National

This election year we’ve seen foreign hackers infiltrate the Democratic National Committee’s e-mail system as well as voter databases in Arizona and Illinois. These attacks have reinforced what political scientists and technical experts alike have been saying for more than a decade: public elections should stay offline. It’s not yet feasible to build a secure and truly democratic Internet-connected voting system.Researchers from government agencies and leading academic institutions studied the issue extensively following the debacle of the 2000 Presidential race, and the consensus emerged that it should not occur. That’s still the case, and today’s rampant cybercrime should be reason enough to keep voting systems disconnected. We have no good defense against malware on voters’ computers or denial of service attacks, and sophisticated adversaries like those behind the attacks on big corporations we’ve seen in recent years will find ways to get into connected voting systems, says Ron Rivest, a leading cryptographer and MIT professor. “It’s a war zone out there,” he says.

National: Hacking the election? Feds step in as states fret cyber threats | CNN

A series of high-profile breaches and warnings from national intelligence leaders has elections directors in critical battleground states seeking federal help against possible cyberattacks. Officials in Pennsylvania and Ohio tell CNN they are working closely with the Department of Homeland Security to protect their elections systems from cyberattacks and breaches. Ohio is going one step further. “We even asked the National Guard to attempt to penetrate our databases,” said Joshua Eck, a spokesman for Ohio Secretary of State Jon Husted. “We’ve had a number of really positive tests. It has gone well and we’ve been able to find vulnerabilities and fix them.” A pair of cyberattacks on Illinois’ and Arizona’s voter registration databases over the summer spurred the Obama administration to ring the alarm bells for states as they prepare for what has already been a chaotic campaign. And top Democrats on the House and Senate intelligence committees publicly accused the Russian government of seeking to alter the election. “Based on briefings we have received, we have concluded that the Russian intelligence agencies are making a serious and concerted effort to influence the U.S. election,” Sen. Dianne Feinstein and Rep. Adam Schiff, of California, said Thursday.

National: Ruling against the Federal Election Commission is a win for political money transparency | Facing South

A good-government group has won its case against the Federal Election Commission for negligence in enforcing campaign finance laws against two conservative political groups that have ties to billionaire industrialists and conservative juggernauts Charles and David Koch and that were active in several Southern states. Citizens for Responsibility and Ethics in Washington (CREW) filed a complaint with the FEC in 2012 against Americans for Job Security and the American Action Network for failing to register as political committees while financing $27.6 million worth of political ads during the 2010 elections. AJS is an anti-union 501(c)6 nonprofit trade association based in Virginia, while AAN is a 501(c)4 “social welfare” nonprofit based in Washington, D.C. After the FEC dismissed the suit, CREW sued the regulatory body itself.

National: Facebook launches Voter Registration Drive for the U.S Elections | Technowize

Apparently, Facebook is using its popularity for a good cause. The flagship social network is launching its first nationwide voter registration drive. This is an attempt to urge all the citizens of U.S to participate in the voting process. This is a special feature which will appear on the homepage of the people of U.S to encourage them to vote. Facebook hopes that through this feature, the number of voters might improve. This is because majority of the people check their Facebook newsfeed regularly and hence such a reminder will be useful.

National: Cybersecurity Threats Curb Online Voting Company Ambitions | Bloomberg

After multiple hacks of Democratic Party e-mail systems and fears of Russian cyber attacks on the U.S. election, paper ballots have taken on an unexpected appeal. Online voting software companies are convinced convenience-loving Americans will increasingly push to cast their ballots on smartphones and laptops, and they’re working to make that happen. But voter advocates, election officials and others are still leery of the risks involved in conducting elections over the all-too-vulnerable internet. For now, fears about voting security may be giving paper-ballot backers the upper hand where it matters most: Americans’ confidence in the integrity of the election system. “In recent weeks, reports on cyber attacks have voters questioning whether their vote will actually count, and that, in my opinion, is more damaging than the potential for hacking,” Louisiana Secretary of State Tom Schedler told a House committee meeting Sept. 13. The best voting system, he said, is the one which “people of that state feel comfortable voting.”… The U.S. Election Assistance Commission—which develops voluntary guidelines, tests and certifies voting hardware and software—has not certified any internet voting systems. A commission spokesman told Bloomberg BNA it was not clear if an update to its technical guidelines—slated for 2018—would include language about online voting systems. However, the guidelines committee adopted a list of priorities in September 2016 which include discussions on the risks and benefits of electronically returning ballots.

