Governor vows criminal prosecution of reporter who found flaw in state website

Re:Governor vows criminal prosecution of reporter who found ... by soylentnewsorg on Friday October 15, 2021 @02:18PM (#28881091)

It's interesting you completely omit the part where he figures out the string in the URL that's a company's ID, and uses that to request a file. In your example it would be "I'm this other person, can you share my own files with me?" Except he's lying, and he's not the other person.

Tell me, what happens if you, heavyset_go, send an invoice to Apple, and the invoice says you're "Cisco" and they pay it. Do you get to keep the money, or does the prison get to keep you?

[ Parent | on HN ]

Re:Governor vows criminal prosecution of reporter who found ... by heavyset_go on Friday October 15, 2021 @03:53PM (#28882339)

> It's interesting you completely omit the part where he figures out the string in the URL that's a company's ID, and uses that to request a file. In your example it would be "I'm this other person, can you share my own files with me?

The OP was already authorized and authenticated on their own company account. They never falsified their authorization or their identity, they just requested documents at a specific URL and the other party had no problem replying with said documents.

[ Parent | on HN ]