National: Protecting Our Electoral Security | Georgetown Public Policy Review

Cybersecurity has become an increasingly salient topic in the realm of national defense. The reliance on technology for military, intelligence, and domestic infrastructure has made the disruptive potential of cyber-attacks for national security greater than ever. Elections are uniquely at risk. The aftermath of 2016 highlighted the importance of cybersecurity in election integrity. Almost four-fifths of states in 2016 claim to have been victims of foreign interference, with most pointing to the Russian government as the source. This threat of election-related cybersecurity is intertwined with national security interests, the U.S. response to cyber-attacks in 2016, and the implications for future election cyberattacks.

National: What’s become of Trump’s fraud commission? Even some of its members aren’t sure | PBS

President Donald Trump’s voter fraud commission is facing mounting criticism from Democratic members on the panel who have questioned the group’s purpose and claimed they don’t even know when the group will meet next. Several Democrats on the Election Integrity Commission said the work has stalled, and internal communication has slowed to a trickle since the panel held its first meeting in July. “The reality is, I don’t know anymore now than I knew three months ago,” said Alan King, a probate judge in Alabama and one of the commission’s Democratic members.

National: Clinton campaign, DNC paid for research that led to Russia dossier | The Washington Post

The Hillary Clinton campaign and the Democratic National Committee helped fund research that resulted in a now-famous dossier containing allegations about President Trump’s connections to Russia and possible coordination between his campaign and the Kremlin, people familiar with the matter said. Marc E. Elias, a lawyer representing the Clinton campaign and the DNC, retained Fusion GPS, a Washington firm, to conduct the research. After that, Fusion GPS hired dossier author Christopher Steele, a former British intelligence officer with ties to the FBI and the U.S. intelligence community, according to those people, who spoke on the condition of anonymity. Elias and his law firm, Perkins Coie, retained the company in April 2016 on behalf of the Clinton campaign and the DNC. Before that agreement, Fusion GPS’s research into Trump was funded by an unknown Republican client during the GOP primary. The Clinton campaign and the DNC, through the law firm, continued to fund Fusion GPS’s research through the end of October 2016, days before Election Day.

National: The Fraud Commission Wants Your Voter Data — But Experts Say They Can’t Keep It Safe | ProPublica

The voter-fraud-checking program championed by the head of the Presidential Advisory Commission on Election Integrity suffers from data security flaws that could imperil the safety of millions of peoples’ records, according to experts. Indivisible Chicago, a progressive advocacy group in Illinois, filed a public-records request with Illinois and Florida for information on the Interstate Voter Registration Crosscheck Program. Crosscheck was created and run by the Kansas secretary of state’s office and is often cited by Kris Kobach, Kansas’ secretary of state, as a way to identify voters casting ballots in more than one state. Indivisible Chicago then posted emails and other documents it received, including messages exchanged between elections officials in Illinois and Florida and Crosscheck. The emails and records revealed numerous security weaknesses. Crosscheck’s files are hosted on an insecure server, according to its own information. Usernames and passwords were regularly shared by email, making them vulnerable to snooping. And passwords were overly simplistic and only irregularly changed.

National: Proposed law would regulate online ads to hinder Russian election influence | Ars Technica

A bipartisan group of federal lawmakers wants to make it more difficult for Russia to influence US elections. To that end, the group has drawn up legislation requiring Internet-based companies like Google, Twitter, and Facebook to disclose who is buying political advertisements on their platforms and maintain those records after elections. The Honest Ads Act would heap on the Internet some of the same types of political advertising rules that apply for TV, radio, and print. The legislation is designed to somehow enforce federal election laws that forbid foreign nationals and foreign governments from spending money in the US to influence elections.

National: Democrats on Trump’s fraud commission say they’re in the dark about what it’s doing | The Washington Post

Democratic members of President Trump’s voter fraud commission are voicing mounting frustration about its mission and lack of collaboration, raising questions about the future of a bipartisan panel that has been a magnet for controversy since its inception. In just the past week, two of the commission’s four Democrats have written letters to its executive director, demanding basic information such as when the panel might meet again, what kind of research is being conducted by its staff and when it might send a report to the president. Their concerns are being fed by suspicions that the panel’s direction was preordained and that the agenda is being driven by its Republican members, several of whom would like to see restrictions on voting imposed that would be detrimental to Democrats. “I think the basis of this whole commission was an urban legend,” said Alan King, a probate judge in Alabama and one of the Democratic members who recently wrote commission leaders seeking information. “If you’re going to go down this road, it needs to be done right, and it needs to be done in a professional way. So far, I haven’t seen that.”

