Scoop: @PollPad, whose e-poll books are used in 25 states & D.C., uses "1234" as the tablets' default password, per docs I obtained from @weareoversight.
Major security risk, given that the devices (which handle voter data) often connect to the internet.
subscriber.politicopro.com/article/2019/1…
Major security risk, given that the devices (which handle voter data) often connect to the internet.
subscriber.politicopro.com/article/2019/1…
In docs I obtained, one election official in GA (where the docs came from) voices concern.
"I do hope this password is going to change for the election, since it's been out there for the demos/training and sent thru email."
"I do hope this password is going to change for the election, since it's been out there for the demos/training and sent thru email."
Neither KnowInk nor the Georgia secretary of state's office responded when I asked about this issue.
Several local officials on the email chain in the docs declined to say whether they'd changed the password.
Several local officials on the email chain in the docs declined to say whether they'd changed the password.
Here are the mentions of the default password in the docs we obtained, which include the Poll Pad training guide and emails between KnowInk and Georgia election officials. 
A KnowInk employee mentions the "1234" password in one of the emails. Someone (presumably in Carroll County, which released the docs to American Oversight under FOIA) tried to redact the password, but they didn't do a very good job.
E-poll books like the Poll Pad are largely unregulated. They're not even subject to the federal Voluntary Voting System Guidelines. And as I said, they connect to the internet and handle voter data.
“My concern is that this represents the tip of an iceberg,” @danwallach told me. “If they got something this obvious incorrect, what does that say about the rest of their security engineering practices?”
