Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×
Security Crime Medicine Privacy

Did COVID Data Whistleblower Hack Florida's Emergency Alert System? Police Raid Home (miamiherald.com) 210

FriendlySolipsist writes: Independent journalist Rebekah Jones, a scientist fired by the Florida state government because, she said, of her refusal to manipulate official COVID-19 data releases to coincide with political considerations and who now operates website floridacovidaction.com, had her home raided by the FL state police who seized computers and cellphones, the Miami Herald reported. The FDLE affidavit in support of the raid was published by the Miami Herald and asserts that an unauthorized internal message was sent to the "ReadyOps" system within the state Department of Health from an IPv6 address associated with the Comcast account at Jones residence. "The Florida Department of Law Enforcement on Monday raided the home of a former Department of Health data analyst who has been running an alternative web site to the state's COVID dashboard, alleging that she may have broken into a state email system and sent an unauthorized message to employees," reports the Miami Herald. "But Rebekah Jones, who was was fired from her job in May as the geographic information system manager for DOH's Division of Disease Control and Health Protection and who has since filed a whistleblower complaint against the state, denied having any role in the alleged intrusion into the state web site and instead said she believes Monday's action was intended to silence her."

Slashdot reader mtrachtenberg shares a thread on Twitter of Jones describing what happened.
This discussion has been archived. No new comments can be posted.

Did COVID Data Whistleblower Hack Florida's Emergency Alert System? Police Raid Home

Comments Filter:
  • Back to IP Addresses (Score:5, Informative)

    by Anonymous Coward on Tuesday December 08, 2020 @06:07AM (#60806288)

    Seriously, a search warrant based entirely on the IP?

    She was terminated 6 months prior to that. They have absolutely no better evidence, yet they claim probable cause she was the one accessing an account with a widely shared username and password.

    Shame. Shame on you. That judge should be disbarred.

    • by imidan ( 559239 ) on Tuesday December 08, 2020 @07:04AM (#60806476)
      FTA:

      The message appears to have been sent to people on the contact list for the state’s Emergency Support Function 8, one of 18 specialized groups that comprise the state’s emergency response personnel. Group 8, which is led by the Department of Health, coordinates public health and medicine response in emergencies.

      It's not clear from this description what happened. Did the message get sent to *all* members of function 8, or just some? Is this "hack" as simple as someone sending an email to an alias, like 'function8@florida.gov'?

      From any article I've read, there's not enough information to tell that there was actually a "hack" or if the government is just calling it one to make it sound more serious. The state will always use the most ominous terms to describe the situation for purposes of obtaining a warrant and prosecuting.

      It's possible that this woman has committed a crime, but until more details are made public, I am extremely reluctant to believe it's true. Even if she did send an email to a group of people, it's unclear to me that she "hacked" anything, and surely it's no crime to send an email to a valid state email address.

      • by coastwalker ( 307620 ) <acoastwalker@[ ]mail.com ['hot' in gap]> on Tuesday December 08, 2020 @07:37AM (#60806530) Homepage

        There are things that she said that indicate that the post was not in her sort of language

        "In a message Monday, Jones denied sending the Nov. 10 text.
        "Pretty sure if I was gonna go through the trouble of learning how to hack, then hacking DOH of all places, I'd be damn sure to get the death count right," she said, saying the accurate death toll on Nov. 10 was 17,460."

        reference https://www.nbcnews.com/news/u... [nbcnews.com]

        The offending text said 18,000 - being an uptight geek type who has built a website out of irritation about her former employer being fast and loose with the numbers this rings true. I suspect she was the one who was hacked and the message sent maliciously in order to get access to her contacts lists on her confiscated hardware. If this was the case then something very bad just happened.

        • by imidan ( 559239 ) on Tuesday December 08, 2020 @08:24AM (#60806618)

          I suspect she was the one who was hacked and the message sent maliciously in order to get access to her contacts lists on her confiscated hardware. If this was the case then something very bad just happened.