National: Obama’s army enlists in redistricting fight | Poiitico

Organizing for Action, the progressive group born out of Barack Obama’s old campaign apparatus, is joining the redistricting effort that Obama has made a central cause of his post-presidency. On Monday, OFA officially launched a partnership with the National Democratic Redistricting Committee, chaired by former Attorney General Eric Holder. OFA officially runs independently from Obama, though the former president made the announcement himself. “OFA volunteers and supporters will provide the grassroots organizing capacity and mobilization that we’ll need to win state-level elections and move other initiatives forward ahead of the 2021 redistricting process, making sure that states are in the best position to draw fair maps,” Obama wrote in an email sent to the OFA’s list, which he called “Our Next Fight.”

National: A Tale Of Two Efforts To Improve Confidence In U.S. Elections | NPR

Efforts to boost public confidence in U.S. elections are proceeding on two parallel tracks right now. One is moving slowly, but steadily. The other is hardly moving at all. Most of the attention has gone to a commission set up by President Trump to look into allegations of voter fraud and other electoral problems. The panel — called the Presidential Advisory Commission on Election Integrity — has been mired in controversy ever since it was formed earlier this year. Its work now appears stalled amid internal divisions and outside legal challenges. But as that panel limps along, several other efforts to address threats to U.S voting are making progress. This month, the federal government and state and local election officials met in Atlanta to start the process of sharing more information about potential threats and pooling security resources.

National: Panel backs bipartisan congressional action for securing election data systems | InsideCyberSecurity.com

Congressional staff on Thursday heard from a panel -- including a former high-ranking Justice Department official and a state county clerk responsible for election-data rolls -- that called for swift, bipartisan action on legislation offering new requirements and funding for states to upgrade and secure the nation's election system from foreign and other malicious hacks. The move could have implications for industry by setting security requirements on the technologies and products sold to state election officials, and underscores a growing sentiment for a physical backup to operations that take place in cyberspace. Susan Greenhalgh, an election specialist with the non-profit group Verified Voting, said the National Institute of Standards and Technology and the Department of Homeland Security are meeting with the Election Assistance Commission to promote use of the NIST cybersecurity framework by state officials. The EAC was established by Congress in 2002 to assist states with guidance and funding to upgrade voting systems. Greenhalgh spoke as part of the panel on election security held on the Senate side of the Capitol on Thursday.

National: Trump’s secretive fraud panel is keeping own members in the dark | Associated Press

Donald Trump’s advisory commission on election integrity has integrity questions of its own – with some of its own members raising concerns about its secretive operations. Democrats in the Senate are requesting a government investigation of the commission for ignoring formal requests from Congress. This week, two members sent letters to commission staff complaining about a lack of information about the panel’s agenda and demanding answers about its activities. In a letter sent on 17 October, Maine’s secretary of state, Matthew Dunlap, said he was not being made aware of information pertaining to the commission and requested copies of all correspondence between its members since Trump signed the executive order creating it in May. “I am in a position where I feel compelled to inquire after the work of the commission upon which I am sworn to serve, and am yet completely uninformed as to its activities,” Dunlap wrote in his letter to Andrew Kossack, the commission’s executive director.

National: A Death And More Questions For Trump’s Fraud Commission | NPR

A member of President Trump's voter fraud commission, former Arkansas state Rep. David Dunn, died suddenly Monday from complications during surgery, according to his office. According to the Associated Press, Dunn was 52 years old. Dunn was one of five Democrats on the advisory panel, which has been embroiled in controversy ever since it was created earlier this year to study problems in the nation's electoral system. In a statement, fellow commissioner J. Christian Adams, a Republican, said Dunn was "courageous to serve, courteous in his manners, and kind to everyone." The commission has met only twice so far — the last time on Sept. 12 in New Hampshire. There's been no word on when, where or whether it will meet again.

National: Sharing Election Threat Info with States Won’t be One-Size-Fits-All, DHS Says | Nextgov

When the Homeland Security Department alerted state governments about Russian attempts to probe their election systems in 2016, it followed an ad hoc, one-size-fits-all process, mostly reaching out through existing cybersecurity relationships with governors’ offices. As a result, the officials running those elections—which are often politically firewalled from governors—were sometimes left in the dark. As the clock counts down to national elections in 2018 and 2020, Homeland Security is taking the opposite approach, asking top election officials in all 50 states how they’d like to communicate about relevant information security information, said Robert Kolasky, acting deputy undersecretary for Homeland Security’s cyber and infrastructure protection division.

