National

The halfway point between the election of President Donald Trump and the 2018 midterms has come and gone, and it still isn’t fully clear what Russian hackers did to America’s state and county voter registration systems. Or what has been done to make sure a future hacking effort won’t succeed. US officials, obsessed for now with evidence that Russia’s intelligence services exploited social media to sway US voters, have taken solace in the idea that the integrity of the country’s voting is protected by the system’s acknowledged clunkiness. With its decentralized assortment of different machines, procedures, and contractors, who could possibly hack into all those many systems to change vote totals? … Most states’ elections officials still don’t have the security clearances necessary to have a thorough discussion with federal officials about what’s known about Russian, or others’, efforts to hack into their systems.

National: States Start Using Statistical Methods to Check Voter Count Accuracy | eWeek

In the face of overwhelming evidence that the Russians meddled in the 2016 U.S. presidential election, states are adopting auditing measure to detect any possible direct ballot fraud and give voters confidence in the results. After clear evidence emerged that Russia attempted to influence the results of the 2016 U.S. presidential election by social media, and more directly by hacking election systems, state governments are embarking on a variety of efforts to use statistical auditing to verify election results. On Nov. 15, Colorado kicked off its first statewide statistical audit of its most recent election by using a statistical technique known as risk-limiting audits to establish the integrity of the vote. Because of mail-in ballots from voters serving in the military, the state had to wait eight days to receive all votes and initiate the audit. Risk-limiting audits, or RLAs, allow election officials to verify the outcome of an election by sampling a much smaller subset of ballots compared to a full recount. Verifying the results of presidential elections in each state from 1992 to 2008, for example, only requires an average of 307 ballots per state. The number of ballots required to verify the vote, however, increases as the contests become closer and eventually defaults to a full recount, in the case of an extremely close race. Colorado’s legislature voted to adopt an election-wide audit in 2010, and election officials began piloting RLA in 2013.

National: How Can an Election be Hacked? | Pacific Standard

It’s been almost a year since Election Day 2016, but the campaign news hasn’t stopped. October 30th brought the first indictments in special counsel Robert Mueller’s investigation into possible collusion between the Russian government and the Trump campaign. On Tuesday and Wednesday, representatives from Facebook, Google, and Twitter faced congressional grilling over widespread Russian influence on their platforms. Also on Wednesday, the Wall Street Journal reported that the Department of Justice is considering charging Russian government officials for crimes related to the Democratic National Committee hack. Amid the flurry, it’s easy to blur these conversations—especially because they all seem to feature Russia. But the election-hacking conversation desperately needs to be untangled. Whatever other revelations may come, it helps to remember that election hacking is really about three separate threats: hacking voters, hacking votes, and causing disruption or chaos.

National: ‘Proof of Citizenship’ Voting Laws May Surge Under Trump | Stateline

Emboldened both by President Donald Trump’s claim that millions of noncitizens voted in 2016 and by his creation of a panel to investigate the alleged fraud, lawmakers in several states want to require people registering to vote to provide proof of their citizenship – even though federal registration forms don’t require it. This year at least four states – Kansas, Maryland, Texas and Virginia – considered proof of citizenship measures, according to the Brennan Center for Justice. That means residents must provide documentation such as a passport or birth certificate when registering to vote.

National: Jared Kushner failed to disclose emails sent to Trump team about WikiLeaks and Russia | The Guardian

Jared Kushner shared emails within Donald Trump’s team about WikiLeaks and a “backdoor overture” from Russia during the 2016 election campaign and failed to turn them over to investigators, it emerged on Thursday. Senators said that a disclosure of files to their committee by Kushner, Trump’s son-in-law and senior adviser, “appears to have been incomplete” and was missing “documents that are known to exist but were not included”. They said in a letter to Kushner’s attorney that they knew of emails received and then sent on by Kushner during the campaign that appear relevant to inquiries into alleged collusion between Moscow and Trump’s team.