National: Officials Are Scrambling to Protect the Election From Hackers | WIRED

As the United States barrels toward November elections, officials are still looking for last-minute fixes to ensure that the patchwork of voting technology used around the country can fend off the increasingly troubling prospect of hacker attacks. And in the latest of those efforts, Georgia representative Hank Johnson is set to introduce two bills today designed to shore up that fragile system’s security. The Election Infrastructure and Security Promotion Act of 2016 would mandate that the Department of Homeland Security classify voting systems as critical infrastructure, and the Election Integrity Act would limit which voting machines states can buy and also create a plan for handling system failures. The bills reflect a growing debate about whether designating voting tech as critical infrastructure (like the public water supply, energy systems, transportation, communication grid, and the financial sector) would help to secure the U.S.’s highly decentralized voting setup. In the wake of the Democratic National Committee breach and increasingly brazen Russian cyberespionage attacks, concern is mounting about the potential for election hacking in the 2016 presidential race and beyond. Voting registries and election board websites have been compromised, security researchers have shown that electronic voting machines are vulnerable, and agencies like the FBI are on alert.

National: Proposed cybersecurity bills would forbid internet-connected voting machines | FedScoop

A pair of comprehensive, complimentary election infrastructure reform bills, which will be first introduced Wednesday in the House of Representatives, seeks to take all voting machines offline, offers funding for election cybersecurity research and mandates the use of paper ballots across the U.S. by 2018, FedScoop has learned. These two pieces of legislation — named the “Election Infrastructure and Security Promotion Act of 2016” and the “Election Integrity Act,” respectively — are being sponsored by Rep. Hank Johnson, D-Ga., a lawmaker whose constituents will rely on paperless ballots to cast their votes in November’s presidential election. “In the wake of the DNC server hack and well-documented efforts by states to suppress the vote, citizens are rightly concerned,” Johnson said in a statement. “We must work to reduce the vulnerability of our crucial voting systems, protect the security and integrity of our electoral process, and ensure all Americans have the opportunity to vote.”

National: Voter Registration Flap Still Haunting Election Agency | NBC

Voting rights advocates are accusing a Washington bureaucrat of helping Republican-led states enforce tight restrictions on voter registration, a move they say turned a federal voting agency into a de facto ally of state officials looking to make voting harder. A progressive group on Wednesday called on the federal Election Assistance Commission (EAC) to conduct an internal investigation into the actions taken by Brian Newby, the agency’s executive director. The group, Allied Progress, charged that Newby had improper private communications with his former boss, Kansas Secretary of State Kris Kobach, and perhaps other election officials, about their requests to change the federal voter registration form to require applicants to show proof of citizenship. Patricia Layfield, the inspector general of the EAC, said no decision had yet been made on whether to open an investigation into Newby’s actions. “I continue to consider the various options available,” Layfield told NBC. “I’m taking the concerns expressed in the letter very seriously.”

National: State Computers Increasingly Under Attack by Cybercriminals | Stateline

State information technology officials have strengthened their defenses against hackers and cybercriminals who attack their computer networks millions of times a day, but admit they’re not fully prepared for increasingly complex threats that could expose the personal information of their residents. A report by the National Association of State Chief Information Officers (NASCIO) and consulting firm Deloitte & Touche LLP released Tuesday revealed that cybersecurity is the foremost priority for state IT officers, who are highly concerned about increasing efforts, especially by sophisticated crooks, to breach their systems. “These sophisticated threats have grown significantly,” said Doug Robinson, NASCIO’s executive director. “There’s a never-ending parade of bad guys who are attempting to penetrate the network.” For citizens, the stakes in averting breaches are high. State data systems contain personal information about millions of people that is valuable to identity thieves. They house birth and death certificates, and driver’s license numbers. The systems also house Social Security numbers of state income taxpayers and the credit card numbers of people who make payments to state agencies.

National: Michelle Obama passport scan appears online in apparent hack | Associated Press

The White House said Thursday it was looking into a cyber breach after what appeared to be a scan of first lady Michelle Obama’s passport was posted online. The fresh disclosures, which included emails to and from White House staffers, raised further concerns about the security of sensitive systems following a string of breaches affecting government agencies, private companies and the Democratic National Committee. Though officials declined to say whether the disclosures were authentic, there were no immediate reasons to suspect they were not. Attorney General Loretta Lynch said it was “something that we are looking into.” The U.S. Secret Service, responsible for the first lady’s safety, also expressed concern.

