{"id":13188,"date":"2022-02-14T20:29:07","date_gmt":"2022-02-14T20:29:07","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2022\/02\/14\/missouris-governor-still-insists-reporter-is-a-hacker-even-as-prosecutors-decline-to-press-charges\/"},"modified":"2022-02-14T20:29:07","modified_gmt":"2022-02-14T20:29:07","slug":"missouris-governor-still-insists-reporter-is-a-hacker-even-as-prosecutors-decline-to-press-charges","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2022\/02\/14\/missouris-governor-still-insists-reporter-is-a-hacker-even-as-prosecutors-decline-to-press-charges\/","title":{"rendered":"Missouri’s Governor Still Insists Reporter Is A Hacker, Even As Prosecutors Decline To Press Charges"},"content":{"rendered":"

<\/a>\n<\/p>\n

\n

from the disgusting<\/i> dept<\/h3>\n

\nLast autumn, you may recall, the St. Louis Post-Dispatch published an article revealing that the Missouri Department of Elementary and Secondary Education (DESE) was leaking the Social Security numbers of teachers and administrators, past and present, by putting that information directly in the HTML. The reporters at the paper ethically disclosed this to the state, and waited until this very, very bad security mistake had been patched before publishing the story. In response, rather than admitting that an agency under his watch had messed up, Missouri Governor Mike Parson made himself into a complete laughingstock, by insisting that the act of viewing the source code on the web page was nefarious hacking<\/a>. Every chance he had to admit he fucked up, he doubled down<\/a> instead.\n<\/p>\n

\nThe following month, the agency, DESE, flat out admitted it screwed up<\/a> and apologized to teachers and administrators, and offered them credit monitoring… but still did not apologize to the journalists. FOIA requests eventually revealed that before<\/b> Governor Parson had called the reporters hackers, the FBI had already<\/b> told the state that no network intrusion had taken place<\/a> and it was also revealed that the state had initially<\/em> planned to thank the journalists. Instead, Parson blundered in and insisted that it was hacking and that people should be prosecuted.\n<\/p>\n

\nHell, three weeks after it was revealed that the FBI had told the state that no hacking had happened, Parson was still saying that he expected the journalists to be prosecuted<\/a>.\n<\/p>\n

\nFinally, late on Friday, the prosecutors said that they were not pressing charges<\/a> and considered the matter closed. The main journalist at the center of this, Jon Renaud, broke his silence with a lengthy statement<\/a> that is worth reading. Here’s a snippet:\n<\/p>\n

<\/p>\n

\nThis decision is a relief. But it does not repair
\nthe harm done to me and my family.\n<\/p>\n

\nMy actions were entirely legal and consistent
\nwith established journalistic principles.\n<\/p>\n

\nYet Gov. Mike Parson falsely accused me of
\nbeing a \u201chacker\u201d in a televised press conference,
\nin press releases sent to every teacher across the
\nstate, and in attack ads aired by his political action
\ncommittee. He ordered the Highway Patrol to
\nbegin a criminal investigation, forcing me to keep
\nsilent for four anxious months.\n<\/p>\n

\nThis was a political persecution of a journalist,
\nplain and simple.\n<\/p>\n

\nDespite this, I am proud that my reporting
\nexposed a critical issue, and that it caused the state
\nto take steps to better safeguard teachers\u2019 private
\ndata.\n<\/p>\n

\nAt the same time, I am concerned that the
\ngovernor\u2019s actions have left the state more
\nvulnerable to future bad actors. His high-profile
\nthreats of legal retribution against me and the
\nPost-Dispatch likely will have a chilling effect,
\ndeterring people from reporting security or
\nprivacy flaws in Missouri, and decreasing the
\nchance those flaws get fixed.\n<\/p>\n

\nThis has been one of the most difficult seasons
\nof my nearly 20-year career in journalism\n<\/p>\n