National: Senators: Kushner Didn’t Disclose Emails On WikiLeaks, ‘Russian Overture’ | NPR

November 16, 2017

Senior White House adviser and son-in-law to the president, Jared Kushner, failed to hand over to Senate investigators emails concerning contacts with WikiLeaks and a “Russian backdoor overture,” according to a letter sent by two senior lawmakers. The letter, released Thursday by Sen. Chuck Grassley, the chairman of the Senate Judiciary Committee, and its ranking Democrat, Sen. Dianne Feinstein, says Kushner failed to turn over “September 2016 email communications to Mr. Kushner concerning WikiLeaks” and other emails pertaining to a “Russian backdoor overture and dinner invite.” The lawmakers said they were seeking the documents that were “known to exist” from other witnesses in the investigation. “We appreciate your voluntary cooperation with the committee’s investigation, but the production appears to have been incomplete,” the letter, sent to Kushner’s attorney, Abbe Lowell, said. “It appears your search may have overlooked several documents.”

National: Hackers to Help Make Voting Machines Safe Again | CPO Magazine

November 16, 2017

Following the recent declaration by the U.S. National Security Agency that Russian hackers tried to infiltrate the electronic voting machines used in the last U.S. presidential election, many people are calling for a lot of things especially for the electronic voting machines to be scrapped. Although the Russians did not succeed, more questions are still left on the table. U.S. senators looking for answers have constituted a committee and is hoping to pass a bipartisan bill called the Securing America’s Voting Equipment (SAVE) Act. The bill will enlist help from the Department of Homeland Security to organize an event like the one held at the DEFCON hackers conference in July, themed the “Voting Machine Hacking Village.”

National: After Months Of Silence, A Blip Of Activity From Trump’s Fraud Panel | HuffPost

November 16, 2017

After over two months of silence, there was a blip of activity from President Donald Trump’s voter fraud commission this week when a commissioner sent an email requesting information on voter fraud prosecutions by the Department of Justice and suggested the agency was not pursuing those types of cases vigorously enough. J. Christian Adams, a commissioner and former DOJ official, sent an email to Andrew Kossack, a federal official charged with the panel’s administration, and copied all of the other commissioners Monday. He asked that Kossack request an annual public report from DOJ on election crimes as well as voter fraud cases the department has pursued over the last decade.

National: Widespread problems reported to Election Protection hotline | The Louisiana Weekly

On Tuesday, Nov. 7, Election Protection, the nation’s largest nonpartisan voter-protection coalition, led by the Lawyers’ Committee for Civil Rights Under Law, provided live assistance to more than 1,000 voters through its 866-OUR-VOTE hotline. Voters reported complaints, some of which impacted systemic problems, or sought assistance with voting. Since 2001, Election Protection has been the…

National: Russia’s Election Meddling Was Another U.S. Intelligence Failure | Dana Priest/The New Yorker

After American intelligence agencies failed to detect and stop Al Qaeda’s 9/11 attack, sixteen years ago, Congress more than doubled their budgets and gave them unprecedented secret authorities. As the intelligence beat reporter for the Washington Post at the time, I watched these agencies grow in size, as dozens of new buildings appeared around the Washington region to house a ballooning workforce of over a million people with top-secret security clearances. The National Security Agency obtained permission to collect and store the private Internet correspondence and cell-phone data of millions of Americans. The F.B.I. was granted the power to obtain citizens’ banking, library, and phone records without court approval. The C.I.A. opened secret prisons abroad where they tortured terrorist suspects. Local police departments began employing military-grade weapons, armored vehicles, and cell-phone-tracking devices.

National: Eric Holder’s Battle Against Gerrymandering | The New Yorker

On November 7th, in Washington, D.C., after delivering a speech to the Campaign for the Fair Sentencing of Youth, Eric Holder grabbed his Blackberry in search of results from the Virginia elections. As the former Attorney General scrolled backward through a long e-mail thread, he quickly learned just how stunning a night it had been for the Democrats. He also understood that, after this triumph, it might be a little harder to keep his party focussed on gerrymandering. “The system didn’t become more fair as a result of what happened last night,” Holder told me the next day. “The system appears to be more fair in spite of the reality that those Democratic candidates faced. The job that I have is to make sure people don’t become complacent.”

National: Russian Twitter Trolls Stoked Voter Fraud Fear Before Election | NBC

Russian trolls used Twitter to challenge the validity of the U.S. presidential election months before it took place, according to new NBC News analysis. In apparent expectation of a Trump loss, the trolls began sowing seeds of doubt to make voters question a win by Hillary Clinton. But when Donald Trump’s victory began rolling in, they changed their tune and began tweeting about the Trump success. Kremlin propaganda tweets using the “VoterFraud” hashtag first appeared in August 2016 and slowly ramped up to an Election Day blitz, according to the NBC News analysis of some 36,000 archived tweets from a single anonymous source with knowledge of social media data.

