![]() ![]() Louis Lawyers Who Waved Guns At BLM Protesters In reality, it said, its staff had discovered the vulnerability and then confirmed with three educators and a cybersecurity expert that the nine-digit numbers were in fact Social Security numbers.Īmerica Reckons With Racial Injustice Missouri's Governor Pardons The St. The Post-Dispatch disputed the agency's characterization. (HTML source code is publicly available to anyone with a web browser and can be accessed in just a few clicks.) It described the incident as a multistep process in which "a hacker took the records of at least three educators, decoded the HTML source code, and viewed the social security number (SSN) of those specific educators." "The state is unaware of any misuse of individual information or even whether information was accessed inappropriately outside of this isolated incident," the Office of Administration said in a news release on Wednesday.īut that news release also placed the blame on the individual who had discovered the security flaw. Newspaper staff reportedly alerted DESE of the findings and delayed publishing the story to give the agency time to protect teachers' personal information and enable the state to check other websites for similar risks.ĭESE said it notified the Missouri Office of Administration's Information Technology Services Division to disable the problematic search tool as soon as the vulnerability was verified. More than 100,000 Social Security numbers were vulnerable, it added. The newspaper said that no private information was clearly visible or searchable, but teachers' Social Security numbers were contained in the HTML source code of those pages. The issue involved a web application that allowed the public to search teacher certifications and credentials. The Post-Dispatch said in a story published Wednesday night that an unnamed reporter had discovered flaws on that website that made the Social Security numbers of teachers and other school staff "vulnerable to public exposure." It starts with a website maintained by the state's Department of Elementary and Secondary Education (DESE). The backstory is a little complicated, so stick with us. "Not only are we going to hold this individual accountable, but we will also be holding accountable all those who aided this individual and the media corporation that employs them," Parson said at a news conference on Thursday. He said it could cost taxpayers $50 million. The governor is characterizing the paper's actions as a hacking that the state will investigate. Louis Post-Dispatch after the newspaper says it uncovered security vulnerabilities on a state agency website. Mike Parson is vowing to prosecute the staff of the St. Mike Parson, pictured here at a news conference in May 2019, said on Thursday that his administration is pursuing the prosecution of a local newspaper reporter who alerted the government to website security flaws. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |