A Cole County prosecutor has rebuffed Missouri Gov. Mike Parson’s request to file criminal charges against a St. Louis Post-Dispatch reporter who identified a major security flaw in a government website by viewing publicly available HTML code.
Post-Dispatch reporter Josh Renaud had been facing the threat of prosecution since his discovery that the state website’s HTML source code exposed the full Social Security numbers of teachers and other school employees in unencrypted form. Renaud merely viewed the website’s HTML and converted the particular Social Security numbers into plain text, and he gave typically the state time to close this gaping security hole before publishing his findings. Despite Renaud helping the state improve its security, Parson called the journalist a “hacker, ” sought criminal charges , and threatened the civil suit.
On Friday, Cole County Prosecutor Locke Thompson issued a statement saying he has closed the investigation without charges: