the Dominion ImageCast X touchscreen terminal and explains why recovering from election definition tampering is daunting.
Summary
The Dominion ImageCast X Ballot Marking Device
Ballot Marking Devices (BMDs) like the Dominion ImageCast X present digital touchscreens for voters to make selections and generate printed paper ballots for optical tabulation.
Manipulating Ballot Layouts via Election Definitions
Using a physical Dominion ICX terminal, researchers demonstrate how simple modifications to election definition files (without requiring binary malware injection) can alter candidate ordering, silently remove choices, or present misleading voting instructions.
Daunting Post-Election Detection and Recovery
Because ballot display manipulations directly deceive the voter during selection, detecting and recovering from election definition tampering after polls close is extraordinarily difficult or impossible without full hand recounts of paper records.
Root Cause Analysis and System Design
Analyzing the underlying architectural decisions in BMD firmware reveals how relying on unauthenticated configuration definitions and barcode-encoded ballots creates severe systemic vulnerabilities.
Related talks
Car Hacking Village·43 min
Jan Berens · Marcell Szakaly
Discloses vulnerabilities in QCA 7000 HomePlug modems used across CCS and NACS EV charging systems that enable communication hijacking and denial of service.
Creator Stage·43 min
Zoltan Balazs
Surveys pervasive architectural and implementation failures in consumer IoT gadgets, highlighting cleartext credentials, command injections, and insecure defaults.
Creator Stage·26 min
Alexandru Lazar
Demonstrates remote code execution vulnerabilities in popular Dahua perimeter surveillance cameras discovered through firmware key extraction.


