David: I do have to agree that I do not know everything that is or would be entailed in breaking in to any of the sites,and I am sure someone some where has been able to do just that, but I do feel I am doing a service, maybe small, but still a service, by informing or questioning the clerks as to how they protect and or allow access to their respective sites rather than just doing nothing and wondering "what went wrong " later on. This is not something just I need to do, we all need to do the same thing so we cover all the possibilities, maybe then we can have a secure access system.
The example you have above is blocked by simple use of a static IP also, we had that as an additional requirement with Fairfax County until just last year-it only allowed access from one access point then, which blocked any mobile use or being on vacation and being able to access the sites to do catch up work, but that was dropped last year and we can now access from anywhere with the proper sign on credentials.
And please keep up the work you are doing because there does seem to be a wholesale selling of the personal information in some states and counties that are in extreme need of a "make-over".