National

Download the letter here June 22, 2020 TO: The United States Election Assistance Commission (EAC) Thank you for the opportunity to comment on the proposed Voluntary Voting Systems Guidelines (VVSG) 2.0. Verified Voting’s mission is to strengthen democracy for all voters by promoting the responsible use of technology in elections. Verified Voting applauds the diligent…

National: How secure are electronic pollbooks and vote reporting tools? This new program aims to find out | Joseph Marks/The Washington Post

Voting machines get most of the attention when it comes to election security. But officials are now trying to tackle myriad ways adversaries could undermine U.S. elections aside from directly rigging ballots. A new pilot project run by a top cybersecurity nonprofit group and the Election Assistance Commission aims to look for bugs in the many other machines that hackers could exploit to throw an election into chaos, such as electronic poll books and systems for reporting unofficial election night results. Most states currently don’t have a formal process for ensuring they’re secure. “Most of our adversaries aren’t looking to affect the outcome of an election as much as they want to affect our confidence in that outcome,” Aaron Wilson, senior director of election security at the Center for Internet Security, which is running the project, told me. “All of these technologies could have a really big impact on voter confidence and in some cases on the vote itself.” A cyberattack that modified voter information in e-poll books, for example, could make it difficult or impossible for many people to cast ballots. An attack that changed election night results could create confusion about the winner and degrade faith in the real result.

National: “Catastrophe:” Elections experts fear what primary mayhem may mean for November | Melissa Quinn/CBS

With five months to go before tens of millions of Americans head to the polls, voting rights groups and elections experts who watched chaos unfold in states that recently held their primaries are sounding the alarm about what Election Day in November may hold, amid the coronavirus pandemic. “I’m concerned that if we’re already seeing failures happening during these lower-turnout primary elections, come November when turnout will be two to three times what it was, the problems will still persist and we’ll have catastrophic failure,” Michael McDonald, a political science professor at the University of Florida and expert on elections, told CBS News. While some states have been able to navigate the uncertain landscape brought by the coronavirus, others have seen their primaries plagued by long lines, technical snags and widespread confusion. In Georgia and Nevada, voters waited in line for hours to cast their ballots because of the consolidation of polling locations and a shortage of poll workers, who are typically older and who opted to stay home to protect themselves and their health.

National: States failed to get absentee ballots to thousands of voters in recent primary elections, signaling problems for November | Marshall Cohen and Kelly Mena/CNN

As Washington, DC’s June 2 primary approached, Matthew Miller and Nima Sheth, married professors who live in the District, decided to vote absentee. With elderly, immunocompromised parents at home, plus a 1-year-old baby, it felt like the safest choice in the age of coronavirus. So, they submitted requests for absentee ballots on the last day of eligibility, a week before the primary. They got a confirmation email from the DC Board of Elections. But Miller’s ballot never arrived, and Sheth’s ballot was sent to the wrong address. Neither ended up voting. “It wasn’t a risk we were willing to take, at least for the primary,” Miller said, “Though November might be a different story. You just don’t think something like this could happen in a country like America, where, if you follow the rules, you should be able to vote.” Miller and Sheth are among tens of thousands of voters who didn’t get their requested absentee ballots in recent primaries, including in the battleground states of Georgia and Wisconsin. In Maryland, where all registered voters were automatically supposed to get ballots in the mail, about 160,000 ballots, roughly 5% of those sent out, weren’t delivered, officials say.

National: Georgia shows why November’s election could be chaos | Timothy B. Lee/Ars Technica

There’s broad agreement that last week’s primary election in Georgia was a fiasco, with voters reportedly waiting as long as five hours to cast a ballot. Democrats accused Georgia Republican Secretary of State Brad Raffensperger of bungling the statewide rollout of new election technology. Some went further, suggesting that the problems—which were most severe in Democratic areas—were a deliberate Republican strategy. “What happened in Georgia yesterday was by design,” former presidential candidate Hillary Clinton tweeted last Wednesday. “Voter suppression is a threat to our democracy.” Republicans have responded by blaming officials in Democratic-leaning urban counties where the problems were the worst. County officials in Georgia are responsible for many day-to-day details of an election, including selecting polling places and recruiting poll workers. Raffensperger singled out officials in Fulton and DeKalb Counties—liberal jurisdictions in the heart of the Atlanta metro area. “Every other county faced these same issues and were significantly better prepared to respond so that voters had every opportunity to vote,” Raffensperger wrote in an election-day statement.

