<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Brent, block chain and those other technologies, are hackable as well. Ballot verification is one thing, but tally verification is another. If it's an electronic system, meaning no physical records, then yes, the outcome can certainly be changed undetected.
People think that if I can login after I cast my ballot and then verify my ballot then that tells me it worked and there are mathematical models and algorithms to demonstrate this works. That's not true. It's very easy to give you want you need to see, but
count it differently. If it's digital, it's malleable. Open source helps in that the code can be reviewed, but code is malleable too.
<br>
<br>
This Russian cyber attack has opened a fascinating debate with respect to politics and elections. I'm happy to see people talking about this and I hope this leads to constructive debates about the future of our elections.<br>
<br>
<br>
<br>
Thanks,<br>
<br>
<br>
<br>
<div class="moz-cite-prefix">On 7/28/16 10:11 AM, Brent Turner wrote:<br>
</div>
<blockquote cite="mid:CAB1+w6K0M04LmtJN_q7rV4xGGmtAebSy5WuFRoW69YPpHW1jbA@mail.gmail.com" type="cite">
<div dir="ltr"><br>
<div class="gmail_quote">---------- Forwarded message ----------<br>
From: <b class="gmail_sendername">Brent Turner</b> <span dir="ltr"><<a moz-do-not-send="true" href="mailto:turnerbrentm@gmail.com">turnerbrentm@gmail.com</a>></span><br>
Date: Thu, Jul 28, 2016 at 7:09 AM<br>
Subject: Re: [VVSG-election] [VVSG-interoperability] By November, Russian hackers could target voting machines<br>
To: Arthur Keller <<a moz-do-not-send="true" href="mailto:ark@soe.ucsc.edu">ark@soe.ucsc.edu</a>><br>
Cc: Susan Eustis <<a moz-do-not-send="true" href="mailto:susan@wintergreenresearch.com">susan@wintergreenresearch.com</a>>, vvsg-election <<a moz-do-not-send="true" href="mailto:vvsg-election@nist.gov">vvsg-election@nist.gov</a>>, vvsg-pre-election <<a moz-do-not-send="true" href="mailto:vvsg-pre-election@nist.gov">vvsg-pre-election@nist.gov</a>>,
vvsg-post-election <<a moz-do-not-send="true" href="mailto:vvsg-post-election@nist.gov">vvsg-post-election@nist.gov</a>>, vvsg-interoperability <<a moz-do-not-send="true" href="mailto:vvsg-interoperability@nist.gov">vvsg-interoperability@nist.gov</a>><br>
<br>
<br>
<div dir="ltr">The key is to facilitate smooth transitions of power is to ensure voter confidence and that relates directly to a secure " first count" rather than audit procedures. I endorse audits.. but history shows us that is when the village becomes restless..
and audits are no substitute for a confidence inspiring - transparent initial count. Currently the " secret software " systems coupled with VVPAT's are condemned as insecure by government study, so we don't have to consider the internet to sound those alarms.
Ed Felton from OSTP confirms.
<div><br>
</div>
<div>Over-focus on audits seem to be an affectation of the fund raising groups with motivations unclear. Though the open source election reform advocates 100 % immediate audit at the precinct level.. we recognize the key is to capture a precise and secure count
previous to transportation of the ballots. The media must stand down until the task is completed. </div>
<div><br>
</div>
<div>If technology like smart phone voting is available ( with short codes / block chain etc ) at least the voter will be able to verify their vote was counted as cast. </div>
<div><br>
</div>
<div>Best- </div>
<div><br>
</div>
<div>Brent Turner </div>
<div>California Association of Voting Officials </div>
<div><a moz-do-not-send="true" href="http://www.cavo-us.org" target="_blank">www.cavo-us.org</a> </div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Thu, Jul 28, 2016 at 6:43 AM, Arthur Keller <span dir="ltr">
<<a moz-do-not-send="true" href="mailto:ark@soe.ucsc.edu" target="_blank">ark@soe.ucsc.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="auto">
<div>But that's made harder with vote by mail ballots that aren't counted until later if received on Election Day. And California now has a law allowing ballots to be received on Friday if postmarked on Election Day. Fortunately, California is not a swing state!</div>
<div><br>
</div>
<div>And with HAVA requiring a provisional vote process, audits don't occur until after the tabulation is complete. Yet it's election night results that make the difference in the press and in the public's mind. Practically No one pays attention to the detailed
results weeks later when the results are certified. </div>
<div><br>
</div>
<div>Best regards,</div>
<div>Arthur </div>
<div><br>
On Jul 28, 2016, at 6:30 AM, Susan Eustis <<a moz-do-not-send="true" href="mailto:susan@wintergreenresearch.com" target="_blank">susan@wintergreenresearch.com</a>> wrote:<br>
<br>
</div>
<blockquote type="cite">
<div>
<div dir="ltr">Arthur, I agree, I concur. My new book lays this scenario out in detail and provides suggestions for preventing the hacks, ways to protect the integrity of the election results, there needs to be safe guards and automatic recounts the very
next day with observers representing all candidates, no matter whether the election was close or not. There needs to be an audit trail and a way to protect the integrity of the balloting that occurs before election day. There needs to be a way for the observers
to make a duplicate of the original ballots as the recount goes on and to run those through their own counting scanner to determine the validity of the election. There needs to be a way to interrupt the recount at any time if someone has to go to the bathroom
or falls asleep so that the recount process has continuity and integrity. Things like this.
