National

Soon after the 2000 presidential elections went to a recount, Americans got acquainted with an exotic new vocabulary – hanging chads and butterfly ballots – and what lawmakers saw as a modern solution to the nightmare of punchcard voting systems: electronic voting machines. In 2002, Congress passed the Help America Vote Act, pouring nearly $3 billion into an effort to get states to adopt those machines. More than a decade and a half later, those same electronic machines are still around in many states. And the system arising from the 2002 congressional fix is now at the heart of growing concerns over the integrity of this year’s elections, with cybersecurity experts suggesting that it is an easy target for hackers. Federal authorities are beginning to get involved. But the best insurance for election integrity – a system that uses paper to back up electronic results – may require new federal funding. Not all of the country is on equally precarious footing. Partly because of bad experiences with glitches in electronic voting machines, some localities have been shifting in recent years toward paper-backed systems.

National: Voting Rights Hang in the Balance This November | NBC

Wednesday’s Supreme Court deadlock ensured that North Carolina’s restrictive voting law won’t be in force for the November election. But it also underlined that the court’s four conservatives appear wedded to a strikingly limited approach to protecting access to the ballot. And it made clearer than ever that the future of voting rights in America will likely be determined by the court’s ninth justice—and therefore by the winner of the presidential election. In a 4-4 ruling that included no explanation, the high court rejected North Carolina’s bid to reinstate its photo ID requirement, its cuts to early voting, and its elimination of a popular pre-registration program for high-school students. All those provisions of the state’s voting law, and others, were blocked by a federal appeals court panel in July. The decision wasn’t a surprise. More notable was that three of the court’s conservatives—Chief Justice John Roberts, and Justices Anthony Kennedy and Samuel Alito—would have granted North Carolina’s request to put the ID requirement and the early voting cuts back into effect. The fourth conservative, Justice Clarence Thomas, would have done so for all three provisions at issue.

National: FEC Asks God and Satan to Prove They Exist | The Atlantic

The Federal Election Commission has a few questions for God, Satan, and the Ghost of Ronald Reagan, all of whom have filed paperwork to run for office this election cycle. This implausible scenario is part of a policy aimed at dealing with an influx of suspicious-sounding presidential candidate names. It’s relatively easy to register as a presidential candidate, and during the 2016 election plenty of people seem to be taking advantage of that. As a result, the federal agency is now asking whoever filed paperwork to run for president under the names “God,” “Satan,” and “Ronald Reagan’s Ghost” to prove they actually exist. “It has come to the attention of the Federal Election Commission that you may have failed to include an accurate candidate name,” a letter sent by the commission to “H. Majesty Satan Lord of Underworld Prince of Darkness!” in College Station, Texas dated August 31, 2016 reads. “The Commission requires the filing to be true, correct and complete,” the letter warns, adding that “knowingly and willfully making any materially false, fictitious, or fraudulent statement or representation to a federal government agency, including the Federal Election Commission, is punishable.”

National: Want to dial for Donald Trump? First, sign this legal form | Cincinnati Enquirer

Online volunteers seeking to help Donald Trump by making phone calls might be signing up for more than they bargained for. To sign up on Trump’s website, potential volunteers must agree to a 2,271-word non-disclosure agreement in which they also promise they won’t compete against or say anything bad about Trump, his company, his family members or products – now and forever. The agreement is a required part of the sign-up process for Trump Red Dialer, an online call system that connects volunteers for the Republican presidential candidate with potential voters. Earlier this year, volunteers for Trump in New York had to sign non-disclosure agreements in person before making phone calls at Trump Tower. But the website requirement is the first indication that online volunteers must also sign the form, even if they’ll never meet a Trump family member, attend a Trump rally, meet a campaign staffer in person or step inside a Trump campaign office.

