In 2017, I approached RI's Board of Elections concerned that our Internet-connected election management system carried elevated risks. Thankfully, the Board has been open to input and responded with changes. ES&S sold the same solution to other states. /1
bostonglobe.com/metro/rhode-is…
bostonglobe.com/metro/rhode-is…
Some of those customers are identified in the August 08 Vice story written by @kimzetter. Ideally, EOs in those jurisdictions are aware of those risks and have implemented the sufficient security controls to address the risks in this design. /2
vice.com/en_us/article/…
vice.com/en_us/article/…
@KimZetter Multihoming core election management systems used to configure ballots, program DS200s, and tabulate official results behind the same firewall that exposes AnyConnect VPN services and an election reporting server is suboptimal design for critical elections infrastructure. /3
@KimZetter There is too much at stake in elections, whether local, state, or federal, to surrender any bit of integrity or confidence in our voting systems to the desire for speedy election night reporting.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
