National

A year before the midterm elections, state election administrators are racing to plug vulnerabilities and update software ahead of an expected wave of cyberattacks from foreign actors. In interviews, state officials and elections experts said they are working to bolster internal security at both the state and local levels. At the same time, many said they hope Congress will act to update federal election law, in part to provide them with the resources they need to secure the democratic process. “No matter what steps we take today, cybersecurity and the cyber risk evolves and changes daily, and we just have to be vigilant and diligent going forward,” said Vermont Secretary of State Jim Condos (D). “Anybody that thinks, ‘today I’ve got it covered,’ and washes their hands of it is fooling themselves.”

National: Democratic member of Trump’s fraud commission sues panel | Maine Public

Maine Secretary of State Matt Dunlap has filed a lawsuit against the Republican-led presidential voter fraud commission, claiming that he and other members of the panel are being shut out of the process. Dunlap, who is a Democrat, says GOP leaders on the commission are excluding him from discussions aimed at shaping the group’s agenda. Dunlap says he has heard nothing about the activities of the Presidential Advisory Commission on Election Integrity for nearly two months. After his repeated attempts to contact the commission’s leadership, Dunlap says he decided to file a complaint in the U.S. District Court for the District of Columbia. Dunlap says the Republican-led freeze-out is a clear violation of federal transparency laws. “I guess the real question for me is: Why I didn’t do it sooner,” he says.

National: CIA director ‘stands by’ belief Russia hacked DNC after meeting skeptic at Trump’s urging | Washington Examiner

CIA Director Mike Pompeo still believes Russia was responsible for hacking the Democratic National Committee, the agency said Tuesday amid reports that Pompeo met a skeptic at President Trump’s urging. William Binney, who worked more than three decades at the National Security Agency before stepping down as technical director in 2001, met with Pompeo on Oct. 24 to discuss a July report he co-authored suggesting DNC emails were leaked, rather than hacked. “I thought it was a pretty good hourlong meeting,” Binney told the Washington Examiner. “He said that the president said I should talk to you for facts.” Binney believes U.S. spy agencies “took a wild ass guess” in January when they blamed Russia for hacking the DNC and that “if they had any evidence, they would show it.” The report he co-authored says download speeds make it likely someone leaked DNC files after downloading them locally, rather than hacked them over the internet.

National: Where hackers haven’t directly influenced polls, they’ve undermined our faith in democracy | The Register

What a difference a year makes. This time last year, Twitter pooh-poohed any suggestion that Russian agents ran accounts on its platform for purposes of subverting the US election. A month ago, it was forced to eat its words, owning up to maybe just a few paltry 201. Last week, in the course of a Congressional grilling, that estimate ticked upward a magnitude to more than 2,700. Facebook, too, upped the ante, admitting that Russian-backed content may have reached not 10 million users, as previously claimed, but 126 million. Some of this, as analysis of the @TEN_GOP Twitter account suggests, was influential. But did it influence the election? That is the $64,000 question. Or, given how much Donald Trump appears to be profiting from his election as US president, perhaps the $64m question. Not to be outdone, the UK may, finally, be asking some of the same questions. A petition politely asking the UK government to “investigate covert foreign interference in the EU referendum” was cancelled earlier this year when the general election was called. Now it is back and has hit 10,000 signatures, an official (written) response is required. 100,000 signatures means the petition will be considered for debate in Parliament.

National: Researchers devise an algorithm to combat gerrymandering | Phys.org

As the Supreme Court considers Gill v. Whitford, a challenge to the practice of partisan gerrymandering that may rewrite the rules used to draw congressional districts, a team of computer scientists has come up with a new algorithmic approach to redistricting that’s less political and more mathematical. In a paper posted on arXiv.org, the researchers describe a computerized method for dividing state populations evenly into compact polygonal districts that average six or fewer sides. The neatly arrayed districts are a stark contrast to gerrymandered districts, which are stretched and contorted to provide an overall congressional advantage for one political party or another. “What we’re trying to do is come up with a system that makes it hard to engineer districts for political gain,” said Philip Klein, a computer scientist at Brown University and a coauthor of the paper. “It doesn’t give the user much freedom in deciding how the lines are drawn, which we view as a good thing because that freedom can be abused.”

