Confused governor says looking at webpage's HTML is criminal hacking:
Gov. Mike Parson is sick and tired of all these sophisticated, no-good hackers and he's not going to take it any more. It's too bad the Missouri Republican has no idea what he's talking about.
During a Thursday press conference, the confused elected official lashed out at a journalist who reported a vulnerability in an official Department of Elementary and Secondary Education website. The reporter, notably, waited until officials fixed the error before publishing the story. The flaw? The website apparently included teachers' Social Security numbers in the HTML.
"Though no private information was clearly visible nor searchable on any of the web pages, the newspaper found that teachers' Social Security numbers were contained in the HTML source code of the pages involved," reported the St. Louis Post Dispatch.
Parson, who apparently has never heard of "view source," obliquely threatened the Post reporter with prosecution.
"The state is committing to bring to justice anyone who hacked our system and anyone who aided or encouraged them to do so — in accordance with what Missouri law allows AND requires," wrote Parson.
[... - plenty snipped - ...] Parson, in other words, has no idea what he's talking about.
canopic jug augments that with the following other sources:
Governor Mike Parson wishes that ctrl-u or f12 will become illegal. This was actually a breach of personal information, including SSANs, for over 100,000 people.
https://text.npr.org/1046124278
https://www.salon.com/2021/10/14/missouri-governor-threatens-criminal-prosecution-of-reporter-found-security-flaw-in-state-site_partner/
https://itwire.com/security/missouri-goes-after-man-who-looked-at-source-code-on-state-site.html
https://www.rollingstone.com/politics/politics-news/missouri-governor-teacher-data-hacking-1242493/
https://coldstreams.com/2021/10/14/no-it-isnt-missouri-governor-says-viewing-html-source-code-containing-private-data-the-state-published-on-every-page-is-a-crime/
https://abc17news.com/news/missouri/2021/10/14/gov-parson-threatens-legal-action-against-reporter-who-exposed-flaw-on-state-education-departments-website/
https://heavy.com/news/gov-mike-parson-html-source-code-decoded-ssn/
(Score: 3, Interesting) by bzipitidoo on Monday October 18 2021, @03:27PM (1 child)
Heck, I've been criticized just for searching for someone online. One of my cousins was imprisoned for fraud, some kind of scammy tech startup in which they took investor money, and delivered vaporware. First thing that comes up on a search for him is that story. I've never met the guy and didn't know anything about him beyond the family tie, and was just trying to get some genealogy info, not embarrass anyone. (Mind, if you really don't want to embarrass people, shouldn't do any genealogy at all, as that tends to be a rich source of dirt on those relatives who aren't terribly virtuous, but like to pretend they are.) My aunt was unhappy that I got nosy and "uncovered" that about him.
I recall a story about a school equating F5 with a DoS attack. One of the students refreshed the school website repeatedly, and seems their feeble system couldn't handle the load. It's all too common at bad schools to blame the students for every little broken thing, even when it's clearly not their fault. Hack together some incredibly fragile bandage to hold something together, or just cover up that it's broken, then scream bloody murder when anyone so much as looks in that general direction. This governor would fit right into that kind of school.
(Score: 1, Insightful) by Anonymous Coward on Monday October 18 2021, @08:25PM
Actually if the student was intentionally using F5 to bring down the website then it is a DOS attack.
Don't matter if the target is weak or feeble.
Just like intentionally showing flashing lights to someone to give them an epileptic fit can be a crime.