4 ms·
There was also a pretty basic SSO security issue a few years back, and I tried and tried and could not find anyone to report it to beyond regular customer servi
by hnick 4y ago
There was also a pretty basic SSO security issue a few years back, and I tried and tried and could not find anyone to report it to beyond regular customer service. Maybe they've fixed it but basically you click to look at tax stuff, it takes you to ATO online services, you click back to mygov then sign out. Sign into another account and click and now you're looking at the original person's tax stuff since it's still signed in. Not a problem for myself and my wife, but potentially an issue for abusive relationships or shared resources like a library computer.
- bigDinosaur 4y agoThe experience of many reporting security issues to the Australian government is to be harassed, so I'm sure many such issues have been picked up by people and not reported out of fear or just not being willing to deal with the drama. One wonders how much this applies even to the developers.
- hnick 4y agoYeah having worked in a big company or two, "you find it you own it" is a real issue. Easier to keep your head down when you know it'll be an 8-month back-and-forth meeting-fest to fix a basic issue.
- mianos 4y agoAnother similar issue is, if you see a huge problem that will take lots of time to fix, and, if you take it on, your timesheets don't have enough time on the other approved new work codes. For this you will eventually be punished in the corporate way, sidelined, no promotion, no pay rise (.5%) and assignment to failed projects where anyone else who worked on them has long gone. The net result of this is a wasteland of rubbish as far as the eye can see.