National: Threat to US elections in 2020 is not limited to Russia | Eric Tucker/Associated Press
Russia interfered in the 2016 election and may try to sway next year’s vote as well. But it’s not the only nation with an eye on U.S. politics. American officials sounding the alarm about foreign efforts to disrupt the 2020 election include multiple countries in that warning. Concerns abound not only about possible hacking of campaigns but also about the spread of disinformation on social media and potential efforts to breach voting databases and even alter votes. The anxiety goes beyond the possibility that U.S. adversaries could affect election results: The mere hint of foreign meddling could undermine public confidence in vote tallies, a worrisome possibility in a tight election. “Unfortunately, it’s not just Russia anymore. In particular, China, Iran, a couple of others, studied what the Russians did in 2016,” said James Lewis, a cybersecurity expert at the Center for Strategic and International Studies in Washington.Verified Voting Blog: Verified Voting Releases Guide Comparing Available Ballot Marking Devices
Characteristics of Currently Available Ballot Marking Devices
Verified Voting Releases Guide Comparing Available Ballot Marking Devices
Today, Verified Voting published a guide comparing the features of ballot marking devices (BMDs) available in the United States: “Characteristics of Currently Available Ballot Marking Devices By Vendor.”
The guide is intended to be a useful comparison chart between the various BMD vendors and devices for informational purposes. We attempted to collect the most meaningful characteristics that would help in evaluating the differences among systems. As detailed in Verified Voting’s Policy on Direct Recording Electronic Voting Machines and Ballot Marking Devices, Verified Voting does not endorse any specific vendor or device. Check out The Verifier to see an interactive map of voting equipment in use throughout the United States.
Please send questions and feedback to voting-system-features@verifiedvoting.org.
Florida: New U.S attorney tries to restore confidence in Florida elections | Mary Ellen Klas/Miami Herald
As state officials acknowledge that domestic and foreign actors may be constantly attempting to penetrate Florida’s election infrastructure, U.S. Attorney Larry Keefe sees another danger that is equally formidable but perhaps harder to manage: public perception. “All you need is a computer and some shrewd, smart, social engineering-type people to get inside the heads of the Americans … and you can wreak havoc on a free and open society,’’ said Keefe, the U.S. attorney for the Northern District of Florida. Secretary of State Laurel Lee acknowledged this week that Florida’s election systems are under “daily” attack by foreign or domestic adversaries and, while she wouldn’t detail what the attacks are, she said the state has launched an aggressive campaign to educate and train local election officials to be able to counter those threats. Keefe said those attacks often attempt to “get inside our electronic election infrastructure and change the voter rolls or tabulations.”Georgia: State Supreme Court affirms results of 2018 election | Mark Niesse/The Atlanta Journal-Constitution
The Georgia Supreme Court ruled Thursday that there wasn’t enough evidence to further dispute last year’s election for lieutenant governor, which had inexplicably low vote totals. An election can’t be overturned based solely on unusual vote counts in the lieutenant governor’s race — tens of thousands fewer than in every other statewide election — the court wrote in its 94-page decision upholding a lower court’s dismissal of the case. Specific evidence of illegal or improper votes is required, it said. The plaintiffs in the case alleged there were about 127,000 fewer votes than expected compared with previous elections, a larger disparity than the 123,172-vote margin of victory for Republican Geoff Duncan over Democrat Sarah Riggs Amico. “A party contesting an election must therefore offer evidence — not merely theories or conjecture — that places in doubt the result of an election,” according to the court’s 8-0 ruling, written by Justice Sarah Warren. “The petitioners in this case have not carried that burden.”Georgia: $300K fine sought against Georgia in paper ballots lawsuit | Mark Niesse/The Atlanta Journal-Constitution
A federal judge is being asked to impose more than $300,000 in sanctions against Georgia over its reluctance to turn over election databases, a request that state attorneys say is unjustified because they need to protect election information. The dispute in the lawsuit, which is demanding hand-marked paper ballots be used in elections, could end up costing Georgia taxpayers if U.S. District Judge Amy Totenberg agrees to penalize the state. The plaintiffs allege that Georgia election officials repeatedly obstructed efforts to inspect an elections database for tampering or flaws. Called the General Election Management System (GEMS) database, it contains programming for ballots used statewide. But attorneys for Secretary of State Brad Raffensperger say they wanted to ensure that election information was secure before disclosing it. After they eventually turned over the database this summer, the plaintiffs didn’t find any infections or problems, according to the state.Michigan: Active duty military serving overseas could vote electronically under Michigan Senate-passed bill | Lauren Gibbons/MLive
