Monthly Archives: August 2018

An anti-corruption referendum in Colombia failed to pass on Sunday after narrowly falling short of a required one-third quorum. Nearly 11.7 million of nearly 36 million registered voters turned out to vote on seven measures designed to battle corruption and improve transparency. A threshold of 12.1 million voters was needed to make it binding. However, of those that cast a vote nearly 99 percent supported the proposals, sending a clear message to political elites that the public wants corruption to be taken seriously.

Congo: Opposition leader Bemba banned from running for president | Al Jazeera

Jean-Pierre Bemba has been banned from running in the Democratic Republic of Congo's presidential election later this year by the country's electoral commission. Bemba, a former vice president, was considered one of the top opposition contenders since returning to the country in August after he was acquitted of war crimes by the International Criminal Court (ICC). However, an appeal in another case about interfering with witnesses is still pending. The electoral commission called that synonymous with corruption - DRC law prevents people convicted of corruption from running for president. The announcement came late on Friday as the electoral commission issued a list of eligible candidates for the long-delayed December 23 polls. Bemba can appeal the decision and the final list of candidates is expected next month.

Pakistan: Election Commission apprehensive of I-voting for expats | The Nation

As the process of by-elections on vacant seats of National and Provincial Assemblies will start from Tuesday (tomorrow), the Election Commission of Pakistan remains jittery over use of internet voting (I-voting) for overseas Pakistanis because of technical complications. The ECP spokesperson said that I-voting facility would be extended to overseas Pakistanis in coming by-elections in compliance with the Supreme Court orders. The spokesperson said that the court had ordered the ECP to go for I-voting in the coming by-elections, even though the ECP had planned a pilot project that would not impact the actual poll results.

Zimbabwe: Opposition rejects ruling and ‘false’ inauguration | Associated Press

Zimbabwe’s main opposition leader said Saturday he respectfully rejects the court ruling upholding the president’s narrow election win and called the inauguration set for Sunday “false,” while U.S.-based election observers said the country does not yet have a “tolerant, democratic” voting culture. Nelson Chamisa spoke a day after the Constitutional Court unanimously rejected the opposition’s claims of vote-rigging in favor of President Emmerson Mnangagwa, saying it did not bring “sufficient and credible evidence.” Chamisa said “we have the right to peaceful protest” and that other routes will be pursued. “Change is coming,” he said. “Political doors are going to be opened very soon.” He gave no details. Last month’s peaceful election was seen as a chance for Zimbabwe to move on from Robert Mugabe’s repressive 37-year-rule. Now Chamisa alleges “a new persecution” after a deadly crackdown on the opposition.

National: Trump Objections to Senate Election Security Bill Stalled Measure | Roll Call

President Donald Trump is objecting to the Senate’s effort to help improve election security, citing concerns about imposing federal burdens on state and local governments. The Rules and Administration Committee abruptly scrapped a Wednesday markup of bipartisan election security legislation, and there were rumors that the White House might have been at least in part behind the delay. Some Republican members of the committee were against the bill, including former Chairman Richard C. Shelby, R-Ala. … The White House is asking the Senate, “Do not violate the principles of Federalism — Elections are the responsibility of the states and local governments,” according to the Walters statement. “We cannot support legislation with inappropriate mandates or that moves power or funding from the states to Washington for the planning and operation of elections.”

National: White House blocks bill that would protect elections | Yahoo News

A bill that would have significantly bolstered the nation’s defenses against electoral interference has been held up in the Senate at the behest of the White House, which opposed the proposed legislation, according to congressional sources. The Secure Elections Act, introduced by Sen. James Lankford, R-Okla., in December 2017, had co-sponsorship from two of the Senate’s most prominent liberals, Kamala Harris, D-Calif., and Amy Klobuchar, D-Minn., as well as from conservative stalwart Lindsey Graham, R-S.C., and consummate centrist Susan Collins, R-Me. Sen. Roy Blunt, R-Mo., was set to conduct a markup of the bill on Wednesday morning in the Senate Rules Committee, which he chairs. The bill had widespread support, including from some of the committee’s Republican members, and was expected to come to a full Senate vote in October. But then the chairman’s mark, as the critical step is known, was canceled, and no explanation was given.

