National

Experts this week warned against entertaining the idea that blockchain could fix the voting system despite growing frustration with the long lines and malfunctioning machines that caused problems during the midterm election. “If you’re trying to convince Walmart it needs blockchains to track avocados or whatever, be our guest,” Arvind Narayanan, an associate professor of computer science at Princeton, tweeted. “But if you’re messing with critical infrastructure, you’ve crossed a line.” Blockchain is technology that uses computers to build a shared, secure and decentralized digital ledger. Blockchain is best known as the basis for the cryptocurrency Bitcoin but in recent years has attracted interest from a variety of industries that see a benefit in using the ideas behind blockchain.

National: DHS Wants to Expand the Reach of Its Critical Infrastructure Cyber Training | Nextgov

The Homeland Security Department wants to surge its ability to train critical infrastructure owners and operators on cybersecurity, according to a contracting document released Wednesday. The department is seeking a video conferencing service that it can use to provide cybersecurity webinars to 5,000 or more critical infrastructure operators simultaneously, according to the contracting document. The term critical infrastructure refers to 16 sectors the government has determined are vital to the nation’s successful operation. They include hospitals, banks, energy plants, dams and transportation hubs such as airports and train stations. The department officially designated election infrastructure, such as voting machines and voter rolls, critical infrastructure in January 2017, after Russian efforts to breach those systems during the 2016 elections.

National: Democrats tech boss can’t guarantee midterms were hack-free | Yahoo

The Democrats’ top cybersecurity boss said he cannot guarantee the midterm elections earlier this week were hack-free. “Good news is we didn’t hear very much on that day,” said Raffi Krikorian, the chief technology officer of the Democratic National Committee, on Thursday. “But remember, any sophisticated attack is not something we’re going to detect today. It’s something we’re going to detect a few days from now, or a few weeks … or a few months from now, as we go through our logs and try to understand what really happened.” Krikorian made his first public remarks since the US midterms at the annual Web Summit tech event in Lisbon, Portugal. Krikorian leads a team of 35 technology and security specialists tasked with protecting the Democrats and the party’s tech infrastructure. He was previously a top executive at Uber and pioneered self-driving technology at the ride-sharing company. Prior to Uber, he worked as a top engineering executive at Twitter (TWTR).

National: Mid-terms 2018: When voting goes wrong | BBC

After celebration of historic wins by diverse candidates, the other big online trend for the US mid-term election was claims of massive and deliberate vote suppression. Reddit’s top post was an unverified video of apparent errors at a ballot machine in Indiana, while reports of hours-long queues, broken ballot machines and intimidation spread on Twitter and Facebook. A Google map of live election-related searches showed spikes in interest in provisional ballots and long waiting lines across the country. And in Florida, a church that serves as a polling station was criticised after posting a sign discouraging voters to choose Democrats, reported local media. Some reported cases were simple technical errors. In Ohio, one widely-shared claim of vote rigging turned out to be caused by a temporary paper jam.

National: Three States Pass Sweeping Voting Rights Expansions | Roll Call

Voting rights activists are celebrating after voters in three states approved sweeping election reforms in Tuesday’s midterm elections. Voters in Florida, Michigan and Nevada all passed major reforms to their states’ election systems, which will make voting easier and extend ballot access to millions of new voters. Florida’s Amendment 4, approved by 64 percent of voters, will restore voting rights to more than 1 million residents convicted of certain felonies. About 10 percent of Florida adults will be newly eligible to vote, of which a disproportionate number are African-Americans. Meanwhile, Nevada and Michigan both passed automatic voter registration measures Tuesday, meaning residents in future elections will be added to voting rolls when they obtain or renew a driver’s license or conduct other business with the state, unless they opt out.

