sunny.png
Monday September 23rd, 2019 9:25AM

Georgia official discounts threat of exposed voter records

By The Associated Press

ATLANTA (AP) — After a researcher notified officials of a major security lapse at the center managing Georgia's election technology, leading computer scientists urged the state's top elections official to order a thorough outside probe to determine if its voting systems had been compromised.

There's no indication that happened.

At the same time, Secretary of State Brian Kemp contested a lawsuit demanding the state abandon its antiquated touchscreen voting machines , which are highly susceptible to being rigged by hackers in all-but-undetectable ways, and whose votes couldn't be reliably recounted.

And when voting-transparency activists sought a top-to-bottom review of state voting systems, Kemp's top lawyer told them it would cost $10,000 and take six months — extending well past a closely watched congressional runoff vote on June 20.

NEW FOCUS ON VOTING SECURITY

A state judge threw out that suit last Friday, but the issue gained new urgency this week when the researcher who originally detected the security lapse decided to go public. A misconfigured server, Logan Lamb discovered last August, had left Georgia's 6.7 million voter records and other sensitive files exposed to hackers.

And it may have been left unfixed for seven months.

The vulnerability might have allowed attackers to plant malware and possibly rig votes or wreak chaos with voter rolls by deleting or altering records — a major concern amid heightened sensitivity to state-sponsored Russian election hacking.

Kemp declined to speak to The Associated Press. Last week, though, he celebrated the lawsuit's dismissal, a rebuff to the "Ivy League professors" — many, in actuality, eminent computer scientists — who advised the plaintiffs and saying the judge determined "what we already know: Our voting machines in Georgia are safe and accurate."

Voting technology experts say the state can't know that for sure.

Voting machines like Georgia's, which neither use paper ballots nor keep hardcopy proof of voter intent, are inherently vulnerable to tampering, researchers say. University of South Carolina's Duncan Buell, one of the lawsuit advisors, compared the risk to driving in a heavy rain at 100 miles an hour.

The extent to which the state has examined its systems is unclear. During the lawsuit, Kemp ignored a request from the plaintiffs' advisors for a full forensic examination by the Department of Homeland Security and the U.S. Computer Emergency Readiness Team (CERT), said activist Marilyn Marks.

Last year, Kemp refused DHS offers to help secure his state elections systems — then complained that it was probing them anyway.

FEARS OF RUSSIAN HACKING

The security failure's extent was first reported Wednesday by Politico Magazine . Lamb, a 29-year-old Atlanta-based researcher, told the AP that the publication last week of a classified National Security Agency report ended his reluctance to go public. It describing a sophisticated scheme, allegedly by Russian military intelligence, to infiltrate local U.S. elections systems using phishing emails.

The NSA report offered the most detailed account yet of an attempt by foreign agents to probe the rickety and poorly funded U.S. elections system. DHS had previously reported attempts last year to gain unauthorized access to voter registration databases in 20 states — one of which, in Illinois, succeeded, though the state said no harm resulted.

Lamb discovered the security hole as he did a search of the website of the Center for Election Systems at Kennesaw State, which manages voting statewide. There, he found a directory open to the internet that contained not just the state voter database, but PDF files with instructions and passwords used by poll workers to sign into a central server used on Election Day. Lamb said he downloaded 15 gigabytes of data, which he later destroyed.

The directory of files "was already indexed by Google," Lamb said in an interview — meaning that anyone could have found it with the right search.

"I don't know if the vote could have been rigged, but compromising that server would have served as a great pivot point and malware could have been planted easily," he added.

WHO KNEW WHAT WHEN

Lamb said he notified the center's director, Merle King, who assured him the hole would be patched and who asked to keep his discovery to himself.

But the center never notified the secretary of state's office of that discovery, said state election spokeswoman Candice Broce. The election center referred all questions to Kennesaw State, which declined comment.

Lamb said he decided at the time not to disclose the problem — mostly because he "didn't want to needlessly escalate things" prior to the Nov. 8 general election. He said King had also told him that "messing with elections means the people downtown crush you."

King did not respond to phone messages and emails seeking comment.

In March, a security colleague Lamb had told about the flaw checked out the center's website and discovered that the vulnerabilities had only been partially fixed. "We were both pretty floored," said Lamb.

The researcher, Chris Grayson, said he, too, was able to access the same voter record database and other sensitive files in a publicly accessible directory. Grayson contacted a friend who is a professor at Kennesaw State. Two days later, the FBI was called in to investigate.

It did not bring charges against either researcher, finding no evidence of illegal entry . "At the end of the day we were doing what we thought was in the best interest of the republic — informing the parties that needed to be privy to this sort of issue," said Grayson.

The special election next Tuesday will fill the seat vacated by Republican Tom Price after he was named Health and Human Services Secretary. It has attracted national attention, including that of President Donald Trump, for whom it could be a bellwether.

First-time candidate Jon Ossoff is a Democrat with a national security background. His GOP opponent is former Georgia Secretary of State Karen Handel.

---

Bajak reported from Houston

---

EDITOR'S NOTE: This story has been corrected to delete an erroneous reference to the state election spokeswoman saying she would not know until Friday if the state had thoroughly examined its elections systems. In fact, she said she would not know until then whether the state had requested a full forensic examination from DHS and CERT.

