On Tuesday, Florida synchronism badge entered the home of Rebekah Jones with panoply drawn, snatching her computer and phone, in an entrada to prove that she'd sent an crooked "group text" through "a Department of Health messaging system" that is "to be acclimated for emergencies only," equal to authorities.
There are now two reasons why that's significant. First, as we reported at the time, Jones isn't pacifistic any hard-boiled Florida Department of Health employee: she's the bigmouth who deep-seated Florida's once-celebrated COVID-19 tracking dashboard, again accused her bosses of ordering her to manipulate Florida's data to manumit reopening the state.
Second, it's now divulged to our circumspection that the supposedly private messaging template that Jones might have accessed might have preferable pacifistic been an email oath -- an email oath that the Florida Department of Health may have rearward published for anyone to see on the unlatched web.
As Ars Technica reports, Redditors discovered that not personally does the Florida Department of Health have a single shared username and password, however that username and countersign is likewise freely accomplishable on the web. Here's a redacted screenshot that Ars captured of just one of at microcosmic seven PDFs that desegregate the information, PDFs that I likewise easily found with a Google search. All of them are still online at the time I blazon these words:
.. .But it's not pacifistic the username and countersign that are listed: these pages likewise have the email oath of the exact group Florida's Department of Law Hegemony (FDLE) personal was hacked: "StateESF8.Planning." You don't orderly need a username and countersign to skyrocket an email to an email address, anyone can do that.
In the FDLE's birthright -- which is how it got a ventilator warrant for Jones' home -- the department characterizes StateESF8.Planning as a "multi-user record group" and talks anyway how Florida uses it to "coordinate the state's health and medical resources, capabilities, and capacities." That all sounds actual official and important:
.. .However, the randomly husbandless usernames, passwords, and email addresses thrive it might have pacifistic been a bog-standard transferral list with an ironfisted lot of users, not something significantly private or secure. The email oath still appears to be valid, whereas the Florida webmail appositeness no most seems to be online.
None of this necessarily means that Jones didn't skyrocket the bulletin (though she vehemently denies she did). An FDLE amanuensis beneath oath says the "group text" was straightforwardly sent from a Comcast ID associated with her home address, and that's why her home was raided.
But if Jones did published to skyrocket an email to a giant transferral list she acclimated to be partition of, one listed on the unlatched web, would that be numerous of a crime? (I am not a lawyer.)
I asked the FDLE to explain how it could have been accessed illegally -- if the email oath might have required step-up to use private credentials somehow -- however it declined, citing the imponderous investigation. A stockbroker unaffectedly stated that my suggestions were "not accurate," and that "this was not unaffectedly an email." The Florida Department of Health didn't thank to a request for comment.
On Wednesday, a Republican pettifogger designated by Florida governor Ron DeSantis to prearrange judges resigned in protest over the raid on Jones' house, calling it "unconscionable."
My self-renunciation letter to Governor Desantis. pic.twitter.com/Wc78tgr6Ef
-- Ron Filipkowski (@RonGOPVet4Biden) December 8, 2020
"You don't skyrocket 12 armed officials to raid her computer for effectual that. That's Gestapo. That's etched emir tactics. That's not America. It really viscerally bothered me," he told the Sarasota Herald-Tribune.
Update, 7:00PM ET: Added info anyway the self-renunciation of Ron Filipkowski.
.
No comments:
Post a Comment