National: COVID endangers the volunteers who make your vote count | Pat Beall and John Moritz/USA Today

Lost in the broader chaos of Georgia’s recent statewide election was a previously unreported incident that highlights a concern for every state planning for the November general election: Just 48 hours before Georgia’s June 9 election, a poll worker in Jackson County tested positive for COVID-19. Emails obtained by USA TODAY show Jackson County elections supervisor Jennifer Logan told election board members that, on the advice of an election official in Georgia Secretary of State Brad Raffensperger’s office, they were not required to tell the public anything. The official’s argument was that “due to the continuing health crisis, everyone knows the risk that they take when they go out in public…and they are making that choice,” the email states. Logan did not respond to written requests for comment, and it’s unclear whether other Jackson County poll workers were notified that one of their colleagues had tested positive for the novel coronavirus. In a statement, a Raffsenberger spokesman said counties had been advised only to make their own decisions after talking to health officials and their own legal counsel.

National: House Elections Subcommittee examines voting during the COVID-19 pandemic | Sabrina Eaton/Cleveland Plain Dealer

To Warrensville Heights Democratic Rep. Marcia Fudge, who chairs a House of Representative subcommittee on elections, it’s obvious that election procedures around the nation must change to safely conduct November’s general election during a global pandemic. On Thursday, Fudge’s subcommittee held a hearing to examine how states conducted primary elections during the spread of the COVID-19 virus, and how the federal government can ensure it doesn’t hinder voting in November. “It has become clear that access to the ballot in November is in jeopardy if we do not make substantial investments in our election infrastructure and remove the long standing barriers that continue to keep far too many from exercising their right to vote,” said Fudge. “We must assure every eligible American can access the ballot box, without endangering their health and with steadfast faith in our democratic process.” Witnesses at the hearing described how the virus derailed primaries in states including Wisconsin and Georgia, where mail-in ballots that many voters requested never arrived, and a reduction of in-person polling places resulted in hours-long lines in some areas.

National: Two positions filled at federal election agency | Bill Theobald/The Fulcrum

After staying vacant almost a year, the top two jobs have been filled at the Election Assistance Commission, the principal federal agency overseeing how states conduct voting. The commissioners formally made the hires on Wednesday. The moves could help stabilize the EAC after years of turnover, controversy and inconsistent funding. The appointments come just five months before the presidential election, and in the middle of a primary season when the coronavirus pandemic has created delays and chaos across the country, most recently this week in Georgia. The EAC is a small agency that plays a large role in the execution of the democratic process. It is charged with coordinating the government’s limited supervision of how states and thousands of localities conduct elections. It certifies the reliability of the voting machines and has been at the center of efforts to protect election systems from being hacked by foreign adversaries.

National: Election Assistance Commission Regains Permanent Leaders In Top Positions | Courtney Bublé/Government Executive

With election season well underway, the federal agency responsible for election administration finally has filled its two most senior positions. The Election Assistance Commission announced on Wednesday that the commissioners approved by unanimous consent Mona Harrington as executive director (who was previously serving in an acting capacity) and Kevin Rayburn as general counsel (formerly a top election official in Georgia). The posts had been without permanent leadership since early September, when the commissioners voted not to reappoint then Executive Director Brian Newby and General Counsel Cliff Tatum. “This unanimous vote of the commission shows the confidence we have in these great candidates to lead the EAC into its next chapter,” said Chairman Ben Hovland. “Ensuring elections are secure, accessible, accurate and safe is critical for every election, and 2020 has presented unique challenges. With Ms. Harrington and Mr. Rayburn leading our staff, the EAC is better positioned to add value to the elections community and help election officials in the lead up to November and for years to come.”