National: The Burdens of Gerrymandering Are Borne by Communities of Color | NBC

Gerrymandering is a disgraceful national tradition that should have no place in our electoral system, irrespective of the political party in control. It doesn’t take a constitutional scholar to recognize that this isn’t how democracy is supposed to work but, with a case from my home state of Wisconsin pending before the U.S. Supreme Court, that’s exactly who is going to decide whether our representative democracy will work for everyone, regardless of political affiliation or racial distinctions. Both political parties have engaged in it over the years during the redistricting process but, most recently, gerrymandering has become an effective tool in the GOP’s nationwide campaign to suppress the votes of their opposition. Republicans, for instance, took control of approximately 17 seats in Congress in 2016 solely through gerrymandering according to analysis from the Brennan Center for Justice, NYU Law School’s nonpartisan law and policy institute.

National: DHS has eye on cybersecurity issues Tuesday | CNN

As voters head to the polls on Tuesday, state and local officials are working with the federal government to monitor any potential cybersecurity issues on the first major Election Day since the 2016 election. While experts do not believe any interference with actual voting occurred last year, Russian efforts to meddle in the election — in part through hacking emails and some probing of election-related systems at the state level — have fueled a national conversation about the cybersecurity of elections. The Department of Homeland Security has taken the lead for the federal government in helping shore up election systems, which are managed at the state and local level. “We are working closely with officials in Virginia and New Jersey and other states and will have cybersecurity advisers embedded with state officials and with direct lines to DHS’ National Cybersecurity Communications Integration Center throughout the day today,” spokesman Scott McConnell told CNN in an email. “We continue to offer state and local governments our cybersecurity services, including cyber hygiene scans of Internet-facing systems and onsite risk and vulnerability assessments.”

National: Hacking the vote: Threats keep changing, but election IT sadly stays the same | Ars Technica

The outcome of the 2016 presidential election is history. But allegations of voter fraud, election interference by foreign governments, and intrusions into state electoral agencies’ systems have since cast a pall over the system that determines who makes the laws and enforces them in the United States. Such problems will not disappear no matter what comes out of a presidential commission or a Congressional hearing. “Amazon will not go out of business because one percent of its transactions are fraudulent,” said David Jefferson, a visiting computer scientist at Lawrence Livermore National Laboratory and chairman of the Verified Voting Foundation, a non-governmental organization working toward accuracy, integrity, and verifiability of elections. “That’s not the case for elections.” Jefferson’s words came during his talk at the latest edition of DEFCON, the annual infosec event. Election hacks naturally became something of an overarching theme within the Caesar’s Palace convention center this summer. In fact, there was an entire room dedicated solely to testing the reliability of US electronic voting systems. Called “Voting Village,” the space was filled with more than 25 pieces of electoral hardware—voting machines and other electronic election-management equipment—in various stages of deconstruction. Any curious conference attendee, no matter where they fell within the conference’s wide technical skill spectrum, could contribute to the onslaught of software and hardware hacks targeting the machines in this de facto lab.

National: As local elections loom, voters drown in political text message spam | ZDNet

If you were spammed this weekend by a local political campaign, you weren’t alone. Polls are now open in local elections around the country, where state legislatures and mayoral races around the US will be decided after months of unrelenting campaigning. But as political candidates fight for every vote, some campaigns have taken to aggressive, last minute tactics — like blasting their constituency districts with spammy text messages. ZDNet has seen reports and tweets of screenshots of text messages from several New York-based candidates in the past few days, pushing local residents to vote for a particular candidate or calling for campaign donations. …For years, state and federal election candidates have used text messages as a way to solicit votes or contributions from their constituents. Use of text messaging first rocketed during the 2008 presidential campaign, and has only escalated in size and scale — no more so than during last year’s election. But the law is clear: it’s illegal for companies to send text messages to individuals who haven’t given prior consent.

