Electronic Voting System Integrity

VNC/RDP External Routing – Dominion Democracy Suite 5.5 (PA)

Established Fact Independent forensic examination of Fulton County’s Dominion Democracy Suite 5.5 server found: open external network interfaces; actively enabled remote-desktop protocols (VNC and RDP); and data routing to foreign networks including a Canadian IP address – nullifying the required air gap. The Pennsylvania Secretary of the Commonwealth subsequently decertified Fulton County’s machines – not

VNC/RDP External Routing – Dominion Democracy Suite 5.5 (PA) Read More »

Dominion Contract Expressly Provides for Internet Connectivity (MI)

Established Fact Michigan state contract 071B7700117 with Dominion Voting Systems explicitly contemplates internet connectivity for precinct-level tabulation: the contract describes wireless/cellular results transmission, specifies precinct tabulators require an external wireless modem and active GSM SIM card, and identifies the “ImageCast Listener” as a “turnkey solution for internet-based results transmission.” Canton Township records include Dominion invoice

Dominion Contract Expressly Provides for Internet Connectivity (MI) Read More »

Anonymous Remote Logins to EMS During Tabulation (MI)

Established Fact Forensic examination of the Antrim County EMS server (Allied Security Operations Group, court-authorized in Bailey v. Antrim County) documented two successful remote logins by an “Anonymous” user with escalated administrative privileges on November 5 and November 17, 2020 – during critical tabulation and post-election periods. The logins originated from external addresses and the

Anonymous Remote Logins to EMS During Tabulation (MI) Read More »

ICX BMD Critical Vulnerabilities – QR Code Manipulation and Remote Malware Install (GA)

Established Fact Prof. J. Alex Halderman (Univ. of Michigan), as expert in Curling v. Raffensperger, documented through hands-on forensic testing that Georgia’s Dominion ImageCast X (ICX) BMDs contain critical vulnerabilities enabling attackers to: alter ballot QR codes (the actual counted data); install malicious software remotely from the EMS; and subvert audit log entries. CISA was

ICX BMD Critical Vulnerabilities – QR Code Manipulation and Remote Malware Install (GA) Read More »

SQL Server Port Open to Global Connections (CO)

Established Fact Forensic examination of Dominion Democracy Suite EMS in Mesa County documented that SQL Server port 1433 was configured to accept connections from any IP address worldwide – enabling any actor with credentials to directly query and modify election databases outside the certified application layer. Investigators demonstrated this empirically: a non-Dominion workstation and even

SQL Server Port Open to Global Connections (CO) Read More »

EMS Server Internet History & Enabled Remote Services (AZ)

Established Fact Forensic analysis of the Maricopa County EMS server and client workstations revealed 59 open ports at boot, active IPv6, and enabled Terminal Services and Remote Access features. Unallocated hard drive space yielded artifacts of internet connections to public URLs and foreign entities on devices officials represented as strictly air-gapped. The audit team found

EMS Server Internet History & Enabled Remote Services (AZ) Read More »

ESS DS200/DS200 Voting Machines Contained Active 4G Wireless Modems – Connected to Internet on Election Night (WI)

Established Fact The OSC found that ESS voting machines deployed in Wisconsin contain 4G wireless modems enabling internet connectivity. At least one Wisconsin municipality admitted its machines were connected to the internet on election night, purportedly to transmit vote data to county clerks. All Green Bay voting machines were ESS machines connected to the secret

ESS DS200/DS200 Voting Machines Contained Active 4G Wireless Modems – Connected to Internet on Election Night (WI) Read More »

EMS and Adjudication Workstations Connected to Internet During Absentee Ballot Tabulation (MI)

Disputed Fact [Disputed Fact – Extent of connectivity unresolved by court] Former Michigan State Senator Patrick Colbeck, an aerospace engineer, certified Microsoft Small Business Specialist, and credentialed observer at the TCF Center, provided sworn affidavit testimony that tabulation workstations and adjudication workstations at the Detroit central count facility were connected to the internet during the

EMS and Adjudication Workstations Connected to Internet During Absentee Ballot Tabulation (MI) Read More »

EMS CyFir Analysis Finds Foreign IP Addresses in Unallocated Device Storage – Taiwan Ministry of Education and German Cloud Provider (MI)

Established Fact CyTech/CyFir forensic examination of a Dominion ICX device from Antrim County found, in the unallocated storage space of the device, data contextually proximate to a TCP/IP communication session resolving to IP address 120.125.201.101 – the Ministry of Education Computer Center in Taipei, Taiwan. A second IP address resolving to a cloud provider in

EMS CyFir Analysis Finds Foreign IP Addresses in Unallocated Device Storage – Taiwan Ministry of Education and German Cloud Provider (MI) Read More »

Detroit AVCB Computers Connected to Internet During Absentee Ballot Tabulation (MI)

Established Fact [Established Fact – Colbeck’s sworn testimony] Former Michigan State Senator Patrick Colbeck, an aerospace engineer, certified Microsoft Small Business Specialist, and credentialed observer at the TCF Center, provided sworn affidavit testimony that tabulation workstations and adjudication workstations at the Detroit central count facility were connected to the internet during the tabulation of over

Detroit AVCB Computers Connected to Internet During Absentee Ballot Tabulation (MI) Read More »