National: Spooked by election hacking, states are moving to paper ballots | Cyberscoop

Paper ballots may seem like an antiquated voting practice, but hacking fears are now pushing an increasing number of states toward a return to the basics. State legislatures and election directors are heeding warnings from Washington that hackers may tamper with electronic voting systems in the 2018 midterm elections. The U.S. intelligence community has said that Russian President Vladimir Putin launched a campaign to interfere with the 2016 presidential election and that the Kremlin will try to do so again. On the national level, lawmakers have made several attempts to push legislation aiming to strengthen election cybersecurity through grants to upgrade equipment and to increase cooperation between the federal government and lower jurisdictions. So far, no such legislation has passed either chamber of Congress. Amid all this national attention, a number of states have started to act on their own bolster the integrity of elections they run. With these states, the focus has been on doing away with direct-recording electronic voting machines (DREs) that don’t produce a paper record.

National: How the U.S. can prepare for a major election hack | The Washington Post

Before the 2016 election, at least 21 U.S. states’ registration databases or websites were targeted by hackers and seven states were successfully “compromised,” although there’s no evidence that votes were altered. As U.S. intelligence agencies recently made clear, the risk to voting systems continues in 2018. Foreign actors could target registration records, electronic voting machines or vote tabulations. Because American elections are controlled by individual states that employ a wide array of voting systems, a localized breach is especially feasible. Amplifying the danger is that many Americans will react to vote manipulation somewhere in the United States with doubts about election results everywhere. Even if this interference does not actually change an election outcome, people may use any breach to cast doubt on outcomes they don’t want to believe. This havoc is precisely what Russia wants.

Editorials: We can stop Russian election hackers in 2018 | Duncan Buell, Richard DeMillo and Candice Hoke/USA Today

The first ballots of the 2018 mid-term elections will soon be cast, but many Americans will exercise this constitutional right without much confidence that their votes will be fairly and securely counted. Partisanship in Congress and bureaucratic delays have left voting even more vulnerable to the attacks that top intelligence officials say will accelerate in 2018. Meanwhile, irrefutable evidence has revealed that Russia engaged in a multifaceted attack on the 2016 election through information warfare, and that hackers also scanned or penetrated state election infrastructure in ways that could lead to manipulation of voter registration data — and possibly change vote totals in 2018. We propose two stopgap measures that can be immediately implemented without waiting for funding or new legislation. Cybersecurity experts have repeatedly warned that none of our current voting technologies was designed to withstand the cyberattacks expected in the coming months. This national emergency calls for Americans to act immediately before the voters’ faith in democratic elections is severely undermined. Experts agree there’s time to contain major threats to this year’s elections, but we must rapidly convert from paperless touch-screen voting machines to paper ballots, and upgrade states’ and counties’ verification practices to conduct public post-election ballot audits before local election boards certify the 2018 elections. A post-election audit involves simply checking the computer-generated tabulations against paper ballots to be sure the machine hasn’t been compromised.  

Cybersecurity experts have repeatedly warned that none of our current voting technologies was designed to withstand the cyberattacks expected in the coming months. This national emergency calls for Americans to act immediately before the voters’ faith in democratic elections is severely undermined. Experts agree there’s time to contain major threats to this year’s elections, but we must rapidly convert from paperless touch-screen voting machines to paper ballots, and upgrade states’ and counties’ verification practices to conduct public post-election ballot audits before local election boards certify the 2018 elections. A post-election audit involves simply checking the computer-generated tabulations against paper ballots to be sure the machine hasn’t been compromised.

Arkansas: Judge considers request to block voter ID law | Associated Press

An attorney for a Little Rock man challenging Arkansas’ voter ID law called the measure an end run around a court decision striking down a nearly identical state law four years ago, while attorneys for the state called the provision a proper way to verify a voter’s registration. Pulaski County Circuit Judge Alice Gray didn’t say when she would rule on a request to block the law’s enforcement in Arkansas’ May 22 primary after a day of testimony and arguments from lawyers for the state and the voter challenging the measure, Barry Haas of Little Rock. Early voting for the primary is set to begin May 7.

