Slashdot Mirror
Oklahoma Government Data Leak Exposes FBI Investigation Records, Millions of Department Files (zdnet.com)
An anonymous reader quotes a report from ZDNet: Researchers have disclosed the existence of a server exposed to the public which not only contained terabytes of confidential government data but information relating to FBI investigations. According to UpGuard cybersecurity researchers Greg Pollock and Chris Vickery, the open storage server belonged to the Oklahoma Department of Securities (ODS), a U.S. government department which deals with securities cases and complaints. The database was found through the Shodan search engine which registered the system as publicly accessible on November 30, 2018.
The UpGuard team stumbled across the database on December 7th and notified the department a day later after verifying what they were working with. To ODS' credit, the department removed public access to the server on the same day. In order to examine the security breach, the team was able to download the server's contents. The oldest records dated back to 1986 and the most recent was timestamped in 2016. In total, three terabytes of information representing millions of files. Contents ranged from personal data to system credentials and internal communication records. ODS said in a statement to ZDNet: "All state IP addresses, and many city and county addresses, are registered to OMES, but the agency has no visibility into the computer systems at the Oklahoma Department of Securities. For the past eight years the state has been working to consolidate all IT infrastructure under OMES and ODS had the option to consolidate its systems voluntarily and they did not."
The UpGuard team stumbled across the database on December 7th and notified the department a day later after verifying what they were working with. To ODS' credit, the department removed public access to the server on the same day. In order to examine the security breach, the team was able to download the server's contents. The oldest records dated back to 1986 and the most recent was timestamped in 2016. In total, three terabytes of information representing millions of files. Contents ranged from personal data to system credentials and internal communication records. ODS said in a statement to ZDNet: "All state IP addresses, and many city and county addresses, are registered to OMES, but the agency has no visibility into the computer systems at the Oklahoma Department of Securities. For the past eight years the state has been working to consolidate all IT infrastructure under OMES and ODS had the option to consolidate its systems voluntarily and they did not."
You're accused of the following charges
You're a woman trapped inside a man
Your sexuality no one denies you
But your preference we can't understand
You are the loneliness of all people
It's time for you to realize
AIDS like the plague is from God
For he sees something wrong in his eyes
Anally Inflicted Death Sentence
A.I.D.S.
Anally Inflicted Death Sentence
A.I.D.S.
Anally Inflicted Death Sentence
A.I.D.S.
Anally Inflicted Death Sentence
A.I.D.S.
That's what you get for having
A penis up your ass
You should have used a condom
That's what you get when you
Swallow another man's load
A lubricated condom
How do you find love in another man's hairy ass
You should have used a condom
Millions of lost hamsters
Running rampant in your bowels
Take the Hershey Highway
Fudge packing men
Fudge packing men
Fudge packing men
Fudge packing men
A manly man
Fudge packing men
Fudge packing men
Fudge packing men
Lyrics taken from this page
This is why you shouldn't use the cloud for anything, you just can't trust it at all, if government can't even keep their own crap locked down then what priority do you think the consumer has? Reject the cloud, it's just not worth it.
ROPE IS COMING TRAITORS https://www.nytimes.com/2019/01/17/us/politics/giuliani-collusion.html
It's not going downhill here....not at all
nm
not worth a comment
Drumpf is done any day now.
The comments below, yet more evidence that slashdot has gone to seed -SAD :]
Am I the only one who's shocked that the "government" of Oklahoma had terabytes of confidential government data to begin with? If you've ever been to Oklahoma, you know what I mean. I would have thought you could fit all the government data in Oklahoma on a couple of 1.44mb floppy disks.
You are welcome on my lawn.
Will someone please translate that official reply from ODS into plain English?
General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
You report that 'ODS said in a statement to ZDNet: "[...]For the past eight years the state has been working to consolidate all IT infrastructure under OMES and ODS had the option to consolidate its systems voluntarily and they did not."'
Which makes NO SENSE, why would ODS be criticizing itself. If you RTFA you'll see that it was **OMES** that said that.
is there anything in there that the Mueller investigation hasn't already leaked?
Not much, you?
Every CEO responsible for this mess along with all the shareholders should be fired or jailed.
This is exactly why capitalism should fail and we should only trust our data with the government. No company will chose security over profit.
Hopefully, this helps people wake up!
Those records could be very edifying to the public. I do understand that it might necessarily be a slow-ass I2P torrent, for legal reasons.