Investigator finds Colorado voter system passwords were not intentionally posted online
Advertisement
Read this article for free:
or
Already have an account? Log in here »
To continue reading, please subscribe:
Monthly Digital Subscription
$0 for the first 4 weeks*
- Enjoy unlimited reading on winnipegfreepress.com
- Read the E-Edition, our digital replica newspaper
- Access News Break, our award-winning app
- Play interactive puzzles
*No charge for 4 weeks then price increases to the regular rate of $19.00 plus GST every four weeks. Offer available to new and qualified returning subscribers only. Cancel any time.
Monthly Digital Subscription
$4.75/week*
- Enjoy unlimited reading on winnipegfreepress.com
- Read the E-Edition, our digital replica newspaper
- Access News Break, our award-winning app
- Play interactive puzzles
*Billed as $19 plus GST every four weeks. Cancel any time.
To continue reading, please subscribe:
Add Free Press access to your Brandon Sun subscription for only an additional
$1 for the first 4 weeks*
*Your next subscription payment will increase by $1.00 and you will be charged $16.99 plus GST for four weeks. After four weeks, your payment will increase to $23.99 plus GST every four weeks.
Read unlimited articles for free today:
or
Already have an account? Log in here »
Hey there, time traveller!
This article was published 09/12/2024 (360 days ago), so information in it may no longer be current.
DENVER (AP) — A “series of inadvertent and unforeseen events” resulted in Colorado voting system passwords being posted on the Secretary of State’s website, an outside investigator said.
A Denver attorney did not find any intentional wrongdoing by Secretary of State Jena Griswold or staff in her office, but said two policies were violated. Attorney Beth Doherty Quinn suggested in her report, dated Sunday, that the agency require a more thorough review of documents before they are posted on the secretary’s website and better protection of passwords.
The passwords — “only some of which were still active,” Doherty Quinn said — were on hidden tabs in a spreadsheet containing information about county voting systems that was posted on the secretary’s website on June 21. The information had previously been posted as a PDF that could not be manipulated, but an employee suggested posting the information in a spreadsheet software in the interest of transparency. The hidden sheets were discovered on Oct. 24.
The passwords were one of two needed to access components of the Colorado voting system, Griswold’s spokesperson Jack Todd has said. Griswold said it was not a security threat.
The tabs that included the passwords had been hidden in a file kept by a former employee. None of the employees involved in posting the document online knew that hiding tabs was a feature of the software, the investigation found.
The “substantial weight of the evidence” shows the hidden tabs with the passwords were posted “mistakenly, unknowingly and unintentionally,” because the employees involved were unaware the hidden worksheets existed, Doherty Quinn wrote in her report.
Doherty Quinn recommended the office require all passwords to be stored using software called a “password safe,” and to create a checklist of things that need to be reviewed before something is posted on the website, including seeing if there are hidden tabs and removing any metadata.