          You may be right. Maybe they're just fishing for the non-state email addresses of state employees who are leaking information to Jones. This seems like a heavy-handed way to do that, but today's US law enforcement is not known for subtlety.

          • Public APIs (Score:4, Informative)

            by Actually, I do RTFA ( 1058596 ) on Tuesday December 08, 2020 @12:34PM (#60807658)

            This is not (legally) about the work she's been doing on her own since she got fired. All the data she is scraping is publicly available. She's centralizing it, making it easily accessible and readable, and turning the raw numbers into more informative statistics. So it's not what this raid (legally) is about. It's theoretically about access to a second system.

            Of course, it is (in fact) about her making the governor look bad.

            • by imidan ( 559239 )
              Except, as she said, for her sources remaining in the government, presumably ex-coworkers. She says she promised to keep their identities secret. If they were emailing her from personal email accounts, they might not have easy access to that information.
        • The language from the article also seems odd:

          In a search warrant, an investigator with the Florida Department of Law Enforcement said a person at Jones' home who was using her email address illegally gained access to a state-run communications platform and sent a group text Nov. 10 telling people that it was "time to speak up before another 17,000 people are dead."

          I read that as "IT forgot to turn off her email address and she used it to send a message to her old co-workers".

          Though if that were the case I w

      • by quonset ( 4839537 ) on Tuesday December 08, 2020 @07:41AM (#60806542)

        Did the message get sent to *all* members of function 8, or just some?

        This article from CNN [cnn.com] gives more information about the number of people who received the message. Approximately 1,750.

        Also, she is saying there are numerous errors in the message she wouldn't make:

        "I'm not a hacker," Jones said. She added that the language in the message that authorities said was sent was "not the way I talk," and contained errors she would not make.

        "The number of deaths that the person used wasn't even right," Jones said. "They were actually under by about 430 deaths. I would never round down 430 deaths."

        • by imidan ( 559239 )

          Yes, 1,750 people received the message. But what's the membership of function 8? Again, did the message get sent to *all* members of function 8, or just some? Or does it matter? I tend to agree that she wouldn't make the error she points out, since the whole reason she got fired was for insisting upon accuracy.

          My instinct is that the warrant is horseshit, but I don't know why they'd do it other than to harass Jones. That may be enough for them. But it seems like long enough since she quit that why would the

          • by cusco ( 717999 )

            why would they care?

            To impede her current work, to set her up as an example to other whistleblowers, to financially inconvenience her, and simple petty vindictiveness. If they've got her computers they're probably trying to get data on people that she's corresponding with to harass them as well. As long as they've got her equipment she's dead in the water, and the police will hold on to it until it's obsolete or they "accidentally" destroy it.

        • by stabiesoft ( 733417 ) on Tuesday December 08, 2020 @10:28AM (#60807036) Homepage
          The other quote from cnn "At no time were weapons pointed at anyone in the home," Rick Swearingen, the department's commissioner, added in another statement." seems to be at odds with the her internal security cam footage which shows an officer with a gun pointed up the stairs. So right off the DeSantis people are just flat out lying. When is government going to learn the streisand effect is not a good thing?
          • "At no time were weapons pointed at anyone in the home"

            This is entirely accurate if the officers aim their weapon down an empty hallway or stairwell, and having not seen the video, I don't know how they carried their weapons, aim is even not the word to describe how you carry a weapon most of the time, it's more about pointing it in a safe but useful position.

            I get it though, the homeowner felt intimidated, scared, and anyone with sleeping loved ones at the other end of a house watching an officer with a we

      • by dirk ( 87083 )

        I saw in another article where there was 1 shared username/password for this mailing list, so it appears someone used that to send the message. And then supposedly they tracked it to her via IP. But just the fact that there was a single, shared username and password says a lot about how this was run.

      • automainion tied to public email in with easy names like that?

