The newly launched official website of the Intelligence Commissioners Office allowed anyone to play webmaster as all the pages contained an Edit button that permitted for serious modifications to be made.
The
Intelligence Commissioners Office, which provides independent judicial oversight of the conduct of agencies such as the Secret Intelligence Service, Security Service and Government Communications Headquarters recently launched a website for the public, but as it looks, the inauguration ceremony was a bit more than
they could handle.
According to
The Telegraph, Commissioners representatives denied that the edit feature was part of an error, instead claiming that the system was set in place so anyone could comment on the development.
While he stated that the practice was not unusual, he also mentioned that the site contained no sensitive information and that it wasn't linked to other systems that could be exploited.
It might be true that such practices are not unusual, but it's a high risk to let every visitor completely change the content of a site.
The website has been properly secured and moved to a new location, an unnecessary thing to do if there really was no problem to begin with.
The screenshot provided by
The Telegraph reveals a content management system that clearly allows anyone to entirely change the content. It clearly differs from a comment section as pictures can be uploaded and even HTML modifications can be made.
The disturbing fact is that the Home Office had already started redirecting the public towards the location, advertising it as being the Commissioners new official page.
I wonder what would have happened if someone stumbled upon the page and started posting illegal materials.
Public institutions should really take better care of their assets, otherwise their reputation and their image might suffer dearly in the eyes of the citizens.