<div>Susan</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Thu, Jul 28, 2016 at 9:22 AM, Arthur Keller <span dir="ltr">
<<a moz-do-not-send="true" href="mailto:ark@soe.ucsc.edu" target="_blank">ark@soe.ucsc.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px
#ccc solid;padding-left:1ex">
<div dir="auto">
<div>But vote tabulation and especially roll up is often connected to the Internet. And with the lack of effective audits in more jurisdictions, hacking the Internet-connected vote tabulation systems would do the trick. </div>
<div><br>
</div>
<div>In particular, if the vote tabulation system is connected to the web reporting system, then that's an avenue for attack. </div>
<div><br>
</div>
<div>There's a difference between auditable and actually audited. If the results are sufficiently skewed on election night, post election audits may not matter anyway. They didn't even matter in Florida in 2000 where the election was close. </div>
<div><br>
</div>
<div>Could the programming of electronic voting machines be hacked in a Stuxnet type attack while they are loaded with the election data file?</div>
<div><br>
</div>
<div>If China can hack Google, do we really believe there's no way Russia can't hack enough counties or states to change the outcome of the presidential election?</div>
<div><br>
</div>
<div>Best regards,</div>
<div>Arthur</div>
<div>
<div>
<div><br>
On Jul 28, 2016, at 6:07 AM, Deutsch, Herb <<a moz-do-not-send="true" href="mailto:hdeutsch@essvote.com" target="_blank">hdeutsch@essvote.com</a>> wrote:<br>
<br>
</div>
<blockquote type="cite">
<div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Voting machines are not attached to the internet. You can’t hack them without physical control and that is auditable.</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"> </span></p>
<div>
<div style="border:none;border-top:solid
#b5c4df 1.0pt;padding:3.0pt
0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">
<a moz-do-not-send="true" href="mailto:vvsg-interoperability-bounces@nist.gov" target="_blank">
vvsg-interoperability-bounces@nist.gov</a> [<a moz-do-not-send="true" href="mailto:vvsg-interoperability-bounces@nist.gov" target="_blank">mailto:vvsg-interoperability-bounces@nist.gov</a>]
<b>On Behalf Of </b>Arthur Keller<br>
<b>Sent:</b> Thursday, July 28, 2016 12:30 AM<br>
<b>To:</b> John Wack<br>
<b>Cc:</b> vvsg-election; vvsg-pre-election; vvsg-post-election; vvsg-interoperability<br>
<b>Subject:</b> [VVSG-interoperability] By November, Russian hackers could target voting machines</span></p>
</div>
</div>
<p class="MsoNormal"> </p>
<p class="MsoNormal">What should the election community do about this threat?</p>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">Best regards,</p>
</div>
<div>
<p class="MsoNormal">Arthur</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal"><a moz-do-not-send="true" href="https://www.washingtonpost.com/posteverything/wp/2016/07/27/by-november-russian-hackers-could-target-voting-machines/" target="_blank">https://www.washingtonpost.com/posteverything/wp/2016/07/27/by-november-russian-hackers-could-target-voting-machines/</a></p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<div>
<div>
<div>
<div>
<div>
<h1>By November, Russian hackers could target voting machines</h1>
</div>
</div>
</div>
</div>
</div>
<div>
<div>
<h2>If Russia really is responsible, there's no reason political interference would end with the DNC emails.</h2>
</div>
</div>
<div>
<div>
<div>
<p class="MsoNormal"><img moz-do-not-send="true" src="https://img.washingtonpost.com/wp-apps/imrs.php?src=http://wp-eng-static.washingtonpost.com/author_images/bschneier.jpg?ts=1428956090094&w=80&h=80" border="0"></p>
<div>
<p class="MsoNormal"><span>By Bruce Schneier</span> <span>July 27 at 3:10 PM</span>
</p>
<div>
<p class="MsoNormal"><a moz-do-not-send="true" href="https://www.schneier.com" target="_blank">Bruce Schneier</a> is a security technologist and a lecturer at the Kennedy School of Government at Harvard University. His latest book is
