Marijuana Inventory Tracking system security complaints to prompt video changes
Looks like this clip will have to be amended, however. According to the Marijuana Enforcement Division spokeswoman who stars in the footage, complaints from a local ganjapreneur about a lack of security on the MITS website suggest a misunderstanding that needs to be addressed.
The complaints about MITs, a system created by the contractor Franwell, come from Jessica LeRoux, aka the Cheesecake Lady, whose marijuana edibles company is called Twirling Hippy Confections. Here's an item she posted on her Facebook page about mymits.com, the system's website:
We've already found a glitch in the MITS system: System to track and regulate cannabis isn't even on line yet and we already have a major security breach in the website to set up owners to take the classes to learn to use the incomplete system. Holy FUCK! Not only is the website not secured, in and of that anybody can use it even if they are not in the CO cannabis industry in any way shape or form... BUT once you enter a license number (it could be found on any packaging, maybe in the trash, or on many industry websites), if you enter any badge number into the system that turns out to be a valid badge, that badge holder's name automatically is filled in... giving persons with no business or right to know access to the name of virtually every person who has ever been badged in the state of Colorado... LEOs can be playing with the system right now, so can identity thieves.... Oh, and since the manifest system for transport of cannabis has never been secure now, black marketers have access to the names and badge numbers they can plug into a manifest and carry their weight from border to border w/o a LEO getting a clue... great!LeRoux adds: "MED/FRANWELL you are all completely INCOMPETENT. A64 supporters you've all fucked the cannabis world beyond words...."
When we contacted Marijuana Enforcement Division spokeswoman (and video star) Julie Postlethwait about these claims, she noted via e-mail that she had already seen LeRoux's post "and have provided a response that will be added to the mymits YouTube site. I cannot access YouTube from a state computer, so our vendor, Franwell, will be posting my response on my behalf."
As for the meat of LeRoux's complaint, Postlethwait writes, "Basically, we have a public informational site, which we are using to provide information to the public at large. We are also using the site to get industry members started on registering for MITS training. It is true that they must provide a business license number and we are requiring current occupational licenses for participation in the training -- neither of which is protected information. This will kick-off the registration process, so that we can begin a stringent authentication process for MITS industry training. The important point is that the informational site is NOT the MITS system, which is fully protected by layers of security and encryption."
Postlethwait also shared her response to LeRoux, which covers the points above and reveals that the post above was also shared on a state website -- prompting some stern words about profanity.
Jessica,Here's the MITs video featuring Postlethwait.
We're glad you were able to access this public informational site. In an effort to increase efficiency we used this communications tool to provide you with information needed to obtain MITS industry training. This is not the MITS system -- which will contain several layers of security and encryption - it is a public informational site which contains ONLY public information. As you know MED business license numbers and the name of the MED licensed holder's are public information.
As this is a public site please refrain from using offensive language. Because your comments ask good questions, we will maintain them on the site. However, future use of obscene language will cause us to remove comments.
Thanks you for your feedback.
More from our Marijuana archive: "Marijuana: Department of Revenue releases final recreational pot rules."