National: Hack the vote: How attackers could meddle in November’s elections | Network World

Political action committees aren’t the only entities attempting to influence the upcoming U.S. presidential election. Supposedly, Russia wants a say in who should lead the country. At least that’s the opinion you could form after reading the many news stories that allege Russia is behind the recent hacks targeting the Democratic National Committee and the Democratic Congressional Campaign Committee. Attack attribution aside (I shared my thoughts on that topic in last month’s blog), these data breaches raise the question of whether attackers could actually impact an election’s outcome. Not to scare you, but hacking the vote is pretty easy. Some possible ways of carrying this out, like hacking electronic voting machines, have been discussed extensively, while others, such as targeting organizations that poll voters, probably haven’t been considered. I’m not trying to frighten people by bringing up these scenarios. As far as I know, none of the methods I’m going to discuss have been used to sway an election. To me, this is an opportunity to present these possible situations to the security community and, by freely talking about them, ensure that voting goes as smoothly as possible on November 8.

National: Efforts to restore felons’ voting rights cause deep divide | News21

Republican and Democratic politicians across the country are deeply divided over restoring the right to vote to felons, a political fracture that affects millions of convicted criminals. In Iowa and Kentucky, Democratic governors issued executive orders to restore voting rights to many felons, only to have them rescinded by Republican governors who succeeded them. Democratic legislators in 29 states proposed more than 270 bills over the last six years that would have made it easier for some felons to vote, but very few passed, especially in legislatures controlled by Republicans, News21 found in an analysis of state legislative measures nationwide.

National: Why some military personnel ballots may not be counted | News21

Military and overseas voting can be a complicated process. Service members can file a Federal Post Card Application, which allows them to both register to vote and request an absentee ballot from their home state or county. If the service member doesn’t receive their ballot in time, they can use a Federal Write-in Absentee Ballot as a backup. EAC Commissioner Thomas Hicks told News21 that some of the inconsistencies between ballots sent and ballots returned are likely the result of military voters printing out the Federal Write-in Absentee Ballot and sending it back home. Since the ballots are not sent by local jurisdictions, they might be counted as ballots returned but not mailed out. The commissioner stressed that ensuring the accuracy of that data is up to states and not the EAC. “I’m confident in that it is the data coming from the states and I think that we put that data out and it’s accurate,” said Hicks.

National: Clock running out on challenges to voting rights cases in key states | CNN

Battles over voting rights are heating up in states that could play a critical role in the November election. The pressure is on to resolve key issues in a timely manner as courts are often reluctant to make legal changes too close to Election Day. “It’s very important not to disrupt the machinery and the administration of the voting process,” says Edward Foley of the Moritz College of Law at the Ohio State University. “Judicial rulings too soon to the election can be disruptive, and in the past the Supreme Court has made it very clear that it doesn’t want that disruption.” … In the coming days, Supreme Court justices will rule on an emergency petition filed by North Carolina asking the court to allow provisions of the state’s omnibus 2013 election law to remain in effect. The law boosts voter ID requirements, restricts early voting days and eliminates same-day registration.

National: Native Americans still fighting for voting equality | News21

Terry Whitehat remembers gathering at the community hall in Navajo Mountain each election day, where Navajo Nation members in this remote Utah community would cast their ballots. The tribal members would catch up with friends and family and eat food under the cottonwood trees in the parking lot. So when Whitehat, a social worker who has lived most of his life on the reservation, received a ballot in the mail for the 2014 elections, he said it caught him off guard. The county began conducting elections by mail in 2014. Members of the Navajo Nation who live in the area could no longer physically vote in the village. If they wanted to vote in person, they would have to drive to the only remaining polling place at the county seat in Monticello, a 400-mile round trip from Navajo Mountain. Whitehat and a half-dozen other Navajo community members, along with the Navajo Nation Human Rights Commission, sued the county. They claimed the move to a mail-only election disenfranchised Native Americans, especially those who don’t read or speak English and had limited access to mail. They said it also violated the Voting Rights Act and the 14th Amendment.

