A flawed security setup could make access to the personal data of Canadians easily attained.
Last week a man from Ontario, Canada, stumbled upon a way to find data of other users applying for passports. While filling out his information online he discovered that by altering one number in the URL of his web browser he could view other people’s data.
The data that could be obatianed in the flaw includes social insurance numbers, birth dates, driver’s license numbers and other personal data of people applying for Canadian passports online.
Last Friday the website was taken down for repair. Earlier this week it was back up, but on Tuesday it went down again. The second suspension was “of a different nature” said a spokesperson for the agency. Indeed it was, as of Tuesday afternoon the site was back up, with the security flaw still accessible.
You can view a screen shot of the flaw here.
Leave a Reply
You must be logged in to post a comment.