Alaska: Hackers Could Decide Who Controls Congress Thanks to Alaska’s Terrible Internet Ballots | The Intercept

When Alaska voters go to the polls tomorrow to help decide whether the U.S. Senate will remain in Democratic control, thousands will do so electronically, using Alaska’s first-in-the-nation internet voting system. And according to the internet security experts, including the former top cybersecurity official for the Department of Homeland Security, that system is a security nightmare that threatens to put control of the U.S. Congress in the hands of foreign or domestic hackers. Any registered Alaska voter can obtain an electronic ballot, mark it on their computers using a web-based interface, save the ballot as a PDF, and return it to their county elections department through what the state calls “a dedicated secure data center behind a layer of redundant firewalls under constant physical and application monitoring to ensure the security of the system, voter privacy, and election integrity.” That sounds great, but even the state acknowledges in an online disclaimer that things could go awry, warning that “when returning the ballot through the secure online voting solution, your are voluntarily waving [sic] your right to a secret ballot and are assuming the risk that a faulty transmission may occur.”

National: If we can buy shoes online, why can’t we vote? | El Paso Inc.

Elections are just around the corner, and yes, there is an app for that. But it won’t vote for you. In a buzzing and ringing world, technology has become an integral part of society, where almost anything can be done with the press of a fingertip. But when voting is involved, things get a little tricky. With more than a million apps in the Google Play store and 900,000 apps in the Apple Store, users can download a variety of voting and polling apps. Several states, including Tennessee and Louisiana, have released voting apps that are free or can be purchased in the Apple and Android store for smartphones. New Hampshire is developing its own app for the midterm elections. Voters can’t cast ballots with these apps, but they can use them to find polling locations, ask for absentee ballots, look at sample ballots and more.

Editorials: Election deception in eastern Ukraine | Bernd Johann/Deutsche Welle

Ukrainians are still scared, terrorized by the war; for that reason alone, the vote should not be considered valid. Just last week, the self-proclaimed leaders of the Donetsk and Luhansk People’s Republics used this excuse to discredit Ukraine’s internationally accepted parliamentary elections. And yet, these hypocritical separatists have just held their own election – right in the middle of a war zone, Kalashnikovs at the ready and with backing from Moscow. These were pseudo-elections, with the winners already fixed well in advance. Pro-Ukrainian parties and candidates were not allowed to take part in the so-called presidential and parliamentary elections. In Donetsk, even pro-Russian communists were barred from the electoral list, despite the city being one of its strongholds. In the Donetsk region, only two parties took part: Donetsk Republic and Free Donbass. Both groups have only one goal in mind: secession from Ukraine. And now they have secured, along with separatist groups in Luhansk, their uncompromising course.

Canada: Manual recount demanded in Leamington after ‘computer glitch’ | CBC News

One of losing candidates in Leamington’s election questions the legitimacy of the vote because of a problem with the computerized tabulation. Robert Tatomir is calling for a review of the results. Leamington hired Scytl, an online voting company, to run its election. Voters cast their ballots online and nowhere elese. Results were expected within half an hour afer polls closed. Instead it took nearly three hours to tabulate results. In a statement Scytl says it detected an “inconsistency” in the naming of certain files, and required additional time to deliver the results to ensure the integrity of the election.

National: Election Apps Are on the Rise, but Online Voting Is Not | Kansas City infoZine

In a buzzing and ringing world, technology has become an integral part of society, where almost anything can be done with the press of a fingertip But when voting is involved, things get a little tricky. With more than a million apps in the Google Play store and 900,000 apps in the Apple Store, users can download a variety of voting and polling apps. Several states, including Tennessee and Louisiana, have released voting apps that are free or can be purchased in the Apple and Android store for smartphones. New Hampshire is developing its own app for the midterm elections. Voters can’t cast ballots with these apps, but they can use them to find polling locations, ask for absentee ballots, look at sample ballots and more. The D.C. Board of Elections released its free app that can answer questions about the Nov. 4 election. “It’s a great trend for elections offices to be putting these kinds of tools out there. Not only does it help voters, but it can also ease some of the burden on calls coming in at busy times for finding polling places,” Pamela Smith, president of Verified Voting, said. Her group provides voting information and wants to make sure technology is adopted carefully.