National: This Election Could Be Hacked, And We Need To Plan For It | Forbes

With the Democratic National Committee cyberattack far more widespread than originally thought, fears of foreign power using cyber-espionage to influence this November’s election are growing, and real. It’s also prompted concern that hackers may shift focus to an even more vulnerable target: your vote. Voters in 43 states will cast their ballot for the next president using aging electronic voting machines, many now ten years old with dated software lacking proper security. Despite machine manufacturers’ repeated claims of their integrity, high-profile studies have shown hackers can alter vote tallies on these notoriously-penetrable machines within minutes. Tactics available to hackers are numerous and growing: A distributed denial-of-service (DDoS) attack would disable voting machines or the back-end servers, preventing voters from participating in the election. Deleted voting records ahead of Election Day would expunge names from the registered voter rolls. And malware could be used to “steal” an election by tampering with voting machine hardware or software.

National: New Voting Technologies Create Need for Improved Infrastructure | StateTech Magazine

The days of hanging chads might be over, but new Election Day challenges have arisen to fill the void. Electronic voting machines, online voter registration portals and optical scanning devices place significant strain on data center operations. States, counties and cities must now ensure they have the infrastructure necessary to support these increasingly popular technologies — especially with the 2016 presidential election just over the horizon. But even though all states face the same Nov. 8 deadline for Election Day improvements, the varied adoption of voting innovations means no two states have the same infrastructure-upgrade needs.

National: There’s work to be done to make US elections secure — and it has nothing to do with voter ID | Public Radio International

Recently, Homeland Security Secretary Jeh Johnson said the government was considering classifying voting systems part of the nation’s “critical infrastructure,” a designation currently held by systems such as the electric grid and banking networks. The announcement comes on the heels of reports of a vast infiltration of Democratic Party servers. “Everything we know about voting machines — electronic ones, computerized ones, is they’re not very secure,” says tech security expert Bruce Schneier. “They are not tested, they are not designed rigorously and in many cases there’s no way to detect or recover from fraud. So there really is a disaster waiting to happen.” Aviel Rubin, a professor of computer science at the Johns Hopkins University, agrees. “Unfortunately, I think the thing that’s improved the most in the last 10 years is the sophistication of the hackers and the number of incidents that we see that are occurring daily. If you look at the news you see that ransomware is becoming pretty common,” Rubin says. “The big change that I’ve seen has been just how sophisticated the hackers are today. And they’re sponsored by countries like Russia and China, which is a much more formidable adversary than we had in the past.”

National: In-person voting fraud is rare, doesn’t affect elections | PBS NewsHour

Donald Trump’s newest campaign ad begins with a warning: “In Hillary Clinton’s America, the system stays rigged against Americans.” The commercial, which aired Friday as part of his $5 million swing state ad buy, harkens back to a claim Trump has been hammering for weeks — that the general election is rigged against him. The questionable claim looks to mobilize Republicans, with the all-important start of early voting in some states just weeks away. The presidential nominee has voiced strong support for North Carolina’s stringent voter ID law — struck down as discriminatory, but to be appealed — saying without it, voters will cast ballots “15 times” for Democrat Hillary Clinton. He also launched a new effort on his website last week seeking volunteers to root out fraud at the polls. That ID law Trump referred to had involved a broader package of restrictions — among them, reducing early in-person voting, which is popular among blacks in particular. At the same time, it exempted tough photo ID requirements for early mail-in voters, who were more likely to be white and Republican.

National: After DNC Hack, Cybersecurity Experts Worry About Old Machines, Vote Tampering | NPR

Security experts say that Russian hackers have broken into the computers of not only the Democratic National Committee but other targets as well. This has raised a new wave of concerns that on Election Day, the votes themselves could be compromised by hackers, potentially tipping the results. Most states have returned to paper-backed voting systems in recent years, but that still leaves vulnerable a number of states that rely solely on machines. Zeynep Tufekci, a professor at the University of North Carolina’s School of Information and Library Science, tells NPR’s Scott Simon that without these paper-backed systems, up to 15 states could be putting their election results at risk. That’s a possible reach of 60 million voters — “enough to swing an election,” Tufekci says. In my old workplace — at Princeton University at the Center for Information Technology Policy — we had this lounging area with comfy couches, and researchers had decorated the place with a voting machine that had been hacked to play Pac-Man instead of counting votes. … And when they hacked this, the machine had been in use in jurisdictions around the country with more than 9 million voters.

