DEF CON 33 - Voting Village - A NY Legal Challenge to ExpressVote XLs Barcode Use - Susan Lerner @DEFCONConference
DEF CON 33 - Voting Village - A NY Legal Challenge to ExpressVote XLs Barcode Use - Susan Lerner  @DEFCONConference
Uploaded November 2025 | Updated September 2026, 3 weeks ago
Susan Lerner provides an overview of the ongoing litigation in New York state court, Common Cause NY v. Kosinski, which challenges the legality of using the ES&S ExpressVote XL all-in-one ballot marking device and tabulator under New York law. The ExpressVote XL records votes in barcodes - unreadable to the naked eye - which, Common Cause NY asserts, violates New York law. NY statute provides that all voters must have the opportunity to verify their votes before they are cast. Notably, the federal Help America Vote Act includes the same provision. Should Common Cause NY prevail in state court, the decision could spark further action.

The recording or votes in barcodes or QR codes has been controversial ever since its introduction. In 2019, Colorado Secretary of State Jenna Griswald (D) announced an initiative to end encoding votes in barcodes/QR codes in Colorado. In March, Donald Trump issued an executive order that sought to prohibit encoding votes in barcodes/QR codes in federally certified voting machines.

This talk will explore the legal arguments at issue in the NY case, that could have repercussions elsewhere.
DEF CON 33 - Voting Village - A NY Legal Challenge to ExpressVote XLs Barcode Use - Susan LernerDEF CON 33 -  How malicious packages on npm bypass existing security tools - Paul McCartyDEF CON 33 - SCCM: The tree that always bears bad fruits - Mehdi kalimer0x00 ElyassaDEF CON 33 Recon Village -  Inside the Shadows Tracking RaaS Groups, Cyber Threats - John DilgenDEF CON 33 - Emulating Embedded Linux Devices at Scale w LightTouch Firmware Rehosting - S PolkeDEF CON 33  Voting Village - Risk Limiting Audits: What They Are and Arent - Philip StarkDEF CON 34 - Video Team - Ham Radio Village  - Marvin Goes HAMDEF CON 31 - The Art of Compromising C2 Servers  A Web App Vulns Perspective - Vangelis StykasDEF CON 32  - Manufacturing Lessons Learned, Lessons Taught - Tim ChaseDEF CON 34 - Video Team - EmbeddedSystems VillageDEF CON 33 - The UnRightful Heir   My dMSA Is Your New Domain Admin - Yuval GordonDEF CON 33 - Voting Village -  Its Not Safe Yet: Online Voting in Practice - Michael Specter
DEFCONConference |

DEF CON 33 - Voting Village - A NY Legal Challenge to ExpressVote XL's Barcode Use - Susan Lerner

SHARE TO X SHARE TO REDDIT SHARE TO FACEBOOK WALLPAPER