National: Virginia, Alabama elections will test gutting of the Voting Rights Act | Business Insider

Alabama Secretary of State John Merrill didn’t mince words when addressing opponents of his state’s voter ID law, which requires voters show a government-approved photo ID at the polls. “People are entitled to their own opinions. But they’re not entitled to their own facts,” Merrill told Business Insider. “Everybody in Alabama that wants a voter ID has one.” Voting rights activists, who have long dismissed voter ID laws as discriminatory tactics that disenfranchise minority voters, disagree. They say the time it takes people to travel to the office where they need to pick up their IDs and the added cost for the underlying documents required to get the ID in the first place are just too burdensome for many voters. This will discourage many people from voting, civil rights defenders say, in upcoming elections across the country, including the governor’s race in Virginia on Tuesday and the special election for the US Senate seat in Alabama on December 12. Voting rights activists say the landmark 2013 Shelby v. HolderSupreme Court decision — which struck down parts of the 1965 Voting Rights Act (VRA) and helped pave the way for Virginia’s voter ID law — is perhaps the most blameworthy culprit.

National: The three kinds of election-hacking threats | Slate

It’s been almost a year since Election Day 2016, but the campaign news hasn’t stopped. Oct. 30 brought the first indictments in special counsel Robert Mueller’s investigation into possible collusion between the Russian government and the Trump campaign. On Tuesday and Wednesday, representatives from Facebook, Google, and Twitter faced congressional grilling over widespread Russian influence on their platforms. Also on Wednesday, the Wall Street Journal reported that the Department of Justice is considering charging Russian government officials for crimes related to the Democratic National Committee hack. Amid the flurry, it’s easy to blur these conversations—especially because they all seem to feature Russia. But the election-hacking conversation desperately needs to be untangled. Whatever other revelations may come, it helps to remember that election hacking is really about three separate threats: hacking voters, hacking votes, and causing disruption or chaos. … The second threat is of manipulated votes—essentially, that voting machines will be hacked. The Department of Homeland Security found no evidence that malicious actors successfully compromised any vote-tallying machines in 2016. However, a leaked NSA document from this summer shows that Russian hackers targeted and compromised a Florida-based voting-equipment vendor and then used the stolen credentials to target local election officials. Thankfully, the compromised vendor, VR Systems, doesn’t run any vote-tabulation equipment. However, its digital access and proximity to local election officials—who work with those who do program voting machines—is worrying.

National: Securing the vote: How efforts to prevent fraud, and voting rights, collide | CSMonitor

Richard Gabbay says he wasn’t trying to suppress anyone’s vote. He simply wanted to organize fellow Republicans for the upcoming 2016 presidential election in Florida’s Broward County. To help in his political organizing, he obtained a list of all registered voters in his precinct. But when he started to compare the names and addresses of his actual neighbors against the names and addresses listed on the official voting roll, he found major discrepancies. Ultimately, Mr. Gabbay identified 629 voters who he believed were no longer eligible to vote. They included seven individuals who had passed away and 570 who appeared to have moved away. In all, his list comprised 14 percent of all registered voters in his precinct. Gabbay and other critics charge that Broward County is failing to keep its voter rolls current and accurate. They say the county’s list of 1.2 million registered voters is grossly inflated with deceased or otherwise ineligible voters.

National: Inside story: How Russians hacked the Democrats’ emails | Associated Press

It was just before noon in Moscow on March 10, 2016, when the first volley of malicious messages hit the Hillary Clinton campaign. The first 29 phishing emails were almost all misfires. Addressed to people who worked for Clinton during her first presidential run, the messages bounced back untouched. Except one. Within nine days, some of the campaign’s most consequential secrets would be in the hackers’ hands, part of a massive operation aimed at vacuuming up millions of messages from thousands of inboxes across the world. An Associated Press investigation into the digital break-ins that disrupted the U.S. presidential contest has sketched out an anatomy of the hack that led to months of damaging disclosures about the Democratic Party’s nominee. It wasn’t just a few aides that the hackers went after; it was an all-out blitz across the Democratic Party. They tried to compromise Clinton’s inner circle and more than 130 party employees, supporters and contractors.

