21 October 2017
Elton Cane

Elton Cane

Elton Cane - writer & tech geek

116Posts 526,045Views 54Comments
Information Security

Information Security

The risks from Cyber cime - Hacking - Loss of Data Privacy - Identity Theft and other topical threats - can be greatly reduced by implementation of robust IT Security controls ...

Banks accept Dubai assassins' stolen IDs

01 March 2010  |  6089 views  |  1

Quite a few countries around the world had passports of their citizens copied as part of the assassination of Hamas official Mahmoud al-Mabhouh. While the photos disemminated by the media were undoubtedly of the assassins, the rest of the details were of real citizens.

Many media outlets in Australia happily splashed hi-res images of the full passport pages last week. And I think some in the UK were similary careless.

So what, you might say. These documents were already compromised.

But, in Australia it seems the compromised passports were still valid on at least one government database - and this happened to be one that many banks, retail brokerages and online betting sites use for new customer validation.

Read the results of that little blunder here on iTNews.com.au - or, if you want the TV experience, here on MediaWatch.

TagsSecurity

Comments: (1)

Stephen Wilson
Stephen Wilson - Lockstep Group - Sydney | 01 March, 2010, 19:37

Excellent work this by Elton and iTNews.

It exposes serious limitations in the state of Electronic Verification today.  What are these systems other than fancy black lists?  When digital identity data can be stolen so easily (without the victim even being aware of it) how can EV systems provide much assurance? 

EV is seemingly locked into the cybercrime arms race, with no end yet in sight. EV tries to stay one step ahead of the bad guys by having slightly more up-to-date or slightly richer stocks of personal information against which to verify identity.

The systemic concern I have is that EV has yet to provide any fundamental resistance to ID theft. Worse, by synthesising new wash lists, some EV services are likely to be adding to the extraneous third party stockpiles of personal information waiting to be raided by organised crime. It seems obvious that we wouldn’t need EV if it wasn’t so easy to take someone’s digital identity data and replay it behind their backs.

Be the first to give this comment the thumbs up 0 thumb ups! (Log in to thumb up)
Comment on this story (membership required)

Latest posts from Elton

Would you pay to put your mortgage out to tender?

18 September 2014  |  3012 views  |  0 comments | recomends Recommends 0 TagsMobile & onlineRetail bankingGroupFuture Finance

Contactless payments are not a choice

29 August 2014  |  4283 views  |  4 comments | recomends Recommends 0 TagsCardsSecurityGroupFuture Finance

Cryptocurrency can cure cancer

07 August 2014  |  2514 views  |  1 comments | recomends Recommends 0 TagsBlockchainInnovationGroupFuture Finance

Will regulation strangle or enable 'quasi-banks'?

26 March 2014  |  6429 views  |  0 comments | recomends Recommends 0 TagsRisk & regulationInnovationGroupFuture Finance

Good at maths? Ask your bank for a better mortgage rate

03 March 2014  |  3682 views  |  0 comments | recomends Recommends 1 TagsRisk & regulationRetail bankingGroupFuture Finance

Elton's profile

job title Journalist copywriter and marketer
location Brisbane
member since 2012
Summary profile See full profile »
Writer and media production person

Elton's expertise

Member since 2007
116 posts54 comments

Who's commenting on Elton's posts