National: Foreign adversaries will ‘continue to push misinformation’ after Election Day, official says | The Washington Post

Election Day is over, but government officials are still watching out for potential interference in the political process after detecting online disinformation that was meant to undermine yesterday’s midterms. Foreign adversaries will “continue to push misinformation” even after the election results are fully reported, a Department of Homeland Security official told reporters in a series of briefings on election security that lasted well into the night. While DHS made clear it did not detect any breaches that would affect the casting or counting of votes, the official expressed concerns that bad actors could create the perception that the election was not secure — or “enhancing or overstating” how successful hacking attempts were. “We’re talking about propaganda machines,” the official said, “that are trying to divide the American people and undermine their confidence in election systems.”

National: Threats remain to US voting system – and voters’ perceptions of reality | The Conversation

As the 2018 midterms proceed, there are still significant risks to the integrity of the voting system – and information warfare continues to try to influence the American public’s choices when they cast their ballots. On the day of the election, there were a number of early hitches in voting at individual polling places, such as polling places opening late and vote-counting machines not plugged in. But there seem not – at least not yet – to be major problems across the country. However, not all the election-related news and information voters have been encountering in recent days and weeks is accurate, and some of it is deliberately misleading. As this election’s results come back, they will reveal whether the misinformation and propaganda campaigns conducted alongside the political ones were effective. America’s electoral process remains highly fragmented, because of the country’s cherished tradition of decentralized government and local control. While this may leave some individual communities’ voting equipment potentially vulnerable to attack, the nation’s voting process overall may be more trustworthy as a result of this fragmentation. With no unified government agency or office to provide, administer and protect election technologies, there’s not one central national element that could fail or be attacked.

National: Broken machines, rejected ballots and long lines: voting problems emerge as Americans go to the polls. | The Washington Post

Civil rights groups and election officials fielded thousands of reports of voting irregularities across the country Tuesday, with voters complaining of broken machines, long lines and untrained poll workers improperly challenging Americans’ right to vote. The loudest of those complaints came from Georgia, where issues of race, ballot access and election fairness have fueled an acrimonious governor’s contest between Democrat Stacey Abrams and Republican Brian Kemp. Abrams, a former state lawmaker, would be the nation’s first black female governor, while Kemp, the secretary of state, who oversees elections, has faced accusations of trying to suppress the minority vote. In one downtown Atlanta precinct, voters waited three hours to cast ballots after local election officials initially sent only three voting machines to serve more than 3,000 registered voters. In suburban Gwinnett County, the wait surpassed four hours as election officials opened the polls only to discover that their voting machines were not working at all, voters said.

National: Voting Machine Meltdowns Are Normal—That’s the Problem | WIRED

David Weiner counts himself lucky. Sure, he waited an hour to vote at the Brooklyn Public Library along with, he estimates, several hundred other New Yorkers Tuesday afternoon. But, hey, at least he arrived when the last ballot scanner officially broke. That meant he could just fill out his ballot and shove it in a box. The people in line in front of him, the ones who’d been waiting to use that last ballot scanner, said they’d been in line for twice as long. “The line snaked all the way around the lobby of the public library, which is extremely unusual,” says Weiner, a Brooklyn resident who runs a cannabis media company and has been voting at the same location for three years. “I took that as enthusiasm for voting, but I was sorely mistaken.” Instead, Weiner was just one of a still-unknown number of Americans who watched their country’s voting technology break down right in front of their eyes on Tuesday. Machine malfunctions caused hours-long lines and reports of voters giving up and going home at polling stations across the country. On an already tense Election Day, these technical issues exacerbated voters’ anxieties and concerns about voter suppression. And it’s true that in past election cycles, long lines have disproportionately impacted communities of color.

National: Voting Problems Surface as Americans Go to the Polls | The New York Times

From closed polling sites to malfunctioning machines, Election Day brought frustration for some voters in contests shadowed by questions about the security and fairness of the electoral system. In Gwinnett County, Ga., four precincts — out of 156 — suffered prolonged technical delays, while some voting machines in South Carolina lacked power or the devices needed to activate them. There was also some confusion in Allegheny County, Pa., which includes Pittsburgh, where at least four polling places were changed in the last two days. Voters who went to a polling place in Chandler, Ariz., a Phoenix suburb, found the doors locked and a legal notice announcing that the building had been closed overnight for failure to pay rent. (Officials later reopened the location.) In Houston, a worker was removed from a polling site and faced an assault charge amid a racially charged dispute with a voter, The Houston Chronicle reported.