Georgia: Bill to replace Georgia’s electronic voting machines advances | Atlanta Journal-Constitution

A proposal to replace Georgia’s electronic voting machines passed a subcommittee Tuesday despite concerns that the legislation doesn’t go far enough to safeguard elections. The measure calls for the state to begin using a new voting system with paper ballots in time for the 2020 presidential election. State lawmakers say the state’s all-digital election system, in use since 2002, is outdated and needs to be scrapped after tech experts exposed security vulnerabilities last year in the same type of voting machines as those used in Georgia. … Critics of the voting legislation say the touch-screen machines, which the state tested during a Conyers election in November, are vulnerable to tampering because they use bar codes for tabulation purposes. Voters wouldn’t be able to tell whether the bar codes matched the candidates they chose, which would also be printed on the ballot.

North Carolina: Cooper to Appoint North Carolina Elections Board This Week | Associated Press

North Carolina Gov. Roy Cooper will appoint members to a combined state elections and ethics board this week, even while he continues to fight in court over the legality of the board’s latest iteration. Cooper’s office announced the decision Wednesday, two days before a new law approved by Republicans last month creating a nine-member panel is supposed to take effect. The Democratic governor has sued GOP legislative leaders three times — the latest lawsuit coming Tuesday — over legislation creating different versions of the joint board. The first lawsuit was filed in December 2016, just before Cooper got sworn in. A state board administering elections and campaign finance laws has been vacant since last June while the constitutionality of the combination board has been litigated. While election board staff performed their duties, policy decisions got delayed and contested municipal election results had to be settled by judges.

Pennsylvania: Special Election shows need for U.S. voting machine upgrades: experts | Reuters

Pennsylvania’s tight congressional special election underscores the need for states to replace aging voting machines and use paper ballots as backups to ensure the integrity of vote counts ahead of pivotal November U.S. midterm elections, election security advocates said on Wednesday. Democrat Conor Lamb led Republican Rick Saccone by only a few hundred votes out of nearly 230,000 cast in the closely watched U.S. House of Representatives election on Tuesday in western Pennsylvania. With many states using antiquated voting machines and with concerns about potential interference in U.S. elections by Russia or other actors, there is rising concern among experts about the need to safeguard American balloting.

Pennsylvania: The GOP Couldn’t Recount The Votes In Pennsylvania Even If It Wanted. There’s No Paper Trail To Audit. | Buzzfeed

Republican Rick Saccone still hasn’t conceded defeat in Pennsylvania’s 18th Congressional District. But if he calls for a recount, his state’s use of older electronic voting machines guarantees that a real audit will be practically impossible. That’s because the four counties that make up the 18th exclusively use touchscreen voting machines manufactured by either Premiere or ES&S, and use no models that create a paper receipt, said Marian Schneider, Pennsylvania’s former deputy secretary for elections and administration. “Selections are written to computer memory. There’s no other record of the voter’s selection,” Schneider told BuzzFeed News. “Two different brands with the same kind of interface.” Any recount of such machines wouldn’t produce a formal audit. Instead, it would simply ask a given computer to repeat a tally it had already given, akin to downloading an email attachment and then downloading it a second time, overwriting the first file.

Egypt: The opposition is calling for a boycott of this month’s election. Will it work? | The Washington Post

Later this month, Egyptians will go to the polls to reelect Abdel Fatah al-Sissi to his second term as president. An all too familiar scenario is playing out: Sissi is the only viable candidate. His sole challenger, Mousa Mostafa Mousa, is the head of a party that had endorsed Sissi before entering its own candidate at the last minute. Other potential challengers were threatened, intimidated or arrested into withdrawing. The regime’s harassment and deterrence of potential opposition candidates do not always lead to calls for boycotting. This time, however, 150 opposition figures and seven political parties came together to denounce the elections as a farce and call for a boycott of the upcoming polls. As with most boycott campaigns, the opposition’s decision has roused its share of detractors who dismiss the strategy as ineffective and even a threat to Egypt’s security. The situation in Egypt raises a critical question: Do boycotts work?

