Softpedia
 

NEWS CATEGORIES:



NEWS ARCHIVE >>
SOFTPEDIA REVIEWS >>
MEET THE EDITORS >>
Home > News > Security > Incidents

October 24th, 2011, 12:38 GMT · By Eduard Kovacs

UK Intelligence Commissioners 's Website Moved After Reported Error

SHARE:

Adjust text size:


Public websites should better secure their content
Enlarge picture
The newly launched official website of the Intelligence Commissioners Office allowed anyone to play webmaster as all the pages contained an Edit button that permitted for serious modifications to be made.

The Intelligence Commissioners Office, which provides independent judicial oversight of the conduct of agencies such as the Secret Intelligence Service, Security Service and Government Communications Headquarters recently launched a website for the public, but as it looks, the inauguration ceremony was a bit more than
they could handle.

According to The Telegraph, Commissioners representatives denied that the edit feature was part of an error, instead claiming that the system was set in place so anyone could comment on the development.

While he stated that the practice was not unusual, he also mentioned that the site contained no sensitive information and that it wasn't linked to other systems that could be exploited.

It might be true that such practices are not unusual, but it's a high risk to let every visitor completely change the content of a site.

The website has been properly secured and moved to a new location, an unnecessary thing to do if there really was no problem to begin with.

The screenshot provided by The Telegraph reveals a content management system that clearly allows anyone to entirely change the content. It clearly differs from a comment section as  pictures can be uploaded and even HTML modifications can be made.

The disturbing fact is that the Home Office had already started redirecting the public towards the location, advertising it as being the Commissioners new official page.

I wonder what would have happened if someone stumbled upon the page and started posting illegal materials.

Public institutions should really take better care of their assets, otherwise their reputation and their image might suffer dearly in the eyes of the citizens.

TELL US WHAT YOU THINK:

950 hits · Link to this article · Print article · Send to friend · Subscribe to news

MUST-READ RELATED ARTICLES:


A Rogue Web Browser Buried in 2006 Resurfaces

Mysql.com Compromised for the Second Time This Year

White Hat Hackers: Barack Obama's Website Vulnerable

Zero-Day Vulnerability Exploited in PrestaShop

READER COMMENTS:



No user comments yet.
Be the first to express your opinion!
Copyright © 2001-2012 Softpedia. Contact/Tip us at

WindowsGamesDriversMacLinuxScriptsMobileHandheldNews

SUBMIT PROGRAM   |   ADVERTISE   |   GET HELP   |   SEND US FEEDBACK   |   RSS FEEDS   |   UPDATE YOUR SOFTWARE   |   ROMANIAN FORUM