5 ms·
I tried to inform HMRC (and GDS: id4181490) about a bug with their Gov.UK Verify authentication process for self assessment due to this behaviour change. They
by lol768 6y ago
I tried to inform HMRC (and GDS: id4181490) about a bug with their Gov.UK Verify authentication process for self assessment due to this behaviour change.
They have no email address to report problems, the live chat agent wasn't technical enough to understand the issue (and blamed me) and GDS put their hands up and said it was nothing to do with them.
https://github.com/webcompat/web-bugs/issues/56216 https://github.com/webcompat/web-bugs/issues/56216
I have no faith this'll get fixed on many sites before it breaks a much wider proportion of users' workflows.
- IceCreamGondola 6y agoAs someone who used to work in Civil Service I can't say I'm surprised. The range of technical competance across the different government departments is staggering. Some are really making leaps and bounds while others are bloated, technical monoliths.
- garyclarke27 6y agoMaybe that explains why I’ve had numerous expensive problems with HMRC site, including missing VAT filing deadlines. By trial and error I found the only way to successfully use their site is to delete all HMRC and UK gov cookies before logging in.
- xenophonf 6y agoWeird issues like that are a big reason why I use in-private browsing all the time now.
- londons_explore 6y agoThe solution to notifying companies via live chat agents is to format your message like this: > I have a technical message for the person or team responsible for building the XYZ website. Please ensure the following message gets delivered to them. Not acting on this message could cause the website to stop working entirely. > [Technical details]
- thih9 6y agoHave you seen a message like this work? I'm asking because support agents sometimes receive messages from people who offer consulting services, often related to website security. Some of them are automated or not useful, but to a layperson they look similar to your template above. I could imagine a scenario where a support agent dismisses the above message as spam.
- giancarlostoro 6y agoI guess if you can find a manager of some sort within the org would be your best bet.
- dspillett 6y agoI suspect this would just get ignored as it would sound potentially like a phishing attempt. They'll have it drummed into them that there is no reason for such technical matters to be discussed in that channel and that they should politely brush it off. Such training will likely be stepped up, making this sort of message more likely to be ignored, after the events at Twitter and Garmin recently which both seem to have stemmed from the phishing variety of "human factors" engineering on the part of the attackers.
- crooked-v 6y agoTo me, that wording looks like a scam attempt or a malware threat, and most first-level techs I've worked with would reject it out of hand for that reason.
- true_religion 6y agoI just tell them their software is broken on X browser, then wait till it gets escalated high enough for someone to care about the technical details.
- JDTech123 6y agoI know it's not the best way, but you could try raising an issue against an active project in the same area using HMRC's github? e.g. https://github.com/hmrc/auth-client https://github.com/hmrc/auth-client
- switch007 6y agoGDS people should be fairly easy to find on twitter and github, if you were so inclined.
- marksomnian 6y agoPoked a GDS engineer I know, and it's been passed onto HMRC.
- lol768 6y agoThanks a bunch, I must admit this was one of the motivations behind me complaining about it here ;)