3 ms·
MHR is connected to mygov. mygov, is [0] not [1] secure [2]. Therefore, MHR is not secure. I have no reason to believe the situation has changed (2FA is still
by shakna 8y ago
MHR is connected to mygov.
mygov, is [0] not [1] secure [2]. Therefore, MHR is not secure. I have no reason to believe the situation has changed (2FA is still SMS only for starters) - and I cannot see any reasonable effort being made by our government to change that same situation.
Their past response [3] has been to ignore security problems.
I don't care how much they're paying for this brand-new insecure service. I'm irritated that they're asking Australia to pay for something that wasn't requested (people asked for an easier way to transfer records - not for their records to be housed in a known, insecure facility), and I'm irritated that after complaints of insecurity began surfacing across the nation, they started a campaign on TV calling it secure.
So no, the bigger perspective isn't a nation paying a lot for a system that isn't getting used - the bigger perspective is the nation is paying the government to allow enterprising individuals to steal and sell their data.
[0] https://www.zdnet.com/article/mygov-health-records-breached-in-site-flaw/ https://www.zdnet.com/article/mygov-health-records-breached-...
[1] https://www.smh.com.au/technology/revealed-serious-flaws-in-mygov-site-exposed-millions-of-australians-private-information-20140514-zrczw.html https://www.smh.com.au/technology/revealed-serious-flaws-in-...
[2] https://www.smh.com.au/technology/australians-private-government-details-at-mercy-of-hackers-say-it-security-experts-20140427-zqzkg.html https://www.smh.com.au/technology/australians-private-govern...
[3] http://www.scribd.com/doc/224260090/MyGov-Security-Gov-Response http://www.scribd.com/doc/224260090/MyGov-Security-Gov-Respo...