Garland Favorito on Dominion Security Vulnerabilities at SEB Oct 8 2024

Garland Favorito covers points revealed by experts Clay Parikh and Ben Cotton in the DeKalb GOP v. Raffensperger case concerning the security vulnerabilities that are inherent in Dominion Voting Systems both in Georgia and nationally. Key points include how all Dominion systems worldwide are set up to communicate with each other through a common X.509 certificate value, how a key Admin account password is hard coded and publicly known, how other passwords used are generic, not user specific, thus defeating auditability of updates, how passwords are encrypted instead of being securely hashed, how the encryption keys are stored in clear, plain text in a database table, how the keys can be easily retrieved and used to read passwords and decrypt election results for tampering, and how malware can flip votes even without decryption.

The experts analyzed four authenticated county election databases received via Open Records Requests through VoterGA. They testified that different Georgia county servers were accessed remotely by Dominion in the 2020 General Election and 2021 U.S. Senate runoff. Mr. Cotton also analyzed an authenticated county election management server received from an attorney and explained that it had been connected to an internet mail site. He added that nearly 3,000 .EXE or .DLL executable program files were modified on the server since original installation on 9/12/19. He also found an uncertified compiler that would allow a bad actor to create his own malware programs and violate certification.

As a result of their analysis the experts concluded that the system could not currently pass guidelines required for EAC certification since encryption keys re required to be stored in an encryption module., nor is it “safe and practicable for use” as required for state certification. Fulton Superior Court Judge Scott McAfee concluded that certification is a one-time event, not ongoing, and the case is now headed for the Georgia Supreme Court.

September 30, 2024 DeKalb GOP v Raffensperger hearing https://www.youtube.com/watch?v=iXn6mk9cv-4
October 8, 2024 State Election Board meeting https://www.youtube.com/watch?v=Stzc9yv_xtg