Active duty members of the military serving overseas could send in their absentee ballots electronically under legislation passed in the Michigan Senate Wednesday. Senate Bills 117 and 297, sponsored by Senate Elections Chair Ruth Johnson, R-Holly, and Sen. Paul Wojno, D-Warren, would allow electronic absentee ballot returns for military voters serving overseas. The voter would sign their absentee ballot with an electronic signature verified by the U.S. Department of Defense. Under federal law, states are required to provide electronic absentee ballots to active members of the military 45 days before an election. But because Michigan doesn’t allow electronic absentee ballots, military voters serving overseas currently have to print out the ballot and mail it back - an extra step that can be difficult for people serving in areas with little to no mail service.New Jersey: Questions of vulnerability surround New Jersey’s aging voting machines | Rob Anthes/Community News
In 2004, Hopewell resident Stephanie Harris went to her polling place for the presidential primary, never expecting what was about to happen would alter her life and the public discourse around voter security for the next decade and a half. When Harris entered the privacy booth that day, she saw one of Mercer County’s then-new touchscreen voting machines facing her, a model called the Sequoia AVC Advantage. She found her candidate of choice on the large paper ballot overlay, pressed the box next to the candidate’s name and then hit a large button at the bottom right of the machine to cast her vote. Typically, at this point, the AVC Advantage will make a noise to indicate a vote has been counted. For Harris, nothing happened. Harris exited the privacy booth slightly confused. A poll worker stopped her, and said her vote didn’t register and that she should try again. Harris did, four times with the same results. After the fifth time, the poll worker shrugged, and said, “Well, I think it worked.” Harris never received definitive confirmation her vote had been cast. To this day, she doesn’t know whether the machine recorded her vote. Harris couldn’t shake the feeling that her vote had been taken away. She asked the county for confirmation or at least an explanation. She didn’t get answers, but she did earn a new nickname, courtesy of a county freeholder—“the Incident in Hopewell.” So she sued.Pennsylvania: $90M for Voting Machines, Mail-In Ballots Signed Into Law | Associated Press
Gov. Tom Wolf signed legislation Thursday that advocates say makes the most significant changes to modernize Pennsylvania election laws in 80 years and authorizes the state to borrow of up to $90 million to help counties buy new voting machines ahead of next year's presidential election. Wolf, a Democrat, said the legislation takes the nation's least voter-friendly election laws and puts them in line with states that have the highest voter turnout. The bill was negotiated privately by Wolf and leaders of the Republican-controlled Legislature. A draft first appeared last week . It passed the House and Senate on Tuesday and had the support of good-government groups.Africa: Russia Tests New Disinformation Tactics in Africa to Expand Influence | Davey Alba and Sheera Frenkel/The New York Times
Russia has been testing new disinformation tactics in an enormous Facebook campaign in parts of Africa, as part of an evolution of its manipulation techniques ahead of the 2020 American presidential election. Facebook said on Wednesday that it removed three Russian-backed influence networks on its site that were aimed at African countries including Mozambique, Cameroon, Sudan and Libya. The company said the online networks were linked to Yevgeny Prigozhin, the Russian oligarch who was indicted by the United States and accused of interfering in the 2016 presidential election. Unlike past influence campaigns from Russia, the networks targeted several countries through Arabic-language posts, according to the Stanford Internet Observatory, which collaborated with Facebook to unravel the effort. Russians also worked with locals in the African countries to set up Facebook accounts that were disguised as authentic to avoid detection.Bolivia: Police fire tear gas as president, opposition wrestle over election audit | Vivian Sequera & Ueslei Marcelino/Reuters
Protests over a disputed presidential election convulsed Bolivia on Tuesday as police fired tear gas in the capital and the sitting president and opposition candidate wrestled over an audit of the results. The brief suspension of publication of the results from an electronic count of the Oct. 20 presidential election has triggered protests and strikes that have closed roads, schools and businesses around the nation for more than a week. President Evo Morales, a leftist seeking a fourth term, was eventually declared the winner, prompting accusations of fraud from opposition candidate Carlos Mesa and his supporters. In La Paz, opposition protesters mounted road barricades of rope, wooden boards and sheets of metal. Rows of helmet-clad riot police lined some streets, separating Morales’ supporters from protesters opposed to the president. Tear gas was used in at least two locations to disperse protesters.UAE: E-voting technology adopted by UAE a pioneering experiment in the region | Samir Salama/Gulf News
By adopting an election protection system, the National Election Committee reiterates its commitment to hold an election that is characterised by the highest degree of fairness and transparency by implementing the best internationally recognised practices used in the world’s most successful parliaments, said Dr Anwar Mohammad Gargash, Minister of State for Foreign Affairs, Minister of State for Federal National Council Affairs and Chairman of the National Election Committee. Dr Gargash said on the eve of the early voting that starts today at nine polling stations across the country, the highly accurate e-voting technology adopted by the NEC is a pioneering experiment in the region, which the UAE introduced during the first Federal National Council Elections in 2006.Verified Voting Blog: Verified Voting Praises Pennsylvania’s Election Reform Package that Helps Counties Purchase Voting Machines
View the statement here: Verified Voting Statement on Election Reform Package
Marian K. Schneider: “This funding ensures the smooth transition to secure and verifiable voting systems.”
