Live data from Hacker News

Governor vows criminal prosecution of reporter who found flaw in state website

missouriindependent.com

91–100 of 705 posts

Re: Governor vows criminal prosecution of reporter who found flaw in state website

#91
"... Social Security numbers were contained in HTML source code of the pages."

"Gov. Mike Parson was labeling the Post-Dispatch reporter a 'hacker' and vowing to seek criminal prosecution."

L O L. Everyone who has hit F12 in a browser is now considered a hacker.

I hope the prosecutors and law enforcement come to the right conclusion quickly and tell the governor no crime was committed. My experiences have left me with little faith of that happening.

Re: Governor vows criminal prosecution of reporter who found flaw in state website

#93
If the scenario being proposed is that the reporter publicly searched teachers on the site and then noticed that SSNs were returned in hidden HTML or an endpoint returned it from an API directly, that is a facepalm and they’re fine.

If the reporter searched teachers and located (for example) their teacher ID, then discovered an endpoint (from looking at the JS) that took the ID as input and returned an SSN, they have potentially violated the CFAA (as written).

Do I agree that they should be prosecuted? No.

Is the CFAA a terrible law that criminalizes most netsec research? Yes.

Re: Governor vows criminal prosecution of reporter who found flaw in state website

#96
This is what happens now when the media is portrayed as a political actor and everything can be "the other sided".

“political game by what is supposed to be one of Missouri’s news outlets.” Now they get to ignore any and all responsibility and the governor is seen as standing up to the liberal media. It did not even have to be a big deal, just fix it, say its been resolved and move on. Everything is gamified and politicized now; to the point they are willing to send someone to jail over their own flaw. Its not even about being good leaders and helping citizens its just about winning elections and owning the libs or conservatives or your favorite brand of "snowflake". Human decency has left the building. I wish we could go back to business as usual but we have really entered a post truth society.

Re: Governor vows criminal prosecution of reporter who found flaw in state website

#100

Quote from the St Louis Post Dispatch article is even more groan-worthy: "In the letter to teachers, Education Commissioner Margie Vandeven said “an individual took the records of at least three educators, unencrypted the source code from the webpage, and viewed the social security number (SSN) of those specific educators.” I guess webpages are kinda like encryption for idiots.

"unencrypted the source code" means they ran an unminify tool. Very advanced; criminal masterminds. /s
Post reply on HN