National: As Election Nears, House Democrats Push Harder for Vote-by-Mail | Brandi Buchman(Courthouse News

Americans are caught in a conundrum: a pandemic is raging but it is also an election year, and lawmakers are feeling pressure to find the right solutions with just 145 days until the presidential election and a possible surge in coronavirus cases looming. A House Administration subcommittee on elections met Thursday for a remote hearing to consider these challenges and weigh the merits of mail-in and absentee voting in the middle of the Covid-19 pandemic ,which has infected over 2 million Americans and killed over 113,000, according to a Johns Hopkins University tracker. Though mail-in voting has been an American staple since the Civil War, for President Donald Trump and many other Republicans the concept has fast become unwelcome and is often the subject of intense criticism underpinned by unproven allegations of rampant fraud or abuse. During Thursday’s hearing, the sole Republican and ranking member of the subcommittee, Congressman Rodney Davis of Illinois, balked at the notion of widespread absentee voting. He argued the call by Democrats to drastically ramp up federal assistance that would make mail-in voting more accessible is overreach, but also is not feasible. “I support states increasing capacity for mail-in voting but to suggest every state can dramatically increase that capacity is ridiculous,” Davis said.

National: ‘It’s broken’: Fears grow about patchwork US election system | Steve Peoples and Christina A. Cassidy/Associated Press

The chaos that plagued Georgia’s primary this week is raising concerns about a potential broader failure of the nation’s patchwork election system that could undermine the November presidential contest, political leaders and elections experts say. With less than five months to go, fears are mounting that several battleground states are not prepared to administer problem-free elections during the pandemic. The increasingly urgent concerns are both complex and simple: long lines disproportionately affecting voters of color in places like Atlanta with a history of voter suppression; a severe shortage of poll workers scared away by coronavirus concerns; and an emerging consensus that it could take several days after polls close on Election Day to determine a winner as battleground states struggle with an explosion of mail voting. “We want a democracy in the United States we can showcase for the world, and right now it’s broken and on full display,” said Kristen Clarke, president and executive director of the Lawyers’ Committee for Civil Rights Under Law.

National: Suit seeks immediate citizenship for those waiting on oath | Associated Press

Scores of people waiting to recite the oath of citizenship — the final step in the citizenship process — should be naturalized immediately so that they have time to register to vote this fall, immigrant rights groups argued in a lawsuit filed in Philadelphia federal court this week. The Northwest Immigrant Rights Project and other groups filed the suit Wednesday on behalf of legal permanent residents whose applications for naturalization have already been approved by the U.S. Citizenship and Immigration Services’ field office in Philadelphia. The organizations say their clients are among thousands nationwide who have had their oath ceremony cancelled or not scheduled due to the pandemic. They argue that federal law allows the courts to expedite the naturalization process during special circumstances. The organizations say the courts should authorize “judicial oath ceremonies or immediate administrative naturalization by USCIS” to assure that all approved candidates for naturalization are sworn in by late September.

National: US voter registration plummets during coronavirus pandemic, challenging both parties | Joey Garrison/USA Today

The registration of new voters dropped dramatically in the USA amid the coronavirus pandemic, challenging efforts of both major political parties to enlist supporters in battleground states before the 2020 election. The number of new voters registered across 11 states in April 2020 decreased by 70% compared with April 2016, according to a report from the nonpartisan Center for Election Innovation & Research released Thursday. Voter registration was well ahead of the 2016 pace in most states through February. It started to decline in March, when states began enforcing stay-at-home orders and social distancing requirements to fight the spread of the COVID-19 virus. By April, registration plummeted as the two most popular methods of signing up voters – third-party at schools and other public venues and “motor voter registration” – virtually halted. The latter refers to a federal law that requires states to give individuals the opportunity to register to vote when they apply for or renew a driver’s license.