<a moz-do-not-send="true" href="https://www.schneier.com/book-dg.html" target="_blank">
<i>Data and Goliath: The Hidden Battles to Collect Your Data and Control Your World</i></a>.</p>
</div>
</div>
</div>
<p class="MsoNormal">Russia was behind the hacks into the Democratic National Committee’s computer network that led to the release of thousands of internal emails just before the party’s convention began, U.S. intelligence agencies have
<a moz-do-not-send="true" href="http://www.nytimes.com/2016/07/27/world/europe/russia-dnc-hack-emails.html" target="_blank">
reportedly</a> concluded.</p>
<p class="MsoNormal">The FBI is investigating. WikiLeaks <a moz-do-not-send="true" href="http://www.cnn.com/2016/07/26/politics/julian-assange-dnc-email-leak-hack/" target="_blank">
promises</a> there is more data to come. The <a moz-do-not-send="true" href="http://www.defenseone.com/technology/2016/07/how-putin-weaponized-wikileaks-influence-election-american-president/130163/" target="_blank">
political nature</a> of this cyberattack means that Democrats and Republicans are trying to spin this as much as possible. Even so, we have to accept that someone is attacking our nation’s computer systems in an apparent attempt to influence a presidential
election. This kind of cyberattack targets the very core of our democratic process. And it points to the possibility of an even worse problem in November — that our election systems and our voting machines could be vulnerable to a similar attack.</p>
<p class="MsoNormal">If the intelligence community has indeed ascertained that Russia is to blame, our government needs to decide what to do in response. This is difficult because the attacks are politically partisan, but it <a moz-do-not-send="true" href="http://arstechnica.com/security/2016/06/guest-editorial-the-dnc-hack-and-dump-is-what-cyberwar-looks-like/" target="_blank">is</a> <a moz-do-not-send="true" href="https://www.balloon-juice.com/2016/07/26/we-are-at-cyber-war-so-what-exactly-do-we-do-about-it/" target="_blank">essential</a>. If
foreign governments learn that they can influence our elections with impunity, this opens the door for <a moz-do-not-send="true" href="http://www.huffingtonpost.com/michael-gregg/top-six-ways-hackers-coul_b_7832730.html" target="_blank">future manipulations</a>,
both document thefts and dumps like this one that we see and more subtle manipulations that we don’t see.</p>
<p class="MsoNormal">Retaliation is politically fraught and could have serious consequences, but this is an attack against our democracy. We need to confront Russian President Vladimir Putin in some way — politically, economically or in cyberspace — and make
it clear that we will not tolerate this kind of interference by any government. Regardless of your political leanings this time, there’s no guarantee the next country that tries to manipulate our elections will share your preferred candidates.</p>
<p class="MsoNormal">Even more important, we need to secure our election systems before autumn. If Putin’s government has already used a cyberattack to attempt to <a moz-do-not-send="true" href="http://talkingpointsmemo.com/edblog/trump-putin-yes-it-s-really-a-thing" target="_blank">help Trump
win</a>, there’s no reason to believe he won’t do it again — especially now that
<a moz-do-not-send="true" href="https://www.washingtonpost.com/politics/democratic-national-convention-obama-biden-kaine-set-to-tout-clinton-as-commander-in-chief/2016/07/27/afc57884-53e8-11e6-bbf5-957ad17b4385_story.html?hpid=hp_hp-top-table-main_trump-1230pm%3Ahomepage%2Fstory" target="_blank">
Trump is inviting the “help.”</a></p>