National: Senators say feds leave local officials on their own on cybersecurity | Cronkite News

An empty chair fielded question after question from an angry Senate panel Thursday, after a White House cybersecurity coordinator invoked executive privilege and skipped the hearing. Representatives from the FBI, the Pentagon and the Department of Homeland Security testified beside the empty chair, telling the Senate Armed Services Commitee they are working to increase coordination and communication. But much of the hearing was focused on Rob Joyce’s empty chair, which Sen. John McCain, R-Arizona, said showed “a fundamental misalignment between authority and accountability” in cybersecurity efforts at a time when Russians are meddling in an attempt to “destroy the fundamentals of democracy.” Sen. Elizabeth Warren, D-Massachusetts, said the lack of federal coordination leaves local governments “by themselves to fight a sophisticated cyber-adversary like Russia.”

National: CIA: Intelligence assessment has not changed on Russia election interference | The Hill

The CIA said on Thursday that the U.S. intelligence community has not reached new conclusions on Russian efforts to interfere in the 2016 election, hours after the agency's director, Mike Pompeo, said that intelligence agencies had determined that the meddling had no effect on the results. “The intelligence assessment with regard to Russian election meddling has not changed,” Ryan Trapani, a CIA spokesman, told The Washington Post, “and the director did not intend to suggest that it had.” Pompeo reportedly said during a security conference in Washington on Thursday that "the intelligence community’s assessment is that the Russian meddling that took place did not affect the outcome of the election."

National: Warner, Klobuchar, McCain Introduce Bipartisan Legislation To Prevent Foreign Interference In Elections | Alexandria News

U.S. Senator Amy Klobuchar (D-MN), Ranking Member of the Senate Rules Committee, U.S. Senator Mark Warner (D-VA), Vice Chairman of the Select Committee on Intelligence, and U.S. Senator John McCain (R-AZ), Chairman of the Senate Committee on Armed Services today introduced the Honest Ads Act to help prevent foreign interference in future elections and improve the transparency of online political advertisements. “Online political advertising represents an enormous marketplace, and today there is almost no transparency. The Russians realized this, and took advantage in 2016 to spread disinformation and misinformation in an organized effort to divide and distract us,” Senator Warner said. “Our bipartisan Honest Ads Act extends transparency and disclosure to political ads in the digital space. At the end of the day, it is not too much to ask that our most innovative digital companies work with us by exercising additional judgment and providing some transparency.” 

National: Nikki Haley on Russia meddling: Election interference is ‘warfare’ | Politico

U.S. Ambassador to the United Nations Nikki Haley said Thursday that interference in U.S. elections by another nation “is warfare,” telling an audience in New York that such meddling has become Russia’s go-to tactic. “I will tell you that when a country can come interfere in another country’s elections, that is warfare. It really is, because you’re making sure that the democracy shifts from what the people want to giving out that misinformation,” Haley said Thursday at a forum hosted in New York by the George W. Bush institute. ”And we didn’t just see it here. You can look at France and you can look at other countries. They are doing this everywhere. This is their new weapon of choice. And we have to make sure we get in front of it.”

National: Russia Probes Spur Lawmakers on Election Security, Social Media | Bloomberg

After months of congressional investigations into Russian interference with U.S. elections, legislation is gaining traction in the Senate that would impose new disclosure requirements for political advertising on Facebook, Twitter, Google and other social media. Senator John McCain gave a big boost to a proposal by Democratic Senators Amy Klobuchar and Mark Warner to require disclosure of who’s paying for online political ads, announcing he’ll co-sponsor the bill. In two weeks, executives for the social media giants are due to testify at public hearings about Russia’s use of their networks to interfere in the 2016 election. "I’ve been fighting for free and open and full disclosure for the past 25 years. This is part of that effort," McCain told reporters Wednesday.

National: Sessions: U.S. not doing enough to prevent interference in elections | Yahoo

Attorney General Jeff Sessions conceded Wednesday that the U.S. government is not doing enough to prevent future interference in elections by Russia and other foreign adversaries. “We’re not,” Sessions said, when asked by Sen. Ben Sasse, R-Neb., if the government is taking adequate action to prevent meddling in its elections. “The matter is so complex that for most of us we’re not able to fully grasp the technical dangers that are out there.” Sessions said he accepts the U.S. intelligence community’s findings that Russia interfered with the 2016 election and may attempt to do so again. He said the Justice Department has been aggressively looking into the stealing of trade secrets in the private sector and noted that the FBI’s computer experts are also highly trained.

