Slashdot is powered by your submissions, so send in your scoop

 



Forgot your password?
typodupeerror
×
Bug Medicine Databases Privacy Security The Internet Technology

Nevada Website Bug Leaks Thousands of Medical Marijuana Dispensary Applications (zdnet.com) 55

An anonymous reader quotes a report from ZDNet: Nevada's state government website has leaked the personal data on over 11,700 applicants for dispensing medical marijuana in the state. Each application, eight pages in length, includes the person's full name, home address, citizenship, and even their weight and height, race, and eye and hair color. The applications also include the applicant's citizenship, their driving license number (where applicable), and social security number. Security researcher Justin Shafer found the bug in the state's website portal, allowing anyone with the right web address to access and enumerate the thousands of applications. Though the medical marijuana portal can be found with a crafted Google search query, we're not publishing the web address out of caution until the bug is fixed. A spokesperson for the Nevada Dept. Health and Human Services, which runs the medical marijuana application program, told ZDNet that the website has been pulled offline to limit the vulnerability. The spokesperson added that the leaked data was a "portion" of one of several databases.
This discussion has been archived. No new comments can be posted.

Nevada Website Bug Leaks Thousands of Medical Marijuana Dispensary Applications

Comments Filter:
  • by Anonymous Coward

    Anyone with the right web address? That's not just a bug, it's plain incompetence.

    To every one of those applicants, it may have well been the entire database.

    • Anyone with the right web address? That's not just a bug, it's plain incompetence.

      Yeah . . . what were those guys smoking, when they set that up . . . ?

      . . . maybe they were doing Whippets, as well . . . ?

      • . . . maybe they were doing Whippets, as well . . . ?

        Bestiality is illegal in the state of Nevada. I think you want "Whip-Its". Or what I found cheapest on eBay, "Mr. Cream". Since basically all N2O is made by a couple of companies, the only difference is in the capsules themselves. Their dimensions can vary slightly, and it may be necessary to purchase a "replacement" capsule-holding part (the part that the capsule goes into) in order to have some capsules release correctly into your whipped cream canister. Ever since I got into reducing sugar in my diet I'v

    • I was looking up an order on a stores website once, I noticed the url was just like suckywebstore.com/order?11567 . Out of curiosity I changed the last digit of the order page url (maybe like 11567 to 11566) and it then showed me the complete order for another customer, and changing the number to any other number less then showed that order's info.

      That order page showed the customer address, phone #, email address, items ordered, last 4 of the CC # & date, shipping, time and date of the order.

      Th
  • don't do that. ok?
  • weight and height, race, and eye and hair color.

    Why the hell is that on the application?

    • weight and height, race, and eye and hair color.

      Why the hell is that on the application?

      For the same reason it's on, say, the paperwork for someone who wants to fly a 4-pound plastic toy with a camera on it in order to save themselves the risk of climbing up a ladder to give someone a quote for $75 worth of roof gutter cleaning. For the same reason the government wants to know the eye and hair color of a farmer who buys a $100 rimfire .22 rifle to use on rodents around his grain storage.

    • by Osgeld ( 1900440 )

      pretty much the same thing on your drivers licence that you flash to random people all the time whenever you want to buy hooch, tobacco, enter a club, get pulled over for speeding, or enter a titty bar

      for pretty much the same reason's, to make sure stephen didnt swap photo's from leon's ID (course nowdays its much harder, but even 20 years ago it required a razor blade and not much else) cause in the real world, it takes a bit more than a wink and a pinky swear to do such activities as produce and distrubui

    • by swb ( 14022 )

      Probably to mollify the feds under the Justice Department guidelines for state-level marijuana legalization. Pull out all the stops to demonstrate how much control you're imposing.

  • That's 11,700 less records they'll have to provide to the feds under subpoena when Trump's stormtroopers show up with helicopters and assault rifles to take all that nasty devil weed away.

    Anyone who voluntarily registers for one of these programs is a maroon. It's still a federal crime, kids.

    • by Anonymous Coward

      Going AC because I don't just tell everyone, but I smoke marijuana.

      This is the reason I don't get a "red card", which is what they call the medical marijuana card here in Colorado.

      I'm not so worried about the federal government arresting me for being a casual user, but if a potential employer discovered that information it might mean no job offer. I have no problem stopping long enough to pass a drug test if that's what they want.

      Before recreational sales I just stuck with the black market. My supplier t

    • That's 11,700 less records they'll have to provide to the feds under subpoena when Trump's stormtroopers show up with helicopters and assault rifles to take all that nasty devil weed away.

      Don't be silly, they will send the storm troopers in APCs. Snipers go in the helicopters.

      Anyone who voluntarily registers for one of these programs is a maroon. It's still a federal crime, kids.

      Assuming you meant moron instead of an obtuse racial slur lol.

    • by Anonymous Coward

      Stormtroopers indeed..

      Dispensary Raids Rise Under Obama Regime - Green Rush Daily
      https://www.greenrushdaily.com/2016/02/24/dispensary-raids-rise-obama-regime/

      Obama's War on Pot - Rolling Stone
      http://www.rollingstone.com/politics/news/obamas-war-on-pot-20120216

      Obama's War on Pot | The Nation
      https://www.thenation.com/article/obamas-war-pot/

      Obama Explains Increasing Medical Marijuana Crackdowns, Raids In
      http://www.huffingtonpost.com/2012/04/25/obama-marijuana-raids-rolling-stone_n_1451744.html

      Judging From Pros

  • Hmmm (Score:4, Funny)

    by burtosis ( 1124179 ) on Wednesday December 28, 2016 @08:27PM (#53568789)

    eye color

    - pretty sure that would be red on every application.

  • This message was relayed to be by an inmate at a Texas jail facility: "I'm writing this from the Dallas PD lockup. I was out in the Ft. Worth area doing security research of residential door knobs, testing which doors might be open and thus exposing housing to breaches. Some guy named Justin Shafer confronted me when I apparently accessed the knobs on his house. He called the cops and now I'm charged with attempted burglary! I explained that my intentions were purely honorable; after all, I'm not a thief!
  • OMG ! The marijuana industry just got a BIG promotional boost - all for free - from the news that there will be a dispensary coming to your neighborhood soon - - - lol

"All the people are so happy now, their heads are caving in. I'm glad they are a snowman with protective rubber skin" -- They Might Be Giants

Working...