National: Feds Don’t Regulate Election Equipment, So States Are On Their Own | Matt Vasilogambros/Stateline
Behind nearly every voter registration database, voting machine and county website that posts results on Election Day, there’s an election technology company that has developed those systems and equipment. By targeting one of those private vendors, Russia, China or some other U.S. adversary could tamper with voter registration rolls, the ballot count or the publicly released results, potentially casting doubt on the legitimacy of the final tally. Nevertheless, there are no federal rules requiring vendors to meet security standards, test equipment for vulnerabilities or publicly disclose hacking attempts. With the 2020 presidential election approaching, security experts, lawmakers and even election vendors themselves are calling for more rigorous testing of election equipment and stricter security standards for the private companies that provide election-related services. “The lack of vendor regulation in the election technology space is a big gap that needs to be addressed,” said Edgardo Cortés, an election security expert at the Brennan Center for Justice at New York University Law School.National: Portland cybersecurity company aims to design, protect the future | Pat Dooris/KGW
Step inside Galois in downtown Portland and you'll see a lot of smart people working with computers, circuit boards and more. A group of professors from the Oregon Institute of Technology started the company 20 years ago. The company says it performs computer science research and development for commercial, defense and intelligence industries, and that its employees are among the world’s foremost experts in computer science and mathematics, which allows Galois to take on the world’s most difficult challenges in computer science. They are now inventing, creating, testing and protecting against the future. The Ping-Pong table in one room is covered with parts from high-tech components. Soldering irons sit nearby ready for action. At the end of the table is a black box. It’s a prototype optical scanner for voting. The company built it from scratch. CEO Rob Wiltbank said the prototype is an attempt to answer a simple, but tough question. “How can you build a voting system that you can actually trust? A lot of computing systems function, but they don't do only what you want them to do. So, the big experiment we're doing here is, can you build a system that you can prove will only work as it's supposed to work?” Wiltbank said. When it comes to elections, that's a troubling idea.Editorials: Why America must take the fight against cyberterrorism seriously | Joseph Moreno and Sam Curry/The Hill
cording to the Justice Department, a team of hackers sponsored by North Korea spent years infiltrating American companies to steal trade secrets and intellectual property. We know from the investigation of former special counsel Robert Mueller that Russian military intelligence groups hacked computer systems in the United States and spread social media disinformation to impact the 2016 election. More recently, we learned of a campaign by hackers backed by the Chinese government to spy on individuals through cyberattacks on global carrier companies. These may not be traditional acts of war. But make no mistake, they are hostile military grade actions against our companies, our government, and the public by foreign adversaries, and they are only getting worse. The United States is in a de facto state of war that is no less real for it being fought on a digital rather than a traditional battlefield. If a foreign army killed American citizens at home or abroad, there is no question that a conventional military response would be called for. Every nation has the right to defend itself against an armed attack under the United Nations charter. Similarly, if a foreign country was found to have supported a terrorist group in carrying out a violent assault against Americans, most would agree that some form of military retaliation would be warranted.Florida: Lawmakers push DHS to notify voters, other officials of election system breaches | Olivia Beavers/The Hill
A pair of House lawmakers from Florida have introduced new legislation that would require the Department of Homeland Security (DHS) to notify voters and other parties of potential breaches to election systems. Reps. Stephanie Murphy (D) and Mike Waltz (R) introduced their measure following revelations earlier this year that Russia infiltrated computer networks in two counties in the Sunshine State ahead of the 2016 presidential election. Members of the Florida congressional delegation blasted federal agencies in May for their lack of transparency about the cyberattacks, saying they only received an FBI briefing on the matter when former special counsel Robert Mueller revealed in his report that the bureau was investigating a Moscow-led hack into "at least one" Florida county. The FBI, which informed the Florida delegation that Russia had infiltrated a second county, has not permitted the members of Congress to reveal the names of which counties were targeted.Georgia: Judge allows outside inspection of Georgia voting system | Mark Niesse/Atlanta Journal-Constitution
