<story><title>Governor vows criminal prosecution of reporter who found flaw in state website</title><url>https://missouriindependent.com/2021/10/14/missouri-governor-vows-criminal-prosecution-of-reporter-who-found-flaw-in-state-website/</url></story><parent_chain><item><author>joshenberg</author><text>Quote from the St Louis Post Dispatch article is even more groan-worthy:&lt;p&gt;&amp;quot;In the letter to teachers, Education Commissioner Margie Vandeven said “an individual took the records of at least three educators, unencrypted the source code from the webpage, and viewed the social security number (SSN) of those specific educators.”&lt;p&gt;I guess webpages are kinda like encryption for idiots.</text></item></parent_chain><comment><author>websap</author><text>We live in a world where everyone thinks they understand computers and have an expectation of security and privacy, but they don&amp;#x27;t realize how hard it is to build these systems correctly. The best security appears to be invisible to the consumer, but requires a lot of thought by the implementer.&lt;p&gt;This is the same reason why I think most of the general public don&amp;#x27;t understand how much data social media apps can collect on them. I know a lot of average technology users, who allow every single permission whenever an App asks them, because they&amp;#x27;re like obviously its not going to do any harm. Without realizing how every action they take is recorded in a database somewhere, which will get compromised sometime in the future.&lt;p&gt;I&amp;#x27;m not a mobile developer, but it would be interesting if iOS provided a service that allowed data to never leave the phone and provided an API for Apps to get particular types of data and showed warning levels in the App, each time more sensitive data is accessed. The App store needs to be a place where if I download an App from, I need to have the peace of mind that it won&amp;#x27;t cause more harm than good.</text></comment>
<story><title>Governor vows criminal prosecution of reporter who found flaw in state website</title><url>https://missouriindependent.com/2021/10/14/missouri-governor-vows-criminal-prosecution-of-reporter-who-found-flaw-in-state-website/</url></story><parent_chain><item><author>joshenberg</author><text>Quote from the St Louis Post Dispatch article is even more groan-worthy:&lt;p&gt;&amp;quot;In the letter to teachers, Education Commissioner Margie Vandeven said “an individual took the records of at least three educators, unencrypted the source code from the webpage, and viewed the social security number (SSN) of those specific educators.”&lt;p&gt;I guess webpages are kinda like encryption for idiots.</text></item></parent_chain><comment><author>idworks1</author><text>&amp;gt; echo json_encode($search_results);&lt;p&gt;This is how I found out how much I, and all other contractors were being paid. And also how much the contracting company was actually charging the clients. All the data was being returned in a json but the very little was being displayed.&lt;p&gt;Looking at the story, this is more of a posture thing. I&amp;#x27;m sure the Governor is surrounded with people who can tell him that no hacking took place, but why miss an opportunity to show you take the privacy of Missourians to heart.</text></comment>