What impact can an SQL Injection have? Security investigator David Levin, 31 years from Estero, Florida, was handed over to his police station when the police issued a warrant for his arrest last week.
Police accused Levin of three hacking-related charges, and Levin spent six hours in jail last Wednesday before he was released by paying a $ 15.000 dollar guarantee.
But let's see what happened.
According to the police, Levin managed to obtain illegally access on three different government websites with SQL Injections. The first was on December 19, 2015, when Levin managed to hack the Lee County Elections website.
The incident went on as he made two more violations at 4 and 31 in January of 2016 when Levin managed to enter the Department of the State Elections.
The authorities argued that Levin did not ask for permission before attempting.
Levin, who is the owner of a security company called Vanguard Cybersecurity, recorded a video with Dan Sinclair, detailing how he managed to break vulnerable websites using a simple SQL Injection.
Dan Sinclair is a candidate for the Election Observatory position in Lee County, Florida. But in the eyes of the current Sharon Harrington election, all of this looked like an acrobatic show in the media, and so he filed a lawsuit against Levin.
The video was posted on YouTube on January 25, and Florida police raided Levin's house on February 8 and seized his computers.
As mentioned above, the authorities claimed that Levin did not ask for permission to conduct penetration tests on any of the state servers and that he was overwhelmed by his demonstration.
The authorities they claim that Levin “got several usernames and codeς πρόσβασης των εργαζομένων” και ότι χρησιμοποίησε το name χρήστη και τον κωδικό πρόσβασης της επόπτριας του Lee County για να αποκτήσει πρόσβαση σε άλλες services.