        If I send mail to functionX@florida.gov am I an hacker?? an hacker for sending outbound mail?

      • The "hack" - by whoever did it - consists of using a username/password combination shared by everyone with access to the system. Apparently this username/password combo is rarely, if ever changed. So, even if she "hacked" the system, it means that she would have used the credentials that were given to her. Far more likely is that one of the other dozens of people with access to the system compromised the credentials - who knows how widely they have been distributed.

        Based on this supposed "hack", the police

      • Re: (Score:3, Insightful)

        by hattig ( 47930 )

        I agree without more detailed information we cannot form a viewpoint.

        Sending an email would certainly not be a hack, that's the entire point of email. If that's what happened I'm sure she has already contracted lawyers to get this overturned and her property returned (I wonder if some of it will be damaged beyond repair, or disappeared? Extra-judicial state punishment if so) ASAP, and then initiate proceedings against whoever asked for the warrant, and the judge who approved it, for whatever the law is agai

    • Re: (Score:2, Insightful)

      That amount of evidence is not required for a search warrant; for a conviction that evidence is required. However a raid of the size that was reported is not necessary to conduct a search warrant. Realistically it should take one or two people.
      • No, you're wrong. Amendment 4 to the US Constitution requires probable cause.

        The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no warrants shall issue, but upon probable cause, supported by oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized.

    • by hey! ( 33014 ) on Tuesday December 08, 2020 @11:49AM (#60807406) Homepage Journal

      I would think that that's enough to establish probable cause for the search. The big question is how far they will go in the search. The legitimate target of a search would be browser history showing she had logged onto the state system from a particular machine.

      But I suspect what they're really after are her emails, to find out who inside the department of public health has been feeding her data; receiving such data is not a computer crime.

      This whole thing is a massive overreaction. Pointing a gun at someone is incredibly dangerous and irresponsible unless that person represents an imminent threat to someone's life. Serving a warrant is not a license to put someone's life at risk.

      • by Ungrounded Lightning ( 62228 ) on Tuesday December 08, 2020 @01:57PM (#60808152) Journal

        But I suspect what they're really after are her emails, to find out who inside the department of public health has been feeding her data; receiving such data is not a computer crime.

        I suspect that it's also about crippling her ongoing operations.

        By seizing he machines they both knock her off the net and deny her access to her own contact list, records, and other tools for discovering and publishing more embarrassing information. Even if she has off-site backups she needs to buy a new machine, do a restore (pumping all that data over a tapped line) and loses the changes she made since the last backup. All this while distracted by the ongoing legal attack.

        (And then they can just do it again.)

        • by cusco ( 717999 )

          Our experience here in Washington is that once the police have your computers you're not getting them back for years if ever. More often than not **IF** you do get them back they're no longer functional, and frequently they come back with someone else's browsing history on them.

  • Hero (Score:5, Insightful)

    by k2dk ( 816114 ) on Tuesday December 08, 2020 @06:13AM (#60806314)

    If the state lies to its people for policital reasons, then it really is an attempt at manipulating democracy.

    Exposing this, should result in praise. Not prosecution.

  • I dont get it. (Score:5, Interesting)

    by bumblebees ( 1262534 ) on Tuesday December 08, 2020 @06:19AM (#60806334)
    I dont get the point of always waving their guns around there in US. How likely is it to be needed if you raid a reporter and her families home? Sure it is probibly statisticly more likely to be needed in general if you start of by always waving it in someones face in the first place. America land of the free... from social security.
    • It's not likely. It's just the SOP because bravery just means stupidity using the modern American English vernacular...

    • Because the most likely place for a police officer to get shot or assaulted is in someone's home, either when executing a warrant or for a domestic dispute. You deal with that on a daily basis, you get a feel for where you want to project force as a deterrent to a violent ending, rather than allowing what you hope will be a peaceful situation to escalate until force has to be applied.