Canada: Rise of e-voting is inevitable, as is risk of hacking | The Globe and Mail

It took just one typo in one line of code to elect a malevolent computer program mayor of Washington, D.C. In the fall of 2010, the District staged a mock election to test out a new online voting system, and invited hackers to check its security. A team from the University of Michigan took them up on the offer. They quickly found a flaw in the code and broke in. They changed every vote. Master Control Program, the self-aware software that attempts to take over the world in the film Tron, was a runaway write-in candidate for mayor. Skynet, the system that runs a robot army in the Terminator franchise, was elected to Congress. And Bender, the hard-drinking android in the cartoon Futurama, became a member of the school board. Incredibly, it took D.C. officials two days to realize they had been hacked. …The use of Internet voting is exploding. Nearly 100 Ontario municipalities are using it in Monday’s election – including one that will even ditch paper ballots entirely. Proponents contend it is not only more convenient, but more equitable, giving people who cannot get to physical polling stations the same opportunity to vote as everyone else. But the expansion of e-voting has also caused consternation for some security researchers and municipal officials. They worry that entrusting this pillar of democracy to computers is too great a risk, given the potential for software problems – or hackers determined to put beer-swilling robots on the school board.

Canada: Toronto still years from authorizing Internet voting, while Markham introduced digital ballots back in 2003 | National Post

While Toronto residents line up at the polls Monday, neighbours to the north could well choose to vote with their feet up on the couch at home. And it’s not a new option. Residents of Markham have been able to vote online from anywhere with WiFi for the last 11 years. The City of Toronto has taken baby steps in that direction, but don’t expect everyone to be able to do the same in 2018. In July, city council authorized the use of Internet and telephone voting during the advance vote period for the next municipal election. Council had previously decided to implement online voting for people with disabilities for the Oct. 27 election, but the project was cancelled due to time constraints and failure to provide a secure system. “Online voting has been very well received in Markham since we introduced it in 2003,” said Frank Edwards, the city’s elections co-ordinator. “The number of people who vote online has increased to almost 11,000 people.”

National: McAfee partners with Atlantic Council in new study that explores online voting | BiometricUpdate

McAfee has sponsored a new Atlantic Council study that explores how online voting and e-voting could become more integrated in the international political process if particular technologies and processes are implemented to ensure its security. Released at an event at the Atlantic Council, the study found that many of the technologies that are already being used for online financial transactions could also be applied to e-voting and online voting to increase its popularity in the future. Estonia became the first country to hold nationwide elections through an e-voting system in 2005, and since then more than a quarter of the country’s population are voting online. Additionally, e-voting is successfully used in other countries, including Australia, Brazil, France, and India. “Online and e-voting are examples of how a greater emphasis on security could empower a new era in digital democracy,” said Michael DeCesare, president of McAfee.

National: 2 Tech Challenges Preventing Online Voting In US | Information Week

Online elections could be a reality in the United States if the security world can figure out how to ensure both voter anonymity and vote verifiability — two essential but “largely incompatible” goals, according to a new report from the Atlantic Council and Intel Security. The report, “Online Voting: Rewards and Risks,” discusses what challenges must be solved if online voting is ever to take off in the US. “It’s not a matter of if, but of when,” says Gary Davis, Chief Consumer Security Evangelist for Intel Security. “I’ll go out on a limb and say within 10 years” the US will allow online voting for national elections. Why so confident? Davis points at the progress made in banking. Trust between customer and bank is essential to financial transactions, just like trust between citizen and government when casting ballots. Breaches notwithstanding, cryptography, identity management, and other security measures have made secure online banking a reality. Couldn’t the same technology be applied to online voting? Yes, but there is a key difference between banking and voting: anonymity.

California: Paper is Still the Tech of Choice for California Elections | KQED

In a state that that takes pride in being on the technological cutting edge, most California voters will mark paper ballots with ink by Nov. 4, whether they vote at their polling place or by mail. The state’s reliance on paper would have seemed unlikely 15 years ago. California’s then-Secretary of State Bill Jones floated a radical idea in 1999: let people vote online. He convened task force to look into the possibility. “Here we are in the dot com boom,” said David Jefferson, a computer scientist who chaired the task force’s Technology Committee. “It’s an exciting thing. Of course we would all like to vote online. Let’s just figure out how to deliver it to the people of California.” Jefferson now works on one of the world’s fastest computers at Lawrence Livermore National Laboratory. He recalls when the online voting project started to fall apart. “In the course of that study, which took place over several months, doubts began to creep in,” he said. “And then we began to find more and more flaws.”

