information

ATLANTA — Security researchers say rapid advances in artificial intelligence are making it more critical to address a flaw in Georgia’s voting equipment that can allow voters to be matched to their ballots after they have been cast.

The system’s vulnerability has been drawing increased attention, with election security advocates criticizing state election officials for failing to fix it before the November elections. Georgia election officials say they have taken steps to address the potential harm, but some advocates say the state is not going far enough.

The vulnerability does not allow votes to be changed or cast doubt on election results, but it could let someone see how others voted. That is important because ballot secrecy is a fundamental right under the state constitution, and violations could create an opening for legal challenges.

The development comes in an election season of uncertainty, as President Trump threatens to interfere with the midterms, and he has long demanded that states turn over voter rolls. Georgia has been a particular focus, as Trump continues to deny he lost the state in 2020 to Joe Biden. Earlier this year, the FBI seized ballots cast in that election from a Fulton County election hub.

While the flaw in Georgia has been known for a few years, the widespread adoption of AI tools and the blistering pace of its sophistication have election security experts raising alarms.

This is “a bit of a wake-up call because it illustrates how much more easily vulnerabilities can be exploited now that AI can do all of the technical work for you,” said J. Alex Halderman, a voting technology specialist at the University of Michigan who was part of the team that exposed the flaw.

Other jurisdictions across the country use the same voting equipment made by Liberty Vote, which was known as Dominion Voting Systems before the company was sold. But many have applied a software update to fix the flaw, and some other states do not allow the public release of records that are needed to exploit it, said Mark Lindeman, policy and strategy director at Verified Voting, a nonpartisan group focused on election technology.

Georgia, a presidential battleground with one of the nation’s most closely watched U.S. Senate races this year, is the only place where the system is used statewide. Lindeman said that, combined with an open records law that has allowed access to key documents, creates a “perfect storm.”

“It’s really embarrassing that this is still a possibility,” Lindeman said.

How does voting work in Georgia?

Georgia voters make their selections on touchscreen voting machines that print paper ballots voters insert into scanners to tally the votes.

Such cast-vote records detail the votes from each ballot. Those records and electronic ballot images created by the scanners are randomized. But the software flaw allows them to be put back in the order they were cast, according to a report by researchers who discovered it in 2022.

Along with other publicly available data, that information could be used to match voters to their ballots, the researchers wrote.

Max Springer, a Princeton University researcher who was not involved in the original research and studies AI, said he gave a publicly available AI assistant that research. He said it was able to reverse the shuffling of electronic ballot records from Georgia’s May primary and then tell him what other records it would need to match names to ballots.

He then gave the AI assistant the early voting list for the counties he examined and the cast-vote record file, which could be obtained through a public records request. It was able to create “buckets of ballots and potential voters,” he wrote in a blog post. In many instances, that made it possible to match voters to their ballots.

In cases where ambiguity remained, he wrote, he got the public audit log for the ballot scanners and precinct check-in records and was able to match most ballots to specific voters.

“AI coding tools are essentially supercharging laymen people to exploit vulnerabilities,” Springer said in an interview.

Why does ballot secrecy matter?

Georgia’s Constitution says elections “shall be by secret ballot,” and state law requires voting machines to “permit voting in absolute secrecy so that no person can see or know any other elector’s votes.”

A lack of ballot secrecy can make it easier to buy or sell votes and increase the danger of coercion to vote a certain way by family members, political organizations, employers or government officials. It also is information that could be invaluable to political campaigns.

Gabriel Sterling, special projects manager in the secretary of state’s office, pushed back on the concerns. He said it would be easier to use mail ballots if vote-buying or coercion was the goal and that it probably would be cheaper for campaigns to just increase outreach to voters who fit a certain profile than try to identify voters this way.

State Election Board member Salleigh Grubbs proposed a rule during the board’s August meeting that would have required the secretary of state’s office to apply the software update recommended by the manufacturer by Tuesday.

“Each [voter] has one vote, and no one is entitled to know how it was cast,” Grubbs said. “That privacy protects more than the individual voter. It protects the integrity of the entire election.”

