Brief history of election machine hacking

### Fifteen Years on the Frontlines of Election Security At 00:00, cyber researcher and election integrity pioneer Harri Hursti delivers a historical retrospective detailing fifteen years of hands-on vulnerability assessments against electronic voting machines across the United States.

### Private Vendor Monopolies and Regulatory Lapses At 09:01, Hursti examines the institutional dynamics governing voting machine procurement. A small cadre of commercial vendors dominates election infrastructure, operating proprietary closed-source systems that historically avoided rigorous third-party auditing, adversarial red-teaming, or enforceable federal security standards.

### Deconstructing the Historic Hursti Hack At 18:02, Hursti revisits his landmark 2005 penetration test in Leon County, Florida, known as the "Hursti Hack." He explains how altering executable scripts and memory card configuration files on Diebold AccuVote-OS optical scan machines enabled attackers to manipulate final election tallies without requiring administrative passwords or physical cryptographic access.

### Expanding Attack Surfaces: Cellular Modems and Wireless Gateways At 27:00, the presentation traces the modernization of Direct-Recording Electronic (DRE) systems and central tabulators. Hursti highlights the introduction of wireless cards and cellular modems (such as internal Sprint modems) to transmit unofficial precinct results, demonstrating how convenience introduced critical network exposure to telecom and internet-based attacks.

### Supply Chain Vulnerabilities and Uncertified Contractors Concluding at 36:02, Hursti alerts the community to unvetted third-party service contractors. In many jurisdictions, outside service technicians handle machine maintenance, pre-election logic and accuracy testing, and ballot programming without background checks or security certifications, leaving the electoral supply chain acutely vulnerable.

(AI summary — Gemini Flash)