National: Beyond Georgia: A Warning for November as States Scramble to Expand Vote-by-Mail | Nick Corasaniti and Michael Wines/The New York Times

The 16 statewide primary elections held during the pandemic reached a glaring nadir on Tuesday as Georgia saw a full-scale meltdown of new voting systems compounded by the state’s rapid expansion of vote-by-mail. But around the country, elections that have been held over the past two months reveal a wildly mixed picture, dominated by different states’ experiences with a huge increase in voting by mail. Over all, turnout in the 15 states and Washington, D.C., which rapidly expanded vote-by-mail over the past few months, remained high, sometimes at near record levels, even as the Democratic presidential primary was all but wrapped. The good news was millions were able to vote safely, without risking their health. The bad news was a host of infrastructure and logistical issues that could have cost thousands their opportunity to vote: ballots lost in the mail; some printed on the wrong paper, with the wrong date or the wrong language; others arriving weeks after they were requested or never arriving at all. But the most definitive lesson for November may be what many have already begun to accept — that there’s an enormous chance many states, including key battlegrounds, will not finish counting on election night. The implications are worrisome in a bitterly divided nation facing what many consider the most consequential election in memory with the loudest voice belonging to an incumbent president who is prone to promoting falsehoods about the electoral system.

National: Why Can’t People Vote Online? Election Security Analysts Weigh In | Chris Iovenko/Observer

The coronavirus pandemic has radically changed the way we live; it is also upending the way we vote. Traditional polling stations, which often have long lines and use crowded indoor spaces and shared voting equipment, pose substantial risks for spreading the disease. Unless there is a massive switch to remote voting, the predicted second wave of COVID-19 this fall could be catastrophically escalated by large in-person turnouts at polling stations. And in turn, efforts to prevent increased infections can be used as an excuse for targeted, discriminatory curtailment of in-person voting, with the outrageous events in Georgia’s primary election on Tuesday a clear example of the potential derailment of democracy. Currently, the most common way to vote remotely is by mail. It’s a proven, convenient, and safe technique; in the 2016 election, 1 in 4 Americans voted by mail. However, President Donald Trump (who himself votes by mail) and his allies have falsely attacked vote-by-mail as wide-open to fraud and an attempt by Democrats to steal the election. The Republican National Committee has launched a lawsuit in California contesting expansion of vote-by-mail and in states controlled by Republicans obstacles to voting by mail will likely be greater than those faced by voters in other states.

National: Georgia’s primary debacle should sound alarm bells for November | Joseph Marks/The Washington Post

Multiple problems plagued voters as they went to the polls yesterday in Georgia’s primary, from hours-long lines, technical disasters and absentee ballots that never arrived, They’re another ominous sign for states and the general election officials trying to run a safe and trustworthy elections this year, though Georgia’s issues were known for some time and are more unique. In fact, the problems in Georgia were especially galling because the seeds of the failure were evident for months to technologists — since long before the novel coronavirus pandemic arrived and multiplied the obstacles facing election officials. They included an overly complex voting system designed to improve security but may have compromised it, a rushed time frame to implement that system and a training program for poll workers that wasn’t up to the task, especially after a slew of new workers replaced elderly people more vulnerable to covid-19. The long lines were exacerbated because election officials failed to send mail-in ballots to many people who requested them during the pandemic and who then showed up to vote in person. There may also have been a surge in voters driven by anger over the police killing of George Floyd in Minneapolis and the nationwide protests that have followed.