National: Report: Online Voting Carries Security Risks | The Daily Dot

In 2016, people are increasingly doing everything online. Dating has moved to Tinder, your bank is now a smartphone app, and schoolyard bullies are basically giving virtual wedgies. In that respect, it may seem odd online voting hasn’t become ubiquitous; however, a new report shows that electronic voting is fraught with problems. According to the report, released this week by a trio of nonprofit organizations—the Verified Voting Foundation, the Electronic Privacy Information Center, and Common Cause—online voting systems necessarily create a link between a voter and his or ballot. That link runs counter to the system of secret ballots the United States has almost universally employed for well over a century. Entitled Secret Ballot At Risk: Recommendations for Protecting Democracy, the report notes that 32 states, along with the District of Columbia, employ some form of online voting. Only Alaska allows all of its citizens to vote online; most other states restrict the privilege to active U.S. service members stationed overseas.

National: America scrubs millions from the voter rolls. Is it fair? | News21

The cleansing of America’s voter registration rolls occurs every two years and has become a legal battleground between politicians who say the purges are fair and necessary, and voting rights advocates who contend that they discriminate. Voting rights groups repeatedly have challenged states’ registration purges, including those in Ohio, Georgia, Kansas and Iowa, contending that black, Latino, poor, young and homeless voters have been disproportionately purged. In Florida, Kansas, Iowa and Harris County, Texas, courts have ordered elections officials to restore thousands of voters to the registration rolls or to halt purges they found discriminatory. The 1993 National Voter Registration Act mandates that state and local elections officers keep voter registration lists accurate by removing the names of people who die, move or fail in successive elections to vote. Voters who’ve been convicted of a felony, ruled mentally incompetent or found to be noncitizens also can be removed. The U.S. Election Assistance Commission reported that 15 million names were scrubbed from the lists nationally in 2014.

National: OSCE rights group requests 500 international observers to monitor US presidential vote | Reuters

The Organization for Security and Cooperation in Europe aims to send 500 international observers to observe November’s US presidential election, a tenfold increase from the number the group deployed in 2012. A coalition of more than 200 US civil rights groups urged the OSCE in a letter released on Tuesday to provide even more than the 500 observers the OSCE requested based on an assessment it conducted in May. The actual observers will be dispatched by the international security and rights organization’s 57 participating states. The letter from the Leadership Conference on Civil and Human Rights said the OSCE’s role was “even more critical” in light of the US Justice Department’s July announcement, first reported by Reuters, that it would deploy election observers to far fewer polling sites this year than in previous elections. Civil rights advocates say voters are more likely to face racial bias at the polls in November than they have in 50 years, because of voting laws that several states passed after the US Supreme Court struck down part of the landmark anti-discrimination 1965 Voting Rights Act three years ago. Supporters of the laws say they are necessary to combat voter fraud.

National: A Cyber-Attack on a U.S. Election is Inevitable | International Policy Digest

Since Direct Recording Electronic voting machines first came into vogue in the U.S. in 2002, a team of cyber-academics (known as the Princeton Group) has been busy demonstrating how easy it is to hack these machines, to remind American citizens just how cyber-vulnerable the voting process is. From their first successful hack into a DRE 15 years ago, they surmised that it was just a matter of time until a cyber-attack occurred in a national election. This summer’s cyberattack of the Democratic National Committee has shed light on how such events can potentially affect this, and future, elections. Given the apparent ease with which the attack occurred on the DNC, is there any real reason to believe the same cannot, or will not, occur in November?

National: Russian hacks against the Democrats and the NSA expose the weaknesses of our democracy | The Telegraph

A capital city is paralysed by the failure of its electricity supply. A nuclear power station suffers meltdown. Banks go haywire and cash machines run dry. No one can have missed the nightmare scenarios associated with cyber-attacks and their potential to wreak havoc on a networked society. But all the focus on these obvious calamities risks distracting us from what is actually happening. Instead of trying to inflict physical destruction or general mayhem, the signs are that the West’s most sophisticated adversaries are using their high-tech tools in more subtle and insidious ways. Take Russia’s attempt to influence the US election campaign. The lengths to which the Kremlin is going to help Donald Trump and discredit Hillary Clinton are remarkable. The repeated hacks of the Democratic National Committee – which bear all the hallmarks of Russian intelligence – are designed to inflict maximum damage on Mrs Clinton, notably by driving as many wedges as possible between her and much of the Democratic party.

