5 ms·

The answer, of course, is "it's not that secure". Now, Turbo Tax and H&R Block aren't being hacked, but breaking into their systems isn't the easy way. And like

The answer, of course, is "it's not that secure". Now, Turbo Tax and H&R Block aren't being hacked, but breaking into their systems isn't the easy way. And like you said, attackers want to take the easy way. The easy way is to get just enough info from your targets as it takes to extract money from them. And in the past few years, e-filing fraud has skyrocketed. The mantra is "file your taxes before someone else does", because the number of people who are submitting their tax form only to find out it's already been submitted is greater than ever before. It's really, really hard to attack Intuit. It's much easier to submit fraudulent tax forms and pocket the returns before anyone notices.

gst 10y ago
> The mantra is "file your taxes before someone else does", because the number of people who are submitting their tax form only to find out it's already been submitted is greater than ever before. The IRS is liable for losses due to fraud, so why would I care about fraud? It's up to the IRS to secure their systems.
- JohnTHaller 10y ago
  Perhaps because it is a long and painful process to prove it and then get your money.
  - peller 10y ago
    This is absolutely the case. My parents' personal data was dumped when one of the major health providers got hacked a few years ago, and somebody started submitting junk returns with their info. Each season it takes them easily 20+ hours on the phone, and usually the IRS won't believe their identity over the phone (understandable enough) so they need to show up in person at the nearest IRS office (which isn't very near, and requires an appointment - another 3-4hrs on hold to schedule, and they never take you on time when you get there). It's a nightmare, and if you choose not to resolve it, you're just setting yourself up to get audited.
- cmurf 10y ago
  You have to prove they're liable first. It's unlikely they'd admit it, and even more unlikely that you'd get a prosecutor to take your case.
  - vkou 10y ago
    Actually, it is incredibly likely that they'll admit it, and that you won't have to go to court over it. That's not to say that it will won't be a huge pain in the neck.
- ceejayoz 10y ago
  > The IRS is liable for losses due to fraud, so why would I care about fraud? Because, ultimately, you and I wind up paying for it.
meric 10y ago
I hope someone file my taxes first because my tax return always ends up as owing government tens of thousands of dollars...
hackuser 10y ago
> Turbo Tax and H&R Block aren't being hacked What is that based on? > It's really, really hard to attack Intuit. It's much easier to submit fraudulent tax forms and pocket the returns before anyone notices What makes you say that it's so hard? Also, the return on breaking into Intuit is millions of tax returns. Finally, attackers may not be after the refunds on a few returns, and more interested in a massive intelligence and identity theft haul.
- freehunter 10y ago
  That's based on my years of experience in the information security industry. Trust me, if Intuit and H&R Block were being breached, I would know about it. And more than likely, so would you. But your comment about identity theft, that's part of the "file it before someone else does" aspect. Not necessarily that Intuit is getting broken into, but the rampant identity theft that seems to be common and even acceptable in today's day and age is making it a lot easier to file someone else's taxes for them and then make off with the money. And hackers will always go for the easiest target.

gst 10y ago

> The mantra is "file your taxes before someone else does", because the number of people who are submitting their tax form only to find out it's already been submitted is greater than ever before. The IRS is liable for losses due to fraud, so why would I care about fraud? It's up to the IRS to secure their systems.

JohnTHaller 10y ago
Perhaps because it is a long and painful process to prove it and then get your money.
- peller 10y ago
  This is absolutely the case. My parents' personal data was dumped when one of the major health providers got hacked a few years ago, and somebody started submitting junk returns with their info. Each season it takes them easily 20+ hours on the phone, and usually the IRS won't believe their identity over the phone (understandable enough) so they need to show up in person at the nearest IRS office (which isn't very near, and requires an appointment - another 3-4hrs on hold to schedule, and they never take you on time when you get there). It's a nightmare, and if you choose not to resolve it, you're just setting yourself up to get audited.
cmurf 10y ago
You have to prove they're liable first. It's unlikely they'd admit it, and even more unlikely that you'd get a prosecutor to take your case.
- vkou 10y ago
  Actually, it is incredibly likely that they'll admit it, and that you won't have to go to court over it. That's not to say that it will won't be a huge pain in the neck.
ceejayoz 10y ago
> The IRS is liable for losses due to fraud, so why would I care about fraud? Because, ultimately, you and I wind up paying for it.

meric 10y ago

I hope someone file my taxes first because my tax return always ends up as owing government tens of thousands of dollars...

hackuser 10y ago

> Turbo Tax and H&R Block aren't being hacked What is that based on? > It's really, really hard to attack Intuit. It's much easier to submit fraudulent tax forms and pocket the returns before anyone notices What makes you say that it's so hard? Also, the return on breaking into Intuit is millions of tax returns. Finally, attackers may not be after the refunds on a few returns, and more interested in a massive intelligence and identity theft haul.

freehunter 10y ago
That's based on my years of experience in the information security industry. Trust me, if Intuit and H&R Block were being breached, I would know about it. And more than likely, so would you. But your comment about identity theft, that's part of the "file it before someone else does" aspect. Not necessarily that Intuit is getting broken into, but the rampant identity theft that seems to be common and even acceptable in today's day and age is making it a lot easier to file someone else's taxes for them and then make off with the money. And hackers will always go for the easiest target.