author photo
By SecureWorld News Team
Mon | Oct 18, 2021 | 4:15 AM PDT

"Opinions are like demo tapes. I don't want to hear yours," Stephen Colbert, The Late Show host, once said. 

Government officials, on the other hand, do not get this privilege as much as they may want it.

Missouri Governor Mike Parson (R-MO) and his office are likely seeing a huge outpouring of letters, emails, phone calls, and certainly social media comments in this latest controversial matter related to cybersecurity.  

When it comes to Governor Parson's explosive reaction to a reporter "hacking" the state's web application, there is an outpouring of public figures, InfoSec professionals, and other tech experts telling the governor what they think. Also, this case is furthering a recent study's findings that more and more Americans are seeing cybersecurity as a bipartisan effort. 

The overwhelming consensus? SecureWorld News has compiled a few of the reactions from notable people, the majority of which are letting Gov. Parson know their thoughts. And most of the responders are not coming to his defense. 

Journalist exposes vulnerabilities on Missouri state web app

By now, you may have read the explosive reports about Missouri Governor Mike Parson threatening to prosecute a reporter for "hacking" into a state web app

In a story that has sparked considerable controversy, a St. Louis Post-Dispatch journalist discovered a flaw in one of the state's web applications, which allowed access to view teachers' credentials and certifications.

While several media outlets said Social Security numbers were not leaked, the Post-Dispatch reporter discovered that the Social Security numbers were actually contained in the HTML source code of the pages, meaning the numbers were exposed and could have been accessed by a bad actor. 

And importantly, the newspaper notified the state and then agreed to hold off publishing a story about the vulnerability until the department fixed the problem. That is what happened.

Following the publication of the story, Governor Parson was not happy. For a baseline understanding of how he viewed the report, here is his tweet below.

From the initial tweet, you can see the governor did not call out the journalist by name, but instead implied a person had illegally accessed data records.

Pleas from InfoSec professionals and elected officials erupted after the tweet was posted, calling for the governor to understand the difference between hacking and ethical reporting of a security vulnerability.

Missouri security vulnerability: politicians respond to Governor

Several elected officials oppose an investigation into the reporter in this case.

Republican Representative Tony Lovasco (R-MO) tweeted that the Governor's office has "a fundamental misunderstanding" of how security research works.

Senator Ron Wyden (D-OR), who often focuses on cybersecurity issues, had harsh words about Gov. Parson's leadership skills. 

U.S. Cybersecurity Infrastructure and Security Agency (CISA) Director Jen Easterly also appeared to respond to the governor, stating that CISA values research where individuals "responsibly disclose" vulnerabilities. 

Cybersecurity community weighs in on Missouri controversy

The governor's comments resulted in prickly responses from cybersecurity experts.

Cybersecurity influencer and data breach hunter Chris Vickery called out the governor's mindset as a reason "cybersecurity is terrible everywhere." 

Others were disturbed by the governor's focus on the number of steps it took to decode data.

And journalists in the St. Louis area are also coming to the defense of the reporter. 

It is likely we'll see more opinions flowing forth on this hot cybersecurity topic.

What are your thoughts on this cybersecurity controversy?

What are your thoughts about Gov. Parson's statements? Can his opinions be validated in any way? Or is this just another example of a weak link when it comes to leaders understanding cybersecurity basics and protocol? Share your comments with us. 

[RELATED: The Pentesters Arrested for Doing Their Job]

Comments