National: Democratic Senators want probe of Trump’s fraud commission | The Hill

A group of Senate Democrats is asking a government watchdog to investigate President Trump's voter fraud commission. Democratic Sens. Michael Bennet (Colo.), Amy Klobuchar (Minn.) and Cory Booker (N.J.) sent a letter to the Government Accountability Office (GAO) saying the panel, known as the Presidential Advisory Commission on Election Integrity, is a "cause for serious concern." "Investigative reports raise questions about the partisan motives and actions of the Commission," the senators wrote. They added that the panel has "ignored numerous requests" from lawmakers seeking to clarify its activities.

National: Despite backlash over political ads, Facebook’s role in elections will only grow | Los Angeles Times

Negative headlines. Congressional inquiries. Corporate apologies. The heightening scrutiny surrounding Facebook after it allowed Russian trolls and inflammatory political ads to spread on its network is the kind of thing companies would do anything to avoid. But don’t expect it to harm the tech giant’s bottom line. As the political world looks to apply the lessons of Donald Trump’s victory to future campaigns, one of the few clear conclusions is that Facebook played an outsized role in propelling the candidate to his improbable win. The company’s ability to affordably target hyper-specific audiences with little to no transparency gives it a distinct advantage over other forms of media, researchers and political operatives believe.

National: The fix is in for hackable voting machines: use paper | Naked Security

Want better security of election voting results? Use paper. With the US almost halfway between the last national election and the 2018 mid-terms, not nearly enough has been done yet to improve the demonstrated insecurity of current electronic voting systems. Multiple experts say one obvious, fundamental move should be to ensure there is a paper trail for every vote. That was a major recommendation at a panel discussion this past week that included representatives of the hacker conference DefCon and the Atlantic Council think tank, which concluded that while there is progress, it is slow.

National: Russian troll factory paid US activists to help fund protests during election | The Guardian

Russian trolls posing as Americans made payments to genuine activists in the US to help fund protest movements on socially divisive issues, according to a new investigation by a respected Russian media outlet. On Tuesday, the newspaper RBC published a major investigation into the work of a so-called Russian “troll factory” since 2015, including during the period of the US election campaign, disclosures that are likely to put further spotlight on alleged Russian meddling in the election. The existence of the troll factory, which has a history of spamming Russian and English blogs and comment forums, has been reported on by many outlets including the Guardian, but the RBC investigation is the first in-detail look at the organisation’s activity during the election period.

National: Conflict Mounts Inside Fraud Commission in the Wake of Child Porn Arrest | ProPublica

The arrest, on child pornography charges, of a researcher for the controversial Presidential Advisory Commission on Election Integrity is intensifying conflict inside the group, with two Democratic members asserting again that a small band of conservatives holds disproportionate power. The researcher, Ronald Williams II, who was arrested late last week, previously worked as an intern at the Department of Justice on a case with J. Christian Adams, who is now a Republican member of the commission. Democratic commissioner Matt Dunlap contends Williams’ involvement with the commission is the latest in a series of discoveries suggesting a few conservative members wield outsize clout; Dunlap claims that Democratic members have been largely excluded from planning. Today he wrote a letter to the commission demanding information. “I am seeking information because I lack it,” stated the letter, a copy of which was given to ProPublica. “I am in a position where I feel compelled to inquire after the work of the Commission upon which I am sworn to serve, and am yet completely uninformed as to its activities.” The letter demanded copies of “any and all communication between members of the commission” beginning in May.

National: State officials to be given access to 2016 election cyberattack data | CBS

CBS News has learned that in an unprecedented effort to enhance election security ahead of the 2018 midterms, select state officials will be given access to some of the most sensitive information about the extent of the 2016 cyberattacks, but that access will require them to submit to the time-consuming and lengthy process of filling out federal security clearance applications. The process online can take up to 10 hours and, even after completing the application, some election officials say they have doubts about the extent of what they'll be able to see.During the 2016 election, suspected Russian hackers scanned and probed voter databases and other election related computer networks in at least 21 states.