<\/em><\/p><\/blockquote>\n

\nLater in the letter, he notes that a week earlier, Parson himself had decried the treatment of his rejected nominee<\/a> to lead the state’s Department of Health and Senior Services, noting that Parson complained that “more care was given to political gain than the harm caused to a man and his family.” Renaud noted that the same could be said of Parson’s treatment of himself:\n<\/p>\n

<\/p>\n

\nEvery word Gov. Parson wrote applies equally to
\nthe way he treated me.\n<\/p>\n

<\/em><\/p><\/blockquote>\n

\nHe concludes by hoping that “Parson’s eyes will be opened, that he will see the harm he did to me and my family, that he will apologize, and that he will show Missourians a better way.”\n<\/p>\n

\nAnd Parson showed himself to be a bigger man and did exactly that… ha ha, just kidding. Parson just kept digging, and put out a truly obnoxious statement<\/a>, with no apology and continuing to insist that Renaud hacked the government’s computers even though — again, this is important, lest you just think the governor is simply technically ignorant — the FBI has already told him that there was no hacking<\/b>:\n<\/p>\n

<\/p>\n

\n“The hacking of Missouri teachers’ personally identifiable information is a clear violation of Section 56.095, RSMo, which the state takes seriously. The state did its part by investigating and presenting its findings to the Cole County Prosecutor, who has elected not to press charges, as is his prerogative.\n<\/p>\n

\nThe Prosecutor believes the matter has been properly address and resolved through non-legal means.\n<\/p>\n

\nThe state will continue to work to ensure safeguards are in place to protect state data and prevent unauthorized hacks.\n<\/p>\n

<\/em><\/p><\/blockquote>\n

\nThis whole statement is utter hogwash and embarrassing nonsense. Again, there was no hacking whatsoever<\/b>. The state messed up<\/em> by putting information that should never, ever<\/b> be in HTML code into HTML code, making it accessible for anyone who viewed the source on their own computer. The state messed up. The state failed to secure the data. The state sent that data to the browsers of everyone who visited certain pages on their public websites. Renaud did exactly the right thing. He discovered this terrible security flaw that the state put on the database, ethically reported it, waited until the state fixed its own error, and then reported on it.\n<\/p>\n

\nParson knew from the beginning<\/b> that no hacking occurred. The FBI told the state that no hacking occurred. The state had prepared to thank Renaud and his colleagues at the St. Louis Post-Dispatch. It was only after Parson decided to deny, deny, deny and blame, blame, blame reporters for pointing out Parson’s own government’s failings, that this whole thing got out of hand.\n<\/p>\n

\nThe prosecutors have their own reasons for declining to prosecute, but the most likely reason is they knew they’d get laughed out of court and it would make them and Parson look even more ridiculous. Renaud chose give a heartfelt write up of what Parson’s nonsense put him through, and asked in the politest way possible for Parson to look deep inside at the harm he had caused and to apologize. Instead, Parson quadrupled down, continued to insist that his own government’s failings could be blamed on a “hack,” and insisting that he’s trying to “protect” the state when all he’s done is show why no serious tech company should do business in such a state.\n<\/p>\n

\nMissouri: elect better politicians. Parson is an embarrassment.\n<\/p>\n

\n
\"Hide<\/p>\n
\n

Thank you for reading this Techdirt post. With so many things competing for everyone\u2019s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.<\/p>\n

Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites \u2014 especially a site like ours that is unwilling to pull punches in its reporting and analysis.<\/p>\n

While other websites have resorted to paywalls, registration requirements, and increasingly annoying\/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support<\/a>. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise \u2014 and every little bit helps. Thank you.<\/p>\n

\u2013The Techdirt Team<\/p>\n<\/div>\n<\/div>\n<\/div>\n

Filed Under: dese<\/a>, ethical disclosure<\/a>, hacking<\/a>, jon renaud<\/a>, journalism<\/a>, mike parson<\/a>, missouri<\/a>, security flaw<\/a>, view source<\/a>
Companies: st. louis post-dispatch<\/a><\/p>\n<\/div>\n