In a letter to the election board, an agency lawyer argued that the update has not been certified by the secretary of state, the implementation would take months, and the Legislature has not provided necessary funding. The board rejected Grubbs’ proposal. Some members said they did not believe they had the authority to order the secretary of state to act and they raised concerns about the short timeline before the November midterms.

Board member Sara Tindall Ghazal, who voted against the proposal, said it is “intensely frustrating” that the software update has not been applied. But she pointed out that it is a felony to reveal how someone voted, which should serve as a deterrent.

“I hate the fact that it’s even physically possible, but there are very, very severe penalties if somebody were to actually do this,” she said.

What’s being done?

The secretary of state’s office sent guidance to county election officials instructing them to refer open records requests for certain records to the secretary of state’s office. It will release them with the problematic information blacked out and decline to release other information and documents.

Sterling said the office is working with a vendor to scramble the original order of ballot images and cast-vote records before they are made public. Halderman said that precaution would be necessary to keep someone from reconstructing the order.

While some other jurisdictions have applied the software update that reportedly fixes the problem, some have done what Georgia is now trying to do by restricting public access to the records needed to exploit the flaw.

Marilyn Marks is executive director of the Coalition for Good Governance, which advocates for election transparency and security and raised the alarm about the vulnerability. She argued that withholding documents is not the solution and that steps need to be taken to ensure ballots cannot be traced to voters in the first place.

“When Georgia’s election records contain identifiers that can be used to trace ballots to voters, the only legal and acceptable answer is to stop recording that information — not restrict public access to sensitive unlawful information to insiders and commercial vendors,” she said.

With time growing short before the elections, Marks said a workable interim solution would be to collect ballots in locked boxes at precincts and then shuffle and scan them at a central tabulating center.

Brumback writes for the Associated Press.

Fox Corp.’s $22-billion acquisition of San José-based Roku, operator of streaming services and seller of hardware devices, seemed like a straightforward deal when it was announced in June: A growing media company was looking to bolster its presence in the fast-growing streaming industry.

But, on Wednesday, the Trump administration weighed in.

Fox Corp. and Roku said that the companies received requests from the Justice Department on Tuesday for additional information in connection with its review of the merger.

While Fox and Roku downplayed the requests, saying that they had expected the outreach, the timing of the move raised eyebrows among some analysts, who said it could signal further scrutiny of the transaction by the Justice Department.

“The president has been outspoken on the fact that he will take retaliatory action against networks that say things that he doesn’t agree with, or they do things that he doesn’t agree with,” said Rob Enderle, principal analyst at advisory services firm Enderle Group.

The action follows President Trump’s surprise over Fox’s ouster of anchor Maria Bartiromo. She was pushed out after she had shared internal company texts with the White House, which sources told The Times may have been the breaking point.

Trump said on social media that he couldn’t believe that Bartiromo will no longer have her shows on Fox. “Her fans, of which there are many, will not be happy,” he wrote on Truth Social on Sept. 3.

Associate Atty. Gen. Stanley Woodward said the Justice Department could not comment on pending matters but said in a statement: “We can affirm that this DOJ under President Trump’s leadership will continue to prioritize affordability for all Americans across our economy.”

Fox announced in June its plans to acquire Roku for $22 billion, which would give the company access to Roku’s 100 million households that use its platform to connect to different streaming services. The deal would benefit Fox’s advertising business, as well as make it less reliant on traditional pay TV platforms.

Fox and Roku said they expect the merger to be done by the first half of 2027, subject to regulatory and shareholder approval, according to a Sept 9 filings with the U.S. Securities and Exchange Commission.

“FOX and Roku will continue to work cooperatively with the DOJ in its review of the Mergers,” Fox said in its filing.

Some legal experts said it is fairly standard for the Justice Department to make an additional request for information.

“It doesn’t mean that their review is going to be more extensive than usual,” said Ray Seilie, an entertainment attorney at law firm Kinsella Holley Iser Kump Steinsapir.

For example, the Justice Department made a second request for information when it reviewed Paramount Skydance’s deal to buy Warner Bros. Discovery, he said. The merging companies typically send information that helps the government figure out what the market impact will be of a merger, he added.

The Justice Department ultimately approved Paramount’s planned acquisition, despite opposition from some industry stakeholders. State attorneys general and the Writers Guild of America have sued Paramount over the deal, raising antitrust concerns. Others have pointed out close ties between Trump and Larry Ellison, a financial backer of the deal, who has also donated money to a group that supports Trump. Ellison’s son, David, is chief executive of Paramount Skydance.

