Also the misfortune of a large fire on Monday that has taken out the workspace and equipment of 80 IT professionals:

https://www.stltoday.com/news/local/govt-and-politics/more-c...

Best online comment on the article:

"When the building's on fire, don't call the fire department or Parson will accuse you of arson.

I’m trying to find the statistic, but it’s something like 75% of crime reporters in the US end up facing prosecution - i.e. if you report a fire, there’s a good chance you’ll face arson charges - if you phone the police to report an assault, there’s a good chance they’ll arrest you for calling them. Made that mistake as a kid when I saw a guy dragging his girlfriend down the street by her hair - turns out the guy was a local politician’s son, and I ended up facing a civil suit for her emotional distress caused by me interfering.

I’ve found vulnerabilities in US government technology, and I know that the sensible and sane thing to do is just move on, ignore it, let it be someone else’s problem - I have no desire to end up in prison for being a Good Samaritan.

If some greater fool can deal with it, let them deal with it. People don’t want help. They want someone to blame.

Thanks for the update. Not surprised to see the governor making the "fake news" argument rather than trying to criminalize the reading of HTML code - in browsers only - across the state of Missouri.

A few years ago an American lawyer wrote a book called Three Felonies a Day [0] whose premise is that "the average professional in this country wakes up in the morning, goes to work, comes home, eats dinner, and then goes to sleep, unaware that he or she has likely committed several federal crimes that day". If pressing F12 is a crime, the average software developer must be committing three felonies an hour.

[0] https://www.amazon.ca/Three-Felonies-Day-Target-Innocent/dp/...

As I recall, that book was considered pretty good but the consensus was that the title was off by large amount. I.e. most people definitely do not commit three felonies a day. Maybe a few a month. Which is still bad, yes.

FWIW, I can't remember the last time I pressed F12 ;-)

That is intriguing. Within the source code of its HTML, the White House included an easter bunny encouraging people to apply for jobs if they are reading this message!

Would I be slandered and jailed for applying to this job offering by the US Gov't? What do you think Parson would have done in this situation? I did have to press F12, so this is quite the predicament! /s

[1]. https://www.cnbc.com/2021/01/21/biden-white-house-website-ha...

I think you mean easter egg.

My god, you stole the bunny and left an egg? What kind of monster are you? Put the bunny back or face prosecution.

This tickled me! Thank you.

It depends on how you count, but I can say someone in my house is in near-continuous possession of illegal drugs (cannabis). So there’s one felony. Then maybe I bypass paywalls (potentially a CFAA violation) scrolling through the morning news. And then maybe I jump through a closing train door, which I’ve been warned before is considered “interfering with a railroad’s operation.” So there, three felonies before I’m in the office.

> someone in my house is in near-continuous possession of illegal drugs (cannabis). So there’s one felony

Unless they've already been convicted in the past, that is a misdemeanor.

The railroad example is more interesting, though I can't find anything truly on point. All the legislation I have seen suggests you'd 1) have to intend to disrupt the service, and 2) put something on or near the tracks. I couldn't find anything even hinting that delaying a train through normal passenger controls constituted interference with a railroad.

Even if those were all felonies, I think most people don't even lead that exciting an existence :).

Jumping through closing doors while the warning signals are active is intentional interference in its operation.

But is the intent to disrupt the train? No, it's to hold it long enough to get on board. The law is written such that you'd have to want to disrupt the service for nefarious reasons, not to board it.

Here in Europe disruption to board the train is enough to get police called on you and have them fine you, the fine grows with every minute of disruption. Not a crime, but definitely not legal. Stopping a moving train without necessary cause is criminal.

Very often the conductor will let you board a train late by signalling you with hand or speaking... But disobeying the conductor's signal whistle is where you step into potential illegality, because the train might (and sometimes really will) start moving that same moment.

All of this doesn't apply to city public transport - trams, metro etc. But it does apply to trains passing through the city.

Of course the GP's premise assumes that most devs are web frontend types that care about the HTML. Based on modern frontend libraries, is there really any default HTML that view source would see other than enough to load up the megabytes of JS code?

Yes, consider the case of server side rendering. Or even companies like Basecamp that disavow single page applications. Or massive legacy ASP, PHP and Java web apps.

I said modern, and you replied back with legacy. Not sure if I'm being trolled, you're super sacrastic above my understanding, or what.

Tons of modern systems built from and on top of legacy. Modern != !legacy. I can also access a lot of legacy systems through modern browsers.

We run a 2 year old frontend system with React server side rendering at work.

Do you even need to press F12? Is looking at the HTML is the problem? What if I just download the page? I now have leaked SSNs saved to my computer. Is that criminal under in governor's mind?

Each received TCP packet is a separate charge. After conviction, sentences will be served reliably and in order. Errors will be detected and punished severely.

The book is already a decade old. Surely technology has allowed us to inadvertently commit a greater number of felonies faster and with more efficiency!

Lucky for me, I don't even have an F12 key on my current keyboard.

Thank the heavens that Apple actually saved us from ourselves. All hail Apple! /s

That depends on whether you press F12 on your page or on someone else’s

My cat stepped on my F12! Help!!

I love the term fake news. As soon as someone uses it in some genuine fashion, I know that I don't have to take anything else they may say seriously. (Unless, of course, I become the direct target.)

At one point "fake news" meant something concrete, referring to throwaway blogs masquerading as actual news organizations that don't exist.

> The governor's political fundraising committee is running ads making this a "fake news" issue.

https://www.youtube.com/watch?v=9IBPeRa7U8E

If anyone is curious what the political ad looks like.

I almost never wade into the cesspool that is YT comments but just this once I read through a number. Every single one made fun of the governor and the PAC that put together the video. That was mildly heartening.

Have we heard yet what the exact form of the vulnerability was? I haven't seen precise details myself.