Slashdot Mirror
Nevada Website Bug Leaks Thousands of Medical Marijuana Dispensary Applications (zdnet.com)
An anonymous reader quotes a report from ZDNet: Nevada's state government website has leaked the personal data on over 11,700 applicants for dispensing medical marijuana in the state. Each application, eight pages in length, includes the person's full name, home address, citizenship, and even their weight and height, race, and eye and hair color. The applications also include the applicant's citizenship, their driving license number (where applicable), and social security number. Security researcher Justin Shafer found the bug in the state's website portal, allowing anyone with the right web address to access and enumerate the thousands of applications. Though the medical marijuana portal can be found with a crafted Google search query, we're not publishing the web address out of caution until the bug is fixed. A spokesperson for the Nevada Dept. Health and Human Services, which runs the medical marijuana application program, told ZDNet that the website has been pulled offline to limit the vulnerability. The spokesperson added that the leaked data was a "portion" of one of several databases.
Anyone with the right web address? That's not just a bug, it's plain incompetence.
To every one of those applicants, it may have well been the entire database.
don't do that. ok?
weight and height, race, and eye and hair color.
Why the hell is that on the application?
I'd mod you as illiterate but I don't want to waste the point.
Some information clearly wants to be free whether you like it or not. A socially mature society, however, would be able to distinguish this from identity theft.
These are people registering to set up dispensaries. That's right... 11,000 dispensaries in one state. It's Cheech & Chong's wet dream.
Except Nevada has a long history of being way beyond strict; see the gaming commission for details. They're not going to approve any 11,000 dispensaries.
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
Going AC because I don't just tell everyone, but I smoke marijuana.
This is the reason I don't get a "red card", which is what they call the medical marijuana card here in Colorado.
I'm not so worried about the federal government arresting me for being a casual user, but if a potential employer discovered that information it might mean no job offer. I have no problem stopping long enough to pass a drug test if that's what they want.
Before recreational sales I just stuck with the black market. My supplier told me it was diverted from otherwise state-legal medical marijuana grows anyway. I say "supplier" because he wasn't really a dealer, just a friend with better connections than me who would get a bag for me when he got his own. The law would call him a dealer though.
Now I just run down to the store and pick some up. Medical sales are not subject to as much tax though and it's much cheaper if you incur that one-time cost for a doctor recommendation.
One store has a "frequent buyer program" which of course requires your data in their own database in their little storefront. IIRC, after spending $750 at their store you get.....a free disposable lighter! They were higher tier rewards, but I stopped reading right there. I spend about $100 a month and I don't always shop there anyway.
These frequent buyer programs strike me as odd anyway, but they're not uncommon among liquor stores here. They're really a rip-off IMO. I'm top tier at one liquor store and they always tell me "oh, and with that your total is $17.36" (I always buy the same thing). Really? That's about what everybody else charges anyway whether they have a rewards program or not.
I can sense I'm starting to ramble, but I highly (heh, I didn't even mean that as a pun but I'll allow it) recommend the Glass Slipper which is described as "a sativa-dominant hybrid described to have a nice cerebral effect with a sweet, somewhat fruity flavor profile." I remember buying pot about 25 years ago and my dealer when asked how good it was would often say "It'll get you high" - which meant it was crappy Mexiweed with seeds and stems.
"That many people need MJ to treat their specific condition?"
What's Michael Jordan got to do with it?
"National Security is the chief cause of national insecurity." - Celine's First Law
eye color
- pretty sure that would be red on every application.
That's 11,700 less records they'll have to provide to the feds under subpoena when Trump's stormtroopers show up with helicopters and assault rifles to take all that nasty devil weed away.
Don't be silly, they will send the storm troopers in APCs. Snipers go in the helicopters.
Anyone who voluntarily registers for one of these programs is a maroon. It's still a federal crime, kids.
Assuming you meant moron instead of an obtuse racial slur lol.
That many people need MJ to treat their specific condition?
