WHY IS INTERNET CONNECTIVITY A PROBLEM?

It’s obvious that connecting voting machines directly to the Internet through wireless modems or other means increases the vulnerability of those systems to hacking. Though we have frequently been told that voting machines are not connected to the Internet[1]  this is not always the case. Many states’ voting machines include wireless modems which transmit their unofficial results over the Internet. Some states allow their vote tabulation computers to be connected to the Internet.

These configurations provide increased opportunities for nation-state actors, partisan criminals, hacktivist or other malign attackers to gain access to our voting machines and manipulate and/or disrupt our elections.

Last year, with our allies and over two dozen computer security experts, NEDC sent this letter to the Department of Homeland Security and the U.S. Election Assistance Commission (EAC) is the federal agency responsible for creating federal guidelines for voting systems and certifying equipment to those standards. We urged the agencies to encourage states to discontinue the use of wireless modems.

The EAC has until now refused to issue guidelines banning the use of wireless modems. The EAC has even insisted that “no EAC certified voting system is connected to the Internet,” but that’s only because no vendor has chosen to pursue EAC certification for a voting system configured with wireless modems. The current federal standards would allow wireless modems in federally certified systems and it’s possible if not likely the next version of the federal VVSG will continue this, if citizens don’t speak out.

It’s important to note that the federal guidelines are voluntary; states are free to adopt them or not as they choose and compliance with the VVSG has had no impact on a state’s ability to receive federal funding. But the VVSG help shape the market and a ban on wireless modems and Internet connectivity will send a strong message to states discouraging this practice.

IS INTERNET CONNECTIVITY NECESSARY?

Wireless modems and Internet connectivity are not at all necessary to conduct elections.

Recognizing the significant security threat internet connectivity and wireless modems create, many states have prohibited them in their voting systems, adopting strong and secure methods of transmitting election results without needlessly increasing the exposure of their voting machines to hacks.

Make no mistake, eliminating wireless modems and Internet connectivity will not guarantee our voting machines can’t be manipulated or hacked through corrupted USB sticks, insider attacks or supply chain corruption which is why all votes should be cast on paper ballots and all elections should be audited by manually counting a sample of the paper ballots.

The FBI and Department of Homeland Security have confirmed that our foreign adversaries have targeted election networks in all fifty states for cyber attacks.  The EAC must take these warning deadly seriously and pass the VVSG with an added ban on wireless modems and Internet connectivity in voting systems.

[1] In testimony to the Senate Select Committee on Intelligence, president of the National Association of Secretaries of State, Indiana Secretary of State Connie Lawson testified before the Committee “it is also very important to underscore that voting machines are not connected to the Internet or networked in any way.”