<p class="MsoNormal">Over the years, more and more states have moved to electronic voting machines and have flirted with Internet voting. These systems <a moz-do-not-send="true" href="http://arstechnica.com/tech-policy/2015/04/meet-the-e-voting-machine-so-easy-to-hack-it-will-take-your-breath-away/" target="_blank">are</a> <a moz-do-not-send="true" href="https://www.statslife.org.uk/significance/politics/2288-how-trustworthy-are-electronic-voting-systems-in-the-us" target="_blank">insecure</a> <a moz-do-not-send="true" href="https://www.salon.com/2011/09/27/votinghack/" target="_blank">and</a> <a moz-do-not-send="true" href="https://www.theguardian.com/us-news/2015/apr/15/virginia-hacking-voting-machines-security" target="_blank">vulnerable</a> <a moz-do-not-send="true" href="http://whowhatwhy.org/2015/08/31/foreigners-could-hack-us-elections-experts-say/" target="_blank">to</a> <a moz-do-not-send="true" href="http://www.popsci.com/gadgets/article/2012-11/how-i-hacked-electronic-voting-machine" target="_blank">attack</a>.</p>
<p><i>[<a moz-do-not-send="true" href="https://www.washingtonpost.com/posteverything/wp/2016/03/29/your-iphone-just-got-a-lot-less-secure-and-the-fbi-is-to-blame/" target="_blank">Your iPhone just got less secure. Blame the FBI.</a>]
</i></p>
<p class="MsoNormal">But while computer security experts <a moz-do-not-send="true" href="https://www.schneier.com/blog/archives/2004/11/the_problem_wit.html" target="_blank">like me</a> have <a moz-do-not-send="true" href="https://www.giac.org/paper/gsec/3687/inherent-problems-electronic-voting-systems/105962" target="_blank">sounded</a> <a moz-do-not-send="true" href="http://homepage.cs.uiowa.edu/%7Ejones/voting/congress.html" target="_blank">the</a> <a moz-do-not-send="true" href="https://cs.stanford.edu/people/eroberts/cs181/projects/2006-07/electronic-voting/index_files/page0004.html" target="_blank">alarm</a> <a moz-do-not-send="true" href="https://citp.princeton.edu/research/voting/" target="_blank">for</a> many
years, states have largely ignored the threat, and the machine manufacturers have thrown up enough obfuscating babble that election officials are largely mollified.</p>
<p class="MsoNormal">We <a moz-do-not-send="true" href="https://scontent.xx.fbcdn.net/hphotos-xlp1/v/t1.0-9/12115815_699872940152206_2266030088084252627_n.png?oh=2a4e5e944a5feadb7e133dd8c57be376&oe=57AD8C92" target="_blank">no longer</a> <a moz-do-not-send="true" href="https://xkcd.com/463/" target="_blank">have
time</a> for that. We must ignore the machine manufacturers’ <a moz-do-not-send="true" href="https://www.salon.com/2006/09/13/diebold_3/" target="_blank">spurious claims</a> of security, create tiger teams to test the machines’ and systems’ resistance to attack,
drastically increase their cyber-defenses and take them offline if we can’t guarantee their security online.</p>
<p class="MsoNormal">Longer term, we need to return to election systems that are secure from manipulation. This means voting machines with <a moz-do-not-send="true" href="http://votingmachines.procon.org/view.answers.php?questionID=000291" target="_blank">voter-verified paper
audit trails</a>, and <a moz-do-not-send="true" href="http://engineering.jhu.edu/magazine/2016/06/internet-voting-nonstarter/" target="_blank">
no</a> <a moz-do-not-send="true" href="https://www.verifiedvoting.org/resources/internet-voting/vote-online/" target="_blank">Internet</a> <a moz-do-not-send="true" href="http://www.scientificamerican.com/article.cfm?id=2012-presidential-election-electronic-voting" target="_blank">voting</a>. I
know it’s slower and less convenient to stick to the old-fashioned way, but the security risks are simply too great.</p>
<p class="MsoNormal">There are other ways to attack our election system on the Internet besides hacking voting machines or changing vote tallies: <a moz-do-not-send="true" href="http://thehill.com/policy/cybersecurity/278231-election-fraud-feared-as-hackers-target-voter-records" target="_blank">deleting voter
records</a>, hijacking candidate or party websites, targeting and intimidating campaign workers or donors. There have already been multiple instances of <a moz-do-not-send="true" href="https://www.schneier.com/blog/archives/2015/11/the_rise_of_pol.html" target="_blank">political doxing</a> —
