myGov.au - insecure piece of s**t we are forced to use

[Dry Rot]

Scammers are setting up fake myGov accounts to steal super, after the govt was warned that their system was insecure.

myGov is an insecure piece of s**t we are increasingly being forced to use. Likewise, being forced to link it to the ATO site. When you do, check out the ridiculously onerous ATO conditions you have to agree to.

Thousands of dollars disappear overnight as scammers use myGov to steal super

Scammers are taking advantage of the Government's early release superannuation scheme to steal money from Australians' nest eggs, and loopholes in myGov security could have something to do with it.

www.abc.net.au

 

[hamohawk1]

Scammers are setting up fake myGov accounts to steal super, after the govt was warned that their system was insecure.

myGov is an insecure piece of s**t we are increasingly being forced to use. Likewise, being forced to link it to the ATO site. When you do, check out the ridiculously onerous ATO conditions you have to agree to.

Thousands of dollars disappear overnight as scammers use myGov to steal super

Scammers are taking advantage of the Government's early release superannuation scheme to steal money from Australians' nest eggs, and loopholes in myGov security could have something to do with it.

www.abc.net.au

Not to mention the interface is seriously bad and lacks functionality.

Reeks of an interface that hasn't been updated since 2001

 

[GreyWind]

Not to mention the interface is seriously bad and lacks functionality.

Reeks of an interface that hasn't been updated since 2001

Pretty sure that's intentional. Make a s**t dysfunctional website and make it as hard as possible for people to try and claim welfare.

 

[Nuggs Bunny]

Not to mention the interface is seriously bad and lacks functionality.

Reeks of an interface that hasn't been updated since 2001

Really? Thought MyGov is an absolute breeze compared to what eTax used to be

 

[NSWCROW]

Don't panic , stuart robert has it under control

 

[nobbyiscool]

Pretty sure that's intentional. Make a s**t dysfunctional website and make it as hard as possible for people to try and claim welfare.

It's privatisation 101 - deliberately setting up a public service to fail so you can privatise it, sending massive amounts of tax-payer money to for-profit businesses to provide shitty services.

 

[Elroo]

Scammers are setting up fake myGov accounts to steal super, after the govt was warned that their system was insecure.

myGov is an insecure piece of s**t we are increasingly being forced to use. Likewise, being forced to link it to the ATO site. When you do, check out the ridiculously onerous ATO conditions you have to agree to.

Thousands of dollars disappear overnight as scammers use myGov to steal super

Scammers are taking advantage of the Government's early release superannuation scheme to steal money from Australians' nest eggs, and loopholes in myGov security could have something to do with it.

www.abc.net.au

And now all group certificates will be only provided through the mygov website rather than directly through your employer.

 

[Gethelred]

Really? Thought MyGov is an absolute breeze compared to what eTax used to be

That's not a point in its favour. A 5 year old could've written a better program than eTax to serve the same purpose; literally, as these days kids are being taught how to code from young ages. It's not even an exaggeration.

 

[Nuggs Bunny]

That's not a point in its favour. A 5 year old could've written a better program than eTax to serve the same purpose; literally, as these days kids are being taught how to code from young ages. It's not even an exaggeration.

Uh huh

 

[Sinjin Smith]

That's not a point in its favour. A 5 year old could've written a better program than eTax to serve the same purpose; literally, as these days kids are being taught how to code from young ages. It's not even an exaggeration.

Turn it up.

The issue here isnt the interface anyway, its the identity workflow and having the business logic of disabling/preventing accounts being set up against identity fields that already exist and contain data, that is dreadful application architecture and ID store design.

 

[Gethelred]

Turn it up.

The issue here isnt the interface anyway, its the identity workflow and having the business logic of disabling/preventing accounts being set up against identity fields that already exist and contain data, that is dreadful application architecture and ID store design.

A mild exaggeration perhaps, but kids progressively younger are being taught to code, and etax was a piece of s**t. A 5 year old, maybe not, but a prodigious 8-10 year old probably.

 

[Sinjin Smith]

A mild exaggeration perhaps, but kids progressively younger are being taught to code, and etax was a piece of s**t. A 5 year old, maybe not, but a prodigious 8-10 year old probably.

I do understand where you are coming from in terms of kids coding and generally being proficient with IT, it is an integral part of their lives now. 8-10 year olds may well be able to code a magnificent looking interface. However understanding the logic, data and infrastructure behind that interface......well that is a massive stretch, if a 10 year old prodigious talent does that then he/she wouldn't be limiting themselves to Aus Gov's crappy eTax application, he/she would be in a google lab.....being primed for a defence role in the USA.

 

[Gethelred]

I do understand where you are coming from in terms of kids coding and generally being proficient with IT, it is an integral part of their lives now. 8-10 year olds may well be able to code a magnificent looking interface. However understanding the logic, data and infrastructure behind that interface......well that is a massive stretch, if a 10 year old prodigious talent does that then he/she wouldn't be limiting himself to Aus Gov's crappy eTax application, he/she would be in a google lab.....being primed for a defence role in the USA.

That's fair, and you clearly know a good deal more about this than I do!

 

[Sinjin Smith]

That's fair, and you clearly know a good deal more about this than I do!

I am also detracting from the point of the topic that Dry Rot has brought up. How can us, as citizens, react? This is a deplorable use case of security gone bad. It really is astonishing that these flaws with the online initiative are actually there.

Covid and USA are dominating our media right now but I view this as a major breach and it requires attention and exposure to all of Australia's populace who have records in mygov. How on earth can they be trusted??? They cant....

ScoMo should shift the $$ for "renovations" into securing the data of Australians (born and immigrated) who have been directed (forced ??) to sign up for this.

******* disgraceful.

 

[HairyO]

Scammers are setting up fake myGov accounts to steal super, after the govt was warned that their system was insecure.

myGov is an insecure piece of s**t we are increasingly being forced to use. Likewise, being forced to link it to the ATO site. When you do, check out the ridiculously onerous ATO conditions you have to agree to.

Thousands of dollars disappear overnight as scammers use myGov to steal super

Scammers are taking advantage of the Government's early release superannuation scheme to steal money from Australians' nest eggs, and loopholes in myGov security could have something to do with it.

www.abc.net.au

Someone didnt read the article.

 

[Dogs_R_Us]

So how are they stealing the super from myGov?

 

[Rob R]

Does it even matter how secure the app is when we keep letting foreign companies including from countries that are at best unfriendly own or operate the govt data centres or just as bad let the companies running them employ foreign staff.

On SM-G570F using BigFooty.com mobile app