National: Controversial anti-voter fraud program risks disenfranchising voters through racial bias, report finds | Facing South

Back in 2005, Kansas Secretary of State Kris Kobach — who as chair of his state’s Republican Party championed an illegal voter suppression technique called “caging” — launched a program called Interstate Crosscheck to compare voter registration data across states and ferret out evidence of double voting. The program has since expanded to 30 states, according to the National Conference of State Legislatures (NCSL), but it’s been controversial from the start. For one thing, it’s resulted in very few actual cases of fraud being referred for prosecution, as alleged cases of double voting in multiple states turned out to be clerical and other errors. One tally found that while the program has flagged 7.2 million possible double registrants, no more than four have actually been charged with deliberate double registration or double voting. Meanwhile, some states including Florida dropped out of the program due to doubts about the reliability of its data — though others, including the swing state of North Carolina, joined despite those issues.

National: FBI Chief Responds to Concern Over Cyberthreats to US Election System | ABC

September 1, 2016

The FBI has responded to recent concerns about U.S. voting systems being targeted for cyberattacks as Election Day approaches, saying the agency takes the threat “very, very seriously” and is working to “equip the rest of our government with options.” FBI Director James Comey addressed the issue while speaking to government and private-industry experts attending the Symantec Government Symposium in Washington, D.C. “We take very seriously any effort by any actor,” he said, “to influence the conduct of affairs in our country, whether that’s an election or something else.” His comments come one day after news surfaced about FBI warnings to the states that hackers had infiltrated one state board of election and targeted another.

National: Did Russia really hack U.S. election systems? | Foreign Policy

September 1, 2016

When an FBI alert to state election authorities warning them of hacking leaked to the media this week, the result was one of studied panic. Two voter registration databases in Arizona and Illinois had been penetrated, and some experts saw it as confirmation that Russia had escalated its campaign of hacking U.S. political organizations. Russian President Vladimir Putin just “unleashed the hounds” on the U.S. election system, one industry executive declared. So far, there is scant evidence that hackers working on behalf of Russian intelligence penetrated two fairly inconsequential voter databases in Arizona and Illinois. The FBI told election authorities in Arizona that Russian hackers were responsible for stealing a set of user credentials but provided no details about whether it was a criminal or state-sponsored group. In a letter to the FBI on Monday, Senate Minority Leader Harry Reid asked the bureau to investigate whether Russia is attempting to manipulate results of November’s elections. Russian efforts to do so are “more extensive than is widely known and may include the intent to falsify official election results,” he wrote.

National: White House Asks ‘Deception Committee’ to Study Russian Hacks | NBC

September 1, 2016

The committee traditionally has advised the DNI on foreign attempts to thwart U.S. intelligence through trickery. But in the cyber era, the committee has increasingly looked at how nation states use computer attacks to conduct espionage and spread propaganda. Russia, China, North Korea, Iran are primary subjects, the officials said. The consensus among U.S. intelligence analysts is that Russia is seeking to undermine confidence in the U.S. system, using the hacks into the Democratic National Committee, state election systems and other targets that have yet to be made public, as part of a larger campaign. Whether Russia can directly manipulate voting machines or “hack” into election systems, they say, is not clear and is mainly outside the jurisdiction of U.S. intelligence. Intelligence analysts are uncertain about the Russian government’s intentions relating to U.S. politics, but they don’t believe Russia is actively trying to favor Republican Donald Trump, as some have suggested. Instead, Russia may be trying to foment chaos. “Let’s just throw some spaghetti on the wall, and whatever sticks, sticks,” said one senior Congressional aide briefed on intelligence, describing a likely scenario.

National: Analysis: Could hackers tip an American election? You bet | Chicago Tribune

Reports this week of Russian intrusions into U.S. election systems have startled many voters, but computer experts are not surprised. They have long warned that Americans vote in a way that’s so insecure that hackers could change the outcome of races at the local, state and even national level. Multibillion-dollar investments in better election technology after the troubled 2000 presidential election count prompted widespread abandonment of flawed paper-based systems, such as punch ballots. But the rush to embrace electronic voting technology – and leave old-fashioned paper tallies behind – created new sets of vulnerabilities that have taken years to fix. “There are computers used in all points of the election process, and they can all be hacked,” said Princeton computer scientist Andrew Appel, an expert in voting technologies. “So we should work at all points in that system to see how we make them trustworthy even if they do get hacked.”

