3 ms·
>The database dates back to April 2017 and was uploaded a year later to a web server, believed to be owned by the organization, with no password protection. A
by abhiminator 8y ago
>The database dates back to April 2017 and was uploaded a year later to a web server, believed to be owned by the organization, with no password protection.
A hallmark of negligence right there. Hard to grasp why the protocols weren't followed in this specific instance by Texas State University (which was hosting the database) given the extreme sensitivity of the information content and adverse fallout that could result -- public exposure of personally identifiable information of thousands of law enforcement personnel across the country.
A perfect example of what happens when data security and integrity protocols are taken for granted.
- a3n 8y ago> Hard to grasp why the protocols weren't followed in this specific instance My ignorant guess, someone who could have made an active decision instead vaguely thought "we're not that interesting, who would even know we exist, it would take time and money to learn how or find someone who knows ... squirrel!"
- abhiminator 8y agoRelying solely on security by obscurity is an extremely sub-optimal method of guarding sensitive data. It's better to be safe than sorry in every instance when it comes to private information imo.
- ZainRiz 8y agoNot sure why you're being down voted here. This is a valid guess and disagreeing with it shouldn't mean auto-downvote
- vorpalhex 8y agoMore than that, this database contains way too much data beyond the minimum needed - to be totally unguarded in addition is abhorrent.