Terrorist watchlist exposed via misconfigured Elasticsearch cluster

Re:Terrorist watchlist exposed via misconfigured Elasticsear... by RHSeeger on Wednesday August 18, 2021 @05:22PM (#28227344)

> Imagining disasters is how we're in this mess

I posted some links in my original comment that talk about specific problems. That being said, "allowing those in authority to do things that could be used inappropriately... and then it turning out that they did exactly that" doesn't require ANY imagination. The US government engages in such behavior on a daily basis.

[ Parent | on HN ]

Re:Terrorist watchlist exposed via misconfigured Elasticsear... by vkou on Wednesday August 18, 2021 @06:12PM (#28227802)

Please note the four demands the ACLU makes in the publication you linked.

None of them demand that police lists should not exist, or that judicial oversight should be necessary to put a person on one.

Instead, they demand that:

1. The lists be accurate.

2. The lists be accurate.

3. Allowing people to contest them on a case-by-case basis.

4. To not blacklist people from employment based on them.

The ACLU seems to be in agreement with me.

[ Parent | on HN ]

Re:Terrorist watchlist exposed via misconfigured Elasticsear... by RHSeeger on Wednesday August 18, 2021 @08:10PM (#28228827)

I don't see them agreeing with you at all. I see you saying "the lists are fine", whereas they are saying "the lists are not fine, but would be ok if these things were true (but they're not atm)". Personally, I don't think it's enough. I think someone being known to be on the terror watch list is likely to cause them all sorts of problems; and anyone can be put on the list for pretty much any reason.

[ Parent | on HN ]