Voice of America
06 Feb 2021, 11:35 GMT+10
BOSTON - Leaders of the federal agency overseeing election administration have quietly weakened a key element of proposed security standards for U.S. voting systems, raising concern among voting-integrity experts that many such systems will remain vulnerable to hacking.
The Election Assistance Commission is poised to approve its first new security standards in 15 years after an arduous process involving multiple technical and elections community bodies and open hearings. But ahead of a scheduled Wednesday ratification vote by commissioners, the EAC leadership tweaked the draft standards to remove language that stakeholders interpreted as banning wireless modems and chips from voting machines as a condition for federal certification.
The mere presence of such wireless hardware poses unnecessary risks for tampering that could alter data or programs on election systems, say computer security specialists and activists, some of whom have long complained than the EAC bends too easily to industry pressure.
Agency leaders argue that overall, the revised guidelines represent a major security improvement. They stress that the rules require manufacturers to disable wireless functions present in any machines, although the wireless hardware can remain.
In a Feb. 3 letter to the agency, computer scientists and voting integrity activists say the change "profoundly weakens voting system security and will introduce very real opportunities to remotely attack election systems." They demand the wireless hardware ban be restored.
"They're trying to do an end run to avoid scrutiny by the public and Congress," said Susan Greenhalgh, senior advisor on election security for Free Speech for People, a nonpartisan nonprofit, accusing agency leaders of bowing to industry pressure.
Seven members of the commission's 35-member advisory board including its chair, Michael Yaki, wrote EAC leadership on Thursday to express dismay that the standards were "substantially altered" from what they approved in June. At the very least, the wrote, they deserve an explanation why the draft standards "backtracked so drastically on a critical security issue."
Yaki said he was puzzled by the commission's move because "the mantra adopted by pretty much the entire cyber community has been to take radios or things that can be communicated via wireless out of the equation."
Yaki asked in the letter that the commissioners postpone the Feb. 10 vote, but he withdrew that request on Friday after hearing their explanation for the changes. But he said his concerns remain.
A modem ban is especially important because millions of Americans continue to believe former President Donald Trump's unfounded claims that voting equipment was somehow manipulated to rob him of re-election in November, said Yaki. "You don't want to give QAnon enthusiasts or the 'Stop the Steal' people any reason to think that our voting infrastructure is less than perfect."
EAC Chair Benjamin Hovland noted that the agency relied on experts with the National Institute of Standards and Technology to help draft the guidelines. He said objections to the change should not be allowed to hold up the new rules' significant cybersecurity improvements.
The ban on wireless hardware in voting machines would force vendors who currently build systems with off-the-shelf components to rely on more expensive custom-built hardware, Hovland said, which could hurt competition in an industry already dominated by a trio of companies. He also argued that the guidelines are voluntary, although many state laws are predicated on them.
"You have people putting their own personal agenda, putting themselves before the health of our democracy," Hovland said, adding that elections officials are among those supporting the change. "It's so small-sighted the way some people have been approaching this."
Hovland stressed that the amended guidelines say all wireless capability must be disabled in voting equipment. But computer experts say that if the hardware is present, the software that activates it can be introduced. And the threat is not just from malign actors but also from the vendors and their clients, who could enable the wireless capability for maintenance purposes then forget to turn it off, leaving machines vulnerable.
Still, one member of the NIST-led technical committee, Rice University computer scientist Dan Wallach, said that while the changes came as a surprise, they don't seem "catastrophic." Objections shouldn't hold up adoption of the new guidelines, he said.
The states of California, Colorado, New York and Texas already ban wireless modems in their voting equipment. The standards being updated, known as the Voluntary Voting System Guidelines, are used by 38 states either as a benchmark or to define some aspect of equipment testing and certification. In 12 states, voting equipment certification is fully governed by the guidelines.
In 2015, Virginia decertified and scrapped a voting machine called the WINVote after determining that it could be wirelessly accessed and manipulated.
Created to modernize voting technology following the "hanging chad" debacle in the 2000 presidential election, the Election Assistance Committee has never had much authority. That's partly because voting administration is run individually by the 50 states and territories.
But after Russian military hackers meddled in the 2016 election in Trump's favor, the nation's voting equipment was declared critical infrastructure and Democrats in Congress have attempted to exert greater federal control to improve security.
Republicans, however, have stymied attempts at election security reform in the Senate. While the most unreliable voting machines - touchscreens with no paper ballots to recount - have largely been scrapped, privately held equipment vendors continue to sell proprietary systems that computer scientists say remains vulnerable to hacking.
Experts are pushing for universal use of hand-marked paper ballots and better audits to bolster confidence in election results.
Get a daily dose of Austin Globe news through our daily email, its complimentary and keeps you fully up to date with world and business news as well.
Publish news of your business, community or sports group, personnel appointments, major event and more by submitting a news release to Austin Globe.
More InformationNEW YORK, New York - Investors bought up stocks on U.S. markets Monday after President Donald Trump indicated he may pull back on some...
BOSTON, Massachusetts: Private equity investor William Chisholm has agreed to buy the Boston Celtics in a record-breaking deal worth...
WASHINGTON, D.C.: The cost of borrowing for a home in the U.S. ticked up again this week, marking the second straight increase as homebuyers...
CUPERTINO, CALIFORNIA: Apple's ambitious foray into streaming is proving costly, with the company reportedly losing over US$1 billion...
NEW YORK CITY, New York: Gold's record-breaking rally is expected to continue, with Citi Research increasing its three-month price...
BOSTON, Massachusetts: A routine safety mechanism at data centers nearly triggered a regional power crisis last summer, highlighting...
BOSTON, Massachusetts: A routine safety mechanism at data centers nearly triggered a regional power crisis last summer, highlighting...
WASHINGTON, D.C.: U.S. home construction and manufacturing activity surged in February, but rising costs from tariffs and economic...
AUSTIN/SANTA FE: Measles cases in Texas and New Mexico increased to 317 on March 18, up from 294 four days earlier, as the U.S. faces...
WASHINGTON, D.C.: The expansion of U.S. natural gas infrastructure in 2024 significantly boosted the country's ability to transport...
NEW YORK CITY, New York: Severe storms and tornadoes continued to threaten parts of Pennsylvania, New York, and several Mid-Atlantic...
(Photo credit: Lon Horwedel-Imagn Images) The Detroit Pistons won their last game without their All-Star, and it remains to be seen...
