National

With election season well underway, the federal agency responsible for election administration finally has filled its two most senior positions. The Election Assistance Commission announced on Wednesday that the commissioners approved by unanimous consent Mona Harrington as executive director (who was previously serving in an acting capacity) and Kevin Rayburn as general counsel (formerly a top election official in Georgia). The posts had been without permanent leadership since early September, when the commissioners voted not to reappoint then Executive Director Brian Newby and General Counsel Cliff Tatum. “This unanimous vote of the commission shows the confidence we have in these great candidates to lead the EAC into its next chapter,” said Chairman Ben Hovland. “Ensuring elections are secure, accessible, accurate and safe is critical for every election, and 2020 has presented unique challenges. With Ms. Harrington and Mr. Rayburn leading our staff, the EAC is better positioned to add value to the elections community and help election officials in the lead up to November and for years to come.”

National: As Election Nears, House Democrats Push Harder for Vote-by-Mail | Brandi Buchman(Courthouse News

Americans are caught in a conundrum: a pandemic is raging but it is also an election year, and lawmakers are feeling pressure to find the right solutions with just 145 days until the presidential election and a possible surge in coronavirus cases looming. A House Administration subcommittee on elections met Thursday for a remote hearing to consider these challenges and weigh the merits of mail-in and absentee voting in the middle of the Covid-19 pandemic ,which has infected over 2 million Americans and killed over 113,000, according to a Johns Hopkins University tracker. Though mail-in voting has been an American staple since the Civil War, for President Donald Trump and many other Republicans the concept has fast become unwelcome and is often the subject of intense criticism underpinned by unproven allegations of rampant fraud or abuse. During Thursday’s hearing, the sole Republican and ranking member of the subcommittee, Congressman Rodney Davis of Illinois, balked at the notion of widespread absentee voting. He argued the call by Democrats to drastically ramp up federal assistance that would make mail-in voting more accessible is overreach, but also is not feasible. “I support states increasing capacity for mail-in voting but to suggest every state can dramatically increase that capacity is ridiculous,” Davis said.

National: ‘It’s broken’: Fears grow about patchwork US election system | Steve Peoples and Christina A. Cassidy/Associated Press

The chaos that plagued Georgia’s primary this week is raising concerns about a potential broader failure of the nation’s patchwork election system that could undermine the November presidential contest, political leaders and elections experts say. With less than five months to go, fears are mounting that several battleground states are not prepared to administer problem-free elections during the pandemic. The increasingly urgent concerns are both complex and simple: long lines disproportionately affecting voters of color in places like Atlanta with a history of voter suppression; a severe shortage of poll workers scared away by coronavirus concerns; and an emerging consensus that it could take several days after polls close on Election Day to determine a winner as battleground states struggle with an explosion of mail voting. “We want a democracy in the United States we can showcase for the world, and right now it’s broken and on full display,” said Kristen Clarke, president and executive director of the Lawyers’ Committee for Civil Rights Under Law.

National: Suit seeks immediate citizenship for those waiting on oath | Associated Press

Scores of people waiting to recite the oath of citizenship — the final step in the citizenship process — should be naturalized immediately so that they have time to register to vote this fall, immigrant rights groups argued in a lawsuit filed in Philadelphia federal court this week. The Northwest Immigrant Rights Project and other groups filed the suit Wednesday on behalf of legal permanent residents whose applications for naturalization have already been approved by the U.S. Citizenship and Immigration Services’ field office in Philadelphia. The organizations say their clients are among thousands nationwide who have had their oath ceremony cancelled or not scheduled due to the pandemic. They argue that federal law allows the courts to expedite the naturalization process during special circumstances. The organizations say the courts should authorize “judicial oath ceremonies or immediate administrative naturalization by USCIS” to assure that all approved candidates for naturalization are sworn in by late September.

National: US voter registration plummets during coronavirus pandemic, challenging both parties | Joey Garrison/USA Today

The registration of new voters dropped dramatically in the USA amid the coronavirus pandemic, challenging efforts of both major political parties to enlist supporters in battleground states before the 2020 election. The number of new voters registered across 11 states in April 2020 decreased by 70% compared with April 2016, according to a report from the nonpartisan Center for Election Innovation & Research released Thursday. Voter registration was well ahead of the 2016 pace in most states through February. It started to decline in March, when states began enforcing stay-at-home orders and social distancing requirements to fight the spread of the COVID-19 virus. By April, registration plummeted as the two most popular methods of signing up voters – third-party at schools and other public venues and “motor voter registration” – virtually halted. The latter refers to a federal law that requires states to give individuals the opportunity to register to vote when they apply for or renew a driver’s license.

