I wonder what his reaction will be when people start hacking the state's websites and outright leaking stuff to just spite him.
Dumb move on his part.
Governor vows criminal prosecution of reporter who found flaw in state website
51–60 of 705 posts
Re: Governor vows criminal prosecution of reporter who found flaw in state website
#52Re: Governor vows criminal prosecution of reporter who found flaw in state website
#53Nobody tell the gov how savagely he’s being raked over the coals in these comments, or tomorrow’s headline will be about a RICO case launched against the hacker collective known as “Hacker News.”
Someone should tweet this discussion to him or his office. #stopclickingviewsource
Re: Governor vows criminal prosecution of reporter who found flaw in state website
#54> No private information was publicly visible, but teacher Social Security numbers were contained in HTML source code of the pages. If it was in the HTML source code, then it was publicly visible, so it is unclear what the article is trying to say.
Perhaps opening and reading HTML source code is widely viewed as an esoteric skill.
Re: Governor vows criminal prosecution of reporter who found flaw in state website
#55I'm from Missouri, this might be the first embarrassment many of you've seen from him, but there have been alot more prior. Truly not a good look for the state that this guy got reelected.
Re: Governor vows criminal prosecution of reporter who found flaw in state website
#56From the article, it sounds like nothing even remotely questionable was done by the reporter who found the flaw: > "According to the Post-Dispatch, one of its reporters discovered the flaw in a web application allowing the public to search teacher certifications and credentials. No private information was publicly visible, but teacher Social Security numbers were contained in HTML source code of the pages."
Oh that is so bad. It's events and negligence like this that give credence to credentialing requirements for software engineering.
Imagine if we had credentialing requirements for elected office…
Re: Governor vows criminal prosecution of reporter who found flaw in state website
#57Seriously, the government should have experts on hand who can translate tech into concepts they can understand. This is unacceptable.
Imagine HTML is a TV in Social Security office. The way the storage of SS numbers was designed, is that they are hidden in a backroom, however, anyone can come into the office and scream a persons name to view all the information on the screen. The flaw is clearly in the system.
I found flaws in Costco system before, I guess I should be in prison for letting them know and saving them thousands of dollars.
Re: Governor vows criminal prosecution of reporter who found flaw in state website
#58Quote from the St Louis Post Dispatch article is even more groan-worthy: "In the letter to teachers, Education Commissioner Margie Vandeven said “an individual took the records of at least three educators, unencrypted the source code from the webpage, and viewed the social security number (SSN) of those specific educators.” I guess webpages are kinda like encryption for idiots.
If it is served via https, it is encrypted. Edit: sorry, forgot the /s
I knew u forgot the /s. If the Governor understood https and encryption, he wouldn't be penalizing the reporter for "View Source". Clearly he got caught at being incompetent and he is doubling down on "how dare you"
Re: Governor vows criminal prosecution of reporter who found flaw in state website
#59Earlier quoted context omitted.
Authoritarian blue states do this crap too. This has nothing to do with the set of policy positions on your party's official platform and everything to do with being a totalitarian jerk, a characteristic that abounds among politicians and high level government officials in general across many parties and nations.
Examples?
Cuomo.
Re: Governor vows criminal prosecution of reporter who found flaw in state website
#60Tweet from the governor:
"Through a multi-step process, an individual took the records of at least three educators, decoded the HTML source code, and viewed the SSN of those specific educators."
>Through a multi-step process >decoded the HTML source code
Somebody has been watching B-list hacker movies.