  • Associated Categories: Associated Press (AP), AP National News, AP Online National News, Top General short headlines, AP Online Headlines - Washington, AP Elections, General Election News, AP Business, AP Online - Georgia News, AP Online Headlines - Georgia News, AP Technology News
© Copyright 2019 AccessWDUN.com
All rights reserved. This material may not be published, broadcast, rewritten, or redistributed without permission.
Japan's Crown Prince Naruhito starts 5-day visit to Denmark
Japan's future sovereign, Crown Prince Naruhito, has started a five-day, planned visit to Denmark, after the Japanese parliament last week passed a law allowing his father, Emperor Akihito, to abdicate
10:00PM ( 5 minutes ago )
Deadlocked jury in Cosby trial wraps up for the night
The jury in Bill Cosby's sex assault trial is going back to its hotel for the night after failing to resolve a deadlock that's threatened to end the case without a verdict
9:56PM ( 9 minutes ago )
The Latest: Corrections head grateful for inmates' capture
Georgia's top corrections official said he's relieved the escaped inmates sought in the killings of two prison guards have been caught
9:56PM ( 10 minutes ago )
Associated Press (AP)
Dems, GOP join on ballfield as they don't in Congress
Republicans and Democrats join on ballfield in friendly rivalry tinged with worry about their wounded colleague
9:33PM ( 32 minutes ago )
Australian prime minister says he 'channels' Trump in speech
Australia's prime minister denied he was impersonating President Donald Trump during a recent speech, instead describing his performance as "lighthearted and affectionate channeling."
9:24PM ( 41 minutes ago )
APNewsBreak: About 4,000 more US troops to go to Afghanistan
A Trump administration official says the Pentagon will send almost 4,000 additional American forces to Afghanistan, hoping to break a stalemate in a conflict that has now passed to a third U.S. commander-in-chief
9:05PM ( 1 hour ago )
AP Online Headlines - Washington
The Latest: Top Judiciary Democrat wants Comey subpoenaed
The top Democrat on the Senate Judiciary Committee is encouraging the panel's Republican chairman to subpoena former FBI Director James Comey if he won't willingly come before the committee
6:02PM ( 4 hours ago )
Trump uses social media to question probe of his campaign
President Donald Trump is complaining on social media about the wide-ranging investigation of Russian interference into the U.S. election
1:43PM ( 8 hours ago )
The Latest:
House Democratic Leader Nancy Pelosi is lashing out at "sanctimonious" Republicans _ who are suggesting vitriolic political rhetoric from the left may be partially to blame for the shooting that wounded GOP Congressman Steve Scalise
12:00PM ( 10 hours ago )
AP Elections
Gillespie's close call a sign for moderate Republicans
Ed Gillespie's shocking near-defeat in the Virginia GOP primary for governor Tuesday highlights a hard truth for centrist Republicans in the age of President Donald Trump
4:25PM ( 1 day ago )
Trump affects Virginia primaries, but not as expected
President Donald Trump had an outsized effect on Virginia's primary contests for governor, but not in the ways most people expected
4:12AM ( 1 day ago )
Ed Gillespie wins GOP nomination, will face Northam
Ralph Northam has won the Democratic nomination in Virginia's closely watched race for governor and will face Republican nominee Ed Gillespie in the general election
12:11AM ( 1 day ago )
General Election News
10 Things to Know for Friday
Among 10 Things to Know: Overheated rhetoric faulted in attack on GOP lawmakers; new details emerge on U.S. student's release by North Korea; NCAA penalizes Louisville coach Rick Pitino.
9:35PM ( 31 minutes ago )
Clippers, city of Inglewood negotiate on proposed new arena
The Inglewood City Council unanimously approved an exclusive negotiating agreement with the Los Angeles Clippers that could lead to building an arena for the NBA team across the street from the future home of the NFL's Chargers and Rams
9:23PM ( 42 minutes ago )
Cubans brace for worst as Trump takes aim at Obama opening
President Trump is expected to give America's Cuba policy its second major change in three years during an appearance in Miami on Friday, reviving the Cold War goal of starving Cuba's communist system of cash
9:01PM ( 1 hour ago )
AP Business
Japan's Crown Prince Naruhito starts 5-day visit to Denmark
Japan's future sovereign, Crown Prince Naruhito, has started a five-day, planned visit to Denmark, after the Japanese parliament last week passed a law allowing his father, Emperor Akihito, to abdicate
10:00PM ( 6 minutes ago )
Deadlocked jury in Cosby trial wraps up for the night
The jury in Bill Cosby's sex assault trial is going back to its hotel for the night after failing to resolve a deadlock that's threatened to end the case without a verdict
9:56PM ( 9 minutes ago )
The Latest: Corrections head grateful for inmates' capture
Georgia's top corrections official said he's relieved the escaped inmates sought in the killings of two prison guards have been caught
9:56PM ( 10 minutes ago )
Trump to announce plan to stop cash flow to Cuban military
White House says President Donald Trump plans to announce a revised Cuba policy that's aimed at stopping the flow of U.S. cash to the country's military and security services.
9:53PM ( 13 minutes ago )
California looks to boost marijuana, block immigration jails
California lawmakers voted Thursday to set rules for the state's nascent marijuana industry and to quash the growth of federal immigration detention as part of a $125 billion state budget lawmakers approved for the next fiscal year
9:53PM ( 13 minutes ago )