National: Beyond Georgia: A Warning for November as States Scramble to Expand Vote-by-Mail | Nick Corasaniti and Michael Wines/The New York Times

The 16 statewide primary elections held during the pandemic reached a glaring nadir on Tuesday as Georgia saw a full-scale meltdown of new voting systems compounded by the state’s rapid expansion of vote-by-mail. But around the country, elections that have been held over the past two months reveal a wildly mixed picture, dominated by different states’ experiences with a huge increase in voting by mail. Over all, turnout in the 15 states and Washington, D.C., which rapidly expanded vote-by-mail over the past few months, remained high, sometimes at near record levels, even as the Democratic presidential primary was all but wrapped. The good news was millions were able to vote safely, without risking their health. The bad news was a host of infrastructure and logistical issues that could have cost thousands their opportunity to vote: ballots lost in the mail; some printed on the wrong paper, with the wrong date or the wrong language; others arriving weeks after they were requested or never arriving at all. But the most definitive lesson for November may be what many have already begun to accept — that there’s an enormous chance many states, including key battlegrounds, will not finish counting on election night. The implications are worrisome in a bitterly divided nation facing what many consider the most consequential election in memory with the loudest voice belonging to an incumbent president who is prone to promoting falsehoods about the electoral system.

National: Why Can’t People Vote Online? Election Security Analysts Weigh In | Chris Iovenko/Observer

The coronavirus pandemic has radically changed the way we live; it is also upending the way we vote. Traditional polling stations, which often have long lines and use crowded indoor spaces and shared voting equipment, pose substantial risks for spreading the disease. Unless there is a massive switch to remote voting, the predicted second wave of COVID-19 this fall could be catastrophically escalated by large in-person turnouts at polling stations. And in turn, efforts to prevent increased infections can be used as an excuse for targeted, discriminatory curtailment of in-person voting, with the outrageous events in Georgia’s primary election on Tuesday a clear example of the potential derailment of democracy. Currently, the most common way to vote remotely is by mail. It’s a proven, convenient, and safe technique; in the 2016 election, 1 in 4 Americans voted by mail. However, President Donald Trump (who himself votes by mail) and his allies have falsely attacked vote-by-mail as wide-open to fraud and an attempt by Democrats to steal the election. The Republican National Committee has launched a lawsuit in California contesting expansion of vote-by-mail and in states controlled by Republicans obstacles to voting by mail will likely be greater than those faced by voters in other states.

National: Georgia’s primary debacle should sound alarm bells for November | Joseph Marks/The Washington Post

Multiple problems plagued voters as they went to the polls yesterday in Georgia’s primary, from hours-long lines, technical disasters and absentee ballots that never arrived, They’re another ominous sign for states and the general election officials trying to run a safe and trustworthy elections this year, though Georgia’s issues were known for some time and are more unique. In fact, the problems in Georgia were especially galling because the seeds of the failure were evident for months to technologists — since long before the novel coronavirus pandemic arrived and multiplied the obstacles facing election officials. They included an overly complex voting system designed to improve security but may have compromised it, a rushed time frame to implement that system and a training program for poll workers that wasn’t up to the task, especially after a slew of new workers replaced elderly people more vulnerable to covid-19. The long lines were exacerbated because election officials failed to send mail-in ballots to many people who requested them during the pandemic and who then showed up to vote in person. There may also have been a surge in voters driven by anger over the police killing of George Floyd in Minneapolis and the nationwide protests that have followed.

