I show that the ICX suffers from critical vulnerabilities that can be exploited
to subvert all of its security mechanisms, including: user authentication, data
integrity protection, access control, privilege separation, audit logs, protective
counters, hash validation, and external firmware validation. I demonstrate that
these vulnerabilities provide multiple routes by which attackers can install malicious software on Georgia�s BMDs, either with temporary physical access or
remotely from election management systems (EMSs). I explain how such malware
can alter voters� votes while subverting all of the procedural protections practiced
by the State, including acceptance testing, hash validation, logic and accuracy
testing, external firmware validation, and risk-limiting audits (RLAs).
