Business
ATO declines to fix code replay flaw within myGovID – ZDNet
Security researchers advise users to not use the system until it is patched, and given the taxation office’s response, that could be a long time coming.
The default login option for agents used by the Australian Taxation Office (ATO) is vulnerable to a code replay attack, security researchers Ben Frengley and Vanessa Teague said.
Writing in a blog post, the pair described that an attacker could use a malicious login form to capture user details, which the attacker could then use to login into other accounts held by the myGovID user.
The nub of the attack is that when a myGovID user attempts to login into a site, they are asked to input a fou…
-
Noosa News24 hours agoBar Monte, Newstead Review
-
Noosa News22 hours agoMagpies overlook Bobby Hill for AFL preliminary final against Lions
-
Business19 hours agoThe best ASX ETFs to buy if you only want to invest once a year
-
Noosa News20 hours agoNew details emerge in court as probe continues into Gold Coast euthanasia case