National: Online voting not ready for worldwide roll-out, study concludes | AFP

Online voting has the potential to boost election participation around the world, but is not yet ready to be widely rolled out due to security risks, a study released Wednesday said. The research, produced by the Atlantic Council think tank and the online protection firm McAfee, concluded that “security will need to be vastly improved” before it becomes feasible to adopt Internet voting on a large scale. According to the study, online voting faces more complex obstacles than electronic commerce, where a customer can be reimbursed in the case of fraud or theft. “Online voting poses a much tougher problem” than e-commerce, the report said. “Lost votes are unacceptable… and unlike paper ballots, electronic votes cannot be ‘rolled back’ or easily recounted.”

National: Paper: Great promise for online voting if security, verification challenges met | FierceGovernmentIT

Without a vast improvement in security, privacy and verification protocols, broad adoption of online voting – which has the potential to make voting easier and more accessible, improve turnout and reduce costs – is unlikely to take off, a new paper argues. For example, if a hacker steals money from a bank, retailer or another company, then the theft can be easily discovered and customers compensated for any loss. “Online voting poses a much tougher problem: lost votes are unacceptable,” writes the paper’s author, Peter Haynes, a nonresident senior fellow at the Atlantic Council’s Brent Scowcroft Center on International Security. “And unlike paper ballots, electronic votes cannot be ‘rolled back’ or easily recounted. The twin goals of anonymity and verifiability within an online voting system are largely incompatible with current technologies,” he adds. The paper (pdf), which was released Oct. 8 and sponsored by Internet security company McAfee, spells out the pitfalls and advantages of online voting.

Canada: Latest Internet voting reports show failures across the board | Al Jazeera

Internet voting, a technology often cited as a solution to the United States’ problematic voting machines, received failing security and accessibility grades in the latest in-depth audit conducted by the City of Toronto. Two of the three vendors audited by the city currently have contracts with over a dozen U.S. jurisdictions for similar technologies. The accessibility report, prepared by researchers at the Inclusive Design Research Centre at OCAD University, and the security report, prepared by researchers at Concordia and Western universities, were obtained by Al Jazeera America through a Freedom of Information Act request. … The reports highlight the difficulty in creating a voting system that isn’t more susceptible to corruption than existing voting technology and that is easy enough to use for voters with a variety of personal computer setups, including those with disabilities who often use alternatives to traditional mice, keyboards and screens. …  “It’s clear from the report for Toronto that the systems being considered don’t meet the minimum accessibility standards required,” said Barbara Simons, a board member of Verified Voting, and co-author of the book “Broken Ballots: Will your Vote Count?” who also obtained the reports through a Freedom of Information request.

United Kingdom: Tick or click: Why electronic voting is unlikely in 2015 | Computer Weekly

With the 2015 UK general election approaching and the increasingly digital nature of society, electronic voting is once again being promoted as the next stage in the evolution of democracy. But despite the ease and cost-saving opportunities, security questions remain. In a speech to the University College London Constitution Unit in March 2014, Jenny Watson, chair of the election watchdog the Electoral Commission, revealed the commission was examining a range of ways to make voting more accessible, including “radical options such as e-voting”. … The UK is not the only country to conduct research into electronic voting. In 2005, The Pentagon in America decided to drop their proposed online voting system which would have allowed overseas military personnel the opportunity to vote in the elections later that year. The reason cited by the deputy secretary of defence Paul Wolfowitz was the inability to ensure the legitimacy of votes. Despite this, the US government continues to employ touchscreen voting machines in their elections.

