Max Springer maps Georgia ballot order using cheap AI tool

Max Springer, a postdoctoral fellow at Princeton University, spent $20 on an artificial intelligence tool to reconstruct the sequence of ballots cast in Georgia. By combining that data with other public records, he identified the specific voting choices of approximately 1% of early in-person voters during the state's primary election. Springer did not hack voting machines or access confidential databases. He exploited a known security flaw in ballot scanners to map the order of nearly 99% of in-person ballots.

The vulnerability, known as DVSorder, involves Dominion ballot scanners that assign numbers to electronic records to hide the casting order. University of Michigan researchers disclosed the flaw in October 2022, noting the numbers follow a predictable pattern that allows the shuffle to be reversed. Springer used AI to identify additional public records that could uncover more votes. He wrote that at some polling locations, he determined how every voter cast a ballot. The AI also helped find further public datasets that could be combined to expose more selections.

Bill Gates, who leads the Mechanics of Democracy Lab at Arizona State University, noted that ballot secrecy is essential for public confidence. He stated that while it is public information whether someone voted, the specific candidates they supported remain secret. Gates warned that if voters believe their choices could be discovered, it might discourage participation. The risk extends to potential intimidation or vote-buying if observers can verify how a specific person voted.

Maricopa County uses the same family of Dominion scanners at the center of the Georgia issue. However, the county updated its software before the 2024 election to address the flaw. Dominion's updated software received federal certification in March 2023. County records indicate Maricopa will use an even newer version of the election management software in November 2026. The other 14 counties in Arizona use equipment from different manufacturers.

Arizona counties release detailed election records to allow public examination of results. Gates said officials have long balanced transparency with secrecy, but generative AI adds new complexity. He argued that election officials now need AI expertise to defend against emerging threats, similar to how they previously hired cybersecurity experts to deal with hackers.

The next step in the midterm election cycle occurs in November 2026, when Arizona voters will use their updated equipment.