An unspeakable opinion about Ajit Pai
August 31, 2017 9:08 AM Subscribe
The Federal Communications Commission "regulates interstate and international communications by radio, television, wire, satellite, and cable" and "enforces America’s communications law and regulations". Unfortunately they left a gaping hole in their public comment interface, allowing passers-by to upload documents, images, and even executable malware and have them all be hosted at an official fcc.gov address. And so the FCC is apparently hosting an official apology to the American people for inflicting Net Neutrality foe Ajit Pai (previously) on us. (Warning: Juvenile and crude language.)
At a guess, this won't end well for anyone concerned, but that's typical of 2017.
At a guess, this won't end well for anyone concerned, but that's typical of 2017.
Another Trump crook/incompetent needs to resign.
posted by SteveLaudig at 9:15 AM on August 31, 2017 [1 favorite]
posted by SteveLaudig at 9:15 AM on August 31, 2017 [1 favorite]
I don't know why they keep calling him spineless. He's not spineless. He's standing up for his own profit in the face of millions of pissed off internet users. That takes some brass fucking balls.
posted by Talez at 9:35 AM on August 31, 2017 [8 favorites]
posted by Talez at 9:35 AM on August 31, 2017 [8 favorites]
That "official apology" was discovered about 17 hours ago and is still online at https://ecfsapi.fcc.gov/file/DOC-578d579d1f000000-A.pdf. One wonders if the fact it hasn't been removed is a technical problem or perhaps a bit of mischievous disobedience.
FWIW though this kind of technical problem is not unique to the Trump administration. The lack of IT capability within the federal government is a huge problem.
posted by Nelson at 9:48 AM on August 31, 2017 [2 favorites]
FWIW though this kind of technical problem is not unique to the Trump administration. The lack of IT capability within the federal government is a huge problem.
posted by Nelson at 9:48 AM on August 31, 2017 [2 favorites]
It is absolutely disobedience, perhaps explained away as a technical problem. I could also see some cheeky attorneys advising that deleting the file might be considered a violation of their file retention policies.
I can believe someone would accidentally create this loophole, but I cannot believe that they'd be unable to delete a file (from a technical perspective).
posted by explosion at 10:23 AM on August 31, 2017 [1 favorite]
I can believe someone would accidentally create this loophole, but I cannot believe that they'd be unable to delete a file (from a technical perspective).
posted by explosion at 10:23 AM on August 31, 2017 [1 favorite]
> I cannot believe that they'd be unable to delete a file (from a technical perspective).
Or at least, make it not accessible to the public - that should be trivial. This looks comically inept.
Nick Heer: For years, we’ve been helping our family members navigate dangers on the web by pointing out things like the HTTPS icon in a browser, so they can be more certain that what they’re downloading or interacting with is legitimate. And what could be more legitimate than a .gov domain with an SSL certificate?
posted by RedOrGreen at 10:53 AM on August 31, 2017 [3 favorites]
Or at least, make it not accessible to the public - that should be trivial. This looks comically inept.
Nick Heer: For years, we’ve been helping our family members navigate dangers on the web by pointing out things like the HTTPS icon in a browser, so they can be more certain that what they’re downloading or interacting with is legitimate. And what could be more legitimate than a .gov domain with an SSL certificate?
posted by RedOrGreen at 10:53 AM on August 31, 2017 [3 favorites]
It is not difficult to overestimate the alacrity of government IT.
posted by exogenous at 10:57 AM on August 31, 2017 [1 favorite]
posted by exogenous at 10:57 AM on August 31, 2017 [1 favorite]
What if, and I know I'm going out on a limb here, that is an official FCC document? When you have the return of Frederick Malek, "Jew-counter" under Nixon, to an appointment by Trump, this letter starts looking like a benign document.
Nothing is normal anymore.
But the bigger issue is that this proves that anything can be posted to the FCC website, including malware.
posted by filthy light thief at 11:13 AM on August 31, 2017
Nothing is normal anymore.
But the bigger issue is that this proves that anything can be posted to the FCC website, including malware.