National: What’s next for postponed Secure Elections Act | Politico

The Senate Rules Committee’s last-minute decision Wednesday to postpone a markup of the Secure Elections Act (S. 2593) was a significant setback for a bill that had been considered a bipartisan bright spot in a bitterly divided Congress. “For everyone else who delayed this action today, I hope that you will listen to the clarion cry of our intelligence community and continue to work with us and reschedule the markup and pass the bill into law," Sen. Amy Klobuchar, the ranking member on the Rules Committee and the bill’s chief Democratic co-sponsor, said in a statement. Rules announced the delay hours before DHS Secretary Kirstjen Nielsen urged states to have a “verifiable and auditable ballot,” though she deferred on the question of whether paper was essential, saying, “I don't know that we're interested in mandating how.”

National: Election-Hacking Lessons from the 2018 Def Con Hackers Conference | The New Yorker

Earlier this month, Bianca Lewis, who is eleven years old, was wearing a T-shirt printed with the words “No time for Barbie, there’s hacking to be done” and sitting in front of a computer at the annual Def Con hacking conference, in Las Vegas, meddling with a replica of the Florida Secretary of State’s election Web site. She’d already surreptitiously entered the site’s database through what is known as an SQL injection. “First, you open the site,” she explained, “then you type a few lines of code into the search bar, and you can delete things and change votes. I deleted Trump. I deleted every single vote for him.” Lewis was visiting an event at the conference run by R00tz Asylum, a nonprofit that teaches hacking to kids, where organizers had replicated thirteen Secretary of State Web sites and invited kids to hack them. The day the conference began, as programmers were finishing coding the sites, the National Association of Secretaries of State issued a press release complaining that Def Con “utilizes a pseudo environment which in no way replicates state election systems, networks, or physical security.” That was true enough—these sites were only look-alikes—but they were constructed from data scraped from the actual state sites, and contained known vulnerabilities that had been exploited by hackers in the past. One of the organizers, Jake Braun, rolled his eyes when I asked him about the association’s letter. “It’s totally tone-deaf,” he said. “A nation-state is literally hacking our democracy—wouldn’t you want to take any help you could possibly get? If they don’t think that the Russians are not doing what we’re doing here all year, as opposed to just a weekend, then they are fucking idiots, right?”

National: Former Facebook security chief warns its too late to protect 2018 elections | CNET

Former Facebook security chief Alex Stamos has issued a sobering warning about the continuing threat of foreign interference in US elections, saying it's "too late to protect the 2018 elections." But he believes the 2020 election can still be saved. Stamos, who departed Facebook for Stanford University earlier this month, is well acquainted with the subject, having played a central role in Facebook's response to interference by Russian trolls in the 2016 US presidential election that took place on the social media giant. In a blog post published Wednesday on Lawfare, Stamos seizes on two pieces of news he says proves that "America's adversaries believe that it is still both safe and effective to attack U.S. democracy using American technologies and the freedoms we cherish."

National: ES&S to boost security following criticism | The Hill

A major election systems vendor on Thursday announced steps to boost the security of its products, just one day after lawmakers raised concerns that the company is not doing enough to safeguard itself from hackers. Election Systems and Software (ES&S), which is the third largest election system vendor in the U.S., announced it will work more closely with the Department of Homeland Security (DHS) and Information Sharing and Analysis Centers (ISAC) in an effort to increase security of its systems ahead of the 2018 midterm elections. The company in a press release said it has formed "new partnerships with multiple DHS offices that include its key cyber office known as the National Protection and Programs Directorate (NPPD) as well as the National Cybersecurity Assessment and Technical Services (NCATS).

California: Los Angeles County’s new ‘open source’ vote tallying system isn’t open source just yet | Statescoop

Election officials in Los Angeles County are touting the state's approval of a new system of tallying absentee votes, one they say will allow the county to distribute redesigned mail-in ballots in time for the Nov. 6 general election. The system runs on technology owned by the county, rather than a private vendor, and in what officials say is a first for California, it's an open source platform. "With security on the minds of elections officials and the public, open source technology has the potential to further modernize election administration, security, and transparency," California Secretary of State Alex Padilla, who certified the new system on Tuesday, said in a press release. The one catch? The new system might not count as "open source" just yet, as the agency that created it hasn't shared the underlying code with the wider programming community.