National: Broken machines and user error are leading to hour-long lines at polling booths | Quartz

Texas resident Brianna Smith, who lives in Katy, a Houston suburb, turned up 15 minutes before the polls opened at 7 am to vote this morning (Nov. 6). She wasn’t able to do so for nearly two hours, because of problems with the machine that gives voters their tickets. The lines were “wrapped around the block,” she told Quartz, with some voters forced to leave to go to work or school. Across the country, ballot scanners on the blink and broken voting machines are contributing to massive lines. Experts say that these errors are normal, but the long waits might ultimately prevent some from casting their votes. The problems are being reported across the country, with many tips sent through to the ElectionLand project and verified by Quartz and other news outlets. In New York City, high voter turn-out combined with broken scanners caused mayhem throughout the city at dozens of polling places. At one station in Flatbush, Brooklyn, two of the four voting machines were broken, resulting in a backlog of well over 100 people. A mechanic was later dispatched to repair them, according to a Quartz reporter there.

National: The US midterms feature a major standoff between voting machines and the weather | Quartz

Americans voting in this year’s midterm elections face a range of obstacles, from long lines to concerns over voter suppression. Some US citizens are also dealing with more unexpected challenges around exercising their right to vote—for instance, the weather. Across Georgia, heavy rain is an added hurdle for voters, though it’s not altogether deterring them. And humidity—a far less visible weather issue—is having an even larger impact. North Carolina’s State Board of Election (SBOE) reports that some precincts in Wake County are having trouble feeding ballots through the voting machines. “Initial reports from county elections offices indicate this issue is caused by high humidity levels,” North Carolina’s SBOE said in a release. Why is a little extra water vapor in the air making such a big difference? Joseph Lorenzo Hall, chief technologist with the Washington, DC-based nonprofit Center for Democracy and Technology (CDT) and an election technology and cybersecurity expert, explains that ballots are made of a thick stock paper, the specifics of which are determined by voting machine vendors. There are three main makers of voting machines in the US. Local election officials have to work with paper vendors to get paper supplies that will function correctly with the machines and have safety requirements such as watermarks.

National: The Unprecedented Effort to Secure Election Day | WIRED

After Russia’s misinformation campaign rattled the 2016 United States election season, scrutiny over this year’s midterms has been intense. And while foreign cybersecurity threats have so far been relatively muted, an unclassified government report obtained by The Boston Globe this week indicates more than 160 suspected election-related incidents since the beginning of August, ranging from suspicious login attempts to compromised municipal networks. Officials haven’t attributed most of it to an actor yet, but the situations include suspicious attempted logins on election systems like voter databases and municipal network compromises. Even in July, Microsoft said it had spotted four incidents of attempted campaign phishing. … The government won’t go it alone. Verified Voting, a group that promotes election system best practices, is part of the nonpartisan Election Protection coalition, which offers a hotline for voter information and issues. Verified Voting particularly specializes in fielding questions about technology issues related to voting. Some of those have already come up; in Texas and Georgia, outdated software and poor design features on paperless voting machines have caused a small but jarring number of incidents in which votes appear to be switched from a voter’s selection.

National: Vulnerable Voting Infrastructure and the Future of Election Security | Security Boulevard

It’s been two years since international interference sabotaged the United States’ election security, and still the vulnerability of our voting infrastructure remains a major problem. This past May, during Tennessee’s primary election, the Knox County election website fell prey to a DDoS attack. And just days ago, Texas voters experienced “ominous irregularities” from voting machines. In the lead up to the midterm elections, Radware surveyed Facebook users on the safety of U.S. elections, and the results paint a gloomy picture. The overwhelming majority (93.4 percent) of respondents believe that our election system is vulnerable to targeting and hacking—and they’re correct. What’s more, respondents were unable to suggest long-term tenable solutions when asked how the U.S. can improve its election safety (which is understandable, given the complexity of the issue). It is alarmingly quick and easy to hack into U.S. voting systems; just ask the 11-year-old boy who earlier this year demonstrated how he could hack into a replica of the Florida state election website and change voting results in under 10 minutes.