National: Georgia Was A Mess. Here’s What Else We Know About The June 9 Elections. | Nathaniel Rakich and Geoffrey Skelley/FiveThirtyEight

Tuesday’s primary elections were once again marred by serious problems at the polls, especially in Georgia. However, in this case, the issues probably had less to do with the COVID-19 pandemic and more to do with the state’s own ineptitude. Almost 90 percent of Georgia’s polling places were open on Tuesday, which is far more than in many other states that have held primaries recently. Only one problem: Georgia’s new voting machines, which were put in place after claims of voter suppression in 2018, didn’t work as well as hoped. There’s no evidence of foul play, but the state was clearly not prepared to hold an election with the new equipment. The state apparently passed on what it deemed the best voting machines available, opting for a cheaper vendor that had never installed so much equipment in such a short period of time. And some polling places in Cobb, DeKalb, Fulton and Gwinnett counties opened late because of problems booting up the machines; some didn’t even receive the necessary equipment until after polls were supposed to open. Poll workers in Columbus also had trouble setting up the ballot printers, which they blamed on lack of training due to the coronavirus. And at one precinct, workers spent an hour trying to figure out how to insert the cards that record votes into the new machines — before figuring out they were putting them in upside-down. There were also numerous reports of voting machines simply not working, which led to some of the longest lines. The problems seemed to be most acute in metro Atlanta, raising fears of problems assuring equal voting access in the general election.

National: Cybersecurity Concerns with Online Voting for 2020 Presidential Election | 2020-06-11 | Security Magazine

A new report by researchers at the Massachusetts Institute of Technology (MIT) and University of Michigan discusses the cybersecurity vulnerabilities associated with OmniBallot, a we-based system for blank ballot delivery, ballot marking and (optionally) online voting. Three states – Delaware, West Virginia and New Jersey – recently announced they would allow certain voters to cast votes using OmniBallot. Researcher Michael A. Specter at MIT and J. Alex Halderman at the University of Michigan reverse engineered the client-side e portion of OmniBallot, as used in Delaware, in order to detail the system’s operation and analyze its security. “We find that OmniBallot uses a simplistic approach to Internet voting that is vulnerable to vote manipulation by malware on the voter’s device and by insiders or other attackers who can compromise Democracy Live, Amazon, Google, or Cloudflare,” the researchers explain. In addition, Democracy Live, which appears to have no privacy policy, receives sensitive personally identifiable information— including the voter’s identity, ballot selections, and browser fingerprint— that could be used to target political ads or disinformation campaigns, the report says.

National: Researchers say online voting tech used in 5 states is fatally flawed | Timothy B. Lee/Ars Technica

OmniBallot is election software that is used by dozens of jurisdictions in the United States. In addition to delivering ballots and helping voters mark them, it includes an option for online voting. At least three states—West Virginia, Delaware, and New Jersey—have used the technology or are planning to do so in an upcoming election. Four local jurisdictions in Oregon and Washington state use the online voting feature as well. But new research from a pair of computer scientists, MIT’s Michael Specter and the University of Michigan’s Alex Halderman, finds that the software has inadequate security protections, creating a serious risk to election integrity. Democracy Live, the company behind OmniBallot, defended its software in an email response to Ars Technica. “The report did not find any technical vulnerabilities in OmniBallot,” wrote Democracy Live CEO Bryan Finney. This is true in a sense—the researchers didn’t find any major bugs in the OmniBallot code. But it also misses the point of their analysis. The security of software not only depends on the software itself but also on the security of the environment on which the system runs. For example, it’s impossible to keep voting software secure if it runs on a computer infected with malware. And millions of PCs in the United States are infected with malware.

National: Some states have embraced online voting. It’s a huge risk. | Eric Geller/Politico

Some West Virginians voting in Tuesday’s primary will be allowed to tap on their phones or laptops instead of heading to the polls. Some in Delaware will get to do the same next month. And the trend may spread into November, as the coronavirus pandemic inspires a search for voting methods that don’t expose people to the deadly disease. But moving elections to the internet poses huge risks that the United States is unprepared to handle — endangering voters’ privacy, the secrecy of the ballot and even the trustworthiness of the results. The problems: The internet is riddled with security flaws that hackers can exploit. So are voters’ computers, smartphones and tablets. And the U.S. has never developed a centralized digital identity system like the one in Estonia, a tiny, digitally savvy nation that has held its elections online since 2005. “Securing the return of voted ballots via the internet while ensuring ballot integrity and maintaining voter privacy is difficult, if not impossible, at this time,” four federal agencies, including the Department of Homeland Security’s cybersecurity arm and the FBI, warned in a bulletin last month. They called it far riskier than mail-in voting, the technology that has drawn the bulk of the political debate during the pandemic. On Sunday, researchers at the Massachusetts Institute of Technology and the University of Michigan revealed numerous security flaws in the product that West Virginia and Delaware are using, saying it “represents a severe risk to election security and could allow attackers to alter election results without detection.”

