NS FOI Travesty Legal Defense

$15,293 of $50,000 goal

Raised by 275 people in 6 months
Created April 17, 2018
This is a fund to support the legal defense of a clever curious teen who found the Nova Scotia government site had all their FOI requests unsecured and looked at them by incrementing a web URL number without malicious intent. Now some politicians want to make him the scapegoat for their lameness in not securing that data with their inadequate security auditing practices and mistakenly making the data publicly available.

Web security professionals test websites like this every day, and any responsible web site operator would have tested and secured this function instead of trying to blame a child for their incompetence. Reference:  http://www.cbc.ca/news/canada/nova-scotia/freedom-of-information-request-privacy-breach-teen-speaks-out-1.4621970

 I, Dragos Ruiu, organize one of Canada’s leading information security conferences CanSecWest for the last 19 years, as well as performing security audits for Western Canadian companies, frequently looking at misconfigurations such as these, and find this situation outrageous. On behalf of all information security professionals in Canada - we will get these funds to the defendant to support his legal defense while attempting to not compromise his identity and privacy to the best of our ability. Which is more than we can say for the due dilligence the Nova Scotia government has shown with their citizens’ information and websites.

We will instruct his legal counsel to apply any excess funds, should there be any beyond legal bills, to be applied to paying for education tuition for continuing education at any school for this bright young man with a promising future - who does not deserve the callous treatment he has received to deflect attention from improperly securing the data and servers hosting it. This young man could have just as easily been my son or a colleague and we must all fight this manner of injustice and misunderstanding of internet functions.

What folks need to be wary about this kind of denial and defensiveness through police from the Nova Scotia government is that this kind of throwback attitude is usually an indicator of an organization with very immature information security. Who knows what kind other serious vulnerabilities and problems are being brushed under the carpet and being attempted to be hidden if this is how they deal with them? These days industry practice is to reward folks who identify problems and fix them not to try to hide the issue and deflect blame by arresting them, like this other example of a high-school student who earned a $10,000 bounty from Google for discovering a very similar problem: http://goo.gl/xT8gxK

Please note, that should the best of all possible outcomes occur and the prosecution and Nova Scotia government has a sudden inspiration of common sense and the ethical decency to drop the charges, my intent is still to forward any funds collected to this young man. He’s been through enough. He deserves our support, and I certainly hope that comes to pass.

To verify this campaign you may contact me at @dragosr on Twitter or via email at dr@kyx.net

Thank you for your support.
The beneficiary for this campaign has been set to David T.S. Fraser from the firm McInnes Cooper as we were informed by CBC and the Narional Post reporters who interviewed the young man charged that he was selected as legal counsel for him. A great choice and we wish them the best luck in righting this injustice.
+ Read More
This has ended in the best of all possible results. The charges have been dropped. My thanks to all that donated and the police investigation that concluded in a just manner. Awaiting final determination of the legal billing, but I am still recommending that any of the generosity that you folks have shown left over as a remainder be applied to a tuition scholarship for this young man’s continuing education.
+ Read More
Folks David Fraser from the firm McInnes Cooper now has responsibility for withdrawals from this account. I thank them for taking up this case, and wish them a speedy and successful resolution to avoid problematic precedents for the computer security industry and so this innocent young man and his family can have their lives return to normalcy. My thanks to all that have contributed so far to this important message to provincial legislators and defense of injustice. I hope wisdom and sanity will prevail with the Crown.
+ Read More
Good news, David T. S. Fraser (@privacylawyer) was selected by the young man to represent him. When I surveyed colleagues for legal recommendations he was one of the top choices. I’ve reached out to him to set him up to withdraw the funds from this campaign.
+ Read More
To answer the question posed, no I do not know this young man, but I do have a quite a few friends in InfoSec related areas in Nova Scotia to call upon. The specific plan for these funds are to be informed by the CBCs Jack Julian who authored the profile when the young man has selected a legal firm to represent him to forward the funds or instructions for connecting the withdrawals of the campaign to his law firm with instructions. I wish to respect his anonymity and extend a gracious and heartfelt thank you to the CBC for their stewardship and championing of this cause. Good on them.
+ Read More
Read a Previous Update

$15,293 of $50,000 goal

Raised by 275 people in 6 months
Created April 17, 2018
Your share could be bringing in donations. Sign in to track your impact.
   Connect
We will never post without your permission.
In the future, we'll let you know if your sharing brings in any donations.
We weren't able to connect your Facebook account. Please try again later.
FB
$10
Fritz Oscar Berngruber
2 months ago
SW
$10
Samuel Wartmann
5 months ago
SJ
$10
Sascha Jackisch
5 months ago
AU
$13
Andreas Ulmer
5 months ago
$10
Anonymous
5 months ago
$50
Anonymous
5 months ago
$20
Anonymous
5 months ago
$10
Nikolay Ivankov
5 months ago
VA
$20
Vadim Alekseev
5 months ago
$100
Anonymous
5 months ago
or
Use My Email Address
By continuing, you agree with the GoFundMe
terms and privacy policy
There's an issue with this Campaign Organizer's account. Our team has contacted them with the solution! Please ask them to sign in to GoFundMe and check their account. Return to Campaign

Are you ready for the next step?
Even a $5 donation can help!
Donate Now Not now
Connect on Facebook to keep track of how many donations your share brings.
We will never post on Facebook without your permission.