Georgia's Use of Electronic Voting Machines Allowed for Midterms
20.9.2018 securityweek BigBrothers

Judge Amy Totenberg ruled Monday that the state of Georgia's existing plans for the midterm elections to be conducted via some 27,000 Diebold AccuVote DRE touchscreen voting machines must stand. Her remarks, however, suggest that this should be the last time.

Plaintiffs, comprising the Coalition for Good Governance and citizens of Georgia, had filed a Motion for Preliminary Injunction against the Secretary of State for Georgia, Brian Kemp, in an attempt to force a switch to paper-based voting in time for the November elections. The primary argument is that the direct-recording election (DRE) machines to be used cannot produce a paper-based audit trail to verify accurate elections.

This coupled with the exposure of the registration details of 6.7 million Georgia voters on an unprotected internet-facing database, repeated demonstrations that such voting machines can be hacked, federal government advice that audit trails are necessary, and the constitutional right for citizens to vote was the basis of the plaintiffs' argument.

The Secretary of State's response, while insisting that the machines are secure, was primarily focused on the cost, lack of time, and potential confusion that such a late switch could cause.

Judge Totenberg ultimately agreed with the defendants and denied the plaintiff's motion -- but her concluding remarks demand that the state change its attitude in the future. "The State's posture in this litigation -- and some of the testimony and evidence presented -- indicated that the Defendants and State election officials had buried their heads in the sand," she wrote.

She indicated that she is not happy withc the way the state handled "the ramifications of the major data breach and vulnerability at the Center for Election Services" and "a host of serious security vulnerabilities permitted by their outdated software and system operations."

Nor was she happy with the way the state presented its case. "Defendants will fail to address that reality if they demean as paranoia the research-based findings of national cybersecurity engineers and experts in the field of elections." In its response to the Motion, the state had dismissed the plaintiffs' concerns as 'paranoia'.

Furthermore, reading between the lines of her concluding remarks, she intimates that she expects the case to come back before future elections, says that she will insist "on further proceedings moving on an expedited schedule", and concludes, "The 2020 elections are around the corner. If a new balloting system is to be launched in Georgia in an effective manner, it should address democracy's critical need for transparent, fair, accurate, and verifiable election processes that guarantee each citizen's fundamental right to cast an accountable vote."

Robert A McGuire, lead attorney for Coalition for Good Governance, expressed disappointment in the ruling, but confirmed that the case will continue. "We will continue to press these voting rights claims, and we fully expect to prevail in the end," he commented.

Bruce P. Brown, Atlanta attorney for the Coalition, added, "Judge Totenberg's decision is broadly consistent with the positions that the Coalition is taking in the case -- particularly the urgent need for Georgia, as soon as feasible, to switch to paper ballots."

Morrison & Foerster partner David Cross, attorney for the citizens of Georgia among the plaintiffs, agrees. "We read the decision as essentially saying it's too late for something at this point, but for the 2020 elections, there will be a change."

Cross told SecurityWeek, "Although the court denied the preliminary injunction, it finds that the current system is critically unsecure and that those entrusted with securing the election are remarkably unqualified and ill-informed about election security. The court emphasizes that our case will proceed expeditiously and finds that we ultimately are likely to win on the merits, which means the state will have to adopt a new, secure system before the 2020 elections. Ironically, it seems the court had little confidence in the state's ability to implement paper ballots now because of the ineptitude that certain election officials exhibited in this case."

Marilyn Marks, the Executive Director of Coalition for Good Governance, said, "The Secretary of State Kemp, the State Election Board, and the bi-partisan Fulton County Election Board refused to act in response to serious and repeated warnings from Congress, federal agencies, National Academy of Science and scores of expert voting system computer scientists that the paperless system is unfit for conducting public elections."

In 'Securing the Vote: Protecting American Democracy', compiled in January 2017 and recently published as a paperback and online, The National Academies warn "According to assessments by members of the U.S. Intelligence Community, actors sponsored by the Russian government 'obtained and maintained access to elements of multiple US state or local electoral boards.' While the full extent and impact of these activities is not known and our understanding of these events is evolving, there is little doubt that these efforts represented an assault on the American system of representative democracy."

One of the recommendations from the Academies is that "Voting machines that do not provide the capacity for independent auditing (e.g., machines that do not produce a voter-verifiable paper audit trail) should be removed from service as soon as possible." Georgia's Diebold AccuVote systems fall within this category.