Russia: Presidential Vote in Russia Sure to Give Putin 6 More Years | The New York Times

Russians went to the polls on Sunday to vote in what was more a referendum on giving President Vladimir V. Putin another six years in office than an actual competitive race. With cold winter temperatures covering the vast, continental country, more than 110 million people were eligible to vote from the distant Kamchatka peninsula in the Far East to the European enclave of Kaliningrad, where the last polls were due to close at 8 p.m. on Sunday. Gone were the Soviet days when there was just one name on the ballot and the winner habitually harvested 99 percent of the vote. The spirit was similar, however, with pictures of Mr. Putin and his campaign slogan, “Strong president, strong Russia,” blanketing the country.

National: 1 State? 7 States? Uncertainty Persists About Russian Cyberattacks On U.S. Election | NPR

Even as Americans begin voting in the earliest 2018 midterm primaries, the public still doesn’t have solid answers about what happened to its election systems in 2016. Instead it has conflicting accounts and official denials. The latest example this week came from the Department of Homeland Security, which slammed a report by NBC News that said the intelligence community had evidence in early 2017 to believe Russian operatives compromised more state voter systems in 2016 than previously known. DHS said NBC’s story was “factually inaccurate and misleading” and stood by its previous assessment, that just one state, Illinois, had its system breached. NBC then slammed that response in a subsequent defense of its story, which quoted a former cyber-expert from the Obama administration, Michael Daniel, who said that when he was in the White House, it believed seven states had been compromised. What’s the real story? How serious were the Russian cyberattacks across the United States?

National: White House Has Given No Orders to Counter Russian Meddling, N.S.A. Chief Says | The New York Times

Faced with unrelenting interference in its election systems, the United States has not forced Russia to pay enough of a price to persuade President Vladimir V. Putin to stop meddling, a senior American intelligence official said on Tuesday. Adm. Michael S. Rogers, the departing head of the National Security Agency and the military’s Cyber Command, said that he was using the authorities he had to combat the Russian attacks. But under questioning during testimony before the Senate Armed Services Committee, he acknowledged that the White House had not asked his agencies — the main American spy and defense arms charged with conducting cyberoperations — to find ways to counter Moscow, or granted them new authorities to do so. “President Putin has clearly come to the conclusion that there’s little price to pay and that therefore ‘I can continue this activity,’” said Admiral Rogers, who is set to retire in April. “Clearly what we have done hasn’t been enough.”

Georgia: Senate votes to switch elections to paper ballots | Atlanta Journal-Constitution

The Georgia Senate on Wednesday voted to approve a measure that would move the state from using digital to paper ballots during the state’s elections. The measure, Senate Bill 403, calls for the state to scrap its 16-year-old touch-screen voting system and replace it with a paper-based system. “This looks at replacing voting machines so that every single voter in our state’s vote that’s cast will be preserved,” said state Sen. Bruce Thompson, R-White, the bill’s sponsor. Currently, Georgia’s 27,000 touch screens leave no paper record of how people voted, making it impossible to audit elections for accuracy or to conduct verifiable recounts, lawmakers said. Legislators lately have begun to favor paper ballots because they can’t be hacked. 

Kansas: Kobach voting rights trial has national implications | Associated Press

A conservative Republican who has supported President Donald Trump’s unsubstantiated claim that millions of illegal votes cost Trump the popular vote in 2016 will have to prove Kansas has a problem with voter fraud if he’s to win a legal challenge to voter registration requirements he’s championed. The case headed to trial starting Tuesday has national implications for voting rights as Republicans pursue laws they say are aimed at preventing voter fraud but that critics contend disenfranchise minorities and college students who tend to vote Democratic and who may not have such documentation readily available. Kansas Secretary of State Kris Kobach, who is running for governor and was part of Trump’s now-disbanded commission on voter fraud , has long championed such laws and is defending a Kansas requirement that people present documentary proof of citizenship — such as a birth certificate, naturalization papers or a passport — when they register to vote.

