Thread by @realZiiggii

So NOW we know ARLO was used in GA for the recount yesterday...
“Georgia’s first statewide audit successfully confirmed the winner of the chosen contest and should give voters increased confidence in the results,” said Ben Adida, Exec Dir of VotingWorks."
sos.ga.gov/index.php/elec…

the "report" is horrible with absolutely NO information other than from a 30k ft view.

sos.ga.gov/admin/uploads/…

REMINDER: (I know most ppl have heard/seen this) ARLO is the "open source" auditing software that the DHS (CISA) made a substantial investment in and pushed State's to adopt BEFORE the 2020 election. Several of the current states that have "issues" are the same that piloted prog.

ALSO: the "creator" of ARLO is a self described Never Trump San Fran leftist. Same person I pulled the quote from on the GA SoS website announcement.

🤔
Where is this audit?
Why isn't it public?
What software/firmware versions were approved by GA?
What versions were seen in the audit?

oh and about that little box around "assessment" which was a reference to CISA statements - it's a link... the GA Sec of State sends citizens to this:
searchsecurity.techtarget.com/news/252491788…

A FREAKING ARTICLE BY A NASDAQ TRADED CYBERSECURITY INDUSTRY MAGAZINE ! 🥴

Not even to "official" CISA statements...

Oh and they also just so happen to have offices in ATL...

@SidneyPowell1 you may want to make sure your investigators make it down to Huntsville, AL if they haven't already.

"Pro V&V, based in Huntsville, Alabama is a U.S. Election Assistance Commission-certified Voting System Test Laboratory (VSTL)."

@SidneyPowell1 Pro V&V "validated" Dominon in 2017
provandv.com/2017/02/10/pro…

@SidneyPowell1 The "read more" link at the bottom of that page goes to 👇

@SidneyPowell1 this company is shady... they are a "certified" elections testing lab that has no other news posted other than the Dominion stuff AND their entire website is basically a Wordpress (best known for blogging) templated "theme".

@SidneyPowell1 is there no one on their staff that can code up a decent website? Surely they have enough capital (gov't contracts) to hire someone to code a nicer one for them if no one on staff wanted to do it properly...

right?

@SidneyPowell1 there are no listed employees on the company website or even on the EAC.gov website.

@SidneyPowell1 here's a name
eac.gov/sites/default/…

@SidneyPowell1 here's his LinkIn
linkedin.com/in/jack-cobb-b…

@SidneyPowell1

@SidneyPowell1 Wyle Laboratories is a DoD & NASA contractor
nasa.gov/centers/ames/r…

@SidneyPowell1 Acterna is a network company that makes testing equipment for fiber optic transport networks.
bloomberg.com/profile/compan…

@SidneyPowell1 really interesting resume this guy has...

@SidneyPowell1

@SidneyPowell1 well at least we know there was a report generated. Here's one he did for VA in 2014
wired.com/wp-content/upl…

@SidneyPowell1 "Pro V&V, meanwhile, **is one of only two testing labs** that has both been certified by the US [EAC] and accredited through the [NIST] National Laboratories Accreditation Program."
mobileidworld.com/voatzs-mobile-…

@SidneyPowell1 "The testing by Pro V&V evaluated the voting equipment's functionality. **It didn't grade the security** of the $107 million voting system by Denver-based Dominion Voting Systems."
ajc.com/news/state--re…

@SidneyPowell1 Pro V&V "certified" the Dominion voting system for GA in 2019 but DID NOT evaluate the systems security?

How in the world were they able to "certify" the system then?

@SidneyPowell1 "The certification test results, released Monday, indicated that touchscreens, election computers, ballot scanners and other machinery **can handle the stresses of an election**."

what does that even mean?

@SidneyPowell1 🤔 wonder where one could find the reply to this letter to Mr. Cobb from OR Senator Wyden?
wyden.senate.gov/imo/media/doc/…

@SidneyPowell1 @RonWyden can you point a concerned citizen to any response made by a Mr. Jack Cobb to this letter from you in 2017?
wyden.senate.gov/imo/media/doc/…

@SidneyPowell1 I found one report by Pro V&V submitted to GA SoS at the beginning of October for a software update. The redaction is just the hash for the software version being reviewed.
documentcloud.org/documents/7222…

@SidneyPowell1 "U.S. District Judge Amy Totenberg is presiding over a long-running lawsuit... activists argue the system places an unconstitutional burden on the right to vote because voters cannot be confident their votes are accurately counted."
startribune.com/with-time-shor…

@SidneyPowell1 "A bug in the touchscreen machines and a hasty software update underscore that the machines aren't ready for use, they say."

that "bug" is what was discussed in the report above.

@SidneyPowell1 FTA:
"The election integrity activists submitted declarations from two computer science experts who reviewed the Pro V&V report. They said the evaluation was insufficient to verify the cause of the problem and the effectiveness of the solution."

@SidneyPowell1 "The experts also said the report indicates multiple changes to the source code, meaning there's a greater likelihood of unintended side effects and opening the door for hackers."

@SidneyPowell1 "The safeguards and testing outlined by the state to mitigate those risks are inadequate, the experts said."

@SidneyPowell1 oh this is new:

"The process of updating the software requires completely replacing the core of the Dominion software on every voting machine, one of the experts, University of Michigan computer science professor J. Alex Halderman, testified last week..."

@SidneyPowell1 this seems kinda important:
"Kevin Skoglund, another of the activists' experts, told the judge the EAC certification of a voting system would be voided if the change was made without the commission's prior written approval."

@SidneyPowell1 "But the update was distributed to county election officials last week with instructions to install it on their machines."

@SidneyPowell1 "Marilyn Marks, executive director for the Coalition for Good Governance, a plaintiff in the suit, rejected that."

@SidneyPowell1 maybe you'd like to have your team reach out to her for more information as to this litigation? I'd think there may be some other stuff they can add.

@SidneyPowell1 a thread by @ericgeller of politico about Pro V&V report re: the Voatz mobile app referenced above. Seems Pro V&V does not have a very good history of finding security issues in the software they review and "certify"

https://twitter.com/ericgeller/status/1286021850607255560

@SidneyPowell1 @ericgeller OUCH

https://twitter.com/dguido/status/1286024313104195588

@SidneyPowell1 @ericgeller So are there any curious journalist out there willing to challenge the GA Sec of State on why anyone should trust the Pro V&V review that they just conducted for the state?

@SidneyPowell1 @ericgeller hey @molmccann make sure that the team sees this info regarding Pro V&V.

I know everyones mentions have been blowing up the last few days. IDK if any of it is new or has already been combed through, but found places to raise legal arguments possibly.

@SidneyPowell1 @ericgeller HA - Pro V&V is a founding member of the CISA's "Election Infrastructure Subsector Coordinating Council"
cisa.gov/sites/default/…

@SidneyPowell1 @ericgeller "The mission of the Council is to advance the physical security, cyber security, and emergency preparedness of the nation’s election infrastructure..."

🤔