National: Voting Should Be Easier—But Not Like This | Mother Jones

The internet is the worst ballot box of all, according to three research and public-interest groups who are slamming states’ use of online voting and urging people to protect their privacy by physically mailing in their ballots instead. “Internet voting creates a second-class system for some voters—one in which their votes may not be private and their ballots may be altered without their knowledge,” write the authors of The Secret Ballot at Risk: Recommendations for Protecting Democracy. Caitriona Fitzgerald of the Electronic Privacy Information Center, Pam Smith of the Verified Voting Foundation, and Susannah Goodman of the Voting Integrity Campaign of Common Cause, who were the authors of the report, point out that states either have constitutional provisions or state statues guaranteeing the right to secret ballots, but that “because of current technological limitations…it is impossible to maintain separation of voters’ identities from their votes when Internet voting is used.”

National: Nationally, New Laws Force Voters to Navigate Maze of Requirements | News21

With the presidential election less than three months away, millions of Americans will be navigating new requirements for voting – if they can vote at all – as their state leaders implement dozens of new restrictions that could make it more difficult to cast a ballot. Since the last presidential election in 2012, politicians in 20 states including Texas passed 37 different new voting requirements that they said were needed to prevent voter fraud, a News21 analysis found. More than a third of those changes require voters to show specified government-issued photo IDs at the polls or reduce the number of acceptable IDs required by pre-existing laws. In Texas, one such voter ID law has been ruled discriminatory by a federal appeals court; as a result, the state’s voters won’t have to show ID in the November general election. “We have two world views: the people that think voter fraud is rampant and the people who want to push the narrative that it’s hard to vote. The bottom line is neither is true,” said Republican Ohio Secretary of State Jon Husted, who has been sued several times over his state’s removal of some voters from the registration rolls, elimination of same-day registration and curbs to early voting. “I believe that both political parties are trying to push a narrative that suits their agenda.” Adding to the uncertainty for millions of voters nationally, not all the states’ changes may be in place for the November election. Some, like Texas’, were limited or overturned by court decisions still subject to appeal.

National: Review of States with Voter ID Laws Found No Impersonation Fraud | News21

Politicians and voting rights advocates continue to clash over whether photo ID and other voting requirements are needed to prevent voter fraud, but a News21 analysis and recent court rulings show little evidence that such fraud is widespread. A News21 analysis four years ago of 2,068 alleged election-fraud cases in 50 states found that while some fraud had occurred since 2000, the rate was infinitesimal compared with the 146 million registered voters in that 12-year span. The analysis found only 10 cases of voter impersonation, the only kind of fraud that could be prevented by voter ID at the polls. This year, News21 reviewed cases in Arizona, Ohio, Georgia, Texas and Kansas, where politicians have expressed concern about voter fraud, and found hundreds of allegations but few prosecutions between 2012 and 2016. Attorneys general in those states successfully prosecuted 38 cases, though other cases may have been litigated at the county level. At least one-third of those cases involved nonvoters, such as elections officials or volunteers. None of the cases prosecuted was for voter impersonation. “Voter fraud is not a significant problem in the country,” Jennifer Clark of the Brennan Center, a public policy and law institute, told News21. “As the evidence that has come out in some recent court cases and reports and basically every analysis that has ever been done has concluded: It is not a significant concern.”

National: Federal Election Commission cracks down on Deez Nuts, other fake candidates | USA Today

Sorry, Deez Nuts, Left Shark and Toy Testicles. The folks over at the Federal Election Commission are not amused by your claims to be running for the presidency, and this week they announced plans to crack down on the wave of fake candidates filing paperwork with the agency. “The Commission has authorized staff to send verification letters to filers listing fictional characters, obscene language, sexual references, celebrities (where there is no indication that the named celebrity submitted the filing), animals or similarly implausible entries as the name or contact information of the candidate or committee,” according to the FEC’s news release outlining its formal procedure. The letters will warn pranksters that there are potential penalties for making false filings with a federal agency. If they don’t respond to the FEC’s letter in 30 days, their names will be yanked from the public database on the FEC’s website, stripping them of one path to notoriety.

National: Online voting could be really convenient. But it’s still probably a terrible idea. | The Washington Post

Election Day can sometimes feel like more of a headache than a patriotic celebration. Long lines and scheduling conflicts may leave voters wondering why there isn’t an easier way to cast their ballots. Some say there already is: online voting. Why head to the polls if you can vote from anywhere using your laptop or smartphone? But even as online voting is on the rise in the United States and elsewhere, experts warn its convenience isn’t worth its costs. Casting your vote online could mean sacrificing the right to a secret ballot and leaving elections more vulnerable to fraud, according to a report released Thursday by the Electronic Privacy Information Center, the Verified Voting Foundation and the Common Cause Education Fund. Security researchers also warn that online voting could be vulnerable to hackers who could digitally hijack elections. “The Internet is already as messed up as we can imagine, and adding critical electoral systems is just a bad idea,” said Joseph Lorenzo Hall, chief technologist at the Center for Democracy and Technology.