National: Democracy Live Internet Voting System Can Be Hacked, Researchers Warn | Lucas Ropek /Government Technology

An online voting platform that has seen recent adoption by numerous state and county governments has vulnerabilities that could be exploited to change votes without the knowledge of election officials, a new report alleges. The OmniBallot, which is a product of Seattle-based tech firm Democracy Live, purports to offer “secure, accessible remote balloting for all voters” and is being used by state or county governments in Oregon, Washington, Colorado, Ohio, Florida, New Jersey and West Virginia. The company developed a number of contracts for limited Internet voting pilot programs with states earlier this year, after COVID-19 threatened to disrupt primary elections nationwide. These programs are fairly limited in scope and largely focus on overseas voters and the disabled. However, computer science researchers say what the company really offers is an insecure platform. The recently published report from professors Michael J. Specter, of MIT, and J. Alex Halderman, of the University of Michigan, states that the company “uses a simplistic approach to Internet voting that is vulnerable to vote manipulation by malware on the voter’s device and by insiders or other attackers who can compromise Democracy Live, Amazon, Google, or Cloudflare [its partners].”

National: Major Problems With Voting in Atlanta as 5 States Hold Primaries | Astead W. Herndon and Stephanie Saul/The New York Times

Georgia election officials, poll workers and voters reported major trouble with voting in Atlanta and elsewhere on Tuesday as the state’s primaries got underway, most critically a series of problems with new voting machines that forced many people across the state to wait in long lines and cast provisional ballots. Mayor Keisha Lance Bottoms said on Twitter that voting machines were not working in many parts of the city. Poll workers in several locations were having difficulty operating the machines, which were new models. “If you are in line, PLEASE do not allow your vote to be suppressed,” Ms. Bottoms wrote. “PLEASE stay in line.” Nikema Williams, the chairwoman of the Democratic Party of Georgia, said she had 84 text messages reporting voting problems within 10 minutes of the polls opening at 7 a.m. Ms. Williams, who is a state senator from Atlanta, said that in some locations the voting machines did not work and in at least one other no machines ever arrived. “It’s a hot mess,” Ms. Williams said. “How do you not have a voting machine?”

National: Cyber Command creates new malware sharing portal with National Guard | Mark Pomerleau/The Fifth Domain

A new portal created by U.S. Cyber Command and the National Guard provides a two-way interface for sharing malware and gain better insights into cyber threats facing the nation, according to a June 9 release from the command. This portal, called Cyber 9-Line, allows participating Guard units from their perspective states to quickly share incidents with Cyber Command. Cyber Command’s elite Cyber National Mission Force, which conducts operations aimed at disrupting specific nation state actors, is then able to provide analysis on the malware and offer feedback to the states to help redress the incident. “This level of cooperation and feedback provides local, state and Department on Defense partners with a holistic view of threats occurring in the United States and abroad,” said Brig. Gen. William Hartman, commander of the Cyber National Mission Force and the lead for Cyber Command’s election security group. “Dealing with a significant cyber incident requires a whole-of-government defense, bidirectional lines on communication and data sharing enables the collective effort to defend elections.”