California: No, You Can’t Vote Through Twitter: California’s Unprecedented Plan to Tackle Fake Election News | Governing

With less than three months to the midterm elections, American voters remain vulnerable to the same type of information warfare that Russia used to interfere with the 2016 presidential race. Election officials say voting systems are better protected against hackers than they were two years ago, but intelligence experts say the federal government hasn't tackled the threat of foreign-created disinformation on social media. The risk endures after Russian nationals used hundreds of fake social media accounts to stoke political discord in the U.S. in 2016, according to an indictment earlier this year by Special Counsel Robert Mueller. "The spreading of misinformation and disinformation is one of the single greatest threats to our democratic process," says National Association of Secretaries of State President Jim Condos, a Democrat who is also Vermont's Secretary of State. "As we saw in 2016, our foreign adversaries used these tactics to sow doubt with voters and weaken voter confidence in the integrity of our elections." Now the nation’s most populous state is pushing back, launching an unprecedented effort to address the issue.

Georgia: Consultant who proposed closing precincts fired | Atlanta Journal Constitution

The elections consultant who proposed closing most voting locations in a majority African-American rural Georgia county has been fired ahead of a vote Friday on consolidating precincts. The proposal to shutter seven of the county’s nine precincts before the Nov. 6 election appears unlikely to pass, said Randolph County Attorney Tommy Coleman. Coleman fired the consultant, Mike Malone, in a letter dated Wednesday. Malone’s recommendation to close precincts before the election for Georgia governor received widespread opposition from voters and elected officials. Critics of the plan said it would have suppressed turnout in the governor’s race between Democrat Stacey Abrams and Republican Secretary of State Brian Kemp.

Georgia: Voter registration website blocks international traffic | Atlanta Journal Constitution

Georgia election officials are blocking computers from outside the United States from viewing voter registration websites because of security concerns. Anyone trying to access the state’s online voter registration system or My Voter Page from an international internet address will see a message saying “Access Denied,” along with contact information for assistance. The sites were removed based on advice from private security vendors and the Multi-State Information Sharing & Analysis Center, which provides cyber threat monitoring for governments, said Candice Broce, spokeswoman for Georgia Secretary of State Brian Kemp. Voters living overseas, including those in the military, can still request absentee ballots and voter registration applications online.

Maryland: Federal Team Evaluating Election System in Maryland | NBC4 Washington

A U.S. Department of Homeland Security team is in Maryland this week to evaluate the state's election systems after officials learned last month about a transaction between a venture fund with Russian ties and a company involved in the state's election infrastructure, Maryland's elections administrator said Tuesday. The Hunt and Incident Response Team from the National Cybersecurity and Communications Integration Center is checking to ensure the election systems hosted by ByteGrid remain secure. “They're evaluating whether or not there's any issues with ByteGrid,” said Linda Lamone, the state's elections administrator. Gov. Larry Hogan, Senate President Thomas V. Mike Miller and House Speaker Michael Busch asked for the technical assistance to evaluate the network last month.

Michigan: Democrats’ attempted hacker? A test from Michigan Democrats | Associated Press

A would-be hacking attempt into the national Democratic Party's massive voter file wasn't that at all. It turns out to be the work of a technology company hired by Michigan Democrats, all in the name of testing how secure the party can keep information on tens of millions of Americans. "This was an unauthorized test, not an attack," Bob Lord, the Democratic National Committee's chief security officer, told The Associated Press in an interview Thursday. That finding, discovered after national party officials already had contacted federal law enforcement fearing a malicious hacking attempt, marks an odd and potentially embarrassing twist to the party's data security efforts two years after Russians penetrated DNC computers and released internal communications the upended the 2016 presidential election. The chairman of the Michigan Democratic Party, Brandon Dillon, did not respond to a request for comment.

Texas: Millions of Texas voter records exposed online | TechCrunch

massive trove of voter records containing personal information on millions of Texas residents has been found online. The data — a single file containing an estimated 14.8 million records — was left on an unsecured server without a password. Texas has 19.3 million registered voters. It’s the latest exposure of voter data in a long string of security incidents that have cast doubt on political parties’ abilities to keep voter data safe at a time where nation states are actively trying to influence elections. TechCrunch obtained a copy of the file, which was first found by a New Zealand-based data breach hunter who goes by the pseudonym Flash Gordon. It’s not clear who owned the server where the exposed file was found, but an analysis of the data reveals that it was likely originally compiled by Data Trust, a Republican-focused data analytics firm created by the GOP to provide campaigns with voter data.