National: Even Small Hack Could Create Chaos on Election Day | NBC

It won’t take Russian hackers or a wide-scale attack to undermine the November election, cyber security experts warn. What they fear most is something far easier to pull off: Smaller, targeted attacks on a few voting systems that create widespread doubt among voters. In the age of social media, even a small cyber-attack could explode into chaos by casting doubt on the election’s integrity, experts warn. “Today we have social media, where a lie can circle the globe before the truth can reach the keyboard,” said Gregory Miller, co-founder of the Silicon Valley non-profit OSET Institute. “It doesn’t take very long for incredible chaos to break out over the presumption that something has gone wrong.” Both President Obama and the FBI have warned of possible tampering with this year’s election process. Miller says that sets the stage for potential turmoil with or without an actual attack on Election Day.

National: New laws and rulings could cause Election Day confusion | Associated Press

With more than 120 million Americans expected to cast ballots for president this fall, the nation’s voting process seems more convoluted than ever and rife with potential for confusion come Election Day. Voting rules vary widely by state and sometimes by county, meaning some Americans can register the same day they vote, while others must do so weeks in advance. Some can mail in a ballot, while others must stand in line at a polling place that might be miles from home. Some who forget photo identification can simply sign an affidavit and have their ballot count, while others must return with their ID within a few days or their vote doesn’t matter. Fourteen states have new voting and registration rules in place for this election, according to the Brennan Center for Justice at the NYU School of Law. Legal challenges have led to a multitude of recent court rulings that have blocked or struck down some provisions and upheld or reinstated others, scrambling the picture further. The new rules and the rapidly shifting landscape have already caused confusion, and some experts fear problems on Nov. 8.

National: US lawmakers: Russia trying to ′influence the US election′ through cyber attacks | Deutsche Welle

Two Democratic lawmakers on the House and Senate intelligence committees said on Thursday that Russia is behind a recent spate of cyber attacks which they are using to impact the outcome of the November 8 election. “Based on briefings we have received, we have concluded that the Russian intelligence agencies are making a serious and concerted effort to influence the U.S. election,” wrote Senator Dianne Feinstein and Representative Adam Schiff in a joint-statement. “At the least, this effort is intended to sow doubt about the security of our election and may well be intended to influence the outcomes of the election. We can see no other rationale for the behavior of the Russians.”

National: Do we need more federal election observers? Why John Lewis says so | CS Monitor

As the election draws closer and the race narrows, there are rising concerns about the integrity of the vote count. For one congressman, that means having more federal observers at polling stations come November. Rep. John Lewis, (D) of Georgia, brings a lifetime of commitment to voting rights to the 2016 election. He was a leader in the civil rights movement and later directed the Voter Education Program, which added 4 million minority voters to election rolls during his tenure. During a roundtable on Capitol Hill on Wednesday, he expressed concern about voter ID laws and decried what he described as, “a deliberate, persistent, systematic effort to make it … more difficult for the disabled, students, seniors, minorities, for poor and rural voters to participate in the democratic process.” Representative Lewis says that having federal election observers in Georgia, Ohio, Florida, Arizona, and maybe other southern states would help prevent discrimination and intimidation. But a change to the Voting Rights Act means that the Justice Department no longer determines which states get election observers. Instead, a federal court has to rule that they are required.

National: Will Legacy Paper Save Us From Electronic Fraud? | TechZone

Voting in the 2016 elections may be under threat from hacking, with the FBI worried about interference by a foreign power. Every day, I and tens of thousands of other Americans get robot phone calls from the “IRS” saying we’re under immediate threat of being sued due to failure to pay back taxes. As we move to a paperless society, paper might be the only thing to protect us – and isn’t that ironic? Let’s deal with the basics of robo-calls and live demands for money. The Internal Revenue Service, as well as most state and local governments, seem to be sticking with the time-honored tradition of sending you one or more pieces of paper through the U.S. Postal Service should you owe them anything, be it taxes, money for unpaid parking tickets and/or summons to appear in court. It bears repeating to your relatives, friends, and neighbors: If the IRS or any other government agency says you owe them money, they always send paper multiple times. They will send more paper if they want to bring you into court, giving you plenty of notice beforehand. And tax payment won’t be requested via iTunes gift cards, prepaid credit cards, and other types of gift cards, or via wire transfers or bank deposits.