National: Democrats ask FBI: Did Donald Trump aides’ Russia connections lead to cyberattacks? | CBS

Top House Democrats are asking the FBI to investigate whether connections between Donald Trump’s campaign aides and Russian interests led to the cyberattacks at the Democratic National Committee and Democratic Congressional Campaign Committee. “We are writing to request that the FBI assess whether connections between Trump campaign officials and Russian interests may have contributed to these attacks in order to interfere with the U.S. presidential election,” the lawmakers wrote in a letter sent to FBI Director James Comey on Tuesday. The letter was signed by Rep. Elijah Cummings, D-Maryland, ranking member on the House Oversight and Government Reform Committee; Rep. John Conyers, D-Michigan, ranking member on the House Judiciary Committee; Rep. Eliot Engel, D-New York, ranking member on the House Foreign Affairs Committee; and Rep. Bennie Thompson, D-Mississippi, ranking member on the Homeland Security Committee.

National: Russia-Backed DNC Hackers Strike Washington Think Tanks | Defense One

Last week, one of the Russia-backed hacker groups that attacked Democratic computer networks also attacked several Russia-focused think tanks in Washington, D.C., Defense One has learned. The perpetrator is the group called COZY BEAR, or APT29, one of the two groups that cybersecurity company CrowdStrike blamed for the DNC hack, according to founder Dmitri Alperovitch. CrowdStrike discovered the attack on the DNC and provides security for the think tanks. Alperovitch said fewer than five organizations and 10 staffers researching Russia were hit by the “highly targeted operation.” He declined to detail which think tanks and researchers were hit, out of concern for his clients’ interests and to avoid revealing tools and techniques or other data to hackers. CrowdStrike alerted the organizations immediately after the company detected the breaches and intruders were unable to exfiltrate any information, Alperovitch said.

National: Comey: FBI takes election tampering ‘very seriously’ | Politico

One day after reports the FBI had warned states of potential hacks on their election systems, Director James Comey declined to address the bureau’s investigation, simply insisting he takes the matter “very seriously.” The FBI alert — sent Aug. 18 and revealed publicly on Monday — sparked fears that recent cyberattacks on voter databases in Illinois and Arizona were harbingers of a nationwide hacking assault on state voting systems, possibly linked to Russia. “It won’t surprise you that I’m not going to give an answer that touches on any particular matter we’re looking at,” Comey said Tuesday at a conference hosted by digital security firm Symantec.

National: Hack Brief: As FBI Warns Election Sites Got Hacked, All Eyes Are on Russia | WIRED

In any other year, hackers breaking into a couple of state government websites through common web vulnerabilities would hardly raise a blip on the cybersecurity community’s radar. But in this strange and digitally fraught election season, the breach of two state board of election websites not only merits an FBI warning—it might just rise to the level of an international incident. On Monday, an FBI alert surfaced warning state boards of election to take precautions against hackers after two election board websites were breached in recent months. According to Yahoo News, those breaches likely targeted Arizona and Illinois board of election sites, both of which admitted earlier this summer that they’d been hacked. Cybersecurity researchers are already speculating that the attacks link to Russia, pointing to the string of recent, likely Russian attacks that have hit the Democratic National Committee and the Clinton campaign. “Someone is trying to hack these databases, and they succeeded in exfiltrating data, which is significant in itself,” says Thomas Rid, a cybersecurity-focused professor in the War Studies department at King’s College of London and author of Rise of the Machines. “In the context of all the other attempts to interfere with this election, it’s a big deal.”

