<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Brush Script";
panose-1:2 0 5 3 2 0 0 9 0 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.hoenzb
{mso-style-name:hoenzb;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
span.EmailStyle21
{mso-style-type:personal-reply;
color:black;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:black">Brent et al, <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black">I was in no way making any allegations that anyone is alleging complicity on behalf of any election official. My apologies if that is what came across from my comments.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black">My concern is the general mistrust the public has toward Elections overall. And quite honestly, I seriously doubt that the majority of the public cares or thinks about vendor lock in, secret corporately owned
software issues, or general vendor control. The public sees the end result of all this – the polling place and the machines or paper or whatever they are given to vote on and how they can easily maneuver through the voting process. They also want to know
that their vote counted accurately. <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black">Most of the fear the public has about a voting system is based on what they are hearing from the media, or seeing on the web, YouTube or Facebook. And usually it is an uneducated opinion or an isolated incident
that is blown out of all proportion, because fear sells. <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black">All voting systems should be vetted in a very methodical way. And the system should be transparent. There are so many components of a voting system and it’s procurement to consider, but I will leave that to the
subject matter experts. And I’m sure that there are ‘cozy relationships’ and lots of politics involved in procuring voting systems. Personally and professionally I think the politics should be taken out of this process. There is no room for politics in
Elections as Elections should be and only be about the voters and making sure their vote counts. In my opinion it is a conflict of interest to allow politics in a conversation about a voting system. But I digress.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black">The ‘back-stage’ work that is done, and the part that the public never sees, is what we are tasked to do to in order to secure the voting system and their vote. That is why I believe that public education about
elections is a very important component to securing the public trust. Public Education is also an important component in making sure Elections and their systems and processes are transparent. And when everything is transparent that is when the public trust
will soar.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black">Dale<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><i><span style="font-size:11.0pt;font-family:"Brush Script";color:#1F497D">Dale E. Livingston<o:p></o:p></span></i></p>
<p class="MsoNormal"><i><span style="font-size:11.0pt;font-family:"Brush Script";color:#1F497D">Deputy Director<o:p></o:p></span></i></p>
<p class="MsoNormal"><i><span style="font-size:11.0pt;font-family:"Brush Script";color:#1F497D">Harford County Board of Elections<o:p></o:p></span></i></p>
<p class="MsoNormal"><i><span style="font-size:11.0pt;font-family:"Brush Script";color:#1F497D">410-809-6002 (Direct Line)<o:p></o:p></span></i></p>
<p class="MsoNormal"><i><span style="font-size:11.0pt;font-family:"Brush Script";color:#1F497D">443-417-0156 (Cell)<o:p></o:p></span></i></p>
<p class="MsoNormal"><i><span style="font-size:11.0pt;font-family:"Brush Script";color:#1F497D">410-638-3565 (General Office)<o:p></o:p></span></i></p>
<p class="MsoNormal"><i><span style="font-size:11.0pt;font-family:"Brush Script";color:#1F497D">410-638-4413 (fax)<o:p></o:p></span></i></p>
<p class="MsoNormal"><span style="color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Brent Turner [mailto:turnerbrentm@gmail.com]
<br>
<b>Sent:</b> Friday, July 29, 2016 11:27 AM<br>
<b>To:</b> livingston, dale<br>
<b>Cc:</b> Wayne Williams; Susan Eustis; Joseph Kiniry; vvsg-pre-election; Arthur Keller; vvsg-election; Stephen Berger; vvsg-post-election; vvsg-interoperability; CAVO; Alan Dechert; Brigette Hunley; Brian Fox<br>
<b>Subject:</b> Re: [VVSG-election] [VVSG-pre-election] [VVSG-interoperability] Separating Issues and Avoiding Ghost Stories - RE: By November, Russian hackers could target voting machines<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Dale-- No one is alleging complicity on behalf of the election officials.. more an act of negligence in not pushing for publicly owned / more secure voting systems. The distrust of the current systems starts with the " secret " corporate
owned software issue.. and the general vendor control of the event. This is exacerbated by the vendor lock-in and the overly cozy relationship between the vendors and some clerks cemented by business leagues ( parties and junkets etc ) i.e CACEO in California..