publishing personal information and documents about a person or organization — and we could easily see more of it in this election cycle. We need to take these risks much more seriously than before.</p>
<p class="MsoNormal">Government interference with foreign elections isn’t new, and in fact, that’s something the United States itself has <a moz-do-not-send="true" href="https://www.lawfareblog.com/what-old-and-new-and-scary-russias-probable-dnc-hack" target="_blank">repeatedly done</a> in
recent history. Using cyberattacks to influence elections is newer but has been done before, too — most notably in <a moz-do-not-send="true" href="http://www.bloomberg.com/features/2016-how-to-hack-an-election/" target="_blank">Latin America</a>. Hacking of
voting machines isn’t new, either. But what is new is a foreign government interfering with a U.S. national election on a large scale. Our democracy cannot tolerate it, and we as citizens cannot accept it.</p>
<p><i>[<a moz-do-not-send="true" href="https://www.washingtonpost.com/posteverything/wp/2016/07/26/why-would-russia-interfere-in-the-u-s-election-because-it-usually-works/" target="_blank">Why would Russia try to hack the U.S. election? Because it might work.</a>]
</i></p>
<p class="MsoNormal">Last April, the Obama administration <a moz-do-not-send="true" href="https://www.whitehouse.gov/blog/2015/04/01/our-latest-tool-combat-cyber-attacks-what-you-need-know" target="_blank">issued</a> <a moz-do-not-send="true" href="https://www.whitehouse.gov/blog/2015/04/01/expanding-our-ability-combat-cyber-threats" target="_blank">an</a> <a moz-do-not-send="true" href="https://medium.com/the-white-house/a-new-tool-against-cyber-threats-1a30c188bc4#.jgbalohyi" target="_blank">executive</a> <a moz-do-not-send="true" href="https://www.whitehouse.gov/the-press-office/2015/04/01/executive-order-blocking-property-certain-persons-engaging-significant-m" target="_blank">order</a> outlining
how we as a nation respond to cyberattacks against our critical infrastructure. While our election technology was not explicitly mentioned, our political process is certainly critical. And while they’re a hodgepodge of separate state-run systems, together
their security affects every one of us. After everyone has voted, it is essential that both sides believe the election was fair and the results accurate. Otherwise, the election has no legitimacy.</p>
<p class="MsoNormal">Election security is now a national security issue; federal officials need to take the lead, and they need to do it quickly.</p>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
</div>
</div>
</div>
</div>
</div>
</blockquote>
</div>
</div>
</div>
</blockquote>
</div>
<br>
<br clear="all">
<span class="HOEnZb"><font color="#888888"><span><font color="#888888">
<div><br>
</div>
-- <br>
<div data-smartmail="gmail_signature">
<div dir="ltr">-- <br>
<br>
Susan Eustis<br>
President<br>
WinterGreen Research<br>
6 Raymond Street<br>
Lexington, Massachusetts<br>
phone <a moz-do-not-send="true" href="tel:781%20863%205078" value="+17818635078" target="_blank">
781 863 5078</a><br>
cell <a moz-do-not-send="true" href="tel:617%20852%207876" value="+16178527876" target="_blank">
617 852 7876</a> </div>
</div>
</font></span></font></span></div>
</div>
</blockquote>
</div>
</blockquote>
</div>
<br>
</div>
</div>
<br>
</div>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Juan E. Gilbert, Ph.D.
Andrew Banks Family Preeminence Endowed Professor & Chair
Computer & Information Science & Engineering Department
Herbert Wertheim College of Engineering
University of Florida
P.O. Box 116120
Gainesville, FL 32611
352.562.0784 (V)
352.273.0738 (F)
<a class="moz-txt-link-abbreviated" href="mailto:juan@ufl.edu">juan@ufl.edu</a>
Twitter: @DrJuanGilbert
<a class="moz-txt-link-freetext" href="http://www.juangilbert.com/">http://www.juangilbert.com/</a> </pre>
</body>
</html>