Congo: Outside help not wanted, says DR Congo as key elections loom | AFP

Mountainous hurdles face the Democratic Republic of Congo as it prepares for elections, just four months away, that will shape the future of one of the world's powder-keg countries. Organising elections among some 40 million voters in a troubled, impoverished state nearly five times the size of France is a huge challenge. But, prickly about intrusion, the DRC is rejecting offers of advice, oversight and election funding from abroad. On Monday, it was regional neighbour South Africa's turn to be spurned. The authorities rejected the appointment of South African former president Thabo Mbeki as "special envoy" to the December 23 ballot, a role announced in the press but not officially confirmed by Pretoria.

Israel: East Jerusalem’s 360,000 residents to get just 6 polling stations in local vote | The Times of Israel

The Jerusalem municipality plans to open only six polling stations in the predominantly Arab eastern part of the city for October’s mayoral election, sparking charges that officials are trying to keep Arab residents from voting — as the eastern sector of the city has some 360,000 residents. Jewish neighborhoods, which represent most of the city’s voters, will have more than 180 stations, Haaretz reported Thursday. Each polling station in a Jewish neighborhood will serve approximately 2,000 voters, as opposed to the 40,000 voters expected to use each polling station in Arab neighborhoods. Three polling stations will be opened in the mixed Arab-Jewish neighborhood of Beit Safafa, which means that the final three stations for Arab voters, located in the Old City, Sheikh Jarrah and Jabal Mukkaber, will each serve some 80,000 residents.

Sweden: How does Sweden election process work? | Express

In less than three weeks Swedes take to the polls to cast their votes in the Swedish general election. The general election is scheduled for Sunday, September 9, 2018. Recent polls have seen far-right party Sweden Democrats (SD) gain support after a survey, conducted by Sipo, placed them second, behind Stefan Löfven and the Social Democrats Party (SAP). SAP has been favourites in Sweden for decades, but although they are topping the polls at the moment, the leftist party could be heading for their worst election in almost 100 years. This might come as a shock for the left-wing party as the support for SAP, a labour party at its core, has been stronger in Sweden than in almost any other countries since the country’s parliamentary-democratic breakthrough in 1917. 175 out of 349 seats are needed for a majority and currently, none of the parties or coalitions have reached this number in the pre-election polls.

Zimbabwe: Court set to rule on presidential election petition | Reuters

Zimbabwe’s top court will on Friday decide whether President Emmerson Mnangagwa’s disputed July 30 election victory should stand against complaints by his main rival that it was rigged. The election, in which Mnangagwa and opposition leader Nelson Chamisa were the main contenders, was touted as a crucial step toward economic recovery and shedding Zimbabwe’s pariah reputation, but instead has left the nation deeply polarized. An army crackdown in response to post-election violence by opposition supporters left six people dead on Aug. 1, recalling the heavyhanded security tactics that marked the 37-year rule of Robert Mugabe, who was removed in a coup last November.

Sweden: Social Democrats’ website hacked in attack linked to Russia and North Korea | The Local

The website of Sweden's centre-left Social Democrats has been hacked for a second time, and the IP address responsible was linked to Russia and North Korea, according to the party's IT provider. The hack was a distributed denial-of-service (DDoS) attack, meaning those responsible disrupted the site to make it unavailable to users. "This is serious. Citizens don't have access to our site, the heart of our election campaign, where the information about our policies is," the party's head of communications, Helena Salomonson, told TT. The site was attacked at around 9pm on Monday, and was down for around six minutes in total, Salomonson said. The party has reported the incident to police.

National: Senate Panel Abruptly Cancels Markup of Election Security Bill | Roll Call

A Senate committee on Wednesday abruptly postponed the planned markup of a key election security bill that had bipartisan support and would have imposed new audit requirements on states. The markup of the Secure Elections Act, authored by Oklahoma Republican James Lankford and Minnesota Democrat Amy Klobuchar, is “postponed until further notice,” the Senate Rules and Administration Committee said on its website. The bill had the backing of several GOP lawmakers, including Richard M. Burr of North Carolina, Susan Collins of Maine and Lindsey Graham of South Carolina, as well as Democrats such as Mark Warner of Virginia, Kamala Harris of California and Martin Heinrich of New Mexico. But a senior Republican lawmaker, Sen. Richard C. Shelby, objected to the bill’s provisions expanding the federal role in elections.

