State election officials on lookout for hackers
“We got a U.S. Senate seat up for election, so that even makes it more of a target,” Republican Kansas Secretary of State Scott Schwab said.“We’re not going to assume we’re safe, even though we are right now.”
Federal law enforcement officials warn that foreign governments will try to undermine the results and influence public sentiment.
“Russia, China, Iran and other foreign malicious actors all will seek to interfere in the voting process or influence voter perceptions,” read a joint statement from the FBI and other federal security officials last month.
The risks
The dangers aren’t always as clear-cut as changing votes. A greater risk could lie in meddling with the system that decides whether somebody even gets a ballot.
The humble poll book is an Election Day staple. It lists voters and is used to count who has cast ballots. It now often exists in digital form, rather than on paper.
Tinker with the poll books and you’ve disrupted an election.
Hacking poll books on Election Day would create chaos by slowing down voting dramatically as would-be voters fill out provisional ballots.
“It would take forever. The lines would wrap around the block,” said Dan Wallach, who studies election security at Rice University.“People would just say ‘I can’t wait this long to vote’ and then not vote.”
Messing with the poll books doesn’t directly change votes, but strategically causing chaos could shift an election.
“If I can cause long lines in areas that have one partisan direction and everything goes smoothly in areas with a different partisan direction,” Wallach said,“then I can affect the outcome.”
Focus on counties
In Kansas, the 105 counties control those poll books and count the actual votes.
Schwab is focusing on counties as part of efforts to boost security before 2020 because 105 counties means 105 different computer systems. They’re sometimes shared between departments, like between a county clerk and a county treasurer. That creates shared risks when someone falls for something as simple as a phishing email.
“We don’t want somebody in the treasurer’s office saying ‘oh, click here to get a free Xbox’ and then it affects the server that the poll book is on,” Schwab said.
Schwab’s office is looking over state and local systems with the help of a $4.5 million federal grant. Most of that will go to security updates in local offices.
The actual ballot counting is done by county clerks, so Schwab’s office is talking to them about getting things right. The office will look to see whether counties need updates such as better firewalls on computers.
“It’s a profile of the counties that have their exposure,” Schwab said.“What is that exposure and what are the resources needed to make it more secure?”
In Shawnee County, there are multiple levels of security. Data is encrypted and there are backups for things like the poll book. The voting machines and the machines that count the ballots never hook up to the internet.
Shawnee County Election Commissioner Andrew Howell points to another low-tech security measure. The voting machines print paper ballots that can be recounted if needed.
“We did a lot of public input before we purchased equipment,” Howell said. “It was pretty clear to me that the public really preferred to know that all of their ballots would be paper.”
Stephen Koranda is Statehouse reporter for Kansas Public Radio and the Kansas News Service, a collaboration of KCUR,