APNewsBreak: Georgia election server wiped after suit filedBy FRANK BAJAK
October 26, 2017
Well, this is interesting, look at the date
A computer server crucial to a lawsuit against Georgia election officials was quietly wiped cleanby its custodians just after the suit was filed, The Associated Press has learned.
•. The server’s data wasdestroyed July 7 by technicians at the Center for Elections Systems at Kennesaw State University, which runs the state’s election system. The data wipe was revealed in an email sent last week from an assistant state attorney general to plaintiffs in the case that was later obtained by the AP. More emails obtained in a public records request confirmed the wipe.
•. The lawsuit, filed July 3 by a diverse group of election reform advocates, aims to force Georgia to retire its antiquated and heavily criticized election technology. The server in question, which served as a statewide staging location for key election-related data, made national headlines in June after a security expert disclosed a gaping security hole that wasn’t fixed six months after he reported it to election authorities.
WIPED OUT
It’s not clear who ordered the server’s data irretrievably erased. The Kennesaw elections center answers to Georgia’s secretary of state, Brian Kemp, a Republican running for governor in 2018 and the suit’s main defendant. His spokeswoman issued a statement Thursday saying his office had neither involvement nor advanced warning of the decision. It blamed “the undeniable ineptitude” at the Kennesaw State elections center.
•. After declining comment for more than 24 hours, Kennesaw State’s media office issued a statement late Thursday attributing the server wiping to “standard operating procedure.” It did not respond to the AP’s question on who ordered the action. Plaintiffs in the lawsuit, mostly Georgia voters, want to scrap the state’s 15-year-old vote-management system — particularly its 27,000 AccuVote touchscreen voting machines, hackable devices that don’t use paper ballots or keep hardcopy proof of voter intent. The plaintiffs were counting on an independent security review of the Kennesaw server, which held elections staging data for counties, to demonstrate the system’s unreliability.
•. Wiping the server “forestalls any forensic investigation at all,” said Richard DeMillo, a Georgia Tech computer scientist following the case. “People who have nothing to hide don’t behave this way.”
STATE SECURITY
•. The server data could have revealed whether Georgia’s most recent elections were compromised by hackers. The plaintiffs contend results of both last November’s election and a special June 20 congressional runoff— won by Kemp’s predecessor, Karen Handel — cannot be trusted.
•. Kemp and his GOP allies insist Georgia’s elections system is secure. But Marilyn Marks, executive director of theCoalition for Good Governance, a plaintiff, believes server data was erased precisely because the system isn’t secure.
•. “I don’t think you could find a voting systems expert who would think the deletion of the server data was anything less than insidious and highly suspicious,” she said.
NOW YOU SEE IT, NOW YOU DON’T
•. It could still be possible to recover relevant information from the server.
FAILING TO SERVICE THE SERVER
• A 180-page collection of Kennesaw State emails, obtained Friday by the Coalition for Good Governments via an open records search, details the destruction of the data on all three servers and a partial and ultimately ineffective effort by Kennesaw State systems engineers to fix the main server’s security hole.
• As a result of the failed effort, sensitive data on Georgia’s 6.7 million voters — including Social Security numbers, party affiliation and birthdates — as well as passwords used by county officials to access elections management files remained exposed for months.
• The problem was first discovered by Atlanta security researcher Logan Lamb while doing online research in August 2016. He informed the election center’s director at the time, noting in an email “there is a strong possibility your site is already compromised.”
• Based on his review of the emails, Lamb believes that electronic polling books could have been altered in Georgia’s biggest counties to add or drop voters or to scramble their data. Malicious hackers could have altered the templates of voting machine memory cards to skew results. An attacker could even have potentially modified “ballot-building” files to corrupt the outcome, said Lamb, who works at Atlanta-based security firm Bastille Networks.
https://apnews.com/article/877ee1015f1c43f1965f63538b035d3f