Author Archives: Warren Stewart

Experts: False claims on voting machines obscure real flaws | Kate Brumback/Associated Press

The aftermath of the 2020 election put an intense spotlight on voting machines as supporters of former President Donald Trump claimed victory was stolen from him. While the theories were unproven — and many outlandish and blatantly false — election security experts say there are real concerns that need to be addressed. In Georgia, for example, election security expert J. Alex Halderman says he’s identified “multiple severe security flaws” in the state’s touchscreen voting machines, according to a sworn declaration in a court case. Halderman told The Associated Press in a phone interview that while he’s seen no evidence the vulnerabilities were exploited to change the outcome of the 2020 election, “there remain serious risks that policymakers and the public need to be aware of” that should be addressed immediately to protect future elections. Trump loyalists — pushing the slogan “Stop the Steal” — held rallies, posted on social media and filed lawsuits in key states, often with false claims about Dominion Voting Systems voting machines. Almost all of the legal challenges casting doubt on the outcome of the election have been dismissed or withdrawn and many claims of fraud debunked. State and federal election officials have said there’s no evidence of widespread fraud. And Dominion has fought back forcefully, filing defamation lawsuits against high-profile Trump allies. As an election security researcher, it’s been frustrating to watch the proliferation of misinformation, said Matt Blaze, a professor of computer science and law at Georgetown University. For years, he said, concerns raised by election security experts were dismissed as unimportant. “All of a sudden, people are going the other way, saying the existence of a flaw not only is something that should be fixed, it means the election was actually stolen,” he said. “That’s not true either.”

Full Article: Experts: False claims on voting machines obscure real flaws

‘We are in harm’s way’: Election officials fear for their personal safety amid torrent of false claims about voting | Tom Hamburger, Rosalind S. Helderman and Amy Gardner/The Washington Post

Full Article: ‘We are in harm’s way’: Election officials fear for their personal safety amid torrent of false claims about voting – The Washington Post

National: Election officials face complex challenges looking to 2022 | Christina A. Cassidy/Associated Press

State election officials say they are confronting a myriad of challenges heading into the 2022 midterm elections, from threats of foreign interference and ransomware to changes of election laws and concerns of physical safety — all while still dealing with a wave of misinformation and disinformation surrounding last year’s presidential election. The nation’s secretaries of state have been meeting with the goal of building relationships across states, sharing best practices and hearing from experts. The long list of challenges, outlined in various panel discussions over their association’s four-day conference, might seem daunting but election officials said preparations have already begun. “The journey of a thousand miles begins with one step,” said Ohio Secretary of State Frank LaRose, a Republican. “For us to be able to get together and talk with one another, compare notes, even commiserate on a human level a little bit about some of the drama over the last year and a half is a good experience. It’s a useful thing, and we learn a lot from each other.” Heading into the 2020 presidential election, the focus for election officials was shoring up cybersecurity around the nation’s voting systems after Russia four years earlier had probed for vulnerabilities and, in a small number of cases, breached voter registration systems. Then the pandemic happened, and state election officials had to scramble to ensure they could handle an onslaught of mail ballots from voters wary of crowded polling places while also dealing with shortages of poll workers and other staff triggered by the coronavirus.

Full Article: Election officials face complex challenges looking to 2022

National: New intel reports indicate fresh efforts by Russia to interfere in 2022 election | Katie Bo Williams, Natasha Bertrand and Alex Marquardt/CNN

The Biden administration is receiving regular intelligence reports indicating Russian efforts to interfere in US elections are evolving and ongoing, current and former officials say, and in fact, never stopped, despite President Joe Biden’s warnings to Russian President Vladimir Putin over the summer and a new round of sanctions imposed in the spring. Biden made deliberate mention of Russia’s operations two weeks ago when he revealed in public remarks to the intelligence community that that he had received fresh intelligence about “what Russia’s doing already about the 2022 election and misinformation” in his daily intelligence briefing that day. “It’s a pure violation of our sovereignty,” Biden said at the time. One of the people familiar with the matter confirmed that there have been recent intelligence reports about what the Russians are up to, particularly their efforts to sow disinformation on social media and weaponize US media outlets for propaganda purposes. There are some indications that Moscow is now attempting to capitalize on the debate raging inside the US over vaccines and masking, other sources told CNN.

Full Article: New intel reports indicate fresh efforts by Russia to interfere in 2022 election – CNNPolitics

National: Senate Democrats unveil bill to protect election officials, prevent election subversion | Celine Castronuovo/The Hill

A group of Democratic lawmakers led by Senate Rules Committee Chairwoman Amy Klobuchar (Minn.) unveiled legislation Thursday aiming to combat efforts to undermine election results and install new protections for election workers, who have received a rise in violent threats since the 2020 election. The bill, titled the Protecting Election Administration from Interference Act, would extend existing prohibitions on threats to election officials to include individuals involved in ballot-counting, canvassing and certifying election results. The legislation also calls for strengthened protections for federal election records and election systems to “stop election officials or others from endangering the preservation and security of cast ballots,” and allowing the Justice Department to bring lawsuits to enforce compliance with election records requirements.

Full Article: Senate Democrats unveil bill to protect election officials, prevent election subversion | TheHill

National: It’s still practically impossible to secure your computer (or voting machine) against attackers who have 30 minutes of access | Andrew Appel/Freedom to Tinker

It has been understood for decades that it’s practically impossible to secure your computer (or computer-based device such as a voting machine) from attackers who have physical access. The basic principle is that someone with physical access doesn’t have to log in using the password, they can just unscrew your hard drive (or SSD, or other memory) and read the data, or overwrite it with modified data, modified application software, or modified operating system. This is an example of an “Evil Maid” attack, in the sense that if you leave your laptop alone in your hotel room while you’re out, the cleaning staff could, in principle, borrow your laptop for half an hour and perform such attacks. Other “Evil Maid” attacks may not require unscrewing anything, just plug into the USB port, for example. … More than twenty years ago, computer companies started implementing protections against these attacks. Full-disk encryption means that the data on the disk isn’t readable without the encryption key. (But that key must be present somewhere in your computer, so that it can access the data!) Trusted platform modules (TPM) encapsulate the encryption key, so attackers (even Evil Maids) can’t get the key. So in principle, the attacker can’t “hack” the computer by installing unauthorized software on the disk. (TPMs can serve other functions as well, such as “attestation of the boot process,” but here I’m focusing on their use in protecting whole-disk encryption keys.) So it’s worth asking, “how well do these protections work?” If you’re running a sophisticated company and you hire a well-informed and competent CIO to implement best practices, can you equip all your employees with laptops that resist evil-maid attacks? And the answer is: It’s still really hard to secure your computers against determined attackers.

Full Article: It’s still practically impossible to secure your computer (or voting machine) against attackers who have 30 minutes of access