Replies

On pages 6 - 7 ES&S clearly states that the manuals that we had requested copies of contained default administrator logins and passwords. See below:

different. The Requestor demands to be “provided” with manuals and other items for the DS2000, DS450, DS850, ExpressTouch, ExpressVote, and ExpressVote XL, all of which are products of ES&S. (See Exhibit A). The Manuals for these voting systems contain detailed information on the structure, logic, operation, and functionalities of the equipment. Specific 4 17 U.S.C.A. S 101 et seq; see also https://www.copyright.gov/what-is-copyright/# Last accessed:

February 21, 2024.
4867-3231-9398.6
Page 7
February 26, 2024

confidential information relating to these items include, but is not limited to, administrator access information (which allows election administrators the ability to access certain menus and make changes to settings, including security settings, contained within the equipment).

The Manuals also include the passwords needed to access such menus and provide detailed Information on the settings and options contained within those menus. Some of the Manuals
also detail how to access, manage and change the election qualification code, administrator passcodes, override passcodes, and election passcodes.

If such information were made widely available, there is a material, substantial risk that nefarious actors could anonymously and openly exploit such information, which poses a serious threat to critical Texas voting system infrastructure.

More images available at https://immutabletruthelections.substack.com/p/the-largest-voting-machine-manufacturers

Any voting system connected to the internet via a modem or network device should not be used to administer elections. We know that they are. ES&S openly admitted that their systems were.

Is there any remote communication technology associated with your proposed solution?

If so, explain.

ES&S RESPONSE

The future upgrade includes adding the remote communications technology both dialup and wireless supported by our other products to this product release. The future EMS network is
based on the proposed technology architecture. The EMS system includes a Windows 2008 R2 Server and Windows 7 Professional Workstations. The Workstations can be either desktop or laptop computers. The Workstations are then connected to the server using a gigabit switch.
The current closed loop LAN was given top priority when adding the wireless and wired data communications to the network architecture. In order to support the wireless and wired communications, a Demilitarized Zone (DMZ) was setup to host an SFTP Server. The DMZ configuration includes a Cisco ASA 5505 firewall and a Windows 2008 R2 Communications
Server. This Server hosts both a SFTP and a Syslog Server. This Server may also host a Routing and Remote Access (RAS) Server if wired (dialup) communications is used.
The firewall supports three VLANs, Outside (Internet), Inside (EMS Network), and DMZ (SFTP Server). The firewall has a specialized configuration, which only allows: l) the SSH protocol Enhancing the State of Colorado Election Process Uniform Voting System Request for Proposal

December 4, 2013

Section 9.0 — General Questions
14 between the Internet and DMZ, 2) the SSH protocol between the DMZ and the EMS Network, 3) the Network Time Protocol (NTP) to set its internal clock, and 4) logging to a Syslog server resident on the Server in the DMZ.

*******The DS200 Tabulators use wireless modems to connect to the SFTP Server via the Internet.********* (my emphasis)

In order to logon to the SFTP Server, each DS200 Tabulator is given a unique User ID and Password. The SFTP Server is configured to only allow the DS200 to push (send) data to the SFTP Server. The DS200 Tabulators are not allowed to pull data from the SFTP Server. The DS200 Tabulators may also use wired (dialup) modems to connect to the SFTP Server via the RAS Server. When using wired modems, before the DS200 Tabulator can communicate to the SFTP Server, it must first authentication with the RAS Server using Windows User ID and Password Authentication.
The Regional Results Transfer application allows results files accumulated on DS200 media devices at remote polling locations to be sent to Election Central from Regional Results Transfer sites. The Regional Results Transfer application runs on a Window 7 PC. The network options
include Ethernet, dialup, wireless mobile broadband and MiFi (mobile WiFi). In order to pull data into the EMS Network, an SFTP Client is installed on one of the ERM
Workstations within the EMS Network. The SFTP Server is configured to only allow the SFTP Client to pull (receive) data from the SFTP Server in the DMZ. The SFTP protocol used by both SFTP Server and SFTP Client is FIPS 140-2 compliant. Attached is a network diagram and a list containing hardware configurations and the required COTS software for the proposed system. The DS850 can be connected to the EMS network to an SFTP Server hosted on the EMS Server.
Each DS850 is given a unique User ID and Password. The SFTP Server is setup so that the DS850 transmitted data is stored directly into the proper election data folder on the EMS Server.