National: DHS and top election officials finally meet to begin hashing out ‘critical infrastructure’ designation | Washington Examiner

Top election officials from around the country met this weekend to create the formal organization to hash out what powers and lines of communications the Department of Homeland Security should have after the department designated voting systems in the states and territories as "critical infrastructure" earlier this year. By voting to adopt a charter for a "Government Coordinating Council," the secretaries of state now have a group that has an official channel and a single "voice" to communicate with DHS. The move marks the first major step in the coming together between the nonpartisan National Association of Secretaries of State, or NASS, and DHS, amidst a contentious and sometimes mistrusting year.

National: Senator Klochubar wants Kaspersky out of U.S. voting systems | FCW

A U.S. senator has linked two of the hottest tech policy stories around – efforts by U.S. agencies to blacklist cybersecurity vendor Kaspersky Lab and concerns about the vulnerability of voting systems used by cities and states. Sen. Amy Klochubar (D-Minn.) who sits on a committee with authority over federal elections, is concerned that Kaspersky could be in a position to provide Russian intelligence agencies access to state and local election data, by virtue of connections to computers involved in managing election activities. "Given recent revelations regarding how Russia used Kaspersky software to breach our systems, it is important to prioritize state critical infrastructure systems in conjunction with efforts currently underway at the federal level," Klochubar wrote in an Oct. 12 letter to Acting Homeland Security Secretary Elaine Duke.

National: Google, Facebook putting an early mark on political advertising bills | Politico

Google and Facebook are looking to make an early imprint on legislation being drafted in the House and Senate that would force them and other online networks to disclose information about the buyers of political ads. Lobbyists from the Silicon Valley behemoths have met with the staffs of Sens. Mark Warner and Amy Klobuchar and Rep. Derek Kilmer, all of whom are drawing up bills that would impose new regulations on the industry, according to Democratic aides and company representatives. The Senate bill is expected to be formally introduced next week. It is not clear when the House legislation, which has not been previously reported, will be introduced. Facebook has talked with those working on the bill, a company source confirmed, characterizing Facebook as willing to continue discussing it as the process moves along. A spokesperson for Google declined to comment.

National: An intern Cambridge Analytica left sensitive voter targeting tools online for nearly a year | Business Insider | Business Insider

An intern at the data mining and analysis firm Cambridge Analytica left online for nearly a year what appears to be programming instructions for the voter targeting tools the company used around the time of the election, raising questions about who could have accessed the tools and to what end. Social media analyst and data scientist Jonathan Albright discovered the election data processing scripts — or programming instructions — on what he said was the intern's personal GitHub account. GitHub, a "Facebook for programmers," is an internet hosting service mostly used for code. The account was scrubbed less than an hour after Albright published his findings on Medium, but the scripts had already been archi

National: Are Americans Beginning to Care About Election Integrity? | WhoWhatWhy

Nearly a year after the 2016 presidential election, many Americans have been forced, some for the very first time, to look critically at their voting protections, and recognize that US balloting systems are not nearly as impregnable as they once thought. Clearly, the US intelligence reports about Russia hacks provided a long-overdue wake up call for this issue. The good news: some progress has been made in some jurisdictions in the last year. The bad news: that progress hasn’t been as widespread or comprehensive as the problem would seem to demand. “I think we’re moving in the right direction,” said Larry Norden, of NYU’s nonpartisan Brennan Center for Justice. “I’m heartened by the fact that, for instance, we’re seeing, in both House and Congress, bipartisan proposals to invest in increased election system security.” … Election consultant Pam Smith agreed that there has “definitely [been] a pattern towards more secure elections” across the country. Some states appear to be ahead of the game. Virginia, for example, recently earned praise for decertifying all its touchscreen, paperless Direct Record Electronic (DRE) voting machines ahead of the termination date required by its own legislation.

National: The Race to Secure Voting Tech Gets an Urgent Jumpstart | WIRED

Numerous electronic voting machines used in United States elections have critical exposures that could make them vulnerable to hacking. Security experts have known that for a decade. But it wasn't until Russia meddled in the 2016 US presidential campaigns and began probing digital voting systems that the topic took on pressing urgency. Now hackers, researchers, diplomats, and national security experts are pushing to effect real change in Washington. The latest update? It's working, but maybe not fast enough. On Tuesday, representatives from the hacking conference DefCon and partners at the Atlantic Council think tank shared findings from a report about DefCon's Voting Village, where hundreds of hackers got to physically interact with—and compromise—actual US voting machines for the first time ever at the conference in July. Work over three days at the Village underscored the fundamental vulnerability of the devices, and raised questions about important issues, like the trustworthiness of hardware parts manufactured in other countries, including China. But most importantly, the report highlights the dire urgency of securing US voting systems before the 2018 midterm elections.