Legal experts and analysts said they don’t think the combination of Fox and Roku raises antitrust issues because they are not dominant players in streaming and have businesses that complement each other.

But one wild card is Trump.

“You never know what Trump is going to seize on and decide he wants to do,” said Bryan Sullivan, a partner with law firm Early Sullivan Wright Gizer & McRae on whether Trump will take retaliatory action through the Justice Department in the Fox-Roku deal. “It’s chaos in the federal government and it could very well happen because of that reason, but it could also just be a blip and not a big deal.”

Times staff writer Stephen Battaglio contributed to this report.

The U.S. Secret Service dealt with several drone-related incidents without adjusting its protection policies or documenting why it didn’t, according to a government report released Thursday. That information may have helped illustrate the emerging threat of civilian drone use before one was used in the 2024 assassination attempt on then-candidate Donald Trump in Butler, Pa.

The report from the Government Accountability Office found delays and holes in how the Secret Service updates its policies regarding threats, and arrives after a few turbulent years for the agency charged with the president’s protection.

The would-be assassin in Butler positioned himself on a roof left unsecured, nicking the president’s ear with a bullet. Months later, a man with a rifle got surprisingly close to Trump at his West Palm Beach, Fla., golf course. And in April, an armed man got beyond security barriers at the White House Correspondents’ Assn. dinner, where the president sat.

The report found that between 2015 and 2025 the Secret Service dealt with 83 security incidents and that it updated its protection policies in response to 25 of them. Among the incidents was a drone that made contact with President Obama’s motorcade in 2015 and another flown about 200 feet over a rally for then-presidential candidate Bernie Sanders.

Failing to document why the Secret Service decided not to change its policy is the concern, said Nathan Tranquilli, acting director of the Government Accountability Office, adding that the drone incidents were a “compelling example” of that.

“Some of the missing information has been relevant to subsequent attacks,” the report read. It cited the Butler incident, where the culprit flew a drone for 11 minutes over the crowd, which helped him position himself to get a clear shot at Trump.

The Secret Service also failed to update eight of 22 protection policies within a required time frame of four years. A memorandum of understanding between the Secret Service and the Diplomatic Security Service, which designates each agency’s responsibilities for the president’s overseas security, hasn’t been updated since 1991, even though an annual review and update are required. As a consequence, the memorandum doesn’t address newer threats, such as drones.

“When you look at the Secret Service and you look at their mission, really it’s a zero-fail mission, and they’ve got a ton of challenges,” Tranquilli said. “When decisions were being made about where to put time and energy, some of these things fell to the side, and, as a result, there were some delays.”

The report recommended three fixes, including that the Secret Service revise its policy to require that, when a security incident doesn’t warrant a policy update, that the rationale is documented.

A spokesperson for the Secret Service did not immediately respond to a request for comment, but the report stated that the Department of Homeland Security, which oversees the Secret Service, agreed with all recommendations and plans to implement changes.

Bedayn writes for the Associated Press.

California Atty. Gen. Rob Bonta abruptly pulled out of a planned mediation session Monday to seek a resolution to the antitrust lawsuit that has stalled Paramount’s blockbuster $111 billion merger with Warner Bros. Discovery.

Bonta, in a statement, cited Paramount’s alleged leaking and misrepresenting information the two sides discussed during a preliminary session Friday.

Representatives of Bonta and Paramount Skydance came together late last week to set ground rules for Monday’s meeting, which was to involve Paramount Skydance Chief Executive David Ellison.

One of the rules had been confidentiality of the mediation process.

“I have pulled down this meeting,” Bonta said in a statement. “As I have said before, generally for all cases, I prefer to resolve disputes in the boardroom, not the courtroom. As I’ve also said, if the opposing party in litigation wants to meet in good faith to make a sincere effort to resolve the case.”

Bonta went on to say “Not only did Paramount leak the alleged substance of the settlement discussions, but they misrepresented these discussions, demonstrating a lack of good faith.

“As soon as Paramount stops playing games and engages sincerely, my office is happy to meet again.”

This is a developing story.