National: Voting Machines Are a Mess—But the Feds Have a (Kinda) Plan | WIRED

America’s voting machines are a patchwork of systems spread across thousands of districts, with widely varying degrees of accountability. It’s a mess. One that the Department of Homeland Security has finally committed to helping clean up. This week, DHS chief Jeh Johnson held a call with state election officials to outline, very roughly, the kind of assistance that DHS will provide to help prevent cyber attacks in this fall’s elections. For now, details are vague, and whatever DHS plans to do will need to happen quickly; election day may be November 8, but in some states, early voting starts in just six weeks. That’s not enough time to solve all of America’s voting machine issues. Fortunately, there’s still plenty DHS can accomplish—assuming the districts that need the most help realize it. The problems with America’s electronic voting machines are extensive, but also easily summarized: Many of them are old computers, and old computers are more vulnerable to disruptions both purposeful (malware) and benign (bugs).

National: Donald Trump claims the election might be ‘rigged.’ Here’s how voting really works | Los Angeles Times

Of all the controversies that have cropped up during Donald Trump’s presidential campaign, his assertion that the general election could be “rigged” inspired one of the swiftest rebuttals. A fundamental part of any election is widespread acceptance of the validity of the results, and if Trump were to lose and claim fraud without evidence, political scientists and others argued, he would undermine the electoral process. Trump, increasingly losing ground in polls, told supporters at a rally this month that he’s afraid the election results won’t reflect voters’ intent. He threw his support behind voter ID rules while campaigning in Wilmington, N.C., this week, saying they help protect against fraud. But an appeals court ruled last month that the state’s voter ID law was enacted “with discriminatory intent” against black voters. Some state legislatures have promoted voter ID laws as a way to prevent election fraud, while critics contend that the regulations target and disenfranchise minority voters, who tend to vote for Democrats. Some of Trump’s supporters share his concern. According to a poll released by Public Policy Polling this week, 69% of Trump backers in North Carolina think a Hillary Clinton win would be the result of a rigged election. But an examination of how votes are cast and tallied in the U.S. shows that it would be extremely difficult for anyone to commit voter fraud at a scale that would tip an election or for election officials to rig balloting. This is how the voting process works: There is no national system or code that dictates how election votes should be tabulated.

National: Internet Voting Leaves Out a Cornerstone of Democracy: The Secret Ballot | MIT Technology Review

If the risk of hackers meddling with election results is not enough, here’s another reason voting shouldn’t happen on the Internet: the ballots can’t be kept secret. That’s according to a new report from Verified Voting, a group that advocates for transparency and accuracy in elections. A cornerstone of democracy, the secret ballot guards against voter coercion. But “because of current technical challenges and the unique challenge of running public elections, it is impossible to maintain the separation of voters’ identities from their votes when Internet voting is used,” concludes the report, which was written in collaboration with the Electronic Privacy Information Center and the anticorruption advocacy group Common Cause. When votes are returned via the Internet, it’s technically difficult to separate the voter’s identity from the vote, says Pamela Smith, president of Verified Voting, since the server has to know that identity in order to authenticate the voter and record the vote. In the systems that states are using now, “the authentication typically happens at the same time as the voting process,” she says. That’s problematic. A previous experiment tested giving voters PIN codes, but hackers working with the researchers were able to find those numbers and associate them with voters, says Smith.

National: Voting Online Means You’re Giving Up Privacy, Researchers Warn | Vocativ

Online voting—currently a limited option in 32 states and Washington, D.C.—usually forces voters to give up their legal right to a guaranteed private ballot, a new study shows. The study, a joint effort by nonprofit advocacy groups including the Verified Voting Foundation and the Electronic Privacy Information Center, notes that a right to a guaranteed private ballot is the law in every state in the U.S., and that in all but six, it’s protected by a state constitution—specifically because the integrity of a vote is predicated on the voter’s trust that they’re making their decision in private. Alabama’s Constitution reads, for instance, that “The right of individuals to vote by secret ballot is fundamental.”

