By Patrick Colbeck
Dominion Voting Systems CEO John Poulos testified under oath before the Michigan Senate Oversight Committee today.
Key takeaways:
- Dominion asserts that the Rank Choice Voting module that enables fractional voting was not installed in Michigan [Conflicts with log data obtain as part of Antrim County forensic analysis]
- Dominion asserts that their equipment is not designed to connect to the internet [Conflicts with Dominion design specifications which feature ethernet connections and wireless modem components]
- Dominion CEO refused to discuss individual Dominion employees
The following questions should have been asked during today’s hearing but weren’t:
- What were the responsibilities of Dominion employees assigned to the “Chicago” warehouse in Detroit?
- What is Eric Coomer’s official title and role with Dominion Voting Systems?
- How would Eric Coomer make “F***ing sure of” rigging election for Joe Biden?
- What system components does Dominion have in common with ES&S and Hart voting systems?
- Are your voting systems designed to distribute information over the internet?
- Was any source code transferred to the Chinese government as part of the sale of the security patents to HSBC on behalf of the Chinese Communist Party?
- Does any part of the Dominion Voting system have the capacity to be connected to the internet?
- If connected to the internet, what has been done to secure that connection?
- What is the chain of custody for any media used to transfer voting information?
- What version of the software was loaded on the Michigan voting machines?
- Was the same version loaded on all machines in Michigan?
- Does Dominion partner with any other software or related service providers? If so, who are they? Where are they located?
- Outside of Dominion employees/subcontractors/representatives, are any other individuals or entities authorized to work on Dominion voting machines or software?
- Is any information generated by the Dominion System inside MI shared with or transmitted to any entity outside the US?
- If so, who are they?
- Is any information generated by the Dominion System inside MI shared with Universities and/or institutions of higher learning?
- Are the Ballot Images preserved for every precinct as per federal election law?
- Are there Audit Logs for Voting machines and servers?
- Is any aspect of the Audit Log “voluntary”?
- Do the audit logs detail every action taken from start to finish?
- Are the audit logs synchronized?
- Can the audit logs be altered by the people operating the system?
- How do MI Legislators get a copy of these logs for review?
- Who were the people authorized to operate the system?
- What training and certifications are they required to possess?
- Is each ballot individually numbered?
- Does every individual user of the Dominion Software have their own individual login and password?
- Who is responsible for Federally certifying voting machines in Michigan?
- Who is responsible for certifying all voting machines in Michigan?
- Where are the certification standards located?
- What are the certification standards?
- Did all the MI machines pass this certification process?
- When were they certified?
- What was the last legal date (Safe Harbor) for Software patches or updates prior to the election?
- Within the “Safe Harbor timeframe” were there any Software patches or updates after the legal date for certification?
- How many patches/updates?
- When were the patches/updates done date/time?
- What were the patches/updates (version)?
- Who approved the patches/updates?
- It appears there is much discretion left to the sworn election official with hands on access to the Dominion Machines. What is the control mechanism/procedure to prevent/deter/or alert if, an Election Official manually changes votes and makes this obvious, transparent, and visible to all?
- It appears that in some cases, Dominion pre-loads significant portions of the algorithms and configuration of how the machines tabulates. This is very distressing, what is the transparent and very visible mechanism for everyone to validate this, before an election?
- What voting algorithms were loaded into voting Machines in MI?
- Could a poll worker insert a memory card with voter data or access files in the shared folder.
- Manual Uploading of ballots appears to be a feature of Dominion software, who was permitted to upload these ballots and how many times was this done in the 2020 election?
- What is the “Purge Option” in the Dominion Software?
- Does the Purge of Results record who conducted the purge and what votes were purged by candidate?
- Who has access to the central server and where is the manual and security reviews of that software?
- Is there an option to force the vote scanner to “overrun” a preset amount of ballots EVERY time anybody pauses the scan mid-batch?
- Does your company employ a Chief Information Security Officer? If yes, to whom do they directly report?
- How many employees work solely on corporate or product information security?
- In the last five years, how many times has your company utilized an outside cybersecurity firm to audit the security of your products and conduct penetration tests of your corporate information technology infrastructure?
