Video

The expert testimony of Mr. Merle King set the stage, Dr. Moffatt's testimony provided the backdrop and chewed the scenery somewhat. The summary provided at the end of this post omits much of what is duplicative of King's testimony, and is thus fairly short. The bottom line on Dr. Moffatt's testimony is, however, that he was unable to make the threats the county claims are attendant to release of the GEMS databases following an election any more realistic. Again, he confirms the extreme vulnerability of the GEMS system to insider manipulation. John Moffatt has a background in computer science. He formed his own consulting firm that created a software company. He still has both corporations, which have clients around the world. He is Pima County’s manager of strategic technical planning. Moffatt says Bryan Crane, the election division’s computer technician, did not take home backups of the election count totals. Moffatt says that the database tapes sent to the Secretary of State contain the current and all the previous databases. So if we are missing the database from the RTA election, the information can be found on the tapes of following elections. In 2006, the Democratic Party gave a large binder of materials to the Board of Supervisors. That is when Moffatt became involved with the elections division. He met with members of the election integrity committee, agreed with most of their security suggestions, and implemented them. He drew the line at releasing the databases. He believes releasing the databases would create a threat. He introduced the concern about reverse engineering, which would allow someone to work backward from the database to learn about the software. When a system uses modems to send votes from the polling places to the GEMS computer, there is the possibility of a man-in-the-middle attack, where the information is first sent to an intermediary, who changes the vote count, then sends it to the GEMS computer. However, Pima County is no longer using modems. Other counties in Arizona and elsewhere are not nearly as secure as Pima. Release of the database could increase their vulnerability. Brakey and Jim March went to other counties to help them improve security. Moffatt only learned of the crop scanner in Crane’s work room in 2007, and he had it removed the next day