Revenue bug could strike again

03 Jul 2002

Be the first to comment

A Computing logo

The security flaw that led the Inland Revenue to withdraw its online tax filing site last month could affect other areas of the government's web presence.

The bug that led to taxpayers details being revealed on the Revenue site has been fixed, but a spokesman told Computing that other departments using the Government Gateway authentication portal may also be exposed.

'We are in discussion with other government offices where we believe it could affect them, although it would not affect many,' he said.

The exact cause of the problem is unclear. The Revenue blames a configuration problem with an unnamed internet service provider.

'The way in which the "session cookie" identifying the user was managed meant that it could, in certain rare circumstances, be presented to another user,' said a statement last week.

Eenvoy Andrew Pinder told a Public Accounts Committee last month that an obscure 'technical standard' had been the culprit.

Reader comments

Have your say on this article

All fields required. Your email address will not be displayed on the site.

By submitting a comment you agree to abide by our Terms & Conditions

  • Digg
  • Tweet

Newsletters

Sign up for our FREE newsletters

Do you think the G-Cloud will be a success?

The government’s £60m G-Cloud framework continues to take shape with infrastructure, platform and software-as-a-service suppliers named on 19 February. The cloud services will be made available via a CloudStore and it is hoped that it will erode government IT silos, as well as make IT cheaper and more flexible. Do you think the G-Cloud will be a success?

80 %

4 %

9 %

7 %