National: Election system hacks: We’re focused on the wrong things | InfoWorld

The security of U.S. election systems was a major water-cooler topic this summer. There was plenty of media buzz about the potential of Russians hackers infiltrating our voter databases and trying to manipulate the upcoming presidential election. Most recently, the Arizona Secretary of State’s office closed down the state’s voter registration system after a hacker compromised valid credentials and used them to access the system. Shortly after that incident, someone exploited the IVRS (Illinois Voter Registration System). A message posted to Facebook, purportedly written by Kyle Thomas, director of the election board’s voting and registration systems division, stated that the IVRS compromise was a direct result of a SQL injection attack and that the records for up to 200,000 voters were accessed. “The offenders were able to inject SQL database queries into the IVRS database in order to access information. This was a highly sophisticated attack most likely from a foreign (international) entity,” the message posted to Facebook explained. And now we have a leaked FBI memo that, although it doesn’t name Illinois and Arizona, announces that “foreign actors” used common scanning tools to find and exploit vulnerabilities in election systems. The memo also listed internet protocol addresses associated with the hacks. The leaked FBI memo recommends that states “contact their Board of Elections and determine if any similar activity to their logs, both inbound and outbound, has been detected.”

National: Most eligible expatriates don’t vote in US elections, study finds | Stars & Stripes

A study released Wednesday, described as the first of its kind, has found what political scientists have long suspected: Most American expatriates don’t vote in U.S. elections. The study by the Federal Voting Assistance Program found that voting rates for all estimated 2.6 million eligible overseas voters, excluding servicemembers and their spouses, was 4 percent in 2014. That compares to 36 percent of eligible voters in the U.S. and, according to a previous study by the FVAP, 21 percent of eligible active-duty military voters who mailed in ballots in 2014. “While we can expect to see an increase in the overall voting rates for the 2016 presidential election, we need to understand whether the overall rate for 2014 is due to low awareness of how to vote absentee or if it is related to other factors,” FVAP Director Matt Boehmer said in a news release.

National: Conservatives File Voter Registration Lawsuits That Liberals Say Are Blocking Votes | NPR

It’s no secret that voter registration lists are filled with inaccuracies. People move. Or change their names. Or die. But it can take months if not years for the rolls to get updated. Now, conservative groups are taking a number of election officials to court, saying they’re not doing their jobs. Liberal groups think the real purpose is to make it more difficult for some people to vote. The lawsuits have targeted about a dozen counties so far in Texas, Florida, North Carolina and Mississippi. And even some cities, such as Philadelphia and Alexandria, Va. “This is an effort to make the voter rolls cleaner and to follow federal law before the elections in November,” says J. Christian Adams, president of the Public Interest Legal Foundation. His group is behind the suits, along with the American Civil Rights Union. Adams is a former Justice Department official who has been at the forefront of efforts to restore what he calls “election integrity.”

National: Lack of address an extra barrier in strict voter ID states | Street Sense

Not everyone has the financial means to replace a lost or stolen identification card. People experiencing homelessness may additionally struggle with accessing other proofs of identification and residency required to obtain a new identification card. Not having any identification can mean denied access to benefits or services and, in some states, the loss of the ability to vote. While some states and the District only require identification during voter registration, others require a photo ID at the ballot box. North Dakota, Kansas, Texas, Wisconsin, Indiana, Tennessee, Mississippi, Georgia and Virginia all require photo IDs on Election Day. Other states accept non-photographic proof of identification, such as a bank statement with a voter’s name and address. So what happens if a voter goes to the polls without an acceptable form of identification in their state?

National: New legislation seeks to prevent U.S. voting systems from being hacked | Computerworld

A U.S. lawmaker has introduced two bills to protect voting systems from hacking, amid fears that Russian cyber spies may be interfering with this year’s presidential election. Representative Hank Johnson, a Democrat serving Georgia, is proposing a moratorium on state purchases of electronic voting machines that don’t produce a paper trail. His Election Integrity Act, introduced Wednesday, would also prohibit voting systems from being connected to the internet as a way to prevent online tampering. The high-profile hack of the Democratic National Committee publicized in June has citizens worried that U.S. election systems may be vulnerable, Johnson said.

National: DHS official: Look beyond November on voting-system security | GCN