Since the API apparently accepts any file type*, it could theoretically be used to host malicious documents and executable files on the FCC's Web server.* Best part of that otherwise innocuous .JPG link: it's a reaction photo, stating "you can't be serious." Worst part: new potential to host malware on a US Government site.
"I used a fake name and sent it to a gmail account and it sent me an API key right away," reported one researcher via Twitter under the account @hacktifish.
posted by filthy light thief at 11:13 AM on August 31, 2017
I wonder what sort of escalation/exploitation is possible, if one uploaded some PHP or something. I'd poke around with it myself, but I don't fancy facing what'd probably be felony charges.
posted by NMcCoy at 11:47 AM on August 31, 2017
posted by NMcCoy at 11:47 AM on August 31, 2017
Countdown to CFAA arrest...
posted by rhizome at 11:52 AM on August 31, 2017 [1 favorite]
posted by rhizome at 11:52 AM on August 31, 2017 [1 favorite]
Posting all the content purged off of other government websites this calendar year seems appropriate.
posted by ZeusHumms at 1:08 PM on August 31, 2017 [7 favorites]
posted by ZeusHumms at 1:08 PM on August 31, 2017 [7 favorites]
technical problem or perhaps a bit of mischievous disobedience.
Could be waiting for the change request to be approved, too. Once the CR was approved I'd probably ping it back querying the correct evidence-handling procedure. Don't want to risk destroying the evidence.
We schedule all changes for Tuesdays. Outside core business hours. Best practice, dontchaknow.
posted by Leon at 1:25 PM on August 31, 2017
Could be waiting for the change request to be approved, too. Once the CR was approved I'd probably ping it back querying the correct evidence-handling procedure. Don't want to risk destroying the evidence.
We schedule all changes for Tuesdays. Outside core business hours. Best practice, dontchaknow.
posted by Leon at 1:25 PM on August 31, 2017
There are many notice and comment platforms for the federal government, Regulations.gov being one of the biggest. Difference is, those and all of the other platforms moderate all submissions. Like any other website that takes online submission, they are fools if they don't moderate the input before output.
posted by xtine at 2:06 PM on August 31, 2017 [2 favorites]
posted by xtine at 2:06 PM on August 31, 2017 [2 favorites]
Handy little excuse to throw-out all those pro net neutrality comments, dontchathink?
posted by Thorzdad at 3:42 PM on August 31, 2017 [2 favorites]
posted by Thorzdad at 3:42 PM on August 31, 2017 [2 favorites]
The "sorry Ajit is a cuck" PDF is no longer accessible on the FCC site, sometime in the past couple of hours.
posted by Nelson at 5:17 PM on August 31, 2017
posted by Nelson at 5:17 PM on August 31, 2017
I don't know why they keep calling him spineless. He's not spineless. He's standing up for his own profit in the face of millions of pissed off internet users. That takes some brass fucking balls.
In other words, he is a shining exemplar of Trumpian moral virtue; i.e., greed, which they've branded as liberty. Sort of like that child-sex-killer the young Ayn Rand wrote an essay praising was a refreshing example of noble free will in a world of sheeplike followers.
posted by acb at 7:41 AM on September 1, 2017
In other words, he is a shining exemplar of Trumpian moral virtue; i.e., greed, which they've branded as liberty. Sort of like that child-sex-killer the young Ayn Rand wrote an essay praising was a refreshing example of noble free will in a world of sheeplike followers.
posted by acb at 7:41 AM on September 1, 2017
> Sort of like that child-sex-killer the young Ayn Rand wrote an essay praising was a refreshing example of noble free will in a world of sheeplike followers.
Link? Asking 'cos I have this friend.......
posted by Leon at 7:55 AM on September 1, 2017
Link? Asking 'cos I have this friend.......
posted by Leon at 7:55 AM on September 1, 2017
« Older An abandoned resort like you've never seen before. | One herring to bring them all, and in the darkness... Newer »
This thread has been archived and is closed to new comments
posted by RedOrGreen at 9:09 AM on August 31, 2017