      • by ArchieBunker ( 132337 ) on Tuesday December 08, 2020 @09:14AM (#60806722)

        Oh please. The crab fisherman on tv have a more dangerous job. Being a cop isn't even in the top 10 anymore.

        • by drinkypoo ( 153816 ) <drink@hyperlogos.org> on Tuesday December 08, 2020 @09:27AM (#60806756) Homepage Journal

          Just being a repairman is a more dangerous job. I face more danger on a day to day basis than the cops do. And to add to that, I have to worry about being shot by cops. The first time I ever got pulled over (in Santa Cruz) was literally for nothing (driving a cheap car at 2 AM) and I wound up with two cops pointing guns at my face, fingers on triggers. I learned as a child that you never point a gun at anything you're not about to shoot, and you don't put your finger on the trigger until you're ready to shoot, which means I am doubly lucky to be alive with two chucklefucks both pointing guns at me for no reason.

          When you hear "fuck the police" or for that matter a mere "defund the police" you know there's at least one story behind it.

          • When you hear "fuck the police" or for that matter a mere "defund the police" you know there's at least one story behind it.

            Yes, there is [cnn.com], especially after the police wait three days to call for an investigation.
          • Comment removed based on user account deletion
      • by gmack ( 197796 )

        BS. It's an American thing, the police are too used to using force as the first move. The police here (Montreal Canada) showed up at my neighbor's on a domestic dispute call. As soon as they police showed up the place went from screaming and throwing things to dead silence. Never once did I see the police pull their guns. The same went for a few years ago when the police came to my door saying a call to 911 came from a number registered to my apartment (I had just moved in recently) and they needed t

      • by xession ( 4241115 ) on Tuesday December 08, 2020 @11:16AM (#60807256)
        Then why not just knock, show her the warrant and demand she bring the stuff to the door voluntarily? She doesn't seem like an unreasonable person. Or, wait til they possibly all leave the house and take the equipment while no one is home?

        Cops get shot in homes because they act as aggressors while in homes, instigating peoples urgency to defend themselves on their own property. I have no sympathy for some asshole that waves a gun around someones home, getting shot for doing so. There's better alternatives, as seen in much of the rest of the developed world.
      • by hey! ( 33014 )

        I think we put way too much credence in "feelings" like that.

        Here they were serving a warrant about a non-violent computer use violation to a cooperative but disoriented family, and with small children in the house too. And I do not doubt that the officer *felt* completely justified in pulling a loaded gun and pointing it at the children, but why? Suppose it was because he was emotionally unstable and this was too much excitement for him to handle. Or maybe he was just having a bad day. Those are reasonab

    • by bill_mcgonigle ( 4333 ) * on Tuesday December 08, 2020 @08:25AM (#60806620) Homepage Journal

      > I dont get the point of always waving their guns around there in US. How likely is it to be needed if you raid a reporter and her families home?

      Please don't pretend there's a "point". This just gives the enemies of the People more power.

      She was on to something, probably, and this is pure fear and intimidation, to send a message to the other people that if they speak up, tyranny will reign down on them and their families.

      cf. Julian Assange rotting in prison.

      • tyranny will reign down on them and their families.

        Rein, reign, and rain are all different words... pls stahp

    • by FritzTheCat1030 ( 758024 ) on Tuesday December 08, 2020 @08:30AM (#60806624)
      Because the police in this country are taught that no risk of loss of innocent civilian life is too high if it will prevent even an infinitesimal chance of injury to an officer. And society lets them get away with it because it's mostly brown people getting killed in raids. If SWAT teams started shooting white housewives with more frequency, policing practices would change with a quickness.
    • by larwe ( 858929 )
      Well, the logic seems simple to the point of inevitability. Depending on what statistics you read, somewhere between 35-40% of adult Florida residents live in a house where they have access to a firearm. This sort of statistic is repeated around the US, with the numbers ranging from 8~9% in some states to ~60% in others. Therefore, police SOPs tend to focus on an assumption that the police officer needs to draw a bead on the bad guy before the bad guy can draw a bead on him/her. Taking this particular case
    • Their education and training requirements are (mostly) a joke outside a few well-funded areas. They're authoritarian hicks with a badge.
      (Other) criminals make them (somewhat) necessary as most humans are idiot savages (remember the average IQ is only 100 and street thugs are often well below that) but the public aren't capable of WANTING professionalism or understanding what that means.
      The US is an idiocracy by cultural inclination since the Crown dumped its waste people here. Anyone who works in a hugbox o

