Gordon Campbell | Parliament TV | Parliament Today | Video | Questions Of the Day | Search

 


Labour alerts Justice Ministry to gaping security hole

Clare
CURRAN
Communications and IT Spokesperson

9 April 2013 MEDIA STATEMENT

Labour alerts Justice Ministry to gaping security hole in its website
Labour’s Information Technology spokesperson, Clare Curran, has today alerted the Ministry of Justice of a serious security flaw in its website.

The vulnerability leaves the personal and financial details of tens of thousands of New Zealanders potentially exposed, and might allow a malicious person to redirect payments to and from members of the public.

“This is a very serious matter. This is yet another gaping hole in the security of a major government site, with privacy and financial implications for a huge number of people,” says Clare Curran.

The security flaw allows access to Ministry of Justice passwords and databases, via a publicly accessible search engine on its website.

“The Ministry of Justice holds incredibly sensitive data – including information about the victims of crime. The Government has a fundamental duty to protect that information. This flaw, if exploited, could have a devastating effect on thousands of people.

“Earlier today I wrote to the Ministry of Justice, the Minister Judith Collins and the Privacy Commissioner alerting them to the issue, which must be addressed urgently.

“This matter was brought to my attention by a whistle-blower. That person has agreed to help the Ministry of Justice in any way they can to ensure the security flaw is fixed.

“This is the latest in a disturbingly long line of information technology security flaws and privacy breaches. There is clearly a major systemic problem with IT security.

“In the past two years more than 100,000 Kiwis have had their privacy breached by government agencies, including the ACC, MSD, IRD and EQC. This is an issue of public trust and confidence in government systems.

“The National Government needs to treat this matter with the seriousness it deserves, and stop hiding behind human error as an excuse for not protecting people’s private information,” says Clare Curran



Ministry of Justice security flaw Q and A

What is the nature of the security flaw?
The flaw allows access to what appears to be Ministry of Justice databases covering licences and fines. Those databases would likely include the personal details of many victims of crimes.

Access to the page containing passwords for the databases was found via a publicly accessible part of the Ministry of Justice website.

How serious is this vulnerability?
This is a serious flaw. The passwords were contained in a plain text file, and those passwords could be used to access incredibly sensitive information, and could potentially allow someone to alter fines payments and financial records.

The MoJ website is very vulnerable to anyone who is serious about trying to break into it. The MoJ website’s security is nowhere near an acceptable standard.

Potentially how many people’s information is at risk because of this problem?
That is not clear. But the databases in question could include information about people that the Courts have imposed a fine upon, and any victim of crime that is receiving reparations. At the very least the databases also hold the details of those with licences issued by the Ministry of Justice.

How did Clare Curran become aware of the issue?
Clare Curran was contacted by a concerned member of the public, who identified the vulnerability. That person contacted her in the hope that she could help expose the problem and get it fixed.

The whistle-blower did NOT access the Ministry databases, but did view the plain text file that contained the passwords. This confirmed the seriousness and extent of the security issue. This file has been passed on to the Ministry of Justice.

Clare Curran will not be publicly identifying her source, but they have agreed to help the Ministry of Justice to address this problem.


© Scoop Media

 
 
 
 
 
Parliament Headlines | Politics Headlines | Regional Headlines

 

PARLIAMENT TODAY:

  • Week in Parliament 22-05-15
  • Saturday Sitting
  • House Rises At Midnight
  • Telco Levy Bill Passes
  • Telco Levy Bill Completes First Reading
  • Social Housing Bill Passes Under Urgency

  • TPPA: University Of Auckland Warns Of Negative TPP Impact

    The University of Auckland May 20, 2015 University of Auckland Warns of Negative TPP Impact With the Trans Pacific Partnership (TPP) negotiation drawing to a close, the University of Auckland has expressed serious concerns about its potential implications. ... More>>

    NZ Flag: Flag Referendum Gets Hit Hard In New Poll

    The latest Campbell Live text poll confirms it is time for the Prime Minister to listen to the public and shelve his flag referendum, says the New Zealand First Leader Rt Hon Winston Peters. More>>

