3 ms·

I just read the counties response on their website. https://recorder.maricopa.gov/justthefacts/pdf/Maricopa%20EMS%20Diagram%20V2.pdf https://recorder.maricopa.

I just read the counties response on their website. https://recorder.maricopa.gov/justthefacts/pdf/Maricopa%20EMS%20Diagram%20V2.pdf https://recorder.maricopa.gov/justthefacts/pdf/Maricopa%20EM... It shows the EMS rack and the ballot scanners in a network configuration. Since this seems to be windows based from a video I've seen. At least the software they were using to adjudicate votes. Source: https://rumble.com/vbqj0b-dominon-voting-machines-walkthrough-on-how-they-scan-and-adjudicate.html https://rumble.com/vbqj0b-dominon-voting-machines-walkthroug... I expect the EMS rack have a network port and not a wifi port. Back when I was using windows, connecting to the internet through the network port required a setup step, for things like DHCP server for the dynamic ip. I'm curious, does windows remember the configurations it has used in the past? And does windows keep a log file of the network connections it makes, and how often are those logs rotated typically?

jcrawfordor 5y ago
I see, they do some scanning and adjudication on the EMS which means it's a bigger setup - not necessarily the EMS itself, but it needs workstations hooked up to it for the tabulators and adjudicators to use. Based on some research, the way Maricopa County runs things ballots rejected by the precinct tabulators (due to ambiguous markings usually) are sent in to the central office for adjudication, which is what the scanners and workstations connected to the EMS are for. Probably this is done using the sorter bin feature of the ImageCast tabulator but I'm not sure. I have never used the Dominion adjudication system, it depends on the election administrator and state law how they handle rejected ballots and the two states I have familiarity with have made a decision to return them to the voter instead of sending them in (usually asking the voter to complete a new ballot). There are pros and cons either way. But you can see they use a Netgear switch, so we don't even know if it's managed but I'd guess it's not because Netgear's managed line just isn't that popular. There's probably nothing of interest that could be extracted from that switch. Yes, as far as I know all of Dominion's management software is Windows-based. There's a potentially huge amount of forensic data available from the Windows machines but whether or not you could demonstrate internet access just depends. It's the kind of thing you could probably only prove in the positive. Windows does not keep network logs per se, just there are lots of other logs that can be used to infer certain network activity. The reality is that network traffic is so high volume and low value that it's unusual for anything to record it in much detail, it'd just eat a lot of storage and I/O to never get looked at.
- dukeofdoom 5y ago
  Thank you

jcrawfordor 5y ago

I see, they do some scanning and adjudication on the EMS which means it's a bigger setup - not necessarily the EMS itself, but it needs workstations hooked up to it for the tabulators and adjudicators to use. Based on some research, the way Maricopa County runs things ballots rejected by the precinct tabulators (due to ambiguous markings usually) are sent in to the central office for adjudication, which is what the scanners and workstations connected to the EMS are for. Probably this is done using the sorter bin feature of the ImageCast tabulator but I'm not sure. I have never used the Dominion adjudication system, it depends on the election administrator and state law how they handle rejected ballots and the two states I have familiarity with have made a decision to return them to the voter instead of sending them in (usually asking the voter to complete a new ballot). There are pros and cons either way. But you can see they use a Netgear switch, so we don't even know if it's managed but I'd guess it's not because Netgear's managed line just isn't that popular. There's probably nothing of interest that could be extracted from that switch. Yes, as far as I know all of Dominion's management software is Windows-based. There's a potentially huge amount of forensic data available from the Windows machines but whether or not you could demonstrate internet access just depends. It's the kind of thing you could probably only prove in the positive. Windows does not keep network logs per se, just there are lots of other logs that can be used to infer certain network activity. The reality is that network traffic is so high volume and low value that it's unusual for anything to record it in much detail, it'd just eat a lot of storage and I/O to never get looked at.

dukeofdoom 5y ago
Thank you