overreactions – Noise https://noise.getoto.net The collective thoughts of the interwebz Tue, 19 Oct 2021 13:03:17 +0000 en-US hourly 1 https://wordpress.org/?v=6.8.2 Missouri Governor Doesn’t Understand Responsible Disclosure https://noise.getoto.net/2021/10/18/the-missouri-governor-doesnt-understand-responsible-disclosure/ Mon, 18 Oct 2021 11:20:57 +0000 https://www.schneier.com/?p=63776 The Missouri governor wants to prosecute the reporter who discovered a security vulnerability in a state’s website, and then reported it to the state.

The newspaper agreed to hold off publishing any story while the department fixed the problem and protected the private information of teachers around the state.

[…]

According to the Post-Dispatch, one of its reporters discovered the flaw in a web application allowing the public to search teacher certifications and credentials. No private information was publicly visible, but teacher Social Security numbers were contained in HTML source code of the pages...

]]>