Top
FCC “apology” shows anything can be posted to agency site using insecure API

FCC “apology” shows anything can be posted to agency site using insecure API

August 31, 2017

Category:

The Federal Communications Commission’s website already gets a lot of traffic—sometimes more than it can handle. But thanks to a weakness in the interface that the FCC published for citizens to file comments on proposed rule changes, there’s a lot more interesting—and potentially malicious—content now flowing onto one FCC domain. The system allows just about any file to be hosted on the FCC’s site—potentially including malware.

The application programming interface for the FCC’s Electronic Comment Filing System that enables public comment on proposed rule changes—such as the dropping of net neutrality regulations currently being pushed by FCC Chairman Ajit Pai—has been the source of some controversy already.

Read More on ArsTechnica