National: Russia Was Helping Trump Just Days After He Entered the 2016 Primary | Newsweek

A U.S. intelligence assessment earlier this year reported that Russian Twitter accounts began backing Donald Trump as early as six months into his bid for the presidency, but new data shows pro-Trump and anti-Hillary Clinton activity started within weeks of him entering the race. In the three-month period after Trump announced his candidacy on June 16, 2015, tweets from Russian accounts pushed praise for him over criticism by close to a 10-to-1 margin, according to a Wall Street Journal analysis of 159,000 deleted tweets from 2,752 accounts named during congressional hearings last Wednesday on Russian interference in the election. The accounts, which Twitter identified as run by the Kremlin-backed Internet Research Agency, by equal or greater margins criticized Clinton and early Republican frontrunner Jeb Bush. “BOOM! DOWN GOES @jebbush,” tweeted @DorothieBell, claiming to be an American “Conservative wife, mother,” three weeks after Trump announced his bid. The account wanted to “take this once great country back!!!,” and provided a link to a Breitbart News story on Trump attacking Bush for soft immigration policies.

National: Local voting districts seen as crucial to election security | Associated Press

Last November, election officials in a small Rhode Island town were immediately suspicious when results showed 99 percent of voters had turned down a noncontroversial measure about septic systems. It turned out an oval on the electronic ballot was misaligned ever so slightly and had thrown off the tally. The measure actually had passed by a comfortable margin. The scary part: The outcome might never have raised suspicion had the results not been so lopsided. … States vary widely in what they are doing to tighten security. Colorado and Rhode Island have adopted more rigorous statistical methods for double-checking the votes, while others are making or weighing changes to their voting technology. “Always, there’s been a hypothetical. But clearly, now it is a real threat,” said Noah Praetz, election director for Cook County, Illinois. “The fact that we now have to defend against nation-state actors — Russia, China, Iran. It’s a very different ballgame now.”

National: Homeland Security cyber unit on alert for Election Day | The Hill

Russia’s intervention in the 2016 presidential election yielded an unexpected result for officials at the Department of Homeland Security (DHS): it has put them in the driver’s seat for protecting future elections from cyberattacks. Since January, officials at the agency have grappled with how to work with state and local election officials to share information on imminent threats and develop response plans for when things go awry. The effort has spawned tensions with state officials, who are wary of a “federal takeover” of elections and have panned the slow pace at which the federal government offered up details on the Russia threat. Homeland Security has pressed forward, standing up a special council in October to engage with election officials on potential threats and how to defend against and respond to them.

National: Trump fraud commission appears to have gone dark | USA Today

The election commission set up to investigate President Trump’s charges of voter fraud seems to have gone dark in recent weeks. The commission last met on Sept.12 in New Hampshire, and it’s unclear — even to commission members — when or where the next meeting will be. Groups suing the commission for more information about its activities also have no clue. “There’s not a lot of information out there,” said Kristen Clarke, president and executive director of the Lawyers’ Committee for Civil Rights Under Law. “It’s been chaotic from day one and remains chaotic. I think that they don’t know what they’re doing. I think this commission was poorly structured and poorly conceived.” The Lawyers’ Committee and several other civil rights and voting rights groups, including the American Civil Liberties Union, have sued the commission, arguing it hasn’t been transparent and hasn’t conducted enough of its business in the open.