National: Senate Intelligence Committee members raise concerns about voting system vulnerabilities | The Hill

A bipartisan group of lawmakers on the Senate Intelligence Committee raised concerns Wednesday about the election voting systems provided by one of the largest vendors in the United States, questioning whether the company is doing enough to safeguard itself from hackers. Four committee members wrote in a letter they were disappointed that Election Systems & Software (ES&S) has not agreed to undergo independent testing to determine the security level of its systems. The letter comes after an annual hacking conference earlier this month appeared to reveal security vulnerabilities in ES&S voting systems. "We are concerned that ES&S and other election system providers may not be prepared for the growing threats to our elections,” Senate Intelligence Committee Vice Chairman Mark Warner (D-Va.) and Sens. Susan Collins (R-Maine), James Lankford (R-Okla.), and Kamala Harris (D-Calif.) wrote in a letter to the company.

National: DHS chief calls on officials in all 50 states to have ‘verifiable’ ballots by 2020 election | The Hill

Homeland Security Secretary Kirstjen Nielsen on Wednesday called on election officials in all 50 states to ensure that ballots used during the 2020 presidential election are able to be audited. Nielsen told a group of reporters touring the Department of Homeland Security's National Cybersecurity and Communications Integration Center (NCCIC) in Arlington, Va., that she wants "all state and local election officials to make certain that by the 2020 presidential election, every American votes on a verifiable and auditable ballot." "Our systems must be resilient. We must be able to demonstrate that the votes count and that they are counted correctly," she added.

National: The Votes Are In: Election Security Matters | Dark Reading

No matter what side of the political divide on which one falls, everyone agrees that the security and integrity of elections are critical. Throughout history, foreign adversaries have attempted to influence election outcomes to their benefit and, in 2016, the efforts escalated to cyberattacks. For this reason, the security of US elections and election infrastructure remains a top national concern, and in early 2017, the government designated the election system as one of our critical infrastructures. With the number of cyberattacks growing every day, improving cybersecurity will be a mandatory component in preserving our political process. The US Department of Homeland Security (DHS) confirmed that at least 21 states have had their networks scanned by Russian adversaries. Scanning is the cyber equivalent of checking for holes in a fence, an unlocked door, or an open window. There are also confirmed reports of a few specific intrusions into government-owned voter registration databases.

National: Democratic Party Says It Thwarted Attempted Hack of Voter Database | The New York Times

The Democratic National Committee said Wednesday that it was alerted to an attempted hack of its voter database this week and that it had notified law enforcement. The effort to target the Democratic Party’s voter file, known as Votebuilder, was not successful, and a party official said the identities of the culprits were unclear. When the Democratic National Committee was hacked in 2016 during the presidential campaign, the incident was traced to Russia. This week’s attempt was aggressive, two officials briefed on it said. The hackers set up a fake page that mimicked the party’s login page for its voter-registration website, a tactic that could gather names, passwords and other credentials of those using the voter database. The hackers also may have sent emails to people within the national committee to try to trick them into using the fake page, a tactic known as “spearphishing,” the officials said. The Federal Bureau of Investigation is looking into the incident, one of the officials said.

National: Officials fear voter registries vulnerable to hackers, could lead to problems on Election Day | Associated Press

A top Department of Homeland Security official said on Tuesday that while it would be difficult for hackers to meaningfully change vote totals in the upcoming elections, they could attack more vulnerable voter registration files, which an expert said could sow “chaos” on Election Day. "Our assessment is that it would be exceedingly complex to change vote totals, and that in trying to attempt to do so [it’s] likely that something would be noticed," DHS’s National Risk Management Center Director Robert Kolasky said in a Senate hearing. “Voter registration files we’ve assessed as more of a vulnerability than the actual vote count process.”

National: States Detail Election-Security Plans | Wall Street Journal

State election officials plan to spend about two thirds of election security money allocated by Congress earlier this year on new voting equipment and cybersecurity efforts, though not all the improvements will be completed before the November elections. New data gathered by the federal agency that distributes the funds detail how states plan to spend $380 million appropriated by Congress in March to upgrade election security. States plan to spend roughly $134.2 million on cybersecurity upgrades over five years, and $102.6 million on voting equipment, according to the data released by the U.S. Election Assistance Commission. States plan to spend the rest of the federal funding on measures that include upgrading voter-registration databases, bolstering postelection auditing and communications capabilities.

National: Tech giants open up about election cyberthreats as specter of regulation looms | The Washington Post