    Gordon Campbell: The Government’s Belated Moves On Property Speculation

    Is it a property tax on capital gains or a capital gains tax on property? The Jesuitical distinctions in the government’s spin about its latest moves on property speculators are all about whether the government can claim that it jumped, or confess that it ... More>>

    Grant Robertson:
    Key Can’t Just Be Prime Minister For Parnell

    John Key must show New Zealanders in next week’s Budget that he is more than the Prime Minister for Parnell, and is also the Prime Minister for Pine Hill, Putararu and Palmerston North, Labour’s Finance spokesperson Grant Robertson says. In a ... More>>

    Labour Party: More Regional Jobs Go In Corrections Reshape

    News that 194 Corrections staff are to lose their jobs will have ramifications not only for them and their families but for the wider community, Labour’s Corrections spokesperson Kelvin Davis says. Prison units at Waikeria, Tongariro and Rimutaka ... More>>

    ALSO:

  • NZ First - Prison Job Losses to Send Money Offshore
  • TPPA: ‘Team Obama’ Regroups On Fast Track, Still Not Deliverable

    ‘After yesterday’s stinging and unexpected defeat for the Obama administration’s attempt to advance Fast Track legislation in the US Senate, Senate leaders have worked up a compromise they think will get them past this blockage’, according to Auckland ... More>>

    NZ Government: 5,500 More Doctors And Nurses In Our Hospitals

    Health Minister Jonathan Coleman says a record number of doctors and nurses are working in District Health Boards across the country. More>>

    Controller and Auditor General: Katherine Rich Conflict of Interest Decision

    We are writing to you about a matter that has been raised with us by members of the public. More>>

    ALSO:


    Budget 2015: Andrew Little On The 2015 Budget

    Speaking to the Chamber of Commerce, the Labour opposition leader attacked the government’s approach to economic issues facing New Zealand. He said they have been “more than reckless in their complacency” and “the next week’s budget will do nothing ... More>>

    Defence Force: NZDF Building Partner Capacity Mission Personnel In Iraq

    NZDF Building Partner Capacity Mission Personnel in Iraq The New Zealand Defence Force Building Partner Capacity training mission contingent is in place at Taji Military Complex in Iraq. The Chief of Defence Force Lieutenant General Tim Keating says the ... More>>

    PM Press Conference: ACC Levy Cuts Announced

    In a press conference this afternoon in Wellington, ACC Minister Nikki Kaye proposed $500 million worth of ACC levy cuts. More>>

    Quakes: New Process For Red Zone Crown Offers

    Canterbury Earthquake Recovery Minister Gerry Brownlee has announced a process to give everyone a say on the Crown offers to owners of vacant, commercial/industrial and uninsured properties in the Residential Red Zone. More>>

    ALSO:

    Gordon Campbell: On The Battle Obama Is Waging Over The TPP

    For the past two and a half years, this column has been arguing that the fate of the Trans Pacific Partnership (TPP) deal will hinge on whether US President Barack Obama can win Trade Promotion Authority (TPA) from Congress... Last week, the White House finally, finally unveiled a draft TPA Bill. More>>

    ALSO:


    Gordon Campbell: On lessons for Labour from the UK election
    If the polls were right – and the pollsters kept telling us how accurate they’d been in 2010, and even Nate Silver was getting the same results – there seemed no way that the British Labour Party could lose last Thursday’s British election. With Labour predicted to win around 270 seats and the Scottish National Party batting around 55-60 seats, Labour seemed to be home free. But…as we now know, things didn’t turn out that way. Labour ended up with 232 seats and the Conservatives swept back to power with an outright majority, after winning only a little more than a third ( 36.9%) of the votes cast.MORE >>
    Also.

  • NZ PM John Key - PM congratulates David Cameron after UK election
  • The Nation IV Transcript - Hack Attack author Nick Davies
  • Get More From Scoop

     

    LATEST HEADLINES

     
     
     
     
     
    More RSS  RSS
     
     
     
     
    Parliament
    Search Scoop  
     
     
    Powered by Vodafone
    NZ independent news