To apply for an HQL, you must Release PII to the world

Patrick · Oct 1, 2013

This again.

The MSP put up the HQL process overnight and the only way to apply is to expose your PII to the world.

Let me demonstrate:

Go to https://emdsp.mdsp.org/egov/Login.aspx

Now click the link in the upper-left of the screen titled "Register a Person" and enter the last name and DOB of anyone who has applied for an HQL. Use "Munster" and DOB 6/6/1966:

Now get Hermann's PII including email address:

Reset Hermann's password by using name and DOB combined with the answer to a 'secret question' that might be trivial:

Guess his secret question and you win the internet!

But hey! They at least encrypted the lookup that requires no credentials to find my records!

Useless.

Mr H · Oct 1, 2013

Horee Flock.............

Matlack · Oct 1, 2013

pictures no worky

StickerLT · Oct 1, 2013

Wow...

ShallNotInfringe · Oct 1, 2013

The MSP site says this under fingerprinting instructions:

Agency Authorization Number: 1300004845

Agency ORI Number: MD920511Z

Reason Fingerprinted: Criminal Procedure Article, Section 5-117.1 pertaining to Handgun Qualification License

Here's the link:
https://www.mdsp.org/Organization/S...ivision/MainLicensingPage/Fingerprinting.aspx

This is NOT a criminal procedure article, it's a Public Safety Article. In fact, there isn't a CPA section 5-117.1 at all.

Here's the link, there's only a 5-101 and a 5-102.

http://statutes.laws.com/maryland/criminal-procedure/title-5/subtitle-1

pilotguy299 · Oct 1, 2013

How irresponsible!

With so many ways of finding someone's DOB, now they have provided access to someone's Soc Sec # (If that person was dumb enough to put it in the system).

Also a great way for an estranged spouse to find where the other now lives.

MSP, you should be ashamed !!!

swinokur · Oct 1, 2013

time for another lawsuit?

chuckgregory · Oct 1, 2013

Did they design it this way to help us get an injunction?

I wouldn't be surprised if this site/some of these forms were vulnerable to SQL injection...

Mr H · Oct 1, 2013

I really REALLY hope this can be brought up in court today.

My other wonderment (purely rhetorical, I'm sure) is whether it's enough to reactivate the PII suit?

Vile Shadow · Oct 1, 2013

Is the application up yet?

pilotguy299 · Oct 1, 2013

mr h said:
I really REALLY hope this can be brought up in court today.

My other wonderment (purely rhetorical, I'm sure) is whether it's enough to reactivate the PII suit?

Should be. It shows their disregard for following the law about asking for Soc Sec #sin violation of the privacy act, and then allowing other people to access it improperly.

ShallNotInfringe · Oct 1, 2013

Shut it down.

CrazySanMan · Oct 1, 2013

Wow, that's insane. Now I wish I didn't fill out the HQL app first thing this morning.

danb · Oct 1, 2013

A system so well designed will prevent exactly ZERO straw purchases.

Mr H · Oct 1, 2013

CrazySanMan said:
Wow, that's insane. Now I wish I didn't fill out the HQL app first thing this morning.

Not a personal thing, so don't hit me

, but I have wondered all along why everyone seemed so hot to get into the system and apply.

Sure, there's the "bury them" aspect... but with the history of asshattery with MSP's processes, why not wait to see if things actually WORK??

jpo183 · Oct 1, 2013

Patrick said:
This again.

The MSP put up the HQL process overnight and the only way to apply is to expose your PII to the world.

Let me demonstrate:

Go to https://emdsp.mdsp.org/egov/Login.aspx

Now click the link in the upper-left of the screen titled "Register a Person" and enter the last name and DOB of anyone who has applied for an HQL. Use "Munster" and DOB 6/6/1966:

Now get Hermann's PII including email address:

Reset Hermann's password by using name and DOB combined with the answer to a 'secret question' that might be trivial:

Guess his secret question and you win the internet!

But hey! They at least encrypted the lookup that requires no credentials to find my records!

Useless.

as he said below...holee flock

Is MSI reporting this? I think Ill write a letter to the FNP

JettaRed · Oct 1, 2013

Folks, be VERY, VERY careful trying to access a government site using "hacking" tactics or methods. I would advise NOT testing the site. You may be violating Federal laws.

Since there is no warning on this site, one may be OK. Just wouldn't "test the waters" on this one.

Matlack · Oct 1, 2013

Curious, did you put in a SSN for Mr. Munster?

vinjet700 · Oct 1, 2013

ShallNotInfringe said:
Shut it down.

Agree...

Mr H · Oct 1, 2013

there is also an account for raymond j. johnson who coincidentally has the same dob.

But you doesn't have to call him Johnson...

Sorry... but this whole thing IS a comedy sketch... that isn't funny at all.

To apply for an HQL, you must Release PII to the world

The #1 community for Gun Owners of the Northeast

Member Benefits:

MSI Executive Member

Banana'd

Scribe

Active Member

Lil Firecracker

Ultimate Member

In a State of Bliss

Member

Banana'd

...

Ultimate Member

Lil Firecracker

2013'er

dont be a dumbass

Banana'd

Ultimate Member

Ultimate Member

Scribe

No one of significance

Banana'd

Users who are viewing this thread

Log in

Forum statistics