National: FBI says foreign hackers penetrated state election systems | Yahoo

The FBI has uncovered evidence that foreign hackers penetrated two state election databases in recent weeks, prompting the bureau to warn election officials across the country to take new steps to enhance the security of their computer systems, according to federal and state law enforcement officials. The FBI warning, contained in a “flash” alert from the FBI’s Cyber Division, a copy of which was obtained by Yahoo News, comes amid heightened concerns among U.S. intelligence officials about the possibility of cyberintrusions, potentially by Russian state-sponsored hackers, aimed at disrupting the November elections. Those concerns prompted Homeland Security Secretary Jeh Johnson to convene a conference call with state election officials on Aug. 15, in which he offered his department’s help to make state voting systems more secure, including providing federal cyber security experts to scan for vulnerabilities, according to a “readout” of the call released by the department.

National: Harry Reid Cites Evidence of Russian Tampering in U.S. Vote, and Seeks F.B.I. Inquiry | The New York Times

The Senate minority leader, Harry Reid of Nevada, asked the F.B.I. on Monday to investigate evidence suggesting that Russia may try to manipulate voting results in November. In a letter to the F.B.I. director, James B. Comey Jr., Mr. Reid wrote that the threat of Russian interference “is more extensive than is widely known and may include the intent to falsify official election results.” Recent classified briefings from senior intelligence officials, Mr. Reid said in an interview, have left him fearful that President Vladimir V. Putin’s “goal is tampering with this election.” News reports on Monday said the F.B.I. warned state election officials several weeks ago that foreign hackers had exported voter registration data from computer systems in at least one state, and had pierced the systems of a second one. The bureau did not name the states, but Yahoo News, which first reported the confidential F.B.I. warning, said they were Arizona and Illinois. Matt Roberts, a spokesman for Arizona’s secretary of state, said the F.B.I. had told state officials that Russians were behind the Arizona attack.

National: Stealing Voter Files Was Shockingly Easy for These Hackers | The Daily Beast

The FBI says that computer hackers accessed, and in one case stole, voter registration files in two states, potentially compromising personal information and putting crucial election data at risk just three months before voters head to the polls. And if that weren’t unsettling enough, the techniques that the hackers used were neither sophisticated nor particularly hard to employ, proving that it’s not just high-end hackers from foreign governments, like the ones believed to be targeting U.S. political organizations, that elections officials need to worry about in the runup to November. “I don’t think anyone can assume that these vulnerabilities would be unique to these states,” Pamela Smith, the president of Verified Voting, a nonprofit group that advocates transparency and security in U.S. elections, told The Daily Beast. “This is a time when assuming is not the best thing to do.”

National: How Electronic Voting Could Undermine the Election | The Atlantic

It’s 2016: What possible reason is there to vote on paper? When we use touchscreens to communicate, work, and shop, why can’t we use similar technology to vote? A handful of states, and many precincts in other states, have already made the switch to voting systems that are fully digital, leaving no paper trail at all. But this is despite the fact that computer-security experts think electronic voting is a very, very bad idea. For years, security researchers and academics have urged election officials to hold off on adopting electronic voting systems, worrying that they’re not nearly secure enough to reliably carry out their vital role in American democracy. Their claims have been backed up by repeated demonstrations of the systems’ fragility: When the District of Columbia tested an electronic voting system in 2010, a professor from the University of Michigan and his graduate students took it over from more than 500 miles away to show its weaknesses; with actual physical access to a voting machine, the same professor—Alex Halderman—swapped out its internals, turning it into a Pac Man console. Halderman showed that a hacker who has access to a machine before election day could modify its programming—and he did so without even leaving a mark on the machine’s tamper-evident seals. But it wouldn’t even take a full-fledged cyberattack on an electronic voting system to throw a wrench in a national election. Even the specter of the possibility that the American electoral system is anything but trustworthy provides ammunition to skeptics to call foul if an election doesn’t go their way.

