Quote:
Originally Posted by Dion
A security flaw in Passport Canada's website has allowed easy access to the personal information - including social insurance numbers, dates of birth and driver's licence numbers - of people applying for new passports.
The breach was discovered last week by an Ontario man completing his own passport application. He found he could easily view the applications of others by altering one character in the Internet address displayed by his Web browser.
"I was expecting the site to tell me that I couldn't do that," said Jamie Laning of Huntsville. "I'm just curious about these things so I tried it, and boom, there was somebody else's name and somebody else's data."
That data included social insurance numbers, driver's licence numbers and addresses."We've probed this issue today very thoroughly," Mr. Lengelle said. "This incident is an isolated anomaly. The online passport system is still a very highly secure application."
Passport Canada spokesman Fabien Lengelle acknowledged that a security breach occurred but said that it was repaired on Friday. Yesterday's closing of the website was caused by "problems of a different nature," he said.
But after the website resumed operation yesterday afternoon, a few keystrokes sufficed to reveal some of the personal information of passport applicants, including names, addresses and numbers for references and emergency contacts.
http://www.theglobeandmail.com/servl.../National/home
|
I could of told you it wasn't as secure as they say it is :P.... They only use 3DES for encryption which is obsolete, so just on the basis of that, you know its know all its cracked up to be.
I've tried telling them as such through internal information but they refuse to listen.... Hopefully something like this will finally get them to pull their heads outa their asses.
Passport applicant finds massive privacy breach
