This state accidentally posted voting system passwords online

Voting system passwords were mistakenly put on the Colorado Secretary of State’s website for several months before being spotted and taken down, but the lapse did not pose an immediate threat to the upcoming election, said state election officials Tuesday.

The passwords were only one of two that are needed to access any component of Colorado’s voting systems, and are just one part of a layered security system, said Jack Todd, spokesperson for the the Secretary of State’s office, in a statement. The two passwords are “kept in separate places and held by different parties,” he said.

“This is not a security threat,” said Colorado Secretary of State Jena Griswold in an interview on 9News Tuesday evening. She said her office is investigating, that not all of the passwords in the spreadsheet were active and there is no reason to believe there’s been a security breach.

Griswold said workers are changing passwords, looking at access logs and chain of custody books.

She frequently calls Colorado the gold standard for election security, though there have been some hiccups in the past. The error has brought criticism from the chairman of the Colorado Republican Party at a time of heightened scrutiny of the country’s election systems, though U.S. elections remain remarkably reliable.

Colorado law requires that election equipment is surveilled and stored in secure rooms—access to which is guarded, tracked and logged. Colorado voters fill out paper ballots, which are audited after the election.

Election officials learned last week that the spreadsheet, which held the passwords in a hidden tab, was available online. Once the lapse was discovered, Todd said, they acted immediately and informed the U.S. Cybersecurity and Infrastructure Security Agency.

The executive director of the Colorado Clerks Association, Matt Crane, told 9News that while the lapse was concerning, the association was satisfied with the Colorado Secretary of State’s response.

Chairman of the Colorado GOP, Dave Williams, sent a letter to the department Tuesday demanding that, among other things, the secretary of state confirm that the exposed passwords have since been changed.

Earlier this month, a Colorado county clerk, Tina Peters, was sentenced to nine years behind bars for a data-breach scheme based in false claims about voting machine fraud in the 2020 presidential race.

—Jesse Bedayn, Associated Press/Report for America

https://www.fastcompany.com/91219069/state-accidentally-posted-voting-system-passwords-online?partner=rss&utm_source=rss&utm_medium=feed&utm_campaign=rss+fastcompany&utm_content=rss

Établi 3mo | 30 oct. 2024 à 13:30:07


Connectez-vous pour ajouter un commentaire

Autres messages de ce groupe

LinkedIn’s big bet on TikTok-style video is paying off in a big way

Is LinkedIn the new TikTok? 

Short-form video is now the fastest-growing category on LinkedIn, growing at twice the rate of other post formats on the platform. According to LinkedIn

5 févr. 2025 à 07:50:06 | Fast company - tech
Robinhood halts Super Bowl betting contracts after CFTC request

Robinhood said on Tuesday it is rolling back the event contracts that would let users bet on the result of the

5 févr. 2025 à 00:50:09 | Fast company - tech
The value of Trump’s memecoin has dropped more than 75% since inauguration

Donald Trump drew plenty of criticism by launching his own branded memecoin three days before his

5 févr. 2025 à 00:50:08 | Fast company - tech
You can try DeepSeek’s R1 through Perplexity—without the security risk

The AI search firm Perplexity routinely lets users try out state-of-the-art large language models on its site, but the company moved quickly to put Chinese company DeepSeek’s new R1 model front an

5 févr. 2025 à 00:50:07 | Fast company - tech
What’s behind Nintendo’s 42% drop in profits?

Nintendo’s profits tumbled as sales of its Switch console lost momentum, prompting the

4 févr. 2025 à 18:10:05 | Fast company - tech
‘I would love to share affection and attention’: This Facebook group connect families with surrogate grandparents

“We want grandparents who want to have pizza nights with us, attend baseball and basketball games, have ice cream dates, take bike rides, just genuinely have fun with us and our boys,” reads one p

4 févr. 2025 à 18:10:04 | Fast company - tech
Apple launches Invites, its event invitation app that takes on Partiful

Apple rolled out its newest iPhone app called Invites, which lets iCloud+ subs

4 févr. 2025 à 18:10:03 | Fast company - tech