- Has your company addressed all the issues discovered by these cybersecurity experts and implemented all the recommendations?
- Do you have a process in place to receive and respond to unsolicited vulnerability reports from cybersecurity researchers and other third parties?
- How many times in the past five years has your company received such reports?
- Are you aware of any data breaches or other cybersecurity incidents in which an attacker gained unauthorized access to your internal systems, corporate data or customer data?
- If your company has suffered one or more data breaches or other cybersecurity incidents, have you reported these incidents to federal, state or local authorities?
- Has your company implemented the best practices described in the National Institute of Standards and Technology (NIST) 2015 Voluntary Voting Systems Guidelines 1.1?
- Has your firm implemented the best practices described in the NIST Cybersecurity Framework 1.0?
- Were members of the legislature made aware that Dominion Software was used in foreign countries?
- Were members of the legislature made aware that Dominion Software was used in nations such as Venezuela and Cuba?
- Has anyone in the Legislature met with Dominion officials and/or employees?
- Have any members of the legislature been informed of the security vulnerabilities by Dominion?
- Were members of the legislature made aware of security vulnerabilities by members of Congress?
- Were any members of the legislature made aware of security concerns publicly expressed by members of Congress?
- Has Dominion briefed the Congress of security concerns?
- Were any members of the legislature offered “election insurance”?
- Were any members or election officials offered perks or benefits from Dominion?
- Did any Dominion officials offer any kickbacks to members of the legislature?
- Were members made aware that there is no chain of custody with the software?
- Have any U.S. intelligence officials interfaced with Dominion representatives as to the 2020 election?
- Have Dominion officials contacted any members of the legislature or election officials during this 2020 election cycle?
- Are any Dominion employees, such as the security chief, members, or supporters of Antifa?
- Is Dominion a sponsor of the National Association of State Election Directors (NASED)?
- Are Dominion Systems PCI Compliant?
Subsequent to the MI Senate hearing held at 1pm, a Joint Oversight Committee Hearing was held with both Senate and House representatives. This second hearing was adjourned after subpoenas were issued for election data from the City of Livonia and the City of Detroit.
These are all excellent questions deserve answers. Is it there any way for you to get these questions to the appropriate committee so they can be asked? In today’s hearing Sen McBroom put it out there that the guy from Dominion could be called back in to answer further questions…
They were submitted to committee members.
Mr. Colbeck,
Mr. Poulos spent a lot of time talking about the equipment used to process Antrim County absentee ballots. From what I gathered, it was a ‘tabulator only’ setup where the USB drives/cards saving the voting data were securely locked in the tabulators until after polls had closed, the closing tabulator tapes had been printed, and the data card security seals had been cut. It seems to be a relatively simple ‘configuration’, more or less the same as used for in-precinct voting. However, it still requires exact coordination between the ‘ballot configuration card’ and the precinct-specific ballots to avoid ‘reporting errors’.
As you have outlined in other articles, the tabulation equipment configuration used at the TCF Center was much more complex. Mr. Poulos did his best to avoid volunteering details for that configuration. I was frustrated that the line of questioning was not yielding what I had hoped for, so I called my State Senator’s office and asked to have a few of my questions relayed to the Senators in the meeting. I was able to relay the first three to the staff member that answered the phone. Unfortunately, the hearing ended only a few minutes later.
I am concerned that use of ‘shared resources’ to support the 134 counting boards at the TCF center means that the USB data storage and ballot configuration drives may not be secured and sealed, and protect against disclosure against ‘early’ tabulation reporting, as is required by law.
At the conclusion of the hearing, Mr. Poulos’s representative offered to respond to additional questions per written requests. Do you suggest we forward our questions to our Senators for inclusion in material to be sent to Mr. Poulos? Also, I had made some particularly long comments to your ‘Election Fraud In Michigan’ posting. They are still marked as ‘in review’ Were the points I raised valid? They include arguments of likely state-wide election law violations that I have not seen explained elsewhere, and I just want to make sure they are not being overlooked.
God Bless Michigan
God Bless America
Respectfully,
Louis Avallone