[Dataloss] Security flaw on Passport Canada's website exposes applicants' personal information

lyger lyger at attrition.org
Tue Dec 4 13:29:39 UTC 2007


http://680news.com/news/local/article.jsp?content=20071204_080504_1760

A security flaw at Passport Canada's website has allowed an Ontario man 
access to the personal information of other people applying for new 
passports.

The Globe and Mail reported the breach was discovered last week while 
Jamie Laning was completing his own passport application. He found he 
could view the applications of others by altering one character in the 
Internet address displayed by the Web browser.

The information he viewed included social insurance numbers, driver's 
licence numbers and addresses.

[...]


More information about the Dataloss mailing list