Legislation: Lawmakers offer counties $114.5 million for voting machines | The Columbus Dispatch

Counties would get nearly $115 million in state money to replace aging voting machines in time for the 2019 election under a bill expected to pass the legislature this spring. Total funding largely matches the estimate of what it would cost to replace all voting machines in Ohio with the lowest cost paper-ballot machines known as optical scan. However, the bill by Sen. Frank LaRose, R-Hudson, allows counties to choose their own machines, whether they involve paper, more-expensive touch-screen machines known as DREs, or hybrid models. Franklin County could receive up to $13 million from the bill. The county Board of Elections plans to pick new voting machines by August, said spokesman Aaron Sellers. The board has estimated that new machines would cost $16 million to $30 million, depending on the type chosen. Franklin County has 4,735 voting machines now, and the board estimates it would purchase close to 5,000 if it goes with a similar system, Sellers said.

Pennsylvania: U.S. Supreme Court asks for responses to GOP bid to block new congressional map | Philadelphia Inquirer

U.S. Supreme Court Justice Samuel A. Alito Jr. on Wednesday asked participants in a key Pennsylvania gerrymandering case to respond to a request from top Republican lawmakers that the nation’s highest court step in and block the new congressional map. State Senate President Pro Tempore Joe Scarnati (R., Jefferson) and House Speaker Mike Turzai (R., Allegheny) have asked the U.S. Supreme Court to stay the Pennsylvania Supreme Court’s ruling overturning the previous congressional map and imposing a new one. Alito gave participants in the case until 3 p.m. Monday to file responses to that request. He made a similar move a few weeks ago after Scarnati and Turzai filed essentially the same request to step in and stop the Pennsylvania Supreme Court from overturning the state’s congressional map drawn in 2011. In that first request, Alito also sought responses from the parties in the case before ultimately denying the request without comment and without referring it to the whole court.

Virginia: State Supreme Court Weighs ‘Compactness’ of Election Districts | Courthouse News

Lawyers for the Commonwealth of Virginia appeared before the state Supreme Court Thursday arguing that legislators are legally allowed to create electoral district maps — even if the districts are not as compact as critics would hope. The case originated with a challenge to state House and Senate district maps that were drawn in 2011 and 2012. The focus in the underlying lawsuit was on 11 districts that One Virginia 2021, a bipartisan fair elections group, claims are unwieldy and fail to comport with the notion of compactness enshrined in the state constitution.

Wisconsin: Governor Scott Walker sued for not calling special elections | Reuters

An pro-Democratic redistricting group headed by former U.S. Attorney General Eric Holder sued Wisconsin’s Republican governor, Scott Walker, on Monday for declining to hold special elections for two vacant seats in the state legislature. The National Democratic Redistricting Committee alleged in the lawsuit filed in Dane County Circuit Court that Walker was violating the law and denying Wisconsin voters representation by leaving the elected offices unfilled until 2019. The seats, one in the state Assembly and the other in the state Senate, became vacant in December when two Republican lawmakers resigned to accept jobs in Walker’s administration.

Finland: Security fears delay roll-out of national e-voting system in Finland | Computer Weekly

Security concerns have re-emerged to further frustrate the Finnish government’s plans to launch a national e-voting system. But the country’s Ministry of Justice (MoJ) working group, which is leading the project, insists the venture is delayed rather than mothballed. Finland’s online e-voting project will now enter a problem-solving phase to identify advanced, effective and best practice solutions to protect a future e-voting system. … The MoJ estimates that the cost of launching and operating an e-voting system, based on a 15-year timespan, will be about €32m. But the risks attached to launching online voting in Finland currently outweigh its benefits, said Johanna Suurpää, chair of the MoJ’s e-voting working group (eVWG). “Our present position is that online voting should not be introduced in general elections as the risks are greater than the benefits,” said Suurpää. In its project feasibility report presented to the MoJ, the eVWG conceded that although a Finnish online e-voting system is technically possible, the technology available is not yet at a “sufficiently high level to meet all the requirements”.

Italy: Italy Is Having an Election. Most Italians Are Too Depressed to Care. | The New York Times

Like millions of young Italians, Elio Vagali confronts career options that range from minimal to nonexistent. At 29, he has cleaned homes, picked tangerines and lifted rocks — nearly always off the books, without the protections of a full-time contract. In a measure of his desperation, his dream employer is the dilapidated steel mill that dominates life in this fading city on the Ionian Sea. The complex has been blamed for a cancer cluster in the surrounding community. Yet to Mr. Vagali, it beckons like a portal to another life, one that means moving out of his parents’ apartment. Except the plant isn’t hiring. “You either know somebody, or you don’t get in,” he said bitterly. “There’s nothing here for me.” All of which helps explain why Mr. Vagali and much of the Italian electorate is either indifferent or contemptuous of the national election campaign that, on March 4, will determine who runs Europe’s fourth-largest economy.