Yes. A lot of people are in constant pain. And opioids are an issue with addiction, and when doctors take the patient off of the vicodin or whatever they were on, kow what many turn to? Heroin. This is conjecture, but if more people could legally use ganja as a way to help allay chronic pain, there will probably be less heroin addicts.
The shepherds did so well protecting the flock that the sheep no longer believed that wolves existed.
That many people need MJ to treat their specific condition?
At least in California, the medical "need" is a joke. Virtually anything qualifies, including anxiety about getting caught with the drug without a "weed card". I expect it is the same in neighboring Nevada.
I'm an American. I love this country and the freedoms that we used to have.
Stormtroopers indeed..
Dispensary Raids Rise Under Obama Regime - Green Rush Daily
https://www.greenrushdaily.com/2016/02/24/dispensary-raids-rise-obama-regime/
Obama's War on Pot - Rolling Stone
http://www.rollingstone.com/politics/news/obamas-war-on-pot-20120216
Obama's War on Pot | The Nation
https://www.thenation.com/article/obamas-war-pot/
Obama Explains Increasing Medical Marijuana Crackdowns, Raids In
http://www.huffingtonpost.com/2012/04/25/obama-marijuana-raids-rolling-stone_n_1451744.html
Judging From Prosecutions, Obama Is 80 Percent Worse Than Bush ...
http://reason.com/blog/2013/06/14/obama-is-80-percent-worse-than-bush-on-m
Obama's medical marijuana prosecutions probably aren't legal - Slate /obama_s_medical_marijuana_prosecutions_probably_aren_t_legal.html
http://www.slate.com/articles/news_and_politics/jurisprudence/2016/04
and so on...
Nothing, they meant ground up Micheal Jackson nose candy.
These are people registering to set up dispensaries. That's right... 11,000 dispensaries in one state. It's Cheech & Chong's wet dream.
Except Nevada has a long history of being way beyond strict; see the gaming commission for details. They're not going to approve any 11,000 dispensaries.
How ironic you want to talk about "strict" regarding the state that has built up the largest legal gambling mecca in the known universe, in the face of the rest of the country that hardly even allows a dog track to operate.
Oh, and let's not forget the whorehouses too. Strict my ass. Nevada will legalize and approve anything that brings them revenue, morality be damned. The only thing standing in the way of 11,000 dispensaries is the alcohol mafia, because they know what people will ultimately prefer.
This message was relayed to be by an inmate at a Texas jail facility: "I'm writing this from the Dallas PD lockup. I was out in the Ft. Worth area doing security research of residential door knobs, testing which doors might be open and thus exposing housing to breaches. Some guy named Justin Shafer confronted me when I apparently accessed the knobs on his house. He called the cops and now I'm charged with attempted burglary! I explained that my intentions were purely honorable; after all, I'm not a thief! Yes, it's true, I copied some of his mail off the desk in the den, but that was just so I could prove the vulnerability to the gan... er, security community. Anyway, the arraignment didn't go so well, even after I explained that the judge should be thanking me. So I've got a contempt citation too. All I can say is, thank goodness for identity theft!
OMG ! The marijuana industry just got a BIG promotional boost - all for free - from the news that there will be a dispensary coming to your neighborhood soon - - - lol
redneck geek
Oh hi, everyone commenting on this..
I live in Las Vegas. We have recently legalized Recreational use of marijuana(been waiting for this since i was a kid). So with that said, There are about +/-20 Actual MEDICAL dispensaries around town. But my suspicions lead me to believe that this isn't a database of Medical Dispensary applicants, but a database with the people that were recently allowed to apply to become commercial Recreational Marijuana Dispensaries.
Just figured i would add my two pennies to this, As after the first of the year i will be too high to remember where i actually put the two pennies. :)
Yea i don't think so
God i love my state! Thank you for pointing out all of the AWESOME that happens here in Nevada!
These are people registering to be patients, not registering to open dispensaries, you illiterate fucking idiot.
They already have that information, They just like to waste our time and money on repetitiveness.
How did you know my name? From the looks of that, it is to become an employee(agent) of a MME(Medical Marijuana Establishment) Not a dispensary itsself.