The insides of Georgia’s voting system will be cracked open for inspection as part of a lawsuit alleging that the state’s elections are vulnerable to inaccuracies, malfunctions and hacking. U.S. District Judge Amy Totenberg on Tuesday ordered election officials to allow computer experts to review databases used to configure ballots and tabulate votes.The ruling comes in a lawsuit by election integrity advocates who doubt the accuracy of Georgia’s electronic voting machines and are asking Totenberg to require that elections be conducted on paper ballots filled out with a pen.The review of election management databases is needed to understand what caused problems during November’s heated race for governor between Republican Brian Kemp and Democrat Stacey Abrams, said Bruce Brown, an attorney for some of the plaintiffs.Voters reported that voting machines failed to record their choices, flipped their votes from one candidate to another and produced questionable results.“We can see the system malfunctioning, and everybody knows it is intrinsically vulnerable,” said Brown, who represents the Coalition for Good Governance, a Colorado-based organization focused on election accountability. “We’re trying to learn more about the exact causes of the particular problems we’re seeing in Georgia.”Georgia Secretary of State Brad Raffensperger’s attorneys objected to allowing a review of election databases, which have a variety of information including candidate names, party affiliations, ballot layouts and vote counts for each precinct. The databases don’t contain confidential information, Totenberg wrote.North Carolina: ‘A risk to democracy’: North Carolina law may be violating secrecy of the ballot | Jordan Wilkie/The Guardian
North Carolina may be violating state and federal constitutional protections for the secret ballot in the US by tracing some of its citizens’ votes. The situation has arisen because North Carolina has a state law that demands absentee voting – which includes early, in-person voting as well as postal voting – is required to use ballots that can be traced back to the voter. The laws are in place as a means of guaranteeing that if citizens cast multiple ballots during early voting or that if ineligible residents – like non-citizens or people who have not completed sentences for criminal offenses – cast ballots, those votes can be retrieved and removed. Likewise, if a voter casts an early ballot then dies before election day, that ballot can then be discounted. But voting rights advocates think the North Carolina law breaks one of the most sacred tenets of the democratic system: preserving the secrecy of the ballot. “Anytime you can link a ballot back to the individual voter, that’s a violation of the secret ballot,” said Caitriona Fitzgerald, the chief technology officer for the nonprofit Electronic Privacy Information Center.Pennsylvania: Despite GOP objections, Wolf moves to upgrade voting machines | Katie Meyer/WITF
Governor Tom Wolf is taking matters into his own hands when it comes to funding upgrades for Pennsylvania’s voting machines. The move comes after he vetoed a funding bill the GOP-controlled legislature sent him during state budget negotiations. It would have given counties $90 million to upgrade machines — about 60 percent of the up-front cost. But it also had strings attached; most crucially, an election code change that eliminated automatic straight-ticket voting. Democrats balked, saying it might depress voter turnout. Wolf now plans to get the $90 million without add-ons by issuing a bond through the state’s Economic Development Financing Authority. He said as far as he knows, it’s allowed as long as the agency’s board authorizes it. “I’m not a lawyer,” he said when asked about the specific law that authorizes such an action. “The point that I think everybody in this building recognizes is that we’ve got to support the counties. This cannot be an unfunded mandate.” Wolf’s office later clarified, they interpret the Pennsylvania EDFA has having broad authority to provide funding in order to promote things like health, safety, economic activity, and general welfare for people in the commonwealth. Voting machine funding, they said, fits that mission.Pennsylvania: Wolf orders $90M bond issue to help counties buy voting machines | The Intelligencer
Gov. Tom Wolf is moving to borrow up to $90 million to help Pennsylvania’s counties pay for new voting machines ahead of 2020′s election, announcing the step Tuesday after a dispute between the Democrat and the Republican-controlled Legislature doomed funding legislation last week. The bond issue would reimburse each county for 60% of their cost, according to Wolf’s administration, which provided little detail about the financing it will seek or the timeline for the move. Wolf began pressing counties last year to replace their voting machines with ones that provide verified paper ballots before 2020 after federal authorities warned Pennsylvania and at least 20 other states that Russian hackers targeted them during 2016′s presidential election. That prompted a wide range of election integrity advocates and experts to urge states to switch to machines that produce an auditable paper trail.Media Release: Verified Voting Praises Pennsylvania Gov. Tom Wolf for Announcing Bond Financing to Reimburse Counties for Purchasing Voting Machines
Marian K. Schneider: “This move will ensure the smooth transition to secure and verifiable voting systems and will free up money for counties to use toward cybersecurity training and voter education.”
“Verified Voting is pleased with Gov. Wolf’s commitment to replace electronic voting systems. The availability of this $90 million financing will allow counties to fund the necessary replacement of unverifiable systems with verifiable ones. We are gratified that the Governor, as well as the Pennsylvania General Assembly, recognized the need to reimburse counties.
“This move will ensure the smooth transition to secure and verifiable voting systems and could free up money for counties to use toward cybersecurity training and voter education. Election security is a nonpartisan issue and the goal of hardening our voting systems against potential threats is shared across the aisle. Counties’ access to these funds is what is needed to ensure a smooth transition to paper-based electronic systems and routine, robust audits.