“Verified Voting is pleased with the Pennsylvania General Assembly and Gov. Tom Wolf’s commitment to an election reform package that includes funding for counties to help pay for the replacement of electronic voting systems. The passage of the legislation removes all doubt about the legal authority of the Commonwealth to issue $90 million in bond financing.
“State funding for voting system replacement will greatly reduce the budgetary strain on counties and allow them to fund staff training, poll worker training and voter education efforts, all of which are important to ensure a smooth transition. Election security is a nonpartisan issue and the goal of hardening our voting systems against potential threats is shared across the aisle. Counties’ access to these funds is what is needed to ensure a smooth transition to paper-based electronic systems and routine, robust audits.
“A significant number of Pennsylvania counties have already moved forward towards replacement and we applaud their efforts. Without voting systems that retain a voter-marked paper ballot for recounts and audits, Pennsylvania’s elections will be dogged by legitimacy questions and will be the easiest targets for motivated attackers. This legislation as a whole will make voting easier, but the replacement of voting systems will assure Pennsylvanians that they have a verifiable method of voting and their votes will be counted as cast.
Editorials: A simple step every state could take to safeguard elections | The Washington Post
Election security is a complex challenge. One essential step, however, is so simple it can be carried out with a pen and paper. Pennsylvania officials have announced that Philadelphia and Mercer County will conduct a post-election pilot next month of what’s called a risk-limiting audit. The procedure is new to most of the country, but 12 states are experimenting with it — because it’s that much of a no-brainer. Currently, 17 states are not required by law to verify the accuracy of their vote tallies at all. Those that are mostly do so the “traditional” way, which in this case means the wrong way. The process auditors typically use — manually recounting votes in a predetermined percentage of precincts — tells officials whether a particular machine or group of machines is working, but it doesn’t actually answer the essential question: Did the declared winner actually win? Risk-limiting audits instead do what any mathematician . They hand-count a statistically meaningful sample of all votes to determine whether the original tally was correct. The required sample increases as the margin of victory narrows. It’s easy, and it’s time-consuming only in the tightest elections, or when something actually has been tampered with. Of course, that’s when it’s most worth investing the time. So why isn’t everyone doing it?National: The Market for Voting Machines Is Broken. This Company Has Thrived in It. | Jessica Huseman/ProPublica
In the glare of the hotly contested 2018 elections, things did not go ideally for ES&S, the nation’s largest manufacturer of voting technology. In Georgia, where the race for governor had drawn national interest amid concerns about election integrity, ES&S-owned technology was in use when more than 150,000 voters inexplicably did not cast a vote for lieutenant governor. In part because the aged ES&S-managed machines did not produce paper backups, it wasn’t clear whether mechanical or human errors were to blame. Litigation surrounding the vote endures to this day. In Indiana, ES&S’ systems were plagued by mishaps at the local level. In Johnson County, for instance, the company’s brand-new machines faltered in ways that made it difficult to know whether some people had voted more than once. “ES&S misjudged the need for appropriate resources to serve Johnson County on Election Day 2018,” a report issued by state election officials later concluded. Johnson County subsequently terminated its contract with ES&S and, this September, paid more than $1.5 million to purchase an entirely new set of equipment. The uneven performance by ES&S in 2018, however, did little to dent its position as one of the most popular and powerful voting technology companies in the U.S. Any number of prior controversies hadn’t either.National: Here’s where U.S. cyber warriors are working to protect against election threats | Olivia Gazis/CBSNews
