Slashdot Mirror
Robocall Firm Exposes Hundreds of Thousands of US Voters' Records (bleepingcomputer.com)
An anonymous reader shares a report: RoboCent, a Virginia Beach-based political robocall firm, has exposed the personal details of hundreds of thousands of US voters, according to the findings of a security researcher who stumbled upon the company's database online. The researcher, Bob Diachenko of Kromtech Security, says he discovered the data using a recently launched online service called GrayhatWarfare that allows users to search publicly exposed Amazon Web Services data storage buckets. Such buckets should never be left exposed to public access, as they could hold sensitive data.
The first rule of robocallers: You should not allow robocallers to exist.
The second rule of robocallers: If they somehow exist, you must immediately outlaw them, and enact enormous fines against any company shown to contribute to them. These fines will bypass any corporate account masking, and go directly to each individual in the company or network of companies, based on their percent ownership, and will typically be for hundreds of millions of dollars for a nationwide campaign.
The third rule of robocallers: If they are found to be protected by jurisdiction lines, you must have a bank of anti-robocallers that are only permitted to call the offending nations - they will put out anti-robocalling messages 24 hours a day, every day of the year to every phone number in that jurisdiction. Blocking these calls will be met by blocking any communications along those channels.
The zeroth rule of robocallers: Automated spam of all sorts increasingly counts as robocalls, as technology advances.
Ryan Fenton