    • No knock, guns out warrants were originally passed because of raids on gangs or meth labs or other places you're likely to meet armed resistance. The tool then expanded in use to other situations.

  • by TheNameOfNick ( 7286618 ) on Tuesday December 08, 2020 @06:46AM (#60806418)
    Not in one of those fake democracies with corrupt legal systems, a.k.a. shithole countries?
  • Sending an authorized message warrants tearing through someone's home and stealing their property?
    • With guns drawn. Don't forget the guns part.

      Seriously - even if she did this, and even if you need to confiscate all her gear - just send a cop with a badge and a warrant to knock on the door.

  • by ArchieBunker ( 132337 ) on Tuesday December 08, 2020 @09:21AM (#60806744)

    The raid was happening governor Ron DeSantis was having a circle jerk with Trump over the new vaccines. Even funner is none of the vaccine manufacturers were invited to this love fest. https://thehill.com/policy/hea... [thehill.com]

    This raid is about retribution for not manipulating numbers. Much like how in July they were creeping up and Trump told hospitals to stop reporting to the CDC. https://abc7ny.com/trump-cdc-r... [abc7ny.com] Yes the swamp drainer felt his flunkees knew more than the CDC and had them edit reports.

  • Hack? (Score:5, Funny)

    by devphaeton ( 695736 ) on Tuesday December 08, 2020 @09:35AM (#60806782)

    I feel like the term 'hack' (even in the wrong sense) is being horrendously overused these days.

    If you'll excuse me, I'll have to go back to reading "15 Ways To Hack Your Breakfast"

  • binden may need to pardon

    • by hey! ( 33014 )

      That only works for federal crimes. Florida has its own state laws which make unauthorized access to someone else's account a felony.

  • by swm ( 171547 )

    The FDLE affidavit [...] asserts that an unauthorized internal message was sent [...] from an IPv6 address associated with the Comcast account at Jones residence.

    IPv6?
    Is that a thing?
    I had Comcast in Mass. up until two years ago.
    My machine had both IPv4 and IPv6 interfaces.
    Comcast gave me a regular old cable modem/NAT router that connected on IPv4.
    Is it different in FL?

    • IPv6? Is that a thing? I had Comcast in Mass. up until two years ago. My machine had both IPv4 and IPv6 interfaces. Comcast gave me a regular old cable modem/NAT router that connected on IPv4. Is it different in FL?

      You probably just barely missed the switch. I've had an IPv6 address on Comcast for about two and a half years.

    • IPv6 has taken off with ISPs of late. My Cable ISP (Suddenlink) is also using it. My last four ISPs acted like they'd never heard of it but I've got it now.

  • Who are you going to believe, a data scientist or the governor of Florida. --- Joke here.

  • by tflf ( 4410717 ) on Tuesday December 08, 2020 @04:53PM (#60808984)

    Not sure what the norm is in Florida, but, I've seen fewer cops hit a dealer's house in other jurisidictions.
    And I cannot remember ever seeing that many involved in taking down a suspected data thief elsewhere.
    The raid does appear to have been over-manned, which often is an indicator of political pressure from up the food chain.

Love may laugh at locksmiths, but he has a profound respect for money bags. -- Sidney Paternoster, "The Folly of the Wise"

Working...