The U.S. government's actions to disrupt Russia's attempted cyber incursions into the 2018 midterm elections took place in part in a newly constructed Joint Operations Center (JOC) on the National Security Agency's expanding Fort Meade campus in Maryland. Efforts to protect the 2020 elections are expected to follow a similar drill. Located in the middle of the Cyber Integration Center — a 380,000 square foot, $520 million building whose construction was completed last September — the JOC links two adjoining facilities where NSA and U.S. Cyber Command personnel reside. A massive floor dotted by pods of desks and dominated by three curved, 20-foot-tall screens, the JOC is run by roughly 200 civilian and military officials who work 12-hour, rotating shifts — 24 hours a day, seven days a week, 365 days a year. "One of the first activities that were run out of here was NSA and U.S. Cyber Command support to the 2018 elections," said Colonel Stephen Landry, a senior officer in the NSA's recently launched Cybersecurity Directorate. That included support, he said, to the Russia Small Group, an election security task force comprising NSA and Cyber Command officials that was created last year by General Paul Nakasone, who heads both agencies. The Russia Small Group was instrumental in carrying out an offensive cyber operation that took the Internet Research Agency, a Kremlin-linked troll farm known to have waged an influence campaign in 2016, offline ahead of the November midterms. Nakasone has since publicly touted the success of the group, made it a permanent fixture, and said its approach in 2018 would serve as a model for 2020. (Its members are scattered throughout NSA and Cyber Command, not physically concentrated in the JOC.)National: Election Assistance Commission Loses Its Top Leaders | Courtney Bublé/Government Executive
s the nation’s elections clearinghouse faces tight funding and criticism from advocacy groups on its new voting guidelines, the agency is losing its top two officials. Election Assistance Commission commissioners voted in early September to not reappoint Executive Director Brian Newby and General Counsel Cliff Tatum, Politico reported. Under the previous succession plan, the chief operating officer would assume the role of acting executive director; however, that position has been vacant since 2015. Commission Chief Information and Security Officer Mona Harrington will assume the role of acting executive director on Wednesday, under the new plan, as the agency starts the search process for a permanent leader. “The [Election Assistance Commission] is charged with providing top quality resources that support accurate, secure and accessible elections for all eligible voters,” the EAC commissioners said in a press release regarding the vacancies. “We are lock-step in our commitment to fulfilling that mandate.”National: Senate GOP blocks three election security bills for second day | Jordain Carney/The Hill
Senate Republicans blocked three election security bills on Wednesday, marking the second time in as many days they've stymied legislation. Sens. Mark Warner (D-Va.), Amy Klobuchar (D-Minn.) and Ron Wyden (D-Ore.) asked for unanimous consent to pass three election-related bills. But they were blocked by Sen. Marsha Blackburn (R-Tenn.), who noted that the unsuccessful attempt was the latest by Democrats to pass election security bills in the Senate ahead of 2020. “You know, it’s not a good sign if you’re doing the same thing over and over and expecting a different result," Blackburn said. Under Senate rules, any one senator can ask to vote on or pass a bill. But because it requires unanimous support, any one senator can also block their requests. Election security has become a point of contention during the Trump era. House Democrats have passed several election-related bills, including a sweeping ethics and election reform measure, but they've hit a wall in the GOP-controlled Senate.National: What Battleground States Need to Do to Prevent Voting Machine Hacking in 2020 | Hadley Hitson/Fortune
Three companies control the fate of United States elections. Election Systems & Software, Dominion Voting Systems, and Hart InterCivic dominate 92% of the voting machine market, standing to make bank as states rush to update their systems before the looming 2020 election. In 2016, counties in 16 states used paperless equipment without backup records. The Department of Homeland Security later notified six of those states that hackers targeted their systems. There’s now widespread recognition that paperless machines are the least secure. Some state governments control voting methods, others delegate the decision to local authority, but in most of those states, officials are moving to purchase new machines. “The transition is still happening, but I’m hopeful every battleground state will have a paper backup of every vote,” said Lawrence Norden, director of the Election Reform Program at the NYU Brennan Center For Justice. Norden predicts 90% of votes will have paper backups in 2020.National: Internal Cybersecurity Memo Warns White House Will Get Hacked | Jennings Brown/Gizmodo
