Scoop has an Ethical Paywall
KiwiRail security fail: tickets available for free
KiwiRail security fail: tickets available for free
KiwiRail’s amateur cyber security left a test website open to the public where it was possible to book train and ferry tickets for free, says Labour’s Open Government spokesperson Clare Curran.
“KiwiRail left its test website open for anyone on the internet. On the site it was possible to make bookings that appear legitimate on ferries and trains with a fake credit card number. It is remarkably easy for anyone with good technical knowledge to use the site to make free bookings.
“Basically KiwiRail left a hole in its security so big you could drive a train through it.
“What makes matters worse is after I was contacted by a whistleblower I alerted KiwiRail who took 16 days to fix it. It is still unclear if the issues have been resolved.
“National says cyber security is extremely important but that message clearly isn’t getting through to agencies. The Government has to get into the 21stCentury and secure its websites.
“Amy Adams launched a computer emergency response team (CERT) to great fanfare late last year to help protect the public and businesses online. It’s extremely embarrassing that its government agencies need that team more than anyone,” says Clare Curran.
ENDS
Oji Fibre Solutions: OjiFS Proposes To Discontinue Paper Production At Kinleith Mill
Hugh Grant: Navigating Digital Adoption In New Zealand - Embracing Change For A Bright Future
Dawn Aerospace: Historic Flight - Breaks Sound Barrier And Global Records
SEEK: SEEK NZ Employment Report - October
University of Auckland: Protecting Young Minds With AI
Greenpeace: Greenpeace Calls On Fonterra Investors To Consider Big Picture With Giant Puzzle