National: Two swing states decline DHS security for voting machines | The Hill

Two swing states, Pennsylvania and Georgia, are declining an offer from the Department of Homeland Security (DHS) to scan their voting systems ahead of the 2016 elections. In August, DHS offered to help states thwart potential hacking amid cybersecurity concerns about just how easily a U.S. election could be manipulated. Georgia and Pennsylvania, however, have opted out. Instead, the two states will rely on their own systems to monitor potential election hacking, reports NextGov. Georgia Secretary of State Brian Kemp cited state sovereignty concerns. “The question remains whether the federal government will subvert the Constitution to achieve the goal of federalizing elections under the guise of security,” he told Nextgov in an email. “Designating voting systems or any other election system as critical infrastructure would be a vast federal overreach, the cost of which would not equally improve the security of elections in the United States.”

National: Elections security: Federal help or power grab? | Politico

The federal government wants to help states keep hackers from manipulating the November election, amid growing fears that the U.S. political system is vulnerable. But Georgia’s top election official is balking at the offers of assistance — and accusing the Obama administration of using exaggerated warnings of cyberthreats to intrude on states’ authority. Georgia Secretary of State Brian Kemp’s objections add to a bumpy start for the Department of Homeland Security’s attempt to shore up safeguards for the election, during a summer when cyberattacks on the Democratic National Committee have called attention to weaknesses across the electoral system. Cybersecurity experts call tougher protections long overdue for parties, political advocacy groups and voting machinery, but DHS’ efforts risk becoming caught in the same partisan arguments about state sovereignty that have hung up programs such as President Barack Obama’s Medicaid expansion. “It seems like now it’s just the D.C. media and the bureaucrats, because of the DNC getting hacked — they now think our whole system is on the verge of disaster because some Russian’s going to tap into the voting system,” Kemp, a Republican, told POLITICO in an interview. “And that’s just not — I mean, anything is possible, but it is not probable at all, the way our systems are set up.”

National: Voting Hurdles Often Keep College Students Away From the Ballot Box | News21

Students at Rollins College in Florida are designing custom “I voted” stickers for absentee voters. Across the country, the University of Southern California has partnered with county officials to host voter registration events with prizes, games and free food. And at the University of Wisconsin-Madison, the student government plans campuswide voter registration drives as well. Across the country, groups and organizations promoting civic engagement among college students have spent hundreds — if not thousands — of hours trying to galvanize this large, yet often elusive group of potential voters. The Campus Vote Project, one of the most prominent college voter outreach groups, has launched an initiative to establish “voter-friendly” campuses. So far, more than 90 institutions, including Rollins College, have agreed to commit to things such as hosting voter registration drives, inviting candidates to speak or offering rides to the polls to increase voter education, registration and mobilization. Why go to the trouble of recruiting college voters? College students have the potential to influence elections. There were 17.3 million undergraduate students enrolled in degree-granting postsecondary institutions in 2014, according to the National Center for Education Statistics. Experts predict that population will increase to 19.8 million by 2025.

National: Selfies in voting booths: Depending on where you live, they may be illegal | Ars Technica

“Dude, check out who I voted for!” We soon could be seeing a lot more selfies with that caption. That’s because legislation legalizing ballot selfies in voting booths landed on California Gov. Jerry Brown’s desk on Friday. Assembly Bill 1494 amends California law that, for now, says “a voter shall not show” a ballot “to any person in such a way as to reveal its contents.” The new law awaiting the governor’s signature says “a voter may voluntarily disclose how he or she voted if that voluntary act does not violate any other law.” The measure passed the state Senate earlier this year and the state Assembly last week on a 63-15 vote. “I see this as a First Amendment issue,” Assemblyman James Gallagher, a Republican representing Yuba City and one of the bill’s sponsors, told colleagues during a floor vote. “All this does is to say that those who want to share how they voted have the right to do so.” Across the US, the law in the 50 states on voting booth selfies is mixed. No federal law addresses the issue, and there’s a smattering of court challenges across the country. Consult these guides from the Huffington Post and the Digital Media Law Project on whether it’s OK to snap a picture of yourself showing your votes on the November 8 presidential ballot.