National: Georgia Was A Mess. Here’s What Else We Know About The June 9 Elections. | Nathaniel Rakich and Geoffrey Skelley/FiveThirtyEight

Tuesday’s primary elections were once again marred by serious problems at the polls, especially in Georgia. However, in this case, the issues probably had less to do with the COVID-19 pandemic and more to do with the state’s own ineptitude. Almost 90 percent of Georgia’s polling places were open on Tuesday, which is far more than in many other states that have held primaries recently. Only one problem: Georgia’s new voting machines, which were put in place after claims of voter suppression in 2018, didn’t work as well as hoped. There’s no evidence of foul play, but the state was clearly not prepared to hold an election with the new equipment. The state apparently passed on what it deemed the best voting machines available, opting for a cheaper vendor that had never installed so much equipment in such a short period of time. And some polling places in Cobb, DeKalb, Fulton and Gwinnett counties opened late because of problems booting up the machines; some didn’t even receive the necessary equipment until after polls were supposed to open. Poll workers in Columbus also had trouble setting up the ballot printers, which they blamed on lack of training due to the coronavirus. And at one precinct, workers spent an hour trying to figure out how to insert the cards that record votes into the new machines — before figuring out they were putting them in upside-down. There were also numerous reports of voting machines simply not working, which led to some of the longest lines. The problems seemed to be most acute in metro Atlanta, raising fears of problems assuring equal voting access in the general election.

National: Cybersecurity Concerns with Online Voting for 2020 Presidential Election | 2020-06-11 | Security Magazine

A new report by researchers at the Massachusetts Institute of Technology (MIT) and University of Michigan discusses the cybersecurity vulnerabilities associated with OmniBallot, a we-based system for blank ballot delivery, ballot marking and (optionally) online voting. Three states – Delaware, West Virginia and New Jersey – recently announced they would allow certain voters to cast votes using OmniBallot. Researcher Michael A. Specter at MIT and J. Alex Halderman at the University of Michigan reverse engineered the client-side e portion of OmniBallot, as used in Delaware, in order to detail the system’s operation and analyze its security. “We find that OmniBallot uses a simplistic approach to Internet voting that is vulnerable to vote manipulation by malware on the voter’s device and by insiders or other attackers who can compromise Democracy Live, Amazon, Google, or Cloudflare,” the researchers explain. In addition, Democracy Live, which appears to have no privacy policy, receives sensitive personally identifiable information— including the voter’s identity, ballot selections, and browser fingerprint— that could be used to target political ads or disinformation campaigns, the report says.

National: Researchers say online voting tech used in 5 states is fatally flawed | Timothy B. Lee/Ars Technica

OmniBallot is election software that is used by dozens of jurisdictions in the United States. In addition to delivering ballots and helping voters mark them, it includes an option for online voting. At least three states—West Virginia, Delaware, and New Jersey—have used the technology or are planning to do so in an upcoming election. Four local jurisdictions in Oregon and Washington state use the online voting feature as well. But new research from a pair of computer scientists, MIT’s Michael Specter and the University of Michigan’s Alex Halderman, finds that the software has inadequate security protections, creating a serious risk to election integrity. Democracy Live, the company behind OmniBallot, defended its software in an email response to Ars Technica. “The report did not find any technical vulnerabilities in OmniBallot,” wrote Democracy Live CEO Bryan Finney. This is true in a sense—the researchers didn’t find any major bugs in the OmniBallot code. But it also misses the point of their analysis. The security of software not only depends on the software itself but also on the security of the environment on which the system runs. For example, it’s impossible to keep voting software secure if it runs on a computer infected with malware. And millions of PCs in the United States are infected with malware.

National: Some states have embraced online voting. It’s a huge risk. | Eric Geller/Politico

Some West Virginians voting in Tuesday’s primary will be allowed to tap on their phones or laptops instead of heading to the polls. Some in Delaware will get to do the same next month. And the trend may spread into November, as the coronavirus pandemic inspires a search for voting methods that don’t expose people to the deadly disease. But moving elections to the internet poses huge risks that the United States is unprepared to handle — endangering voters’ privacy, the secrecy of the ballot and even the trustworthiness of the results. The problems: The internet is riddled with security flaws that hackers can exploit. So are voters’ computers, smartphones and tablets. And the U.S. has never developed a centralized digital identity system like the one in Estonia, a tiny, digitally savvy nation that has held its elections online since 2005. “Securing the return of voted ballots via the internet while ensuring ballot integrity and maintaining voter privacy is difficult, if not impossible, at this time,” four federal agencies, including the Department of Homeland Security’s cybersecurity arm and the FBI, warned in a bulletin last month. They called it far riskier than mail-in voting, the technology that has drawn the bulk of the political debate during the pandemic. On Sunday, researchers at the Massachusetts Institute of Technology and the University of Michigan revealed numerous security flaws in the product that West Virginia and Delaware are using, saying it “represents a severe risk to election security and could allow attackers to alter election results without detection.”

