Jul 17, 2018

Top election software maker admits it allowed some remote access

Photo: Brendan Smialowski/AFP/Getty Images

Election Systems and Software (ES&S) admitted to installing remote access software on election management systems sold to “a small number of customers between 2000 and 2006,” which could open it up to manipulation by a hacker. The admission came in a letter to Sen. Ron Wyden (D-Ore.) obtained by Axios and first detailed by Kim Zetter in Motherboard.

Why it matters: Remote access meant those systems, which, among other tasks, have tabulated votes from voting machines, could have hypothetically been manipulated by a hacker.

The intrigue: Zetter wrote an earlier story for the NYT on the use of remote access software in voting machines, in which ES&S denied installing the software.

What they're saying:

  • ES&S's letter to Wyden explained the use of remote access software on these machines as an "accepted practice."
  • Sen. Wyden said, "Installing remote-access software and modems on election equipment is the WORST decision for security short of leaving ballot boxes on a Moscow street corner. Congress MUST pass my bill to require paper ballots and audits."

The impact:

  • More than 60% of votes tabulated across the country in 2006 used ES&S election management systems.
  • ES&S says the software was configured to not allow incoming connections, which significantly reduces the risk of an attack but does not outright eliminate it.
  • ES&S says it stopped installing this vulnerable software in 2007, which is when new Voluntary Voter Systems Guidelines from the Election Assistance Commission went into effect.
  • ES&S wrote in the letter that it has confirmed that the election management systems with the remote-access software installed are no longer using the application today.

Go deeper

Trump to invite Russia, South Korea, Australia and India to G7 summit

President Trump at Cape Canaveral, Florida, on Saturday. Photo: Saul Martinez/Getty Images

President Trump told reporters on Saturday evening he postpone the G7 summit to September and expand the meeting to more nations.

Details: Trump said he would invite Russia, South Korea, Australia and India to the summit, according to a pool report. "I don’t feel that as a G7 it properly represents what’s going on in the world. It’s a very outdated group of countries," he said.

Updated 25 mins ago - Politics & Policy

George Floyd protests: What you need to know

Thousands of protesters march in Denver, Colorado, on May 30. Photo: Michael Ciaglo/Getty Images)

Curfews are being imposed in Portland, Oregon, and Cincinnati, while the governors of Georgia, Kentucky, Ohio and Texas activated the National Guard following unrest in the states, per AP.

The big picture: Floyd's fatal run-in with police is the latest reminder of the disparities between black and white communities in the U.S. and comes as African Americans grapple with higher death rates from the coronavirus and higher unemployment from trying to stem its spread.

Updated 3 hours ago - Health

World coronavirus updates

Data: The Center for Systems Science and Engineering at Johns Hopkins; Map: Axios Visuals

India extended its nationwide lockdown — one of the longest-running in the world — on Saturday, as deaths and infections rise, per Johns Hopkins. The country also moved to allow restaurants, hotels and churches outside of hotspots to begin reopening.

By the numbers: Nearly 6 million people have tested positive for COVID-19 worldwide and over 2.5 million have recovered from the virus. Over 367,000 people have died globally. The U.S. has reported the most cases in the world with over 1.7 million.