National: Voting rights under seige as 2018 election cycle begins | McClatchy

Not since the death of poll taxes and literacy tests in the 1960s has access to the ballot box been so under siege. And as the march toward Election Day 2018 begins, the forces that helped abolish those voting obstacles appear to be moving in the opposite direction. Fueled by conservative Supreme Court rulings, GOP politics and President Donald Trump’s unsubstantiated claims of voter fraud, attacks on ballot access now threaten to make voting more of a privilege in the United States than a constitutional right, say voting rights advocates. “There appears to be an almost coordinated campaign unfolding across the country to institute voting suppression measures at the local and state level,” said Kristen Clarke, executive director of the Lawyers’ Committee for Civil Rights Under Law. “Whether it’s hostility, recalcitrance or recklessness, sadly, we’re seeing many efforts to turn back the clock on the voting rights of ordinary Americans.”

National: Kremlin Cash Behind Billionaire’s Twitter and Facebook Investments | The New York Times

In the fall of 2010, the Russian billionaire investor Yuri Milner took the stage for a Q. and A. at a technology conference in San Francisco. Mr. Milner, whose holdings have included major stakes in Facebook and Twitter, is known for expounding on everything from the future of social media to the frontiers of space travel. But when someone asked a question that had swirled around his Silicon Valley ascent — Who were his investors? — he did not answer, turning repeatedly to the moderator with a look of incomprehension. Now, leaked documents examined by The New York Times offer a partial answer: Behind Mr. Milner’s investments in Facebook and Twitter were hundreds of millions of dollars from the Kremlin. Obscured by a maze of offshore shell companies, the Twitter investment was backed by VTB, a Russian state-controlled bank often used for politically strategic deals. And a big investor in Mr. Milner’s Facebook deal received financing from Gazprom Investholding, another government-controlled financial institution, according to the documents. They include a cache of records from the Bermuda law firm Appleby that were obtained by the German newspaper Süddeutsche Zeitung and reviewed by The Times in collaboration with the International Consortium of Investigative Journalists.

National: Russia funded Facebook and Twitter investments through Kushner associate | The Guardian

Two Russian state institutions with close ties to Vladimir Putin funded substantial investments in Twitter and Facebook through a business associate of Jared Kushner, leaked documents reveal. The investments were made through a Russian technology magnate, Yuri Milner, who also holds a stake in a company co-owned by Kushner, Donald Trump’s son-in-law and senior White House adviser. The discovery is likely to stir concerns over Russian influence in US politics and the role played by social media in last year’s presidential election. It may also raise new questions for the social media companies and for Kushner. Alexander Vershbow, who was a US ambassador to Russiaunder George W Bush and to Nato under Bill Clinton, said the Russian state institutions were frequently used as “tools for Putin’s pet political projects”. Vershbow said the findings were concerning in light of efforts by Moscow to disrupt US democracy and public debate. “There clearly was a wider plan, despite Putin’s protestations to the contrary,” he said.

National: Senators release new election cybersecurity bill | The Hill

Sens. Martin Heinrich (D-N.M.) and Susan Collins (R-Maine) introduced a multifaceted election cybersecurity bill Tuesday, including a bug bounty program for systems manufacturers and a grant program for states to upgrade technology. “While the Intelligence Committee’s investigation is still ongoing, one thing is clear: The Russians were very active in trying to influence the 2016 election and will continue their efforts to undermine public confidence in democracies,” said Collins in a statement celebrating the bill. “The fact that the Russians probed the election-related systems of 21 states is truly disturbing, and it must serve as a call to action to assist states in hardening their defenses against foreign adversaries that seek to compromise the integrity of our election process.”

National: Fiery exchanges on Capitol Hill as lawmakers scold Facebook, Google and Twitter | The Washington Post

Senators from both parties took tech company officials to task in a hearing Wednesday for failing to better identify, defuse and investigate Russia’s campaign to manipulate American voters over social media during the 2016 presidential campaign. In the second of three Capitol Hill hearings this week on Russian’s online information operation, members of the Senate Intelligence Committee challenged Facebook, Google and Twitter in strikingly direct terms that, at times, seemed to carry the implicit threat of legislation that could rein in the nation’s wildly profitable technology industry. “I don’t think you get it,” said Sen. Dianne Feinstein (D-Calif.), whose home state includes all three companies. “What we’re talking about is a cataclysmic change. What we’re talking about is the beginning of cyberwarfare. What we’re talking about is a major foreign power with sophistication and ability to involve themselves in a presidential election and sow conflict and discontent all over this country. We are not going to go away gentlemen. And this is a very big deal.”