National: A dozen U.S. states see problems with voting machines: rights groups | Reuters

Voting rights activists successfully sued Georgia and Texas asking them to extend voting hours in some counties after problems with voting machines led to delays and long lines thanks to a big turnout in U.S. elections on Tuesday. A suit by the Lawyers’ Committee for Civil Rights Under Law in Arizona failed, the group said. But it won an extension in Fulton County, Georgia, one county in about a dozen U.S. states that experienced delays, largely in sites still using aging voting machines overwhelmed by the volume of voters, according to officials and rights groups. Other Georgia polling places extended hours without facing lawsuits. Two Texas civil rights groups won a lawsuit to secure longer voting hours in Harris County, Texas, after polling locations in the Houston area opened late due to equipment glitches and other issues. In Ohio, a court ordered the state to provide ballots to voters who were being held in pretrial detention in county jails, following a lawsuit filed the same day by two public interest groups.

National: Why America is using glitchy electronic voting machines | Mashable

It’s been 18 years and several thousand lifetimes since the contested Bush-Gore presidential elections of 2000. Yet “hanging chads” are still haunting us — but not in the way you might think. Since states began introducing electronic voting machines and other technology in the voting process, digitizing various aspects of voting has been a boon for democracy in many ways. Online voter registration has supercharged get-out-the-vote efforts. ID scanning at check-ins helps reduce lines. And, of course, ballots submitted digitally allow for near instantaneous returns. But on Tuesday, there were reports in states across the country that problems with electronic voting machines were causing massive delays. “There are about a dozen states in which problems have been reported, specifically with electronic voting systems,” said Marian Schneider, president of the elections integrity organization Verified Voting. “The problems we’re seeing are diffuse. They don’t seem to be systemic. But in the localities that they’re happening, they’re impactful.” … “Our election administration is woefully underfunded,” said Schneider. “When we have problems on election day, you can trace it right back to resources.”

National: How the Election Assistance Commission Came Not to Care So Much About Election Security | ProPublica

In a rush of preparation for this year’s midterm elections, scores of state and local governments have been working to safeguard their election systems from being hacked or otherwise compromised. At the same time, according to interviews with more than a dozen national, state and local election officials, the federal commission responsible for providing assistance to them has either been missing in action or working to thwart their efforts. The Election Assistance Commission has ceded its leadership role in providing security training, state and local officials say, forcing them to rely on the help of the U.S. Department of Homeland Security, which lacks the same level of experience in the issues confronting the country’s voting systems. One of the EAC’s commissioners has dismissed the threat of foreign governments undermining American elections in private meetings with state election officials, and often personally appealed to individual officials not to waste their time on the idea that election systems might be vulnerable to outside meddling.

National: New technologies could actually eliminate common voting controversies in the U.S. | Salon

As voting in 2018’s midterms ends on Tuesday, November 6, there will be contests with surprising results, races separated by the slimmest of margins, or even ties. How will voters know what to believe without falling prey to partisan angst and conspiracies? What if, as Dean Logan, Los Angeles County’s voting chief, retweeted this week, “the weakest link in election security is confidence”in the reported results? The factual answers lie in the voting system technology used and the transparency — or its lack — in the vote counting, count auditing and recount process. These steps all fall before outcomes are certified and the election is legally over. … In the past decade, two differing approaches to answering that question have emerged and evolved. The first to surface is what’s called a risk-limiting audit (RLA). Jerome Lovato, now an election technology specialist with the U.S. Election Assistance Commission, was present at the start of developing and implementing RLAs a decade ago when Colorado hired him to improve their audit process. Colorado had been sued for a lack of transparency surrounding its testing and certification after buying new machines in 2006. Back then, Colorado — like many states today — grabbed and examined hundreds of ballots after every election to see if they matched the announced winners.