<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Once publicly owned / open source ( GPL ) systems are in place the public confidence will soar. The public still craves paper ballots as well which the CAVO advocated precinct system prints perfectly. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">The certification system .. per Roy Saltman and a host of others .. needs a complete overhaul from the Fed to the States .. and that is the plan for open source certifications. Ryan Macias stated he did not believe there to be much difference
in that process .. but we are available for assisting that effort-<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Brent<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">California Association of Voting Officials <o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On Fri, Jul 29, 2016 at 4:20 AM, livingston, dale <<a href="mailto:delivingston@harfordcountymd.gov" target="_blank">delivingston@harfordcountymd.gov</a>> wrote:<o:p></o:p></p>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:black">We had a similar system in Maryland, prior to going back to a paper system this past Primary Election. We also had and have numerous checks and balances
and care and custody in place to assure that when the polls opened in the morning our equipment was secure and working properly. And as in Colorado, our system has to be State certified.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:black"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:black">I also believe that one of the main reasons there is so much distrust by the general public is because they are not aware or educated about elections or
the voting systems put in place for them. We are trying to educate generations of people who don’t even know who their County Executive or in some cases even the Vice President of the United States. Seriously, not even our politicians are interested in what
we do, but rather spend 90% of their time campaigning for their next election. If someone wants to HACK into a system, any system, they are going to try. It is how we address such a situation, both prior to purchasing a system and if someone does make an
attempt to HACK it, that the public is going to look at. Their perception must be that we as election officials are doing everything in our power to give them fair, safe, and accurate elections. And in my shop, we do just that.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:black"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:black">Dale Livingston</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:black"> </span><o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><i><span style="font-size:11.0pt;font-family:"Brush Script";color:#1F497D">Dale E. Livingston</span></i><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><i><span style="font-size:11.0pt;font-family:"Brush Script";color:#1F497D">Deputy Director</span></i><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><i><span style="font-size:11.0pt;font-family:"Brush Script";color:#1F497D">Harford County Board of Elections</span></i><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><i><span style="font-size:11.0pt;font-family:"Brush Script";color:#1F497D"><a href="tel:410-809-6002" target="_blank">410-809-6002</a> (Direct Line)</span></i><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><i><span style="font-size:11.0pt;font-family:"Brush Script";color:#1F497D"><a href="tel:443-417-0156" target="_blank">443-417-0156</a> (Cell)</span></i><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><i><span style="font-size:11.0pt;font-family:"Brush Script";color:#1F497D"><a href="tel:410-638-3565" target="_blank">410-638-3565</a> (General Office)</span></i><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><i><span style="font-size:11.0pt;font-family:"Brush Script";color:#1F497D"><a href="tel:410-638-4413" target="_blank">410-638-4413</a> (fax)</span></i><o:p></o:p></p>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:black"> </span><o:p></o:p></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">
<a href="mailto:vvsg-pre-election-bounces@nist.gov" target="_blank">vvsg-pre-election-bounces@nist.gov</a> [mailto:<a href="mailto:vvsg-pre-election-bounces@nist.gov" target="_blank">vvsg-pre-election-bounces@nist.gov</a>]
<b>On Behalf Of </b>Wayne Williams<br>
<b>Sent:</b> Thursday, July 28, 2016 11:57 PM<br>
<b>To:</b> Susan Eustis; Joseph Kiniry<br>
<b>Cc:</b> vvsg-pre-election; Arthur Keller; vvsg-election; Deutsch, Herb; Stephen Berger; vvsg-post-election; vvsg-interoperability<br>
<b>Subject:</b> Re: [VVSG-pre-election] [VVSG-interoperability] Separating Issues and Avoiding Ghost Stories - RE: By November, Russian hackers could target voting machines</span><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<p><span style="font-size:11.0pt;color:#212121;background:white">The voting machines used in Colorado are not connected to the Internet. Colorado has vigorous voting-systems standards that require all voting systems to operate on a closed network that cannot
