Comment Re:tie it to a case number (Score 5, Interesting) 172
Remove the ability to log directly in to Flock to initiate a search. Add new "initiate Flock search" button in the digital evidence management (DEMS) case screen that sends the case number directly into Flock to open the Flock search interface. Lots of ways to accomplish that with varying levels of security, but the point is, the user should never be able to initiate a search without it being tied to a case inside DEMS and should never be able to just enter whatever they want in place of a case number. Ideally, now DEMS has a direct link inside its case to the Flock search and results. Yeah, this means Flock has to have an API of some kind that DEMS can integrate with, and DEMS has to be enhanced to do so. But, these are the kinds of guardrails that should have been there from the start to minimize abuse.
Of course, this moves the attack (abuse) surface from Flock into DEMS. But, DEMS should already have strong guardrails around creating new cases (should always be linked to CAD / Records to start with). This kind of inter-system linkage is complex, but necessary, not just to mitigate Flock abuse.
Of course, this moves the attack (abuse) surface from Flock into DEMS. But, DEMS should already have strong guardrails around creating new cases (should always be linked to CAD / Records to start with). This kind of inter-system linkage is complex, but necessary, not just to mitigate Flock abuse.