National: Trump believes Putin on Russia meddling, but then backs US agencies | The Guardian

Donald Trump said on Saturday he believes Vladimir Putin’s denials of Russian involvement in the manipulation of the 2016 presidential election. However, he appeared to contradict himself on Sunday when he said he was “with our agencies” on the question of Russian interference. Speaking at a news conference in Hanoi on Sunday, he was asked about his comments that he believed Putin’s reassurances given by the Russian president on the sidelines of Saturday’s Asia-Pacific Economic Cooperation (Apec) summit in Vietnam. “As to whether I believe it or not, I’m with our agencies, especially as currently constituted,” Trump told a news conference in Vietnam. “As currently led, by fine people, I believe very much in our intelligence agencies.” The president’s comments were criticised by senator John McCain who said in a tweet that there was “nothing America First about taking the word of KGB colonel [Putin]” over the US intelligence community.

National: Gardner: Lawsuits, death, arrest have tied up elections integrity panel | Union Leader

The recent death of one member, the child pornography arrest of a key staffer and a blizzard of lawsuits have paralyzed the work of the federal Election Integrity Commission, according to Secretary of State Bill Gardner, who serves on the controversial panel. “There is so much inertia because the powers that be worry about whether there will be a lawsuit in response to whatever we do,” Gardner said during a telephone interview. “They have really tied this commission up pretty well with all the different lawsuits in all kinds of different directions.” But Gardner, a Democrat, said he’s got no evidence to confirm fellow member and Maine Secretary of State Matt Dunlap’s claims that some on the commission have been communicating only among themselves.

National: The Secret Correspondence Between Donald Trump Jr. and WikiLeaks | The Atlantic

Just before the stroke of midnight on September 20, 2016, at the height of last year’s presidential election, the WikiLeaks Twitter account sent a private direct message to Donald Trump Jr., the Republican nominee’s oldest son and campaign surrogate. “A PAC run anti-Trump site putintrump.org is about to launch,” WikiLeaks wrote. “The PAC is a recycled pro-Iraq war PAC. We have guessed the password. It is ‘putintrump.’ See ‘About’ for who is behind it. Any comments?” (The site, which has since become a joint project with Mother Jones, was founded by Rob Glaser, a tech entrepreneur, and was funded by Progress for USA Political Action Committee.) The next morning, about 12 hours later, Trump Jr. responded to WikiLeaks. “Off the record I don’t know who that is, but I’ll ask around,” he wrote on September 21, 2016. “Thanks.”

National: The Computer Scientist Who Prefers Paper | The Atlantic

For years, Barbara Simons was the loneliest of Cassandras—a technologist who feared what technology had wrought. Her cause was voting: Specifically, she believed that the electronic systems that had gained favor in the United States after the 2000 presidential election were shoddy, and eminently hackable. She spent years publishing opinion pieces in obscure journals with titles like Municipal World and sending hectoring letters to state officials, always written with the same clipped intensity. Simons, who is now 76, had been a pioneer in computer science at IBM Research at a time when few women not in the secretarial pool walked its halls. In her retirement, however, she was coming off as a crank. Fellow computer scientists might have heard her out, but to the public officials she needed to win over, the idea that software could be manipulated to rig elections remained a fringe preoccupation. Simons was not dissuaded. “They didn’t know what they were talking about and I did,” she told me. She wrote more articles, wrote a book, badgered policy makers, made “a pain of myself.” Though a liberal who had first examined voting systems under the Clinton administration, she did battle with the League of Women Voters (of which she is a member), the ACLU, and other progressive organizations that had endorsed paperless voting, largely on the grounds that electronic systems offered greater access to voters with disabilities.

