{"id":314,"date":"2013-09-17T10:34:56","date_gmt":"2013-09-17T14:04:56","guid":{"rendered":"http:\/\/blog.pelleys.com\/?p=314"},"modified":"2013-09-17T10:34:56","modified_gmt":"2013-09-17T14:04:56","slug":"solutions-development-think-about-what-you-are-doing","status":"publish","type":"post","link":"https:\/\/blog.pelleys.com\/?p=314","title":{"rendered":"Solutions Development – Think about what you are doing…"},"content":{"rendered":"

I was reading today an article on ZDNet<\/a> about how the state of how Maryland state security sloppiness exposes personal data<\/a><\/em>. The article by Larry Selzer\u00a0<\/a>shows how, to quote him:<\/p>\n

“Mustering all necessary resources” in this case means “cutting corners.”<\/p><\/blockquote>\n

This shows the dangers of lack of resources – time, expertise, money – that can point you in the direction of danger if you are not careful. One would think that if you are collecting drivers’ license numbers, social security numbers, addresses and other personally identifiable information you would carefully think about the implications of\u00a0not<\/em> having the information secure.<\/p>\n

At first I was thinking that – hopefully – someone writing the solution was security-minded enough to raise the risk to management but then I realized that if this was indeed the case the problem is actually much worse: Either senior people did not recognize the issue or, worse yet again, they did not care about it. (I always think about these issues as “ignorance versus incompetence”.) Hopefully, there will be more digging into the issue to find out where the problem actually exists. Being an IT professional with security being one of my hats I find this troubling…<\/p>\n

Here is a screen capture – the site is no longer publicly-accessible, thankfully, from ZDNet<\/a>:<\/p>\n

\"\"

Screen capture of log of HTTP traffic from State of Maryland’s gun permit application site<\/p><\/div>\n

<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

I was reading today an article on ZDNet about how the state of how Maryland state security sloppiness exposes personal data. The article by Larry Selzer\u00a0shows how, to quote him: “Mustering all necessary resources” in this case means “cutting corners.” … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-314","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/blog.pelleys.com\/index.php?rest_route=\/wp\/v2\/posts\/314","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.pelleys.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.pelleys.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.pelleys.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.pelleys.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=314"}],"version-history":[{"count":0,"href":"https:\/\/blog.pelleys.com\/index.php?rest_route=\/wp\/v2\/posts\/314\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.pelleys.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=314"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.pelleys.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=314"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.pelleys.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=314"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}