National: Privacy advocates sue Pentagon over Internet voting test results | The Washington Post

Privacy advocates, worried that the Defense Department is sinking millions of dollars into unproven online voting systems, are suing the Pentagon for the release of long-promised test results on whether Internet-based voting is safe. The subtext of the lawsuit is that after spending millions on online voting experiments — in 2010 alone, the Defense Department’s Federal Voting Assistance Program received $9 million from Congress to design and test Internet-based voting — privacy advocates worry that online voting could spread in the United States without proper vetting. The Electronic Privacy Information Center, a D.C.-based advocacy group, filed a lawsuit last month against the Pentagon, under the Freedom of Information Act, to compel the release of the results of the department’s test of its online voting system. Ginger McCall is the director of EPIC’s open government project. “Voting is an integral part of our democratic system,” she said, “and it is imperative that the public have information about whether or not e-voting systems are really secure and reliable before they are used or more money is spent on their acquisition.”

National: Three years later, Pentagon unit still hides Internet voting test results | McClatchy

A nonprofit watchdog group is suing an obscure Defense Department unit over its failure for three years to disclose the results of testing on the security safeguards of Internet voting systems that are increasingly being used to cast absentee ballots. The Pentagon unit, the Federal Voting Assistance Program, has effectively bankrolled many states’ shift to online voting, disbursing tens of millions of dollars in grants for the purchase of equipment that includes Internet balloting options. Its actions have drawn consternation from cyber experts, who have warned for years that Internet voting is an easy target for hackers who could tamper with or even fix election results. The government’s premier technology testing agency also has refused to endorse these systems. Now, on the eve of another federal election in which at least 31 states plan to use some form of online voting, the Electronic Privacy Information Center is pressing a Freedom of Information Act lawsuit demanding disclosure of the test results so it can disseminate the information nationwide.

Philippines: Congress pressed for law on online voting for overseas Pinoys | GMA News

The Commission of Elections (Comelec) on Wednesday urged lawmakers to pass a law allowing Filipino voters abroad to cast their ballots online in order to encourage them to participate in the 2016 local and national elections. Comelec chairman Sixto Brillantes Jr. said the poll body will need Congress’ approval to implement an online voting system since Republic Act No. 10590 or the Overseas Absentee Voting Act of 2013 only allows Filipino voters abroad to cast their votes either through mail or at the Philippine embassy or consulate. “We’re proposing [voting through] e-mail or the Internet… but this will require the approval of Congress. The system now is you have to go to the consulate or the embassy kaya kakakunti ang bumoboto,” he said.

Canada: Progressive Conservative executive says some party members tried to cheat electronic voting system | Calgary Herald

Voting in the PC leadership race proceeded more smoothly Saturday after a rocky start Friday, but some party members tried to cheat the electronic voting process, says a top party official. Kelley Charlebois, executive director of the Progressive Conservative Association of Alberta, declined to elaborate on the attempts to cheat in the race for Alberta’s next premier, but he said Saturday: “We caught them and they won’t be voting.” In addition to the unsuccessful attempts to cheat, a number of party members attempted to vote twice, Charlebois said. “We enabled them to do that so in that case we don’t consider it cheating,” he said. “We’re simply going to disallow the second vote they cast.” Charlebois said party officials didn’t detect anyone voting on behalf of others — which is not permitted — but the party is continuing to monitor phone lines and IP addresses to ensure that is not occurring. The three candidates — Jim Prentice, Thomas Lukaszuk and Ric McIver — declined to comment on the revelations of cheating, but Lukaszuk said he was disappointed about all the problems with the electronic voting process.

Canada: Hacking of online vote thwarted | Calgary Herald

Police may be called in to probe the suspected hacking of the online voting system used to elect Jim Prentice as Alberta Tory party leader and premier-designate, a senior party official said Sunday. PC party executive director Kelley Charlebois said it appears there were multiple attempts to infiltrate the website during the 36 hours of voting that ended at 6 p.m. Saturday. “Attempts were made throughout the voting process to hack into the system,” Charlebois said in an interview. He said there appear to have been several cyberattacks on the website and possibly the telephone voting system. “I can’t say if it was organizations or individuals, I just know that different attempts were made through different IP addresses.” Charlebois stressed the attempts to infiltrate the system were thwarted by internal security systems. He said the party is still waiting for a full report from the company hired to conduct the online vote and will call in police to investigate once the attacks are confirmed. “We certainly feel it is our responsibility — if we suspect the law has been broken — that we contact the appropriate authorities,” he said. “We haven’t reached a point yet where we have confirmed all the information.”

