by Mike Masnick
Fri, Aug 3rd 2007 5:02pm
The IRS has had problems modernizing their computer system in the past, but no matter how modern your computer system is, security is weak if your employees are easily duped through social engineering techniques. A new study found that 60% of the employees they tested were willing to hand over sensitive info to a person calling and posing as IRS tech support. This type of social engineering happens all the time, but it seems especially worrisome that so many IRS employees would be so willingly giving out info when they have access to so much confidential info and should be especially aware of the threat. In fact, the report notes that similar tests were done in 2001 and 2004 and the IRS promised to put in place measures to prevent these types of tricks from working. Apparently, that hasn't really happened.
If you liked this post, you may also be interested in...
- Techdirt Podcast Episode 92: Passwords Suck; What's Next?
- The Internet Of Poorly Secured Things Is Fueling Unprecedented, Massive New DDoS Attacks
- DHS Offers Its Unsolicited 'Help' In Securing The Internet Of Things
- Hollywood Keeps Insisting Tech Is Easy, Yet Can't Secure Its Own Screeners
- Colin Powell's Email To Clinton About Personal Devices Shows Routing Around FOIA Is Business As Usual