National: Lawyers’ Committee spearheading election protection efforts in communities across U.S. | Wisconsin Gazette

With Election Day in many states less a week away, Election Protection, the nation’s largest nonpartisan voter protection coalition, is ramping up its efforts to safeguard voting rights across the country. Multiple states have attempted to impose severe restrictions on the right to vote. While courts have batted down many of these efforts to limit the franchise, the confusion surrounding recent rulings and the lack of accurate information could disrupt voting this election cycle. The Lawyers’ Committee for Civil Rights Under Law is spearheading Election Protection’s efforts to protect voters this election cycle, using hotlines, field monitors and voter education, as well as its expansive network of national partners and state advocates, to respond to any questions or concerns voters may have.

National: SAVE Act attempts to bolster election security | TechTarget

Two senators introduced a new election security bill with the aim of providing assistance to states in order to protect against cyberattacks on voting infrastructure. The bipartisan bill — the Securing America’s Voting Equipment (SAVE) Act — was put forward by Senators Susan Collins (R-Maine) and Martin Heinrich (D-N.M.). The aim of the bill, according to Collins, is to “assist states in protecting the integrity of their voting systems. “Our bill seeks to facilitate the information sharing of the threats posed to state election systems by foreign adversaries, to provide guidance to states on how to protect their systems against nefarious activity and, for states who choose to do so, to allow them to access some federal grant money to implement best practices to protect their systems,” Collins said on the Senate floor. Collins said that she knew of “no evidence to date that actual vote tabulations were manipulated in any state” during the 2016 U.S. election, but noted that the FBI and Department of Homeland Security (DHS) found 21 states had election systems probed by Russian hackers.

National: Report: Many 2016 voting sites lacked full disability access | Associated Press

Fewer than one in five polling places were fully accessible to voters with disabilities during the 2016 general election, a government report shows — a finding that has prompted federal officials to recommend the Justice Department adopt stricter compliance rules. The report released Thursday by the non-partisan Government Accountability Office comes less than a week before mayoral elections in Atlanta and New York, elections for governor in New Jersey and Virginia and a special U.S. House election in Utah, and gives a window of only a year to address problems before the 2018 congressional elections. The bottom line in the report, provided to The Associated Press in advance of its publication, is that accessibility for voters with disabilities has not kept pace with the increase in early voting that has occurred in many states since the 1990 Americans with Disabilities Act and the 2002 Help America Vote Act. Both early voting and the disabilities access improvements are top goals in making it easier to vote.

Read the GAO Report

National: Trump and Sessions Denied Knowing About Russian Contacts. Records Suggest Otherwise. | The New York Times

Standing before reporters in February, President Trump said unequivocally that he knew of nobody from his campaign who was in contact with Russians during the election. Attorney General Jeff Sessions has told the Senate the same thing. Court documents unsealed this week cast doubt on both statements and raised the possibility that Mr. Sessions could be called back to Congress for further questioning. The special counsel, Robert S. Mueller III, unsealed his first charges Monday in a wide-ranging investigation into Russian attempts to disrupt the presidential election and whether anyone close to Mr. Trump was involved. Records in that case show that George Papadopoulos, a foreign policy adviser, had frequent discussions with Russians in 2016 and trumpeted his connections in front of Mr. Trump and Mr. Sessions. For months, journalists have revealed evidence that associates of Mr. Trump met with Russians during the campaign and the presidential transition. But the court documents represent the first concrete evidence that Mr. Trump was personally told about ties between a campaign adviser and Russian officials.

National: Researcher discovers over 250 of Trump’s web domains are communicating with Russian servers, sharing weird files | BGR