Defcon has a prototype secure voting machine for hacking, funded by a $10M DARPA project aimed at developing an open source voting platform on secure hardware
At this year's Defcon hacking conference, Darpa brought the beginnings of what it hopes will be impervious hardware.
Context & Ripple Effects
Defcon's Voting Village has spent years embarrassing the voting industry: in 2018, attendees — including an 11-year-old — hacked the machines while vendors and officials downplayed the damage. DARPA's answer is not another patch cycle but a ground-up rebuild: a $10M program to produce an open source voting platform on secure hardware, with its prototype handed directly to hackers for attack.
Putting the machine on the Defcon floor inverts the usual dynamic — instead of vendors resisting scrutiny, a federal agency is soliciting it before any deployment decision, and publishing the design so anyone can audit it.
First-order effects
- Defcon attackers get a target designed to be audited rather than obfuscated, giving the security community its first crack at hardware built explicitly for verifiability.
- Commercial voting machine vendors now face a federally funded open alternative that could undercut their closed-hardware business model if it matures.
Second-order effects
- Vendors are pushed toward the transparency posture three major US equipment makers later adopted when they let researchers stress-test their software and hardware — openness shifts from liability to competitive necessity.
- Officials weighing procurement gain a reference design backed by government funding, changing the negotiating leverage against incumbent suppliers whose machines keep showing up in vulnerability reports like the 2019 Voting Village findings on six models still in use.
Third-order effects
- If the pattern holds, election infrastructure drifts from proprietary black boxes toward open, publicly attack-tested designs — a trajectory visible again years later when Defcon badges shipped with Baochip-1x, an open source chip with verifiable security.
- A successful open platform would make 'secure by verifiability' a procurement requirement rather than a marketing claim, pressuring regulators and counties to demand auditable hardware as table stakes.
The trend: Election technology is shifting from closed proprietary machines toward open, publicly attack-tested designs, with DARPA's funding accelerating the turn.