by Mike Masnick
Fri, Aug 3rd 2007 5:02pm
The IRS has had problems modernizing their computer system in the past, but no matter how modern your computer system is, security is weak if your employees are easily duped through social engineering techniques. A new study found that 60% of the employees they tested were willing to hand over sensitive info to a person calling and posing as IRS tech support. This type of social engineering happens all the time, but it seems especially worrisome that so many IRS employees would be so willingly giving out info when they have access to so much confidential info and should be especially aware of the threat. In fact, the report notes that similar tests were done in 2001 and 2004 and the IRS promised to put in place measures to prevent these types of tricks from working. Apparently, that hasn't really happened.
If you liked this post, you may also be interested in...
- FBI Director Claims That The World's Most Knowledgeable Cybersecurity Experts Are Not 'Fair Minded' About Encryption Backdoors
- Pretty Much Anyone With Any Understanding Of Crypto Tells President Obama That Backdooring Crypto Is Monumentally Stupid
- Yes, Switching To HTTPS Is Important, And No It's Not A Bad Thing
- Dangerous And Ridiculous: Facebook Won't Let Sites Join Its Internet.org Program If They Encrypt Traffic
- Encryption: What The FBI Wants It Can Only Have By Destroying Computing And Censoring The Internet