Live data from Hacker News

Governor vows criminal prosecution of reporter who found flaw in state website

missouriindependent.com

381–390 of 705 posts

Re: Governor vows criminal prosecution of reporter who found flaw in state website

#381

Earlier quoted context omitted.

I can't stress how differently power works in the Southern States (EDIT: Missouri is a midwestern state officially, but I've always considered it part of the South). It's a very traditional place, where you do not dare contradict, let alone correct, your boss. There is none of this "avoid surrounding yourself with sycophants because they will only tell you what you want to hear" business. There is no upside to speaki…

As a species I feel we need a means to overcome this problem within organizations, and demonstrate convincingly to others that we have done so. Chernobyl and Fukushima were also both created by a culture of deference to higher-ups. The anti-nuclear crowd were wrong about the science, but may have had a point once you consider human fallibility.

> Chernobyl and Fukushima were also both created by a culture of deference to higher-ups

Chernobyl suffered from compounding of reactor and test design flaws and human error. Fukushima suffered from (retrospectively) insufficient risk assessments, which resulted in a design meeting a rare event beyond it design limit sooner than expected.*

I'm unaware of a human society, in fact any animal society, where politeness does not involve some degree of deference. So saying these accidents were caused by a culture of deference is essentially meaningless without some more "who, what, why, how" and importantly 'how much' and 'compared to what'.

From the IAEA report: "This common mode failure reached a scale considerably beyond that usually addressed in the assessment of BDBAs. [ed: beyond design basis accident]". https://www-pub.iaea.org/MTCD/Publications/PDF/AdditionalVol...

https://www.coursera.org/lecture/intercultural-communication...

Re: Governor vows criminal prosecution of reporter who found flaw in state website

#382

I try to be an optimistic person, I really do. I try to remind myself that the sky isn't literally falling, and that the world is a more generally pleasant and peaceful place today than what it has been throughout much of history. But. Every time I see something like this, it just about drains my spirit to nothingness. I want to embrace nihilism and just quit giving a fuck about anything or anybody when I see stupidi…

> It really is hard sometimes, to not just withdraw into a shell of isolation and decide "fuck it, this world is too damned stupid for me to bother with."

In moderation, I think this is actually the correct response. Unless you live in Missouri, who cares what stupid things the Governor of Missouri says?

In a previous era, you never would have heard about this story at all. It's just a politician in a minor state trying to score some political points. It's very unlikely they'll actually charge the reporter with anything, much less convince a jury to convict.

In today's connected world, it's easy to get news from anywhere at anytime and be outraged. Sometimes you just have to ignore it for your own sanity.

Re: Governor vows criminal prosecution of reporter who found flaw in state website

#383

Earlier quoted context omitted.

Who browses the web without the DevTools exposed by default? I don't know how to make the web work without "fixing" web pages before attempting to read them.

Who browses the web with Dev Tools exposed by default? Why do you feel the need to "fix" every web page you look at?

websites attempting to poorly comply with cookie banners and other GDPR regs that block a site from working without accepting something. I just display:none the offending elements and then remove the overflow:hidden. Disabling JS usually works, but sometimes the images in the page are lazy loaded via JS and will not load without.

Re: Governor vows criminal prosecution of reporter who found flaw in state website

#384

After the Affordable Care Act went into effect I signed our company up for our state's marketplace. While browsing our plan options, I noticed the url used a scheme like marketplace.org/employers/341/plans.aspx. Of course, I tried changing the number in the url to 342 to see what happened. To my astonishment, it loaded up the next company's plans, including a list of employee names, ages, plan cost, and SSNs. After I…

I don't think you're coming out of this looking too great, either. After finding the vulnerability, you then exploited it to gain an advantage, in addition to reporting it.

Re: Governor vows criminal prosecution of reporter who found flaw in state website

#385

Earlier quoted context omitted.

Step one: Press Ctrl Step two: Press U

1. Click View in menu bar 2. Hover over developer menu item 3. Click View Source Three-step process - even more nefarious!

Y'all are going to prison now, I hope it was worth it! =]

Re: Governor vows criminal prosecution of reporter who found flaw in state website

#386
post #66

Earlier quoted context omitted.

This could actually become illegal in the UK. The official secrets act might be amended to make it illegal to embarrass the state...

An Act of Parliament which would ironically embarrass the state in itself. Unsurprising from the same cast of muppets who wanted to use local newsagents to verify your age for internet pornography and make encryption illegal. It’s not even a partisan thing, it seems like almost all our major parties seem to lose 40 IQ points when the internet is involved. Everyone from Blair onwards has been a tinpot authoritarian wh…

I don't think they had the IQ in the first place.

More than half of sampled Maps couldn't calculate the probability of two heads in a row from a fair coin

Re: Governor vows criminal prosecution of reporter who found flaw in state website

#387
post #307

Earlier quoted context omitted.

Nearly all politicians prosecute reporters? No, I'm pretty sure that is just the fascists.

> pretty sure that is just the fascists. i’m not from the US, but is it common in the US to use these kinds of accusations? seems ultra far fetched.

Just think how much trouble we would have saved if only we'd been able to call Mussolini a Fascist in the 30s.

Re: Governor vows criminal prosecution of reporter who found flaw in state website

#388
post #307

Earlier quoted context omitted.

Nearly all politicians prosecute reporters? No, I'm pretty sure that is just the fascists.

> pretty sure that is just the fascists. i’m not from the US, but is it common in the US to use these kinds of accusations? seems ultra far fetched.

Is prosecuting reporters not, like, definitionally fascist?

Re: Governor vows criminal prosecution of reporter who found flaw in state website

#389

Earlier quoted context omitted.

> After I shopped a few other companies to see how our plans compared Yeah once you start using a vulnerability maliciously to obtain confidential data for your own personal gain, even if its a stupid vulnerability, you're not really good-guy security researcher anymore. If all you did was the bare minimum to demonstrate the vuln exists, that's cool. If after you do that you continue to use it to obtain confidential…

Browsing the different plans is not malicious. Jesus. And the details of different plans is not the kind of confidential info that innately deserves protection. Investigating or recording personal information would be bad, but they didn't do that.

It wasn't just plan details though... They accessed names, SSNs, etc.

Re: Governor vows criminal prosecution of reporter who found flaw in state website

#390
post #57

Seriously, the government should have experts on hand who can translate tech into concepts they can understand. This is unacceptable. Imagine HTML is a TV in Social Security office. The way the storage of SS numbers was designed, is that they are hidden in a backroom, however, anyone can come into the office and scream a persons name to view all the information on the screen. The flaw is clearly in the system. I foun…

The states Chief Information Security Officer left the post on Friday https://www.govtech.com/workforce/missouri-ciso-stephen-meye... didnt see anyone mention that elsewhere in relation to this story.

getting a 403 here without a vpn, but https://cybersecurity.mo.gov/ doesn't look like its been updated since 2018 The last CISO left in 2018 (~3months after the current governor took office), and the current ciso was appointed by interim then https://www.govtech.com/blogs/lohrmann-on-cybersecurity/miss...

Post reply on HN