be accessed through the Internet. </span><span style="font-size:11.0pt;color:#212121"><br>
<span style="background:white"> </span><br>
<span style="background:white">In addition, counties must use a voting system that has been certified by the Colorado Secretary of State as meeting all security requirements.</span></span><o:p></o:p></p>
<p><span style="font-family:"Calibri","sans-serif";color:black"> </span><o:p></o:p></p>
<p><span style="font-size:11.0pt;color:black">Wayne Williams</span><o:p></o:p></p>
<div>
<div class="MsoNormal" align="center" style="text-align:center"><span style="font-family:"Calibri","sans-serif";color:#212121">
<hr size="2" width="98%" align="center">
</span></div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:black">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:black">
<a href="mailto:vvsg-pre-election-bounces@nist.gov" target="_blank">vvsg-pre-election-bounces@nist.gov</a> <<a href="mailto:vvsg-pre-election-bounces@nist.gov" target="_blank">vvsg-pre-election-bounces@nist.gov</a>> on behalf of Susan Eustis <<a href="mailto:susan@wintergreenresearch.com" target="_blank">susan@wintergreenresearch.com</a>><br>
<b>Sent:</b> Thursday, July 28, 2016 5:41 PM<br>
<b>To:</b> Joseph Kiniry<br>
<b>Cc:</b> vvsg-pre-election; Arthur Keller; vvsg-election; Deutsch, Herb; Stephen Berger; vvsg-post-election; vvsg-interoperability<br>
<b>Subject:</b> Re: [VVSG-pre-election] [VVSG-interoperability] Separating Issues and Avoiding Ghost Stories - RE: By November, Russian hackers could target voting machines</span><span style="font-family:"Calibri","sans-serif";color:#212121">
</span><o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-family:"Calibri","sans-serif";color:#212121"> </span><o:p></o:p></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-family:"Calibri","sans-serif";color:#212121">Joe, I do get to write about this, so I know it exists, but in the real world election of Novenber not have that,
and we have a not so veiled threat to hack the systems so I believe that is the issue we need to address. How do we leverage the audit trail the systems tout and do it in a manner that is timely and relevant to what can be a disastrous unraveling of our political
core. Do you have any suggestions about the audit trail use ?</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-family:"Calibri","sans-serif";color:#212121"> </span><o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-family:"Calibri","sans-serif";color:#212121">On Thu, Jul 28, 2016 at 6:21 PM, Joseph Kiniry <<a href="mailto:kiniry@galois.com" target="_blank">kiniry@galois.com</a>>
wrote:</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-family:"Calibri","sans-serif";color:#212121">Susan et al.,<br>
<br>
> On Jul 28, 2016, at 07:12, Susan Eustis <<a href="mailto:susan@wintergreenresearch.com" target="_blank">susan@wintergreenresearch.com</a>> wrote:<br>
><br>
> I believe the problems are 2:<br>
> 1. How to make fraud detectable, the code base in any electronics is vulnerable where-ever it is, Code can be changed without detection and this needs to be addressed.<br>
<br>
I keep hearing this statement made in many forums and continue to bring up the fact that there is some excellent R&D going on wrt this topic which has been seeing practical application in the DOD space for a few years.<br>
<br>
It is now the case that you can prove that the application (and operating system &c) you have is exactly what you think it is an moreover that a running system is executing exactly that software.<br>
<br>
This is hard. Few people know how to do it. No existing/traditional elections vendor does it or knows how to do it. But it is a solved problem now.<br>
<br>
I’m happy to go into deep technical detail with anyone who is interested and point to the relevant peer-reviewed work, but this is not the forum for such.<br>
<br>
Joe</span><o:p></o:p></p>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-family:"Calibri","sans-serif";color:#212121"><br>
<br clear="all">
</span><o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-family:"Calibri","sans-serif";color:#212121"> </span><o:p></o:p></p>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-family:"Calibri","sans-serif";color:#212121">--
</span><o:p></o:p></p>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-family:"Calibri","sans-serif";color:#212121">--
<br>
<br>
Susan Eustis<br>
President<br>
WinterGreen Research<br>
6 Raymond Street<br>
Lexington, Massachusetts<br>
phone <a href="tel:781%20863%205078" target="_blank">781 863 5078</a><br>
cell <a href="tel:617%20852%207876" target="_blank">617 852 7876</a> </span><span style="color:#888888"><o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</body>
</html>