Legislation: Election Security a High Priority – Until It Comes to Paying for New Voting Machines | ProPublica

“Today’s voting systems are not going to last 70 years, they’re going to last 10,” says U.S. Elections Assistance Commission Commissioner Matt Masterson. While previous generations of voting equipment, lever machines and punch cards, had hardware that could be relied on for decades, today’s technology becomes outdated a lot faster. While election equipment needs to be replaced more often, election administration remains a low funding priority, a ProPublica review of state and local budgets nationwide found. In 2017, Utah appropriated $275,000 to aid counties in purchasing new voting equipment, but $500,000 to help sponsor the Sundance Film Festival. A few years earlier, Missouri allocated $2 million in grants to localities to replace voting equipment the state, while increasing the Division of Tourism budget by $10 million to $24 million.

National: The Myth of the Hacker-Proof Voting Machine | The New York Times

In 2011, the election board in Pennsylvania’s Venango County — a largely rural county in the northwest part of the state — asked David A. Eckhardt, a computer science professor at Carnegie Mellon University, to examine its voting systems. In municipal and state primaries that year, a few voters had reported problems with machines ‘‘flipping’’ votes; that is, when these voters touched the screen to choose a candidate, the screen showed a different candidate selected. Errors like this are especially troubling in counties like Venango, which uses touch-screen voting machines that have no backup paper trail; once a voter casts a digital ballot, if the machine misrecords the vote because of error or maliciousness, there’s little chance the mistake will be detected. Eckhardt and his colleagues concluded that the problem with the machines, made by Election Systems & Software (ES&S), was likely a simple calibration error. But the experts were alarmed by something else they discovered. Examining the election-management computer at the county’s office — the machine used to tally official election results and, in many counties, to program voting machines — they found that remote-access software had been installed on it.

National: Ryan move to replace election agency leader stirs outcry | Politico

House Speaker Paul Ryan faced Democratic criticism Thursday after choosing not to renew the term of a federal agency head who has helped lead the charge on securing elections from hackers. Matthew Masterson, chairman of the Election Assistance Commission, will depart once the Senate confirms a successor, three people familiar with the situation told POLITICO. His four-year term as a commissioner expired in December, but he has stayed while Ryan contemplated whom to recommend to President Donald Trump as a nominee for the seat. Ryan has decided that Masterson won’t be on the list. Another commissioner was already scheduled to take the chairman’s slot on Saturday, but Masterson could have remained as a commissioner if he were renominated. … “This is insanity,” said Joseph Lorenzo Hall, an election security expert who is the chief technologist at the Center for Democracy & Technology. “Matt is extremely capable and has been a champion of more secure and better elections the entire time he’s been on the EAC.”

Voting Blogs: Are voting-machine modems truly divorced from the Internet? | Andrew Appel/Freedom to Tinker

The ES&S model DS200 optical-scan voting machine has a cell-phone modem that it uses to upload election-night results from the voting machine to the “county central” canvassing computer.  We know it’s a bad idea to connect voting machines (and canvassing computers) to the Internet, because this allows their vulnerabilities to be exploited by hackers anywhere in the world.  (In fact, a judge in New Jersey ruled in 2009 that the state must not connect its voting machines and canvassing computers to the internet, for that very reason.)  So the question is, does DS200’s cell-phone modem, in effect, connect the voting machine to the Internet? The vendor (ES&S) and the counties that bought the machine say, “no, it’s an analog modem.”  That’s not true; it appears to be a Multitech MTSMC-C2-N3-R.1 (Verizon C2 series modem), a fairly complex digital device.  But maybe what they mean is “it’s just a phone call, not really the Internet.”  So let’s review how phone calls work.