National: Dozens of states tighten election security — by going back to paper | UPI

As key midterm elections approach, U.S. authorities are taking measures to make sure the balloting is secure and free of foreign influence. For years, a number of polling places have gone more high-tech with electronic voting machines. Fears about vulnerabilities in the systems, however, are turning eyes to a strikingly low-tech option — paper ballots. The United States largely moved away from paper ballots after the 2004 Help America Vote Act replaced lever and punch-card voting machines with Direct Recording Electronic, or DRE, systems. The reform was a direct result of the notoriously contested 2000 presidential election, which triggered weeks of recounts and multiple complaints about paper ballots in Florida. … The committee said many of the electronic voting systems are now outdated, and recommended all states go back to paper ballots — or, at least mandate that electronic machines produce a paper hard copy that can be audited.

National: Hackers are using malware to find vulnerabilities in U.S. swing states. Expect cyberattacks. | The Washington Post

The Pentagon has launched a preemptive strike against the Russian hackers who may have attacked the 2016 presidential election with social media influence campaigns. Numerous initiatives, including Harvard University’s Defending Digital Democracy Project, have educated officials on how to fortify elections against cyberattacks and encouraged social media companies to take down fake accounts. Despite these efforts, 67 percent of Americans consider that a foreign influence campaign, either by Russia or other governments, during the midterm elections is “very or somewhat” plausible. Their worry might have some basis. There’s another threat that few have worked to defend against: malware, or malicious software, designed to steal, deny or alter information. And our research strongly suggests that these attacks are underway in U.S. swing states, as we explain below.

National: Complaints Allege Cruz, Kemp Benefitting from Faulty Voting Machines That Change Dem Ballots to GOP | Law & Crime

Early voters submitting ballots for hotly contested races in Texas and Georgia claim that their states’ paperless voting machines are changing their votes for Democratic candidates to Republican, or deleting them altogether. According to Politico, individuals, as well as civil rights groups, have filed complaints alleging that glitches are resulting in votes for Republican Sen. Ted Cruz (R-Texas) instead of his Democratic challenger Beto O’Rourke. There have also been complaints that votes have gone to Georgia’s Republican candidate for governor, Brian Kemp, instead of his Democratic opponent Stacey Abrams. Voting technology experts have said that this is not the result of foul play, but outdated, faulty systems that don’t even leave a paper trail of what happened. Kemp, who is currently the Georgia Secretary of State, has resisted past calls for the state to change voting systems. His state has used the same system since 2002. Texas only uses electronic machines in some counties, but there have been reports of ballots that were intended to be “straight ticket” votes for one party were changed to the other party.

National: Voting Machine Manual Instructed Election Officials to Use Weak Passwords | Motherboard

States and counties have had two years since the 2016 presidential election to educate themselves about security best practices and to fix security vulnerabilities in their election systems and processes. But despite widespread concerns about election interference from state-sponsored hackers in Russia and elsewhere, apparently not everyone received the memo about security, or read it. An election security expert who has done risk-assessments in several states since 2016 recently found a reference manual that appears to have been created by one voting machine vendor for county election officials and that lists critical usernames and passwords for the vendor’s tabulation system. The passwords, including a system administrator and root password, are trivial and easy to crack, including one composed from the vendor’s name. And although the document indicates that customers will be prompted periodically by the system to change the passwords, the document instructs customers to re-use passwords in some cases—alternating between two of them—and in other cases to simply change a number appended to the end of some passwords to change them. Harri Hursti, founder of Nordic Innovation Labs and a longtime election security expert, told me he and his colleagues were conducting a risk-assessment in a county when they found the binder containing loose-leaf pages in an election office. The vendor, California-based Unisyn Voting Solutions, makes an optical-scan system called OpenElect Voting System for use in both precincts and central election offices.