National: Securing the vote: How ‘paper’ can protect US elections from foreign invaders | CSMonitor

When Logan Lamb visited the website of Georgia’s Center for Election Systems in Aug. 2016, what he found left him speechless. Although the cybersecurity researcher had no password or special authorization, he was able through a Google search to download the state’s voter registration list, view files with Election Day passwords, and access what appeared to be databases used to prepare ballots, tabulate votes, and summarize vote totals. He also discovered a vulnerability that would allow anyone to take full control of a server used for Georgia’s elections. It was everything a Russian hacker – or any malicious intruder – might need to disrupt the vote in Georgia. “Had the bad guys wanted to just completely own the central election system, they could have,” Mr. Lamb told the Monitor in an interview … There are only a handful of states in the US that are currently performing audits that start with voter-verified paper ballots. Many counties in California have conducted pioneering work with such audits. New Mexico hires an independent CPA to oversea an audit of a few key races in that state. And Rhode Island recently enacted a law to develop a voter-verified audit system. But the single most important development in this area is about to take place in Colorado.

National: State election boards’ hands are sometimes tied when it comes to voting machine security. | Slate

Voting in the United States is highly decentralized—and in many ways that’s a good thing when it comes to security. Having different regions operate their own elections and count their own votes makes it harder for someone to forge, compromise, or change a large number of votes all at once. But that decentralization also means that individual states, counties, or districts are also often free to make bad decisions about what kind of voting technology to use—and it’s surprisingly hard to stop them. Earlier this week, North Carolina’s state elections board made a last-ditch attempt to convince a judge to prohibit counties in the state from using voting software manufactured by VR Systems on the grounds that the board hadn’t officially certified the software since 2009. On Monday—the day before Election Day—that attempt failed when Superior Court Judge Paul Ridgeway declined to intervene.

National: Trump fraud commission sued by one of its own members, alleging Democrats are being kept in the dark | The Washington Post

President Trump’s voter fraud commission was sued Thursday morning by one of its Democratic members, who alleged that he has been kept in the dark about its operations, rendering his participation “essentially meaningless.” Maine Secretary of State Matthew Dunlap said in a complaint filed in federal court that the 11-member panel is in violation of a federal law that requires presidential advisory commissions to be both balanced and transparent in their work. “The Commission has, in effect, not been balanced because Secretary Dunlap and the other Democratic commissioners have been excluded from the Commission’s work,” says the complaint, filed in the U.S. District Court for the District of Columbia. “The Commission’s operations have not been open and transparent, not even to the commissioners themselves, who have been deprived access to documents prepared by and viewed by other commissioners.”

National: Rep. Debbie Dingell’s bill would require paper voting, recounts in close elections | The Hill

A new bill would require states to use voting machines with paper backups and conduct audits in close elections. Rep. Debbie Dingell (D-Mich.) introduced the Safeguarding Election Infrastructure Act on Wednesday, which aims to increase elections security by requiring voting machines funded by the federal Help America Vote Act print a paper receipt of each vote. “Our democracy depends on free and fair elections, and we must do everything we can to protect the security and integrity of that process,” said Dingell in a written statement. “The reality is, many of our voting machines have not been updated in nearly two decades and are susceptible to cyberattacks. We know that foreign adversaries pay very close attention to our elections, and until we address these vulnerabilities, our democratic process is at risk,” she said.

National: Klobuchar introduces automatic voter registration bill | Brainerd Dispatch

U.S. Sen. Amy Klobuchar introduced legislation to automatically register voters, a news release from her office stated Wednesday. The Register America to Vote Act would ensure every state develops and implements a secure process to automatically register eligible citizens to vote when they turn 18. Minnesota is among the 32 states where automatic voter registration bill have been introduced. Last year, Minnesotans turned out to vote at the highest rate of any state in the country with 81 percent of registered voters casting a ballot. Klobuchar is the ranking member of the Senate Rules Committee with oversight jurisdiction over federal elections.

National: He Solved The DNC Hack. Now He’s Telling His Story For The First Time. | Buzzfeed

One late morning in May 2016, the leaders of the Democratic National Committee huddled around a packed conference table and stared at Robert Johnston. The former Marine Corps captain gave his briefing with unemotional military precision, but what he said was so unnerving that a high-level DNC official curled up in a ball on her conference room chair as if watching a horror movie. At 30, Johnston was already an accomplished digital detective who had just left the military’s elite Cyber Command, where he had helped stanch a Russian hack on the US military’s top leadership. Now, working for a private cybersecurity company, he had to brief the DNC — while it was in the middle of a white-knuckle presidential campaign — about what he’d found in the organization’s computer networks. Their reaction was “pure shock,” Johnston recalled. “It was their worst day.”

National: In 2017 Elections, Democrats Win Phase One of the Redistricting Wars | The Atlantic