National: Minuscule number of potentially fraudulent ballots in states with universal mail voting undercuts Trump claims about election risks | Elise Viebeck/The Washington Post

As nearly every state expands its capacity for absentee voting this year, President Trump and his GOP allies have attacked the process as prone to rampant fraud. But a Washington Post analysis of data collected by three vote-by-mail states with help from the nonprofit Electronic Registration Information Center (ERIC) found that officials identified just 372 possible cases of double voting or voting on behalf of deceased people out of about 14.6 million votes cast by mail in the 2016 and 2018 general elections, or 0.0025 percent. The figure reflects cases referred to law enforcement agencies in five elections held in Colorado, Oregon and Washington, where all voters proactively receive ballots in the mail for every election. The minuscule rate of potentially fraudulent ballots in those states adds support to assertions by election officials nationwide that with the right safeguards, mail voting is a secure method for conducting elections this year amid the threat of the novel coronavirus — undercutting the president’s claims. Until now, the polarized debate about ballot fraud has largely featured individual anecdotes from around the country of attempts to vote illegally. The voting figures from the three states examined by The Post provide a robust data set to measure the prevalence of possible fraud.

National: Online Voting System Used in Florida and Elsewhere Has Severe Security Flaws, Researchers Find | Kim Zetter/OneZero

New research shows that an internet voting system being used in multiple states this year is vulnerable to hacking, and could allow attackers to alter votes without detection. On Sunday, researchers published a report that details how votes in OmniBallot, a system made by Seattle-based Democracy Live, could be manipulated by malware on the voter’s computer, insiders working for Democracy Live, or external hackers. OmniBallot is currently used in Colorado, Delaware, Florida, Ohio, Oregon, Washington, and West Virginia. Though online voting has typically been used by overseas military and civilian voters, it could expand to more voters in the future due to the pandemic. The researchers found that bad actors could gain access to ballots by compromising Democracy Live’s network or any of the third-party services and infrastructure that the system relies on, including Amazon, Google, and Cloudflare. “At worst, attackers could change election outcomes without detection, and even if there was no attack, officials would have no way to prove that the results were accurate,” the researchers, Michael Specter at the Massachusetts Institute of Technology and J. Alex Halderman of the University of Michigan, write. “No available technology can adequately mitigate these risks, so we urge jurisdictions not to deploy OmniBallot’s online voting features.”

National: Study finds vulnerabilities in online voting tool used by several states | Maggie Miller/The Hill

Researchers with the Massachusetts Institute of Technology (MIT) and the University of Michigan found multiple security vulnerabilities in an online voting tool being used by at least three states. The study evaluated Democracy Live’s OmniBallot, a program that Delaware, New Jersey and West Virginia are using to allow military personnel and voters with disabilities to cast ballots amid the COVID-19 pandemic. The company also has a contract with the Defense Department to provide ballots to military personnel overseas. According to the paper published Sunday, the system opens up the voting process to a range of vulnerabilities that could lead to election interference. “We conclude that using OmniBallot for electronic ballot return represents a severe risk to election security and could allow attackers to alter election results without detection,” the researchers wrote.

National: Hackers Are Already Screwing With the 2020 Election | Eric Lutz/Vanity Fair

Donald Trump has spent months promulgating bad-faith attacks on remote voting, masking his fears that high turnout could favor his Democratic opponent with unfounded claims that it would result in widespread fraud. “WE CAN NEVER LET THIS TRAGEDY BEFALL OUR NATION,” he tweeted of mail-in voting last month. But while the president’s attacks on proposals to ensure votes can be safely cast amid the coronavirus pandemic may be obvious lies, some remote voting measures have raised legitimate concerns about the risk of foreign interference. With COVID-19 almost certain to remain an enormous public health issue through election day in November, several states—including ones led by Republicans—have sought to expand access to mail-in voting. A handful are going even further, experimenting with or ramping up online voting. According to the New York Times, the latter is potentially vulnerable to hacking, with researchers warning that online voting could present opportunities for foreign manipulation. “Online voting raises such severe risks that, even in a time of unrest and pandemic, these jurisdictions are taking a major risk of undermining the legitimacy of their election results,” University of Michigan computer science professor J. Alex Halderman told the Times.

National: DARPA wants hackers to try to crack its new generation of super-secure hardware | Joseph Marks/The Washington Post