Maryland: Judge orders Maryland to adopt online voting tool | Baltimore Sun

A federal judge in Baltimore ordered Maryland election officials to adopt an online absentee voting tool in time for this year’s general election, a move designed to make it easier for disabled voters to cast ballots. Opponents of the system — including computer security experts — have warned it could lead to voter fraud or privacy breaches. The tool, developed in house by the State Board of Elections, allows disabled people to receive their ballot over the internet and fill it out on a computer. The completed ballot must be printed and mailed to an elections board. Attorney Jessica Weber, who represents a group of voters as well as the National Federation of the Blind, said during the trial that her clients are currently “being denied meaningful access to voting.” In a 33-page ruling issued Thursday, Judge Richard D. Bennett agreed and ordered the state to adopt the system. “This Court finds that Plaintiffs have been denied meaningful access to the State’s absentee ballot voting program as mandated by the Americans with Disabilities Act and the Rehabilitation Act,” he wrote. The ruling applies only to this year’s election.

Canada: Registration issues cropping up in Alberta Progressive Conservative leadership race | Metro

With just days to go in the Progressive Conservative leadership race, candidates are raising that the new online voting system may mean not everyone gets a chance to cast a ballot. The party is using an online system and verifying that voters are eligible to cast a ballot by cross-referencing members with the Elections Alberta voters’ list. Ric McIver said his team is working hard to fix issues where potential supporters didn’t align with the list.  “We have had a lot of rejections for a whole variety of reasons and we have just been working through them one file at a time,” he said.

India: Chief Election Commissioner Says Secrecy in Online Vote Not Possible | The New Indian Express

Chief Election Commissioner, V S Sampath, said secrecy cannot be maintained in the online voting system. He was speaking to reporters on the sidelines of the south zone symposium on ‘Best Electoral Practices’, organised by the ECI, here on Friday. Sampath said the government of India has now extended the voting rights to NRIs and a committee has been formed to examine the feasibility of using online voting and postal ballot for them to register their votes. Sounding a caution about online voting, he said, it should be approached carefully. “In the present system, each polling booth is sanitised so that the voters can vote in an atmosphere without fear. But it is possible that the voters using the online voting system may be threatened.”

Latvia: No e-voting for Latvia any time soon | LSM

Arnis Cimdars, chairman of Latvia’s Central Electoral Commission (CVK) claimed Wednesday that electronic voting was not secure enough to allow it to be used in Latvian elections – despite the fact that neighboring Estonia has used e-voting successfully since 2005. “There it happens. They accept it,” Cimdars said, noting different mindsets in the two countries. Speaking on LTV’s Rita Panorama morning news show, Cimdars said he thought e-voting would happen “sooner or later” but that debates about its introduction would continue for the foreseeable future. “According to our experts, it is not possible for us with current technology. We have some mental reservations about this method of voting, too… at the moment it is not possible to ensure the anonymity and security of this method of voting, so I don’t think it will happen very soon,” he added.

Maryland: On-line voting battle pits the blind vs. the blind | McClatchy DC

Maryland’s Board of Elections fell one vote short last year of the super-majority needed to inch the state toward online on-line voting, despite cyber experts’ warnings that such balloting could easily be hacked, with votes even switched to other candidates. Now, three months before this fall’s elections, the issue has morphed into a legal battle pitting the blind vs. the blind. It’s a fight with plenty of intrigue behind it and nationwide implications in the debate over whether cyber security is ready for electronic voting. The National Federation of the Blind Inc., which touts itself as the recognized voice of blind Americans and their families, filed a federal court suit in May seeking to compel the state elections board to make its newly developed online ballot-marking system available so that all disabled people could cast absentee ballots via the internet this fall. It’s a suit that likely wasn’t unwelcome to the three board members who voted to implement the system and to state Election Director Linda Lamone, a big advocate of electronic voting. But over the weekend, the American Council of the Blind of Maryland, along with three blind residents and two nonprofit groups that have fought internet voting, intervened in the case filed in Baltimore. They contend that the board’s online balloting tool is both flawed and insecure.