National: Democracy Live Internet Voting System Can Be Hacked, Researchers Warn | Lucas Ropek /Government Technology

An online voting platform that has seen recent adoption by numerous state and county governments has vulnerabilities that could be exploited to change votes without the knowledge of election officials, a new report alleges. The OmniBallot, which is a product of Seattle-based tech firm Democracy Live, purports to offer “secure, accessible remote balloting for all voters” and is being used by state or county governments in Oregon, Washington, Colorado, Ohio, Florida, New Jersey and West Virginia. The company developed a number of contracts for limited Internet voting pilot programs with states earlier this year, after COVID-19 threatened to disrupt primary elections nationwide. These programs are fairly limited in scope and largely focus on overseas voters and the disabled. However, computer science researchers say what the company really offers is an insecure platform. The recently published report from professors Michael J. Specter, of MIT, and J. Alex Halderman, of the University of Michigan, states that the company “uses a simplistic approach to Internet voting that is vulnerable to vote manipulation by malware on the voter’s device and by insiders or other attackers who can compromise Democracy Live, Amazon, Google, or Cloudflare [its partners].”

National: Major Problems With Voting in Atlanta as 5 States Hold Primaries | Astead W. Herndon and Stephanie Saul/The New York Times

Georgia election officials, poll workers and voters reported major trouble with voting in Atlanta and elsewhere on Tuesday as the state’s primaries got underway, most critically a series of problems with new voting machines that forced many people across the state to wait in long lines and cast provisional ballots. Mayor Keisha Lance Bottoms said on Twitter that voting machines were not working in many parts of the city. Poll workers in several locations were having difficulty operating the machines, which were new models. “If you are in line, PLEASE do not allow your vote to be suppressed,” Ms. Bottoms wrote. “PLEASE stay in line.” Nikema Williams, the chairwoman of the Democratic Party of Georgia, said she had 84 text messages reporting voting problems within 10 minutes of the polls opening at 7 a.m. Ms. Williams, who is a state senator from Atlanta, said that in some locations the voting machines did not work and in at least one other no machines ever arrived. “It’s a hot mess,” Ms. Williams said. “How do you not have a voting machine?”

National: Cyber Command creates new malware sharing portal with National Guard | Mark Pomerleau/The Fifth Domain

A new portal created by U.S. Cyber Command and the National Guard provides a two-way interface for sharing malware and gain better insights into cyber threats facing the nation, according to a June 9 release from the command. This portal, called Cyber 9-Line, allows participating Guard units from their perspective states to quickly share incidents with Cyber Command. Cyber Command’s elite Cyber National Mission Force, which conducts operations aimed at disrupting specific nation state actors, is then able to provide analysis on the malware and offer feedback to the states to help redress the incident. “This level of cooperation and feedback provides local, state and Department on Defense partners with a holistic view of threats occurring in the United States and abroad,” said Brig. Gen. William Hartman, commander of the Cyber National Mission Force and the lead for Cyber Command’s election security group. “Dealing with a significant cyber incident requires a whole-of-government defense, bidirectional lines on communication and data sharing enables the collective effort to defend elections.”

National: Minuscule number of potentially fraudulent ballots in states with universal mail voting undercuts Trump claims about election risks | Elise Viebeck/The Washington Post

As nearly every state expands its capacity for absentee voting this year, President Trump and his GOP allies have attacked the process as prone to rampant fraud. But a Washington Post analysis of data collected by three vote-by-mail states with help from the nonprofit Electronic Registration Information Center (ERIC) found that officials identified just 372 possible cases of double voting or voting on behalf of deceased people out of about 14.6 million votes cast by mail in the 2016 and 2018 general elections, or 0.0025 percent. The figure reflects cases referred to law enforcement agencies in five elections held in Colorado, Oregon and Washington, where all voters proactively receive ballots in the mail for every election. The minuscule rate of potentially fraudulent ballots in those states adds support to assertions by election officials nationwide that with the right safeguards, mail voting is a secure method for conducting elections this year amid the threat of the novel coronavirus — undercutting the president’s claims. Until now, the polarized debate about ballot fraud has largely featured individual anecdotes from around the country of attempts to vote illegally. The voting figures from the three states examined by The Post provide a robust data set to measure the prevalence of possible fraud.

