Security expert arrested after allegedly failing to report flaws in election website

florida man arrested for allegedly failing to report flaws in elections website levin vanguard
A Florida cybersecurity researcher has been arrested after he allegedly found security vulnerabilities in a local elections website that left usernames and passwords at risk and failed to report the flaws ethically.

David Levin, who is the chief technology officer of pen-testing firm Vanguard Cybersecurity, was testing the Lee County elections website for SQL injection vulnerabilities in December. He was reportedly using Havij, a free SQL testing software.

Levin claimed that the website was largely unencrypted and he could, if he wished, have stolen personal data that it had stored, including usernames and passwords, according to reports. Levin went on to publish a video online in January with local politician Dan Sinclair, who will be running for supervisor of elections in the county, where they revealed the vulnerabilities.

Police subsequently issued a warrant for his arrest on three counts of third-degree felony property crimes. He turned himself in and was later released on $15,000 bail.

The point of contention in Levin’s work is not that he found vulnerabilities but rather that he was able to harvest this at-risk data using a third-party tool. He then used some of this data to log in to the website as part of his testing, according to reports. Secondly, he only notified the election authorities after the video was published.

Troy Hunt, another security researcher, wrote that the lack of security put in place by Lee County was “egregious” but Levin should have stopped when he realized what he had discovered and immediately contacted the authorities.

“Dave obviously found a serious risk, but rather than just stopping there and reporting it, he pointed a tool at it that sucked out a volume of data,” said Hunt.

Levin has since taken commented on his actions. “I let hubris get the best of me,” he tweeted.

The incident has taken on a political element, too, with Sinclair accusing Sharon Harrington, the current supervisor of elections and his opponent in the election for that office, of using the arrest to smear him.

“Dave didn’t do anything wrong,” he said in defense of the researcher. “This is political corruption.”

Sinclair told local media that he did not ask Levin to hack any sites for him and that Levin had approached him about his discovery.

Computing

Man pleads guilty to scamming Facebook and Google out of more than $100M

One of the men behind an elaborate fraud that saw Facebook and Google each hand over tens of millions of dollars has admitted to his part in the scheme. Lithuanian Evaldas Rimasauskas faces up to 30 years in a U.S. jail.
Gaming

These are the must-have games that every Xbox One owner needs

More than four years into its life span, Microsoft's latest console is finally coming into its own. From Cuphead to Halo 5, the best Xbox One games offer something for players of every type.
Mobile

5G's arrival is transforming tech. Here's everything you need to know to keep up

It has been years in the making, but 5G is finally becoming a reality. While 5G coverage is still extremely limited, expect to see it expand in 2019. Not sure what 5G even is? Here's everything you need to know.
Movies & TV

Stranger Things season 3 is coming! Here’s everything we know so far

With a sophomore season as strong as its first, Stranger Things is now moving on to season 3. Here's everything we've learned so far about the Netflix series' upcoming third season, premiering in July 2019.
Gaming

The best of the last generation: Our 50 favorite Xbox 360 games

The Xbox 360 thrived during a generation where games were plentiful. Here's our list of the best Xbox 360 games of all time, including all game genres and even a few special indie hits.
Mobile

Want to watch Netflix in bed or browse the web? We have a tablet for everyone

There’s so much choice when shopping for a new tablet that it can be hard to pick the right one. From iPads to Android, these are our picks for the best tablets you can buy right now whatever your budget.
Product Review

HP’s gem-cut Spectre x360 15 is the most powerful 2-in-1 you can buy

HP’s 2019 Spectre x360 15 brings this massive 2-in-1 up to speed, literally. It now equips the same six-core Intel CPU as the rest of the 15-inch field, along with a real GPU for some 1080p gaming.
Computing

Ditch the background from your photos with these handy editing tools

Need to know how to remove the background from an image? Whether you prefer to use a premium program like Photoshop or one of the many web-based alternatives currently in existence, we'll show you how.
Computing

Yes, you can use Android apps on your Chromebook. Here's how

You can now get Android apps on your Chromebook! Google has enabled the Google Play Store app support on its Chrome OS and Chromebook hardware, so to get you started, here's our guide on how to get Android apps on a Chromebook.
Computing

Zipping files on a Chromebook? Follow these four easy steps

Chromebooks support file compression, though they work a little differently than on Windows or Mac. Here's the step-by-step process to zipping files on a Chromebook, and then unzipping them again for extraction.
Computing

Tired of all that white? Here's how to change the Google background image

Did you know that you can change how your Google search home page looks? It's a simple process to pick a new theme: We'll show you how to change your Google background, what to look for in themes, and how to download your own pictures for a…
Deals

These big, beautiful BenQ gaming monitors are on sale on Amazon right now

All gamers know that a good monitor is just as important as PC hardware to fully enjoy what today's games have to offer. BenQ makes some of the best (including some of our favorites), and three top-rated BenQ gaming monitors are on sale on…
Deals

The best Raspberry Pi 3 kits for coders, gamers, and DIY projects

The Raspberry Pi 3 is a low-budget computing platform capable of doing just about anything. We rounded up a handful of the best Raspberry Pi 3 bundles to get you started on a variety of DIY projects.
Computing

Need a portable workstation? One of these two 15-inch laptop might do the trick

HP's Spectre x360 15 is the most powerful 2-in-1 around, but it faces stiff large-laptop competition. Can it beat out powerful clamshells like well-built Apple MacBook Pro 15?