National: Swing States Reject Feds’ Offer to Cybersecure Voting Machines | Defense One

Some key swing states have declined an offer from the Homeland Security Department to scan voting systems for hackers ahead of the presidential elections. As suspected Russian-sponsored attackers compromise Democratic Party and other U.S. political data allegedly to sway voter opinion, some security experts say it wouldn’t even take the resources of a foreign nation to manipulate actual votes using this country’s antiquated tallying systems. Against this backdrop, Homeland Security Secretary Jeh Johnson during an Aug. 15 call with state election officials, offered states DHS services that can inspect voting systems for bugs and other hacker entryways. Earlier in the month, he also suggested the federal government label election systems as official U.S. critical infrastructure, like the power grid. But some battleground states, including Georgia and Pennsylvania, say they will rely on in-house security crews to maintain the integrity of voter data.

National: Data Shows Trump’s Election-Rigging Claim is Unlikely | Government Technology

… At a campaign rally in Altoona, Pa., on Aug. 12 [Trump] alleged that a poor showing could only mean one thing: “The only way we can lose, in my opinion — I really mean this, Pennsylvania — is if cheating goes on. I really believe it.” Trump said, alluding to political subterfuge from the Clinton campaign. Since that rally, Trump has held to these assertions of foul play while his critics have cast them as highly dangerous for the democratic process. However, for those close to the matter — voting officials and voters’ rights groups — the conspiracy theory is a bit bewildering. Pamela Smith, the president of VerifiedVoting.org, is among these. Her organization — a nonpartisan voting advocacy, accountability and research group — has gained notoriety since it was founded in 2003 for its work tracking election tech, legislation and voting procedures. In this time, Smith said incidents of voter fraud and rigged elections have been nearly nonexistent. “It’s frustrating because I think a lot of people may get the mistaken impression that there are some major areas of vulnerability,“ Smith said. “But they may not be aware of things election officials do already, or the true scope of the issue.” A look at current and historical data, said Smith, indicates that the potential for cheating is uniquely limited. Voter ID fraud is nearly nonexistent; purchasing votes is too tricky to cover up, at least at a national or county level; and hacking voting machines and software is ineffectual since usage of the systems is low and controlled. “Because our elections are really decentralized, it’s also not like there’s a single point of vulnerability out of 9,000 jurisdictions we have in the U.S.,” Smith said.

National: Hack the vote: How attackers could meddle in November’s elections | Network World

Political action committees aren’t the only entities attempting to influence the upcoming U.S. presidential election. Supposedly, Russia wants a say in who should lead the country. At least that’s the opinion you could form after reading the many news stories that allege Russia is behind the recent hacks targeting the Democratic National Committee and the Democratic Congressional Campaign Committee. Attack attribution aside (I shared my thoughts on that topic in last month’s blog), these data breaches raise the question of whether attackers could actually impact an election’s outcome. Not to scare you, but hacking the vote is pretty easy. Some possible ways of carrying this out, like hacking electronic voting machines, have been discussed extensively, while others, such as targeting organizations that poll voters, probably haven’t been considered. I’m not trying to frighten people by bringing up these scenarios. As far as I know, none of the methods I’m going to discuss have been used to sway an election. To me, this is an opportunity to present these possible situations to the security community and, by freely talking about them, ensure that voting goes as smoothly as possible on November 8.

National: Efforts to restore felons’ voting rights cause deep divide | News21

Republican and Democratic politicians across the country are deeply divided over restoring the right to vote to felons, a political fracture that affects millions of convicted criminals. In Iowa and Kentucky, Democratic governors issued executive orders to restore voting rights to many felons, only to have them rescinded by Republican governors who succeeded them. Democratic legislators in 29 states proposed more than 270 bills over the last six years that would have made it easier for some felons to vote, but very few passed, especially in legislatures controlled by Republicans, News21 found in an analysis of state legislative measures nationwide.

National: Why some military personnel ballots may not be counted | News21