“Jenny Cohn published an excellent piece of investigative journalism called ‘Election Assistance Commission Investigated ES&S Voting Systems’” by @JimSoper of the National Voting Rights Task Force (NVRTF) 1/ countedascast.org/the-little-bit…
Soper: “It exposes how software from the prominent election system company, ES&S, was installed in several states, including Texas, bypassing standard checks to confirm that election software tested by the federal EAC is the exact same software that is now on those machines.” 3/
“It turns out, it was not, and this was not properly reported.” 4/
Quoting from my piece: “Documents obtained by WhoWhatWhy show that, about 40 days b4 the 2020 election, the EAC quietly investigated concerns that ES&S’s software installation and validation methods cld have left touch-screen voting systems in up to 19 states... 5/
... vulnerable to the installation of malicious or otherwise unapproved software. The documents also suggest that ES&S may have initially misled election officials about this issue.” 6/
Further quoting from my piece: “ES&S was conducting the hash-validation tests itself, as opposed to having the jurisdictions conduct them, a “fox guarding the henhouse” situation…” 7/
“The Little Bits Matter
Elections matter. This should be very clear, especially since Insurrection Day, January 6th, 2021. We need to be able to confirm beyond a doubt that election results are indeed accurate.” 8/
“Early on, the EAC tests election systems to see, in theory, if they work as they should.” 9/
“They then bundle the software into a package, run the package through a “hash function”, which reads everything in the package, and comes up with a very long number, which I will liken to a finger print for the entire package.” 10/
“The EAC then sends the package on to elections officials, who install it onto the election systems. If you scan that software, it should come up with the exact same long number. If not, we have a problem (Texas).” 11/
“The problem was, (1) some ES&S systems in Texas did not have the correct number. And (2) officials who should have reported the problem failed to do so. Once this was discovered, some digging around found that an innocuous looking file called ‘sysload.bmp’ was different.” 12/
“Only every bit matters. All of them. Experts can program a computer to ignore the “bmp” at the end of a file name, read the bits in the file as real computer code, and follow the instructions in that code, whatever it says.” 13/
“People checking out a system are likely to not pay attention to bmp files, as they are ‘just pictures’. Only if that file has been changed, and someone has programmed the system to follow the instructions hidden in the picture, you can rig the system, and nobody knows.” 14/
“This is one of the kinds of insider threats I’m been most concerned about since 2005. The possibility is real, and it’s why we have to double-check our election systems down to the last bit.” 15/
“History is littered with red-flag warnings from engineers that were ignored by politicians and bureaucrats. The o-rings on the space shuttle Challenger are an example. It’s the specialists who understood the implications of seemingly trivial details.” 16/
“In election systems, every little bit matters. When they don’t add up, something could be wrong. When they are not fully reported, something is wrong. I’m not saying that these systems were rigged. I don’t know; but that’s the problem.” 17/
“The three problems Ms. Cohn refers to in her article need to be addressed, soon. They are red-flags. These details matter.
‘Election Assistance Commission Investigated ES&S Voting Systems’” 18/
• • •
Missing some Tweet in this thread? You can try to
force a refresh
2/ In August 2016, a white hat hacker had discovered that Georgia had left its election system, including passwords, exposed online without encryption. Georgia’s election director didn’t fix it. politico.com/magazine/story…
3/ In April 2016 (so four months before Georgia’s election system was found exposed online), Kislyak visited Kennesaw State University, which housed the election center at that time.
Here are links to documents that I obtained from my public records request to the Texas Secretary of State. The documents slam ES&S’s hash validation security protocols. You should read for yourself. First up: Texas examiner Brian Mechler’s report. 1/ drive.google.com/file/d/1u5RM5P…
2/ Letter dated 9/24/20 to ES&S from Keith Ingram, the director of elections for the Texas secretary of state, advising that “our examiner noted that this issue could create a potential security vulnerability as a proper software validation cld not occur.” drive.google.com/file/d/1oDq5-y…
Texas examiner calling ES&S’s protocol a “gift wrapped opportunity to an insider threat, however unlikely...[A]n insider now knows...which file is not being inspected. It’s similar to a bank robber knowing that the camera covering teller #3 is broken.” 3/ drive.google.com/file/d/1Yr5bs9…
We do not have enough control of the Senate. It is crucial that we examine some of the unexpected (poll-defying) Republican senate wins. Based on this chart, my preliminary thinking is to start w/ Montana and North Carolina. If you have access to funding, pls let me know. TY. 1/
I do not know how much this would cost. Rough estimate to is at least $50k each. We would do public records requests for all of the precinct poll tapes and compare them to reported totals, looking for discrepancies. We wld try to prioritize which counties to examine first. 2/
We are at a make or break juncture in our democracy. Election records are kept for only two years. We may never have another opportunity to do this with potentially meaningful effect. 3/
Georgia’s GOP is depraved enough to potentially rig voting machines too. From 2000-2019 they used paperless ES&S/Diebold machines & enjoyed many poll-defying wins. Litigation forced them to buy new machines & @GaSecofState happened to ditch ES&S. 1/ jennycohn1.medium.com/georgia-6-and-…
ES&S was under a microscope at that time. If Georgia was rigging elections, Raffensperger might not have known it or been involved. Due to the embarrassing revelations, the head of the election center, Merle King, “retired” before 2020. 2/
The hacking of Smartech by Russia in 2015 was & is a national security threat. Most of what it found has not been released. The Bush WH had previously deleted 22 M of its emails kept by Smartech. The Obama WH later recovered some of them but produced only a handful. 1/
2/ Members of Congress had sought many of these emails in connection w/ various Bush White House scandals. Then they were told that 22 million of the Bush WH's emails had been "deleted," including the run-up to the Iraq war. newsweek.com/2016/09/23/geo…
3/ Discussion of how the Obama WH found some of the deleted Smartech emails, but produced only a handful to @CREWcrew. snopes.com/fact-check/g-w…