National: Online Voting System Used in Florida and Elsewhere Has Severe Security Flaws, Researchers Find | Kim Zetter/OneZero

New research shows that an internet voting system being used in multiple states this year is vulnerable to hacking, and could allow attackers to alter votes without detection. On Sunday, researchers published a report that details how votes in OmniBallot, a system made by Seattle-based Democracy Live, could be manipulated by malware on the voter’s computer, insiders working for Democracy Live, or external hackers. OmniBallot is currently used in Colorado, Delaware, Florida, Ohio, Oregon, Washington, and West Virginia. Though online voting has typically been used by overseas military and civilian voters, it could expand to more voters in the future due to the pandemic. The researchers found that bad actors could gain access to ballots by compromising Democracy Live’s network or any of the third-party services and infrastructure that the system relies on, including Amazon, Google, and Cloudflare. “At worst, attackers could change election outcomes without detection, and even if there was no attack, officials would have no way to prove that the results were accurate,” the researchers, Michael Specter at the Massachusetts Institute of Technology and J. Alex Halderman of the University of Michigan, write. “No available technology can adequately mitigate these risks, so we urge jurisdictions not to deploy OmniBallot’s online voting features.”

National: Study finds vulnerabilities in online voting tool used by several states | Maggie Miller/The Hill

Researchers with the Massachusetts Institute of Technology (MIT) and the University of Michigan found multiple security vulnerabilities in an online voting tool being used by at least three states. The study evaluated Democracy Live’s OmniBallot, a program that Delaware, New Jersey and West Virginia are using to allow military personnel and voters with disabilities to cast ballots amid the COVID-19 pandemic. The company also has a contract with the Defense Department to provide ballots to military personnel overseas. According to the paper published Sunday, the system opens up the voting process to a range of vulnerabilities that could lead to election interference. “We conclude that using OmniBallot for electronic ballot return represents a severe risk to election security and could allow attackers to alter election results without detection,” the researchers wrote.

National: Hackers Are Already Screwing With the 2020 Election | Eric Lutz/Vanity Fair

Donald Trump has spent months promulgating bad-faith attacks on remote voting, masking his fears that high turnout could favor his Democratic opponent with unfounded claims that it would result in widespread fraud. “WE CAN NEVER LET THIS TRAGEDY BEFALL OUR NATION,” he tweeted of mail-in voting last month. But while the president’s attacks on proposals to ensure votes can be safely cast amid the coronavirus pandemic may be obvious lies, some remote voting measures have raised legitimate concerns about the risk of foreign interference. With COVID-19 almost certain to remain an enormous public health issue through election day in November, several states—including ones led by Republicans—have sought to expand access to mail-in voting. A handful are going even further, experimenting with or ramping up online voting. According to the New York Times, the latter is potentially vulnerable to hacking, with researchers warning that online voting could present opportunities for foreign manipulation. “Online voting raises such severe risks that, even in a time of unrest and pandemic, these jurisdictions are taking a major risk of undermining the legitimacy of their election results,” University of Michigan computer science professor J. Alex Halderman told the Times.

National: DARPA wants hackers to try to crack its new generation of super-secure hardware | Joseph Marks/The Washington Post

The Pentagon’s top research agency thinks it has developed a new generation of technology that will make voting machines, medical databases and other critical digital systems far more secure against hackers. Now, the Defense Advanced Research Projects Agency, which helped invent GPS and the Internet, is launching a contest for ethical hackers to try to break into that technology before it goes public. DARPA is offering the hackers cash prizes for any flaws they find using a program called a “bug bounty.” The new technology is based on re-engineering hardware, such as computer chips and circuits, so that the typical methods hackers use to undermine the software that runs on them become impossible. That’s far different from the standard approach to cybersecurity, in which tech companies release a never-ending stream of software patches every time bad guys discover a new bug.