National: How to Hack an Election | GQ

There is a voting machine in J. Alex Halderman’s office, not a particularly large one, just an oversize computer tablet set into a plastic frame balanced on tubular legs. But Halderman’s office isn’t especially large, either, so the machine takes up an inordinate, almost clumsy, amount of space. The machine is a Diebold AccuVote-TSX. In the jargon of election machinery, it is a DRE, which is short for direct recording electronic: Voters touch the screen to make their choices, which are then logged in the AccuVote’s memory. This is not exotic technology. DREs have been used in American elections for three decades, and the AccuVote and similar machines are being used in some 30 states this fall, when voters are determining, among other things, which party will control one or both houses of the United States Congress and whether there will be any reasonable checks on the current administration. Halderman got his AccuVote-TSX on eBay. It cost him $94.90 from a seller in North Canton, Ohio, who by last spring had sold at least 40 other used AccuVote-TSXs and had at least 10 more for sale (by the last week of October, he either had sold out or gone out of business, as his listing was gone). Because Halderman is a computer scientist at the University of Michigan, he programmed his AccuVote to tally a two-candidate election for “greatest university” between Michigan and, of course, Ohio State.

National: What to Do When Voting Machines Fail | Electronic Frontier Foundation

With Election Day just hours away, we are seeing reports across the country that electronic voting machines are already inaccurately recording votes and questions are being raised about potential foreign interference after 2016. While the responsibility to deal with these issues falls to state election officials, here is a quick guide for how to respond to some issues on Election Day, along with a handy resource from our friends at Verified Voting indicating what equipment is used in each polling place across the nation. 866-OUR-VOTE: If you experience voter machine glitches, see voters being turned away from the poll, or run into other issues, report them to the nonpartisan Election Protection network. This is the only way that we can spot patterns, put pressure on election officials to respond and, in the long run, make the case for paper ballots and risk limiting audits. Since the first electronic voting machines were introduced, security experts have warned that they pose a risk of interference or simple malfunction that cannot be easily detected or corrected. If someone hacks the machines, they hack the vote. If the machines fail, the vote is wrong. The fix is clear: all elections must include paper backups and a settled-on process for real risk limiting audits. If voting machines are down, you should ask for an emergency paper ballot. Do not simply accept that you cannot vote—broken machines should not result in disenfranchisement.

National: The cyber-hardened voting booth | The Fifth Domian

Protecting our elections from cyber meddling is a long-term effort; there is no silver-bullet answer. Yet the security of the 2018 midterm elections has practically made more headlines than the candidates have. A report from the the Center for Strategic and International Studies, in partnership with Raytheon, found that since the 2016 elections, 40 states have invested more than $75 million to improve election security. The center compiled the report from multiple sources and a survey it conducted with its network of cybersecurity experts. Robert “Bob” Kolasky, National Risk Management Center director at the Department of Homeland Security, expressed his confidence in the security of our election systems at an event ahead of the midterms elections. The event was hosted by CSIS on Oct. 30, in Washington, D.C.

National: U.S. Girds for Possible Russian Meddling on Election Day | Wall Street Journal

Two years ago, Rob Silvers arrived at a nondescript federal building in the Virginia suburbs of Washington on election day, afraid America was about to be hit by a catastrophic cyberattack. An alleged Russian operation to hack Democratic emails and peddle divisive disinformation was months in the making; election systems across the country had been probed by suspected Russian hackers; and one state—Illinois—had seen its voter registration database breached. “There was no playbook,” said Mr. Silvers, then a senior official at the Department of Homeland Security, now a partner at the law firm Paul Hastings. “We were writing the playbook as we were executing it.“ His worst fears never materialized, but Russia’s alleged actions convinced officials that cybersecurity would be a critical aspect of any future election. This year, voters will be casting ballots in what experts say will be the most secure U.S. election since the birth of the internet, thanks to steps taken since 2016. “States all across the country are more prepared,” said Wayne Williams, the Republican secretary of state of Colorado, who has been among the most active in adopting electoral cybersecurity measures.

National: Legal fights over voting rights tighten already-close races | The Hill