New Zealand: Working group nixes drive for online voting in 2016 | ZDNet

A working party has recommended online voting trials be conducted in New Zealand local body elections in 2016, but concluded broad availability is “not feasible” for that election round. The working party, established last September, was a a response to calls from the Justice and Electoral Committee of Parliament, some local authorities, Local Government New Zealand and the New Zealand Society of Local Government Managers to conduct a trial of online voting for local authority elections. “We do not think that broad implementation of an online voting option in the 2016 local elections is feasible.” It was asked to consider the options, costs, and security issues involved in online voting and the feasibility of implementing it for New Zealand’s 2016 local elections. The working group decided a broad roll out is not feasible as the 2016 election will be the first real opportunity to conduct a trial of what could be relatively untested technology.

Philippines: Comelec to hold pilot tests on online voting | Inquirer

The Commission on Elections (Comelec) has announced its plan to pilot-test a scheme that will allow Filipinos abroad to cast their ballots through the Internet during the 2016 elections. According to Commissioner Lucenito Tagle, chair of the Office for Overseas Voting, the commission was already looking at conducting the pilot test in areas in the Americas, the Middle East, Hong Kong and Singapore. The move was in response to the Senate’s call for the election body to find a technology that will allow overseas absentee voting using the Internet. “We are looking at these areas for pilot testing in 2016 [as] they have the adequate technology, Internet connection and large overseas Filipino concentration, which are needed for pilot-testing,” Tagle told reporters in an interview.

Utah: Improving voter turnout still a tough nut to crack | Deseret News

Would the ability to vote in your pajamas, on a smart phone, make you a better participant in the political process? Would it make you care more? Utah’s lieutenant governor has convened a committee to study the idea of making the state a pioneer in Internet voting. They might want to look to Norway, which tried such a thing — then, according to a headline writer at npr.org, did a “Ctrl+Alt+Delete” on the whole thing a few weeks ago. Utah Director of Elections Mark Thomas told the Deseret News last week that the biggest hurdle to overcome is security. Norwegian officials would agree. They couldn’t do it. NPR quotes Lawrence Livermore National Laboratory computer scientist David Jefferson as saying, “There is no way to guarantee that the security, privacy and transparency requirements for elections can all be met with any practical technology in the foreseeable future.”

Australia: Push to trial “bring-your-own-device’’ i-vote at federal poll | The Australian

The Communications Department has told the federal parliamentary committee examining electoral matters that it backs a limited trial of electronic voting. The department suggests using the myGov portal — a secure website used by about three million Centrelink, child support and Medicare customers — for any trial. Abul Rizvi, the department’s deputy secretary for the digital economy, yesterday told the Joint Standing Committee on Electoral Matters it was inevitable Australia would embrace online voting. … He said computer equipment was now cheaper and electronic voting at polling stations could be done through a “bring-your-own-device’’ model. “You are still voting physically at a physical polling place but are voting using an electronic device that is connected to a local system using your own device that you’ve brought in,’’ Mr Rizvi said. “Yes there are security issues … but those can be addressed, and that I would suggest reduces your costs quite considerably.’’

India: Election Commission may opt for Gujarat online model for NRI voting | The Economic Times

Non-resident Indians (NRIs) keen on voting in this year’s general election could only do so if they had registered back home and were present in the constituency on the day of balloting. This meant that few could be part of the exercise. The Election Commission of India is now examining the Gujarat model of local body elections as it looks for options to enable NRIs to cast their vote from overseas. Gujarat implemented the country’s first internet voting initiative during the Gandhinagar municipal corporation elections in April 2011. A committee constituted by the poll panel to explore how best NRIs can participate in elections is studying the model.

Utah: State committee studying feasibility of extending online voting to more Utahns | Deseret News

Utahns file their taxes, bank and shop online all the time, says state Sen. Curt Bramble, R-Provo, so why shouldn’t they also be able to vote on their laptops? “It seems reasonable that we have a discussion — a serious discussion — about how you would set up a secure, auditable system to vote online,” Bramble said. “Personally, I’m going to be pushing the envelope.” But Bramble, appointed to a new committee put together by Lt. Gov. Spencer Cox to study online voting, said he’ll wait to see what members come up with by the end of the year before deciding whether to introduce legislation next session. … Another member of the new committee, Salt Lake County Clerk Sherrie Swensen, also questions whether Utahns will be voting online anytime soon. “I hope that sometime in the future it will be something that happens,” Swensen said. “I admire the lieutenant governor’s office for wanting to explore this and be progressive, but I think there’s a lot to overcome before we get to that point.”