National: COVID-19 Adds to US Election Security Challenges: Report | Ishita Chigilli Palli/GovInfo Security

The global COVID-19 pandemic has created a new series of cybersecurity challenges for election officials across the U.S., including concerns about the security of mail-in ballots and whether attackers will target vulnerable networks for those local election workers still working remotely, according to a new report. The Brennan Center for Justice, a nonpartisan law and public policy institute connected to New York University Law School, released a report on Friday urging Congress to provide states with the required resources to ensure more secure election process. “Effective digital resiliency plans can ensure that operations continue and eligible citizens are able to exercise their right to vote even in the face of cyberattacks or technical malfunctions,” according to the report.

National: Chinese and Iranian APT Groups Targeted US Presidential Campaigns | Kelly Sheridan/Dark Reading

Google’s Threat Analysis Group (TAG) recently saw a China-linked cyberattack group targeting Joe Biden’s 2020 presidential campaign staff, and an Iran-linked attack group targeting Donald Trump’s campaign staff. Both incidents involved phishing; neither one indicated a compromise. TAG director Shane Huntley posted a tweet about the findings late last week. Both campaigns were notified of the attempts and informed federal law enforcement, he wrote. This isn’t the first time that attackers have attempted to infiltrate the Trump campaign: Last year, Microsoft found a group seemingly linked to the Iranian government targeted Trump’s 2020 reelection efforts. Because this year’s elections are only a few months away, this discovery isn’t surprising. If the Trump and Biden campaigns represent the major political parties on November 3, there will be more intelligence value placed on their communications, says Charles Ragland, security engineer at Digital Shadows.

National: As states explore online voting, new report warns of ‘severe risk’ | Susan Miller/GCN

As states look for alternatives to in-person voting in the event the coronavirus flares again in the fall, researchers at MIT released a report on the security of OmniBallot, an internet voting and ballot delivery system that been used by the military and overseas and disabled voters in approximately 600 jurisdictions. The platform was developed by Democracy Live, a company providing cloud-based voting technologies, that describes its OmniBallot Online product as an electronic, fully accessible ballot solution for vote-by-mail and absentee voters as well as for those covered by the Uniformed and Overseas Citizens Absentee Voting Act. Qualified voters can use the service to print their ballots, fill them out and mail them or deliver them in person. An online ballot marking version is used by disabled voters who use it to electronically select candidates, print the completed ballot and then mail it in or deliver it. This year, however, three states are allowing some voters to use the web application to return their ballots online, MIT researchers said.

National: Rights Groups Say Age-Based Laws on Absentee Voting Are Unconstitutional | Travis Bubenik/Courthouse News

As the coronavirus pandemic continues to prompt concerns about the safety of in-person voting, a coalition of voting rights groups argues in a new report that Texas, South Carolina and multiple other U.S. states are violating the U.S. Constitution by only letting older citizens vote by mail. In the report released Thursday, the Voting Rights Project at the University of California Los Angeles, the National Vote at Home Institute and other groups claim that placing age restrictions on absentee voting violates the 26th Amendment, which guarantees Americans the right to vote at the age of 18. “These laws use age to create two classes of voters – one with easier access to the ballot box than the other – and work to abridge the voting rights of younger voters,” the groups behind the report said in a statement. The coalition is pushing for “immediate litigation” against states with age restrictions on absentee voting.

National: U.S. states see major challenge in delivering record mail ballots in November | Jason Lange/Reuters

With a health crisis expected to drive a surge in mail voting in November, U.S. election officials face a major challenge: Ensure tens of millions of ballots can reach voters in time to be cast, and are returned in time to be counted. Recent presidential nomination contests and other elections held in the midst of the coronavirus pandemic – a warm-up for the Nov. 3 general election if COVID-19 remains a threat – showed some states have been overwhelmed by the sudden rush to vote by mail. Nearly half of U.S. states allow voters to request absentee ballots less than a week before their elections. Even under normal circumstances, that often is too little lead time to guarantee voters will receive their ballots and have sufficient time to return them, election experts and state officials say. In Ohio, for example, whose nearly all-mail election on April 28 was marred by ballot delivery delays, Republican Secretary of State Frank LaRose has asked state lawmakers to change the deadline for voters to request a mail ballot to one week before an election, up from three days currently. “It is not logistically possible” for all voters asking for ballots at the last minute to get them in time to return them by mail, LaRose told Reuters. “That relies on a lot of luck.”

