Author Archives: Warren Stewart

No evidence of exploitation of Dominion voting machine flaws, CISA finds | Ellen Nakashima and Amy Gardner/The Washington Post

Full Article: No evidence of exploitation of Dominion voting machine flaws, CISA finds – The Washington Post

‘It’s going to be an army’: Tapes reveal GOP plan to contest elections | Heidi Przybyla/Politico

Full Article: ‘It’s going to be an army’: Tapes reveal GOP plan to contest elections – POLITICO

National: Cyber agency: No evidence the flaws in the Dominion Voting Systems’ equipment have been exploited to alter election results | Kate Brumback/Associated Press

Electronic voting machines from a leading vendor used in at least 16 states have software vulnerabilities that leave them susceptible to hacking if unaddressed, the nation’s leading cybersecurity agency says in an advisory sent to state election officials. The U.S. Cybersecurity and Infrastructure Agency, or CISA, said there is no evidence the flaws in the Dominion Voting Systems’ equipment have been exploited to alter election results. The advisory is based on testing by a prominent computer scientist and expert witness in a long-running lawsuit that is unrelated to false allegations of a stolen election pushed by former President Donald Trump after his 2020 election loss. The advisory, obtained by The Associated Press in advance of its expected Friday release, details nine vulnerabilities and suggests protective measures to prevent or detect their exploitation. Amid a swirl of misinformation and disinformation about elections, CISA seems to be trying to walk a line between not alarming the public and stressing the need for election officials to take action. CISA Executive Director Brandon Wales said in a statement that “states’ standard election security procedures would detect exploitation of these vulnerabilities and in many cases would prevent attempts entirely.” Yet the advisory seems to suggest states aren’t doing enough. It urges prompt mitigation measures, including both continued and enhanced “defensive measures to reduce the risk of exploitation of these vulnerabilities.” Those measures need to be applied ahead of every election, the advisory says, and it’s clear that’s not happening in all of the states that use the machines.

Source: Cyber agency: Voting software vulnerable in some states | AP News

National: They Insisted the 2020 Election Was Tainted. Their 2022 Primary Wins? Not So Much. | Reid J. Epstein and Nick Corasaniti/The New York Times

Full Article: Republicans Accept Primary Wins Despite Election Fraud Claims in 2020 – The New York Times

National: ‘The horse and buggy era’: Attacks on voting machines set off fresh worries about election subversion | Fredreka Schouten/CNN

Fulll Article: ‘The horse and buggy era’: Attacks on voting machines set off fresh worries about election subversion – CNNPolitics

National: Lawyer Who Plotted to Overturn Trump Loss Recruits Election Deniers to Watch Over the Vote | Alexandra Berzon/The New York Times

Full Article: Lawyer Who Plotted to Overturn Trump Loss Recruits Election Deniers to Watch Over the Vote – The New York Times

Georgia: There’s no evidence of election hacks but still plenty to worry about | Joseph Marks/The Washington Post

Full Article: There’s no evidence of Georgia election hacks but still plenty to worry about – The Washington Post

American Democracy Isn’t Ready for Online Voting | Spenser Mestel/The Atlantic

This weekend, Australians will vote in the country’s federal elections. The process will likely be seamless, transparent, and punctuated by countless civic-minded barbecues affectionately known as sausage sizzles. This is how elections generally go in Australia, but for those in New South Wales, that wasn’t the case late last year. The state had encouraged a significant number of voters to move to an internet-voting system called iVote. In December, it melted down so badly that the New South Wales Electoral Commission not only discontinued its use but also asked a court to nullify the results of three city-council elections. It was an embarrassing failure for e-voting. More than 650,000 online votes were cast—probably a world record, says Vanessa Teague, an election-security expert and a professor at the Australian National University. Teague has been warning governments about vulnerabilities in e-voting for years, as have cybersecurity researchers in the U.S., where systems like iVote are being expanded in at least nine states. Letting people vote from home with the click of a button is an appealing idea, especially in the U.S., where turnout is abysmal. The problem, the American Association for the Advancement of Science says, is that there’s no “evidence that any internet voting technology is safe or can be made so in the foreseeable future … All research to date demonstrates the opposite.”

Full Article: American Democracy Isn’t Ready for Online Voting – The Atlantic

National: A PDF File Is Not Paper, So PDF Ballots Cannot Be Verified | Andrew Appel/Freedom to Tinker

A new paper by Henry Herrington, a computer science undergraduate at Princeton University, demonstrates that a hacked PDF ballot can display one set of votes to the voter, but different votes after it’s emailed – or uploaded – to election officials doing the counting. For overseas voters or voters with disabilities, many states provide “Remote Accessible Vote By Mail,” or RAVBM, a system that allows voters the ability to download and print an absentee ballot, fill it out by hand on paper, and physically mail it back.  Some states use commercial products, while others have developed their own solutions.  In general, this form of RAVBM can be made adequately secure, mainly because the voters make their own marks on the paper. In some forms of RAVBM, the voter can fill out the ballot using an app on their computer before printing and mailing it.  This is less secure: if malware on the voter’s computer has “hacked” the voting app, what’s printed out may differ from what the voter indicated on the screen, and voters are not very good at reviewing the printouts and noticing such changes. The most dangerous form of RAVBM is one that allows electronic ballot return, in which the voter uploads or emails a PDF file. Thirty states allow overseas voters to do electronic ballot return, either by email, fax, or web-portal upload, as shown in Table 5 (pages 34-35) of Herrington’s longer paper, Ballot Acrobatics: Altering Electronic Ballots using Internal PDF Scripting.

Full Article: A PDF File Is Not Paper, So PDF Ballots Cannot Be Verified

National: Security chiefs scramble to prevent Russian interference in midterms | Tom Rees/The Telegraph

US security chiefs are scrambling to prevent Russian interference in the midterm elections as they are “very concerned” about the Kremlin using cyber warfare and online disinformation. Jen Easterly, US director of the Cybersecurity and Infrastructure Security Agency, said the US has been forced to beef up its election cybersecurity after the Kremlin was accused of influencing the 2016 vote to help Donald Trump win. Joe Biden and the Democrats are heading into a difficult midterms and a recent Ipsos MORI poll found that more than half of Americans are concerned about Russia spreading misinformation online in this year’s election. Ms Easterly said at the World Economic Forum in Davos that US officials are “very concerned” but have “raised the bar” on election infrastructure cybersecurity. “I’m projecting myself into November because obviously we are very concerned about foreign [influence],” Ms Easterly said. “I frankly, don’t think that Russia needs to do anything to create chaos in our elections.” Ms Easterly said she is “much more concerned about physical threats to election officials and disinformation threats to the American people’s confidence.”

Full Article: US security chiefs scramble to prevent Russian interference in midterms