It's good that people can get these and reverse engineer them, do a security audit, and publish the results (which are that they are easily hackable and insecure).

> The fact that voter information is left on devices, unencrypted, that are then sold on the open market is malpractice

I disagree with him that what he describes is "voter information".

There's vote information and election information, both which are already public information and are not sensitive information at all. The machines do not have voter information on them nor does he give any evidence of it. What he describes finding was:

> The information I found on the drives including candidates, precincts, and the number of votes cast on the machine, were not encrypted.

All these things are public information already.

> Worse, the “Property Of” government labels were still attached, meaning someone had sold government property filled with voter information and location data online, at a low cost, with no consequences. It would be the equivalent of buying a surplus police car with the logos still on it.

When government agencies auction off surplus cars they seldom repaint them first. It's common to find them with the logos. Example:

https://www.copcarsonline.com/2018_Dodge_Charger_Largo_FL_35...

Even comes with the original light bar and the radar!