National: Report details new cyber threats to elections from COVID-19 | Maggie Miller/The Hill

Election officials face a wide range of new cybersecurity threats stemming from voting changes spurred by the coronavirus pandemic, according to a report released Friday. The report, compiled by New York University’s Brennan Center for Justice, lays out threats such as attempts to target election officials working on unsecured networks at home, recovering from voter registration system outages and securing online ballot request systems. “Voters are already placing increased demands on online registration systems and mail ballot options,” the authors wrote in the report. “At the same time, the risk of cyberattacks from foreign state and nonstate actors alike remains.” Lawrence Norden, director of the Brennan Center’s Election Reform Program and a co-author of the report, told The Hill that election officials were already faced with cybersecurity threats, but they’re now also facing COVID-19 challenges. “Now that we are past the primaries in a lot of states, there is time to return our attention again to cybersecurity, and obviously the threat hasn’t gone away just because we are dealing with COVID-19 in the United States,” Norden said.

National: Amid Pandemic and Upheaval, New Cyber Risks to the Presidential Election | David E. Sanger, Nicole Perlroth and Matthew Rosenberg/The New York Times

With the general election less than 150 days away, there are rising concerns that the push for remote voting prompted by the pandemic could open new opportunities to hack the vote — for President Vladimir V. Putin of Russia, but also others hoping to disrupt, influence or profit from the election. President Trump has repeatedly said that mail-in ballots invite voter fraud and would benefit Democrats. It is a baseless claim: Mail-in voting has resulted in little fraud in the five states that have used it for years, and a recent study at Stanford University found that voting by mail did not advantage either party and might increase voter turnout for both parties. But there are different worries. The rush to accommodate remote voting is leading a small number of states to experiment with or expand online voting, an approach the Department of Homeland Security deemed “high risk” in a report last month. It has also put renewed focus on the assortment of online state voter registration systems, which were among the chief targets of Russian hackers in 2016. Their security is central to ensuring that, come November, voters actually receive their mail-in ballots or can gain access to online voting. While Russian hackers stopped short of manipulating voter data in 2016, American officials determined the effort was likely a dry run for future interference. To head off that threat, last summer the Department of Homeland Security hired the RAND Corporation to re-evaluate the nation’s election vulnerabilities, from poll booths to the voter registration systems. RAND’s findings only heightened the longstanding fears of government officials: State and local registration databases could be locked by hackers demanding ransomware or manipulated by outside actors.

National: GOP recruits army of poll watchers to fight voter fraud no one can prove exists | Jane C. Timm/NBC

Republicans are recruiting an estimated 50,000 volunteers to act as “poll watchers” in November, part of a multimillion-dollar effort to police who votes and how. That effort, coordinated by the Republican National Committee and President Donald Trump’s re-election campaign, includes a $20 million fund for legal battles as well as the GOP’s first national poll-patrol operation in nearly 40 years. While poll watching is an ordinary part of elections — both parties do it — voting rights advocates worry that such a moneyed, large-scale offensive by the Republicans will intimidate and target minority voters who tend to vote Democratic and chill turnout in a pivotal contest already upended by the coronavirus pandemic. Some states allow poll monitors to challenge a voter’s eligibility, requiring that person’s ballot undergo additional vetting to be counted. In Michigan, for example, a challenged voter will be removed from line and questioned about their citizenship, age, residency and date of voter registration if, according to election rules, a vote challenger has “good reason” to believe they are not eligible. They are required to take an oath attesting that their answers are true and are given a special ballot.

National: How to Protect Your Vote – a technical report on Democracy Live OmniBallot | Michael A. Specter and J. Alex Halderman/Internet Policy Research Initiative at MIT

See the full technical report on OmniBallot here

Today, MIT and University of Michigan researchers released a report on the security of OmniBallot, an Internet voting and ballot delivery system produced by Democracy Live. This system has been deployed in Delaware, West Virginia, and other jurisdictions. Our goal is to provide election officials and citizens the information they need to ensure that elections are conducted securely. Based on our findings, we have specific recommendations for both governments and individual voters.

National: Attempted hacks of Trump and Biden campaigns reveal a race to disrupt the 2020 general election | Joseph Marks/The Washington Post