In the 1,006 days since Donald Trump became president, his administration has shown little vigilance when it comes to its own security, and a new internal memo suggests the White House is working to weaken its own cybersecurity safeguards. Axios has published a memo written by the White House computer network defense branch chief Dimitrios Vastakis that warns “the White House is posturing itself to be electronically compromised once again.” The White House did not immediately respond to a Gizmodo request for comment. Vastakis submitted the memo as a letter of resignation last Thursday. As Axios reports, the letter comes after at least twelve top officials were dismissed or resigned from a cybersecurity team that protected the White House from security threats from Russia and other entities. This team—the Office of the Chief Information Security Officer (OCISO)—was built after the Obama administration was attacked by Russian hackers in 2014. As the memo states, the OCISO “was established to take on the responsibility of securing the Presidential Information Technology Community (PITC) network.” Since then, the team has “significantly matured the security posture of PITC and no major compromise has occurred,” according to the memo.National: NSA: ‘We know we need to do some work’ on declassifying threat intel | Shannon Vavra/CyberScoop
One of the National Security Agency’s newly minted Cybersecurity Directorate’s goals is to quickly share information on adversarial threats with the private sector — but the process for doing that needs to be refined, the directorate’s leader said Thursday. “The process in place today is where we know we need to do some work,” Anne Neuberger said while speaking at CyberTalks, produced by CyberScoop. “When we find indications of a threat, we see planning to execute a particular operation, or we see the operation being executed. [But] because we learn about it in a classified way, we treat it as classified.” Part of the difficulty the NSA faces is that adversaries often run operations and then discard their compromised infrastructure, making a protracted declassification process nearly useless since “indicators of compromise pretty much they have a ticking time clock for how useful they are,” Neuberger said. The new directorate, which started operations earlier this month, is measuring success by examining how well it is able to prevent attacks moving forward.National: Trolls could turn to cyber to disrupt the 2020 census | Amanda Seitz and Rachel Lerman/Fifth Domain
Worried about internet trolls and foreign powers spreading false news, census officials are preparing to battle misinformation campaigns for the first time in the count’s 230-year history. The stakes are huge. Who participates in the 2020 census count could influence how U.S. congressional seats and billions of federal tax dollars to educate children, help low-income families and pave new roads are divvied up. "It's a fine target," former U.S. Census Bureau director John Thompson said of the form, which is sent every decade to households in America to count the population. "If you want to disrupt a democracy, you can certainly go about it by disrupting a census." Already, false and inaccurate social media posts about the census have begun to appear online, where they have been viewed thousands of times. Foremost on everyone's mind are the misinformation wars waged during the last presidential election to confuse U.S. voters. Fake posts about the census began popping up days after the U.S. Supreme Court ruled in June that the Trump administration could not ask about citizenship status on the 2020 census: Conservative bloggers, Twitter users and pundits falsely blamed former President Barack Obama for scrubbing the question from the form in 2010. In fact, the main census form hasn't included a citizenship question since 1950, and the bureau's own analysis found it would discourage people from participating, possibly skewing results.Verified Voting Blog: DEFCON Voting Village Report highlights election system vulnerabilities and solutions
Verified Voting staff joined the Voting Village at the 27th annual DEFCON conference in Las Vegas in August. DEFCON brings security professionals, journalists, lawyers, researchers, and – of course – hackers under one roof at the world’s largest annual hacking convention. Since its launch in 2017, the Voting Village has served as an “open forum to identify vulnerabilities within the US election infrastructure and to consider solutions to mitigate these vulnerabilities.”
The conference addressed the risks of mobile and internet-only voting and featured a talk by Verified Voting President Marian K. Schneider cheekily titled, “If the voting machines are insecure, let’s just vote on our phones!” She outlined the risks of voting by mobile phone and noted that even voting mobile app creators are unable to guarantee that their own technology is unhackable, as demonstrated by the FBI’s investigation into a hack of the Voatz mobile voting app in West Virginia.