Ohio Secretary Of State’s Web Site Hacked
Well here we go, now the true state of this administration is coming out. Voter fraud and now the state voting web site gets hacked? How does this happen? Does this prove that some state workers are just punching the time clock to get a check and a pension? Does this prove that the governor really needs to listen to some people outside the state for technology decisions and security? Who will be fired for this breach? No one, that’s the way the state works !!!!!
A few months ago I met with the State Privacy Officer for the State of Ohio and told him that he really needs to go with a Qualys Vulnerability Scanning Enterprise Agreement so every department at the state could be scanned before things got out of hand. I told him things I have seen over the last year at the state lead me to believe you have security problems on your firewalls and networks.
He told me “well we just had a security company scan and do penetration testing on our network two years ago so we don’t need you. We have everything under control and are very secure; we have experts in security working for the state”. Now he has moved on to be the privacy officer at Wall Mart, guess he saw the writing on the wall? The state CIO of OIT is leaving also, something up?
I guess they should have not gone with the lowest bid for the security scanning project, got what you paid for uh Strickland? Maybe if you would have a comprehensive security scanning and penetration testing project for all state agencies you would not have these issues. But you leave it up to each department to secure up their networks and you cannot leave it up to admins in these networks.
I have sent an email to our Governor Strickland asking for a meeting to talk about this problem and also a project to reduce IT spending at the state. I have not heard a anything yet. Maybe he is too busy moving up an admin or supervisor to CIO.
https://www.10tv.com/live/content/local/stories/2008/10/21/story_sos_website.html?sid=102