Alaska: To boost election security, Alaska suspends electronic absentee program | Juneau Empire

The Alaska Division of Elections has announced it will suspend a little-used absentee voting program in an effort to improve the security of the state’s elections. In a note released last week, the division said it had received a “B” grade for election security in a recent study conducted by the Center for American Progress, a progressive public policy group. “B” was the highest grade awarded to any state in the country; 11 states received the ranking, the report indicated. Alaska’s report drew attention to the way the state handles absentee ballots submitted from overseas.

Georgia: Kemp faces new voter security questions amid Russia probe | Atlanta Journal-Constitution

As evidence mounts that Russia is again trying to interfere in U.S. votes, Georgia’s top elections official faces new scrutiny of his oversight of the state’s voting system. Secretary of State Brian Kemp, a Republican candidate for governor, tells voters the state’s elections system is secure and that he doesn’t need additional help from Washington to defend against hackers. But he’s also open to a paper-based voting system, which his critics from both parties say is essential to ensuring the state’s touch-screen voting machines can’t be undermined. And he’s come under fire for past lapses that have left confidential voter data vulnerable. For Kemp, who launched a statewide bus tour Monday, the fears about the state’s voting network are misguided. He said in an interview he’s “completely confident” in the integrity of Georgia’s election system, and brushed aside concerns the state isn’t doing enough to protect the ballots.

Maryland: Officials look to shore up election defenses after Russian tampering | Baltimore Sun

As details emerge of the Russian campaign to influence the 2016 election, officials in Maryland are working to protect the state’s voting system for this year and beyond. State elections officials are working with federal authorities to shore up Maryland’s defenses against tampering with electronic voting systems and electoral rolls. Lawmakers have introduced proposals to fix perceived flaws, audit results more rigorously and to compel greater disclosures about advertising on social media. … Poorvi Vora, a professor of computer science at George Washington University, says Maryland is among the worst of the 50 states in securing absentee ballots. The state allows voters to request absentee ballots through its web site and mark them online before mailing them in. That function is part of the system that allows voters to register online. It’s also the system that hackers probed in August 2016. Charlson said they did not breach it.

Legislation: Lawmakers Reject Plan To Require Paper Trail For Voting | Nashville Public Radio

Tennessee lawmakers have rejected a measure that would’ve required a paper receipt for all ballots cast in the state. In a meeting Tuesday of the Senate’s State and Local Government Committee, legislators voted down a bill intended to create a paper trail for auditors to follow in the event electronic voting machines are hacked. The measure had been opposed by state election officials, who say paper receipts are an unnecessary expense. Machines that spit out paper receipts would have cost Tennessee election commissions about $9.5 million up front, and they would have cost millions more to operate. Mark Goins, the state’s coordinator of elections, says there’s also not much evidence that voting machines are in danger of being hacked.

Sweden: Security service braced for possible Russian election meddling | Reuters

Russia could try to influence the outcome of national elections in Sweden in September if authorities in Moscow feel their strategic interests are threatened, the Swedish security service said on Thursday. The service’s head of counter-intelligence, Daniel Stenling, cited membership of NATO – which Sweden has debated joining – and security around the Baltic Sea as two important issues for Russia. “Russian espionage is still the biggest threat to Sweden,” he told an annual press briefing. “We see that Russia has an intention to influence individual issues that are of strategic importance. If these issues become central in the election campaign, we can expect attempts at Russian influence.” Stenling declined to say if his force had already seen evidence of such attempts.

Switzerland: How risky are flawed e-voting systems for democracy? | SWI

A leading data protection expert has warned of future security breaches if the government’s plan to introduce e-voting at a nationwide level goes ahead. Bruno Baeriswyl, data protection commissioner in canton Zurich, urged the authorities to give up plans, announced last April, for online voting across Switzerland. Speaking on the occasion of this year’s European Data Privacy Day at the end of January, Baeriswylexternal link said that current technology could not guarantee that ballots remain secret in votes and elections. He and other cantonal data protection commissioners argued that digitalisation could undermine democratic principles even while online systems help to simplify procedures. “The current systems for e-voting override the secret ballot in votes and elections. But it is imperative that all transactions must always be verifiable in a secure system. As a result, either we have ballot secrecy or we don’t have a secure method,” Baeriswyl said. “And this is highly risky for our democracy.”