Federal Vote-Protection Efforts Lag Ahead Of First 2018 Primaries

on Election Day on November 8, 2016 in Las Vegas, Nevada. Americans across the nation are picking their choice for the next president of the United States.
LAS VEGAS, NV - NOVEMBER 08: A voter enters a polling station at Ethel Winternheimer-Staton Elementary School on Election Day on November 8, 2016 in Las Vegas, Nevada. Americans across the nation are picking their c... LAS VEGAS, NV - NOVEMBER 08: A voter enters a polling station at Ethel Winternheimer-Staton Elementary School on Election Day on November 8, 2016 in Las Vegas, Nevada. Americans across the nation are picking their choice for the next president of the United States. (Photo by Ethan Miller/Getty Images) MORE LESS
Start your day with TPM.
Sign up for the Morning Memo newsletter

With the first primaries of the 2018 elections less than a month away, you might expect federal officials to be wrapping up efforts to safeguard the vote against expected Russian interference.

You’d be wrong.

Federal efforts to help states button down elections systems have crawled, hamstrung in part by wariness of federal meddling. Just 14 states and three local election agencies have so far asked for detailed vulnerability assessments offered by the Department of Homeland Security — and only five of the two-week examinations are complete.

Illinois, for instance —one of two states where voter registration databases were breached in 2016 — requested an assessment in January and is still waiting. Primary voters go to the polls there March 20; state officials can’t say whether the assessment will happen beforehand. DHS says the assessments should be finished by mid-April.

Meantime, fewer than half of the estimated 50 senior state elections officials who requested federal security clearances have received them, DHS says. That can hinder information sharing designed to help states deal with election disruptions.

And Congress is still sitting on three bipartisan bills that address election integrity issues, including funding to upgrade antiquated equipment.

Overall, experts say far too little has been done to shore up a vulnerable mishmash of 10,000 U.S. voting jurisdictions that mostly run on obsolete and imperfectly secured technology. Russian agents targeted election systems in 21 states ahead of the 2016 general election, DHS says, and separately launched a social media blitz aimed at inflaming social tensions and sowing confusion.

The CIA director and two other top U.S. intelligence officials told the Senate Tuesday they’ve seen indications Russian agents are preparing a new round of election subterfuge. The secretary of state has said the same. Texas will hold the first primary of 2018 on March 6; Illinois follows two weeks later.

That makes local election officials “the front lines of the information age,” said Eric Rosenbach, co-director of Harvard’s Belfer Center and a former Defense Department chief of staff in the Obama administration. “After what the Russians did, every other bad guy is going to come after our democracy now.”

Since last July, a bipartisan team at Harvard — including former U.S. Marine and Army cyberwarriors, national security eggheads and Google engineers — has been trying to shore up that local line. The group, which calls itself the Defending Digital Democracy initiative, has just drafted its latest protect-the-vote election “playbooks” intended to prepare state and local officials for the worst.

“It’s not a question of whether somebody is going to try to breach the system,” said Robby Mook, manager of the 2016 Clinton campaign, which was stung by multiple email thefts later traced to Russian agents. “The question is: ‘How resilient are we and what are we doing to protect ourselves?'”

Mook helps run the effort with Matt Rhoades, who managed Mitt Romney’s 2012 presidential run. Over six months, the authors visited 34 state and county offices and ran simulations to help local officials improve their “threat awareness.”

The team’s findings highlight resource-strapped election systems that can’t secure their own operations, vulnerable voting-equipment vendors and the threat posed by insiders and people looking for political advantage.

There’s no evidence that any hack in the November 2016 election affected election results. But there are also cases — such as in Georgia, where a key election-staging server was exposed on the open internet for months then wiped clean without a forensic exam — that haven’t been independently investigated.

And federal delays are legion. In the last election, DHS took nearly a year to inform the affected states of hacking attempts, blaming it in part on a lack of security clearances. But it hasn’t made up enough lost ground to satisfy critics on Capitol Hill.

In Illinois, for instance, the executive director of the state elections board submitted his application in August and has yet to receive his clearance, according to agency spokesman Matt Dietrich.

As a stopgap, DHS is providing one-day “read-ins” on secret information this week in Washington to about 100 senior state officials — secretaries of state and elections directors — gathered there for a meeting. “That’s a way to deal with the fact that the process hasn’t worked as quickly as we’d hoped,” Bob Kolasky, deputy assistant secretary at DHS for infrastructure protection, said in an interview.

The Harvard team recommends a variety of election safeguards, such as background checks for everyone with access to sensitive election systems, universal use of voting machines that produce a paper trail, and routine, rigorous audits of election results — currently standard only in Colorado and Rhode Island.

The team also urges local officials to quickly acknowledge any election threats and immediately explain to the public what they are doing about them — two things that don’t come naturally to them.

Elections officials “made us all a little nervous” in their handling of disinformation scenarios during tabletop exercises — such as bogus online reports of two-mile-long lines certain polling stations, said Rosenbach.

“They do not want to talk to the press, much less communicate at all,” he said. A hack is just one element of a modern election attack — “the more potent part is often info ops.”


Online: https://www.belfercenter.org/publication/state-and-local-election-cybersecurity-playbook

Latest News

Notable Replies

  1. Washington State uses paper ballots. Haven’t heard if there are potential problems with the upcoming election. Need to check.

  2. Avatar for jmacaz jmacaz says:

    From the Republican prospective… WHY break up a winning team?

  3. Avatar for jmacaz jmacaz says:

    IMO Washington State does it right… Paper ballots and you vote at home, and simply deliver your ballot. Voting for me was never easier than when I lived there.

  4. I’m convinced the National Security apparatus of this country could be doing more even without trump’s approval. Their oath is to the Constitution, not DJT. They have a duty to move on this knowledge and make the necessary protections possible without explicit approval of trump. They owe it to our democracy. To call those faces at the hearing representing those security communities in our government as doing the best they can under difficult circumstances, or being thwarted by trump, is really misleading. They should be doing a hell of a lot more imo, with or without this maladministration’s green light. I find their slow response just as troubling. Its like they’re slow-walking a response to this threat…and that can’t be a coincidence. If they know the threat exists, they should be making much more of this publicly than they have.

    Those muckety-mucks at the hearing representing our security and intelligence services are being given a real pass for publicly disagreeing with trump about the threat, but what have they really done to protect us? Those pats on the back for disagreeing with trump are really being overshadowed by their lack of real action to do anything about it at the same time. That’s the real story here.

Continue the discussion at forums.talkingpointsmemo.com

2 more replies


Avatar for system1 Avatar for srfromgr Avatar for old_curmudgeon Avatar for andersr Avatar for markg8 Avatar for jacksonhts Avatar for jmacaz

Continue Discussion
Masthead Masthead
Founder & Editor-in-Chief:
Executive Editor:
Managing Editor:
Associate Editor:
Editor at Large:
General Counsel:
Head of Product:
Director of Technology:
Associate Publisher:
Front End Developer:
Senior Designer: