Business
ATO declines to fix code replay flaw within myGovID – ZDNet
Security researchers advise users to not use the system until it is patched, and given the taxation office’s response, that could be a long time coming.
The default login option for agents used by the Australian Taxation Office (ATO) is vulnerable to a code replay attack, security researchers Ben Frengley and Vanessa Teague said.
Writing in a blog post, the pair described that an attacker could use a malicious login form to capture user details, which the attacker could then use to login into other accounts held by the myGovID user.
The nub of the attack is that when a myGovID user attempts to login into a site, they are asked to input a fou…
-
Noosa News7 hours agoArnie the dog found dead in stolen ute after week of searching
-
Noosa News12 hours agoTeenage girl dies in hit-and-run, police hunt for ute
-
Noosa News14 hours agoTeenage girl killed in alleged hit-and-run at Margate north of Brisbane
-
Noosa News7 hours ago‘Beyond devastated’ Brisbane family learn missing German shepherd Arnie found dead in back of stolen car