by Mike Masnick
Fri, Aug 3rd 2007 5:02pm
The IRS has had problems modernizing their computer system in the past, but no matter how modern your computer system is, security is weak if your employees are easily duped through social engineering techniques. A new study found that 60% of the employees they tested were willing to hand over sensitive info to a person calling and posing as IRS tech support. This type of social engineering happens all the time, but it seems especially worrisome that so many IRS employees would be so willingly giving out info when they have access to so much confidential info and should be especially aware of the threat. In fact, the report notes that similar tests were done in 2001 and 2004 and the IRS promised to put in place measures to prevent these types of tricks from working. Apparently, that hasn't really happened.
If you liked this post, you may also be interested in...
- Newsflash: Car Network Security Is Still A Horrible, Very Dangerous Joke
- Verizon Support Wants You To Know That Twitter Is A Perfectly Secure Way To Send Them Your Social Security Number
- Shocking: Software Used To Monitor UK Students Against Radicalization Found To Be Exploitable
- DHS Head Jeh Johnson Recognizes The Privacy/Security Tradeoff, But Seems Unlikely To Make The First Concession
- Just As FBI Looks To Undermine Encryption, Federal Government Searches For Better Encryption