news.volyx.in

County pays $600k to pentesters it arrested for assessing courthouse security (arstechnica.com)

442 points by MBCook · 265 days ago · 203 comments on HN

Article summary

Two security professionals, Gary DeMercurio and Justin Wynn, were arrested in 2019 for performing an authorized security assessment of a county courthouse in Iowa, despite having written authorization from the Iowa Judicial Branch. The charges were later dropped, but the men sued the county for wrongful arrest and defamation, and have now received a $600,000 settlement. The incident highlights the risks and challenges faced by security professionals who conduct penetration testing and vulnerability assessments. The settlement confirms that the men's work was authorized and done in the public interest.

Main themes

  • Security testing
  • Wrongful arrest
  • Defamation
  • Professional risks
  • Government accountability
  • Clearance and employment issues

What commenters say

  • Being charged with a crime, even if later dropped, can have long-lasting negative consequences for a person's career and reputation.
  • The settlement amount of $600,000 may not be sufficient to compensate for the damages suffered by the security professionals.
  • Security clearance is a discretionary process and having an arrest record, even if charges are dropped, can affect one's ability to obtain or maintain clearance.
  • Employers often use arrest records, even if charges are dropped, as a factor in hiring decisions, which can lead to unfair treatment of individuals.
  • The incident highlights the need for clearer protocols and communication between government agencies and security professionals conducting authorized testing.
  • The impact of an arrest record on one's career and reputation can be severe, even if the charges are later dropped, and this can have broader societal consequences.
  • Some argue that the security professionals' careers may have actually benefited from the publicity surrounding the incident, while others disagree.
  • There is a need for greater protection of individuals' rights and due process in cases where they are arrested or charged with crimes, particularly in cases where charges are later dropped.