EXCLUSIVE: Pandemic stalling election security fixes
Analysis finds local election websites still not using basic security measures
Analysis finds local election websites still not using basic security measures
Analysis finds local election websites still not using basic security measures
The novel coronavirus pandemic is stalling some efforts to improve election security across the country, delaying efforts to install basic security measures on hundreds of local election websites, interviews with top leaders and an exclusive analysis by the National Investigative Unit has found.
Election security is a topic for the annual summer conference of the National Association of Secretaries of State which convenes virtually later this week, the last scheduled NASS conference for all of the nation맥스카지노s top election officials before the general election.
To assess the resiliency of county election websites in states nationwide, the Hearst Television National Investigative Unit asked to once again analyze more than 2,000 web pages where voters may turn to for information about voting, registration, election administration, precincts, poll hours and other suffrage details.
While no American uses those local election websites to cast a ballot, citizens do rely on the information to be accurate so they can exercise their right to vote. A lack of simple security tools, cyber experts and government agencies say, could leave those webpages vulnerable to manipulation, possibly disenfranchising voters who are misled.
The new McAfee analysis found little progress overall in securing those websites with encryption 맥스카지노 identified by the letters 맥스카지노https맥스카지노 in the URL 맥스카지노 and with a federally-validated domain, like .gov, since the worldwide cyber firm맥스카지노s initial analysis for the NIU .
맥스카지노They don맥스카지노t understand맥스카지노
Steve Grobman is McAfee맥스카지노s chief technology officer and led the election website analysis.
To demonstrate for this report how a lack of those two web security tools makes sites easy to spoof, Grobman created a real-looking election website 맥스카지노 walled off in a "sandbox" so actual voters would not stumble upon it 맥스카지노 modeled on a website used by a county in Georgia. He then plastered election misinformation on the simulated site, including a $19 COVID poll tax, to illustrate the threat.
맥스카지노All this information is fake, but it might give them the wrong information,맥스카지노 Grobman warned, which may cause voters to 맥스카지노just not vote at all.맥스카지노
When asked why, in light of the vulnerability and potential repercussions, more counties across the U.S. weren맥스카지노t fixing them by installing encryption and migrating to the .gov domain, Grobman answered simply, 맥스카지노I think they don't understand how critical it is."
Pandemic 맥스카지노put us behind맥스카지노
Indeed, some of the 15 election officials interviewed on-camera for this story conceded the pandemic had delayed efforts to strengthen election security on those websites, although many state-level leaders revealed they don맥스카지노t have the authority to unilaterally mandate it.
Iowa Secretary of State Paul Pate, who serves as the outgoing president of NASS, acknowledged, 맥스카지노COVID has put us behind." New Mexico Secretary of State Maggie Toulouse Oliver said, 맥스카지노we were making progress 맥스카지노 but then the pandemic hit.맥스카지노 Michael Adams, secretary of state in Kentucky, said bluntly, "We got a lot of work to do."
Some secretaries implied other issues, such as COVID-19-related disruption, may be a higher priority right now. Securing county election websites, 맥스카지노may not be the most important things,맥스카지노 Nebraska Secretary of State Bob Evnen said.
Missouri맥스카지노s chief election official, Secretary of State Jay Ashcroft, emphasized more robust security mechanisms are in place elsewhere, for example on state-run election infrastructure, like registration databases. "It's improper to assume that the underlying networks that need to be secure are not secure,맥스카지노 Ashcroft said in the interview.
Dramatic progress
Local election websites in his state did make dramatic progress since the first McAfee analysis in January when only 34.2% of pages had encryption; now, 84.2% do, the cyber company found. Much less improvement was made in use of the .gov domain, however, rising from 6.1% of county election websites to 14%.
The state with the biggest gains was Ohio, with 100% of county election pages now using 맥스카지노https맥스카지노 to secure its sites, up from 61.4% in January, and the only state with all of its counties currently doing so. Pages on .gov rose more sharply, up from just 17% six months ago to 87.5% now.
Frank LaRose is the secretary of state in Ohio and spearheaded the improvements because, he explained, the threat is real.
"One of the most damaging things that our foreign adversaries can do is, is diminish voter confidence by hacking an elections website,맥스카지노 LaRose said in an interview.
Some states far behind
But some states are far behind.
Mississippi is one of the worst states for having encryption and .gov on local election websites, McAfee found. As of July 1, only 17.1% of its counties used encryption for their local election pages and only six percent were on a .gov domain.
"We don't have the authority to force" counties to increase security, explained Secretary of State Michael Watson. He called it "a great question," why more counties have not prioritized those changes.
California did make a little progress on adding encryption, rising to 74.1% of local election websites, up from 65.5% in January. But it made no progress in overall use for .gov, still at 13.8%, or 8 of its 58 counties, the data show.
Alex Padilla, California맥스카지노s secretary of state, blamed it on 맥스카지노a matter of resources.맥스카지노 He said while he can맥스카지노t force counties to change, he intends to stress 맥스카지노voter education is paramount.맥스카지노
Georgia to seek new deadline
In Georgia, which saw disastrously long lines in some places for its June primary, the secretary of state promised in an interview that he'll seek a deadline from each individual county for better security on their election websites.
"We need to get from them a date on when they plan on having it implemented,맥스카지노 Secretary Brad Raffensperger vowed. 맥스카지노It's very important that we also help the county commissioners understand 맥스카지노 how important elections are.맥스카지노
In addition to election security, nearly all of the leaders said in interviews they worry about poll workers deserting at the last minute because of COVID-19 health worries, of postal delays due to a pandemic-fueled crush of absentee ballots, and of an impatient public, increasingly anxious if election results aren't known for days 맥스카지노 including for the winner of the marquee presidential race.
Mark Albert is the chief national investigative correspondent for the Hearst Television National Investigative Unit, based in Washington D.C. April Chunko and Tim Tunison contributed to this report.
Know of election security problems or voter suppression? Have a confidential tip? Send information and documents to the National Investigative Unit at investigate@hearst.com.