National: Hacking the US Election ‘Possible’ But Difficult, Experts Say | VoA News

As recently as 2014, you could drive into the parking lot at certain Virginia polling places, connect to the voting machines inside by Wi-Fi and have your way with the vote tallies. That gaping hole in election security has been plugged. Virginia dropped these machines last year. But with Republican presidential nominee Donald Trump suggesting the November election may be rigged, and security officials blaming Russia for a politically sensitive hack of the Democratic National Committee, election cybersecurity is getting a closer look. The risks are real, experts say, though it’s another question how likely they are to happen. “It’s possible for a sophisticated attacker to hack the machines and start stealing votes,” says University of California at Berkeley computer science professor David Wagner. Wagner worked on a 2007 statewide review of California’s voting system. “Every voting machine that’s been studied is susceptible,” he says. “It would be challenging,” he adds. “It would require considerable technical sophistication. And it would require someone to be physically present in each county, tampering with at least one machine.

National: Happy birthday, 19th Amendment! | Constitution Daily

Today, we celebrate the anniversary of the 19th Amendment (ratified on August 18, 1920).

Full Text of the 19th Amendment: The right of citizens of the United States to vote shall not be denied or abridged by the United States or by any State on account of sex. Congress shall have power to enforce this article by appropriate legislation.

The Constitution has never prohibited women from voting and for many years before the adoption of this amendment women did vote in several states. The 19th amendment established a uniform rule for all states to follow in guaranteeing women this right. The states ratified the 19th Amendment in 1920 after a long campaign by advocates, who achieved limited success changing state laws. The women’s suffrage movement started in the era of the Andrew Jackson administration.

National: Native Americans plan to make history in the US election | BBC

More Native Americans are participating in the 2016 election than ever before. Eight indigenous candidates are running for Congress, up from two in 2014. Over 90 are running for state legislatures, again exceeding previous years. Hillary Clinton ran campaign ads in Navajo and met with tribal leaders in Iowa, Washington, Arizona and California during the presidential primaries. Bernie Sanders met with 90 leaders in total, a political record. “This is the best campaign ever in Indian Country,” says Nicole Willis, member of the Confederated Tribes of Umatilla and former advisor to Bernie Sanders. “There’s no question about that.” Native Americans, who make up approximately 1.7% of the US population, are unlikely to determine a presidential election. But they do play an important role in shaping local politics and swinging votes for seats in Congress. But why is 2016 proving to be such a vibrant year for indigenous politics?

National: Rutgers study: Disabled are ‘neglected’ voting bloc | USA Today

Voters with disabilities outnumber minority groups and could prove a powerful voting bloc — if they’re ever given easy access to polling places on Election Day. According to a new report from the Rutgers University School of Management and Labor Relations, about 35.4 million disabled people will be eligible to vote in the November 2016 election, a larger group than African American or Hispanic voters. It represents an increase of nearly 11 percent since 2008, a higher rate of growth than among voters without disabilities. The trick is turning those eligible voters into likely voters, Rutgers professor Douglas Kruse said. According to the report, only 46 percent of eligible disabled voters are projected to actually cast a vote.

National: Online voting systems raise hacking concerns | Fox News

Voting can be as easy as a click of the mouse – but is it secure? Twenty-six states and the District of Columbia now allow some form of online voting, from casting your vote online to sending an email. But after high-profile hacks like those at the Democratic National Committee, the Obama administration is looking at ways to protect online voting amid growing concerns about whether these systems are vulnerable. “There’s a vital national interest in our election process, so I do think we need to consider whether it should be considered by my department and others critical infrastructure,” Homeland Security Secretary Jeh Johnson said.

National: Powerful NSA hacking tools have been revealed online | The Washington Post

Some of the most powerful espionage tools created by the National Security Agency’s elite group of hackers have been revealed in recent days, a development that could pose severe consequences for the spy agency’s operations and the security of government and corporate computers. A cache of hacking tools with code names such as Epicbanana, Buzzdirection and Egregiousblunder appeared mysteriously online over the weekend, setting the security world abuzz with speculation over whether the material was legitimate. The file appeared to be real, according to former NSA personnel who worked in the agency’s hacking division, known as Tailored Access Operations (TAO). “Without a doubt, they’re the keys to the kingdom,” said one former TAO employee, who spoke on the condition of anonymity to discuss sensitive internal operations. “The stuff you’re talking about would undermine the security of a lot of major government and corporate networks both here and abroad.” Said a second former TAO hacker who saw the file: “From what I saw, there was no doubt in my mind that it was legitimate.”