Rival behind Schwarzenegger Web flap

The Democratic rival to California Gov. Arnold Schwarzenegger acknowledged Tuesday that his aides were responsible for obtaining a controversial audio file in a move that has led to allegations of Web site hacking.

But the campaign manager for Phil Angelides, the state treasurer who is running against Schwarzenegger in the November election, said no laws were broken.

"We believe that these audio files--accessed through a public Web site, requiring no password, and not marked confidential--are a matter of public record and should be made available to the media and the public," said Cathy Calfo, Angelides' campaign manager.

Schwarzenegger's comments recorded in an audio file caused a flap when they were revealed by a leak to the Los Angeles Times by Angelides' aides. In the March conversation between the governor and his chief of staff, Schwarzenegger said blacks and Latinos were "hot" blooded, meaning they were passionate.

"I mean, they (Cubans and Puerto Ricans) are all very hot...they have the, you know, part of the black blood in them and part of the Latino blood in them and together that makes it," he said.

Schwarzenegger apologized for the remarks, and on Monday his legal-affairs secretary released a statement saying that two unauthorized people had downloaded audio files in August.

The controversy may center on the design of the Web server called speeches.gov.ca.gov. The California government used it to post MP3 files of Schwarzenegger's speeches in a directory structure that looked like "http://speeches.gov.ca.gov/dir/06-21.htm.htm". (That Web page is now offline, but saved in Google's cache.)

A source close to Angelides told CNET News.com on Tuesday that it was possible to "chop" off the Web links and visit the higher-level "http://speeches.gov.ca.gov/dir/" directory, which had the controversial audio recording publicly viewable. No password was needed, the source said.

Calfo, Angelides' campaign manager, has since characterized the leak to the Los Angeles Times as something done by two aides without her permission.

Katie Levinson, communications director of Californians for Schwarzenegger, denounced the acquisition of the audio file in a statement Tuesday.

"Sadly, the actions by the Angelides campaign come as no surprise and the treasurer should denounce the unethical actions taken on his behalf," Levinson said. "Phil Angelides has a long history of gutter politics, and it is clear this most recent example was a calculated effort to smear the governor's reputation."

[volterwd]

So flaws in design

make it open game to hacking?

What a lame excuse.

Whats next... 'judge i broke in... but its not against the law. There was no fence... there was no sign saying not to be there... and there was no lock. So its ok.'

Hmmmmmmmm

[ml_ess]

All's fair in...

So it may be a cheap way to get ahead of your opponent, but I'm sure it worked for Schwarzenegger's rival. http://www.iwantmyess.com/?p=99

What I'm wondering about is why the audio file was on that website anyway? Schwarzenegger's campaign manager should be checking for these sorts of things on the internet as often as possible to eliminate another damaging leak.

[fred dunn]

No Hacking There, just poor security & judgement

If your web directories are open then expect people to get at them one way or another since all of the search engines are going to index and cache them.

[FlappingCrane]

In no way is what happened "hacking"

No hacking occurred here. There is no design flaw to blame. The audio file was purposefully uploaded to a server. The directory into which the file was stored is publically available by typing an URL into any web browser. All the technology here performed exactly as is it was designed to perform. People may say, "It's the administrator's fault for uploading the file in the first place." Even they are wrong. The problem is that this is the way the governor thinks. He said what he felt and that can't be changed. Do you agree with it? Then vote for him. Do you not agree? Then don't vote for him.

[missingamerica]

Not hacking...anybody who googles has probably done it..

I've bet I've googled a search phrase 10,000 times, particularly if it had something to do with coding, and ended up looking at a "C" or some other language file, so I "chopped off" to climb to a higher level directory that might actually have a stinkin' index in it...that kinda stuff is very prevalent in webservers based on 'Nixie O/Ss...

[real_bgiel]

Not necessarily in public domain

Just because you can find and grab files does not make it legitimate. I can find and grab mp3 files and still find myself in hot water, right?

[drfrost]

Demonstrates a flaw....

This whole situation demonstrates a flaw... but I'm not talking about internet security. I'm talking about character. One man willing to cross ethical boundaries to smear his opponent. One man demonstrating a lapse in judgement.