[Dataloss] Security flaw on Passport Canada's website exposes applicants' personal information
lyger
lyger at attrition.org
Tue Dec 4 13:29:39 UTC 2007
http://680news.com/news/local/article.jsp?content=20071204_080504_1760
A security flaw at Passport Canada's website has allowed an Ontario man
access to the personal information of other people applying for new
passports.
The Globe and Mail reported the breach was discovered last week while
Jamie Laning was completing his own passport application. He found he
could view the applications of others by altering one character in the
Internet address displayed by the Web browser.
The information he viewed included social insurance numbers, driver's
licence numbers and addresses.
[...]
More information about the Dataloss
mailing list