(((Okay, let's imagine you're, like, Mr Humble Government Clerk punter bedsit Weetabix-eater guy, and in front of you, every day, is the Brand New British Gigantic SuperAntiTerror ID Consolidated Database. If you're, like, Miss Moneypenny or something, maybe you're so rigidly disciplined that you never peek. But wouldn't you – just as job one – check out YOUR OWN entry in the giant Satanic Mill database? And after that, wouldn't you do Enid, in the cubicle down the hall? I mean, how could you not?)))http://www.thisislondon.co.uk/news/article-23364764-details/ID+card+fears+as+staff+hack+into+Home+Office+database/article.doID CARD FEARS AS STAFF HACK INTO HOME OFFICE DATABASE27.08.06 Office staff are hacking into the department's computers, putting at risk the privacy of 40million people in Britain.The revelation undermines Government claims that sensitive information being collected for its controversial ID Cards scheme could not fall into criminal hands.The security breaches occurred at the Identity and Passport Service, which is setting up the National Identity Register to provide access to individuals' health, financial and police records as part of the £8billion ID card scheme scheduled to begin in 2008.MPs and technology experts have expressed fears that the national register, which will store sensitive details of more than 40million people, will be a honeypot for hackers and identity thieves. Liberal Democrat Home Affairs spokesman Mark Hunter said: 'These revelations show it is folly to put all the precious personal data of our citizens in one place.'Personal information about every British passport holder - including their date of birth, mother's maiden name, address and photographs - is already held in the IPS computers.A Home Office spokesman last night confirmed the IPS security breaches. He also confirmed that three staff involved had been sacked and a fourth had resigned before disciplinary procedures had concluded.The spokesman said none of the security breaches involved'hacking' by outside criminals, and a 'whole range of protocols and procedures' were in place to protect Home Office databases from unauthorised staff use.He said: 'System checks are routinely carried out and any violation is dealt with severely.'The spokesman added that the ID Cards database would be a 'completely different' system.Home Office figures show that the department's databases have been successfully penetrated on average once a year since 2001.Four of these security failures were at databases maintained by the IPS, an executive agency of the Home Office created in April.Computer experts warn that more security breaches are likely to have gone undetected.Phil Booth, of the NO2ID campaign, said government databases would always be vulnerable to unscrupulous staff.'That these breaches have taken place in the very agency that is supposed to be protecting the identities of every citizen in this country is a damning indictment of the current system,' he said.'But when you consider that this agency will be running the ID card scheme, it's truly terrifying.'John Tullett, the technology editor of Secure Computing magazine, said the Home Office would be 'naive' to assume that the total of recorded breaches reflects the real number of security violations at the department.He said: 'The trend in IT crime is towards "silent" breaches where very competent criminals get into a system and cover their tracks so they can get in again in future, all without the victim ever knowing.'
ICE Has Been Dumping Protester Photos Into a Palantir Database
DHS agents not only tracked and intimidated people observing ICE activity in Maine, but stored information about them in a database run on Palantir software, newly unsealed court filings say.
Maddy Varner
UK Home Office May Face Investigation Over Use of OpenAI Tech
A government watchdog is considering a probe into the Home Office’s use of ChatGPT technology to process asylum claims amid concerns over the tools’ accuracy and secrecy surrounding their use.
Isabella Ward
Encryption Is Getting Squeezed From All Sides
Canada’s planned surveillance law is the latest grim step in a series of threats to encryption that are spreading around the world.
Matt Burgess
Bluesky Is Blocking Links to a Major Leak of DHS Employee Records
Bluesky tells WIRED it blocked links to a leaked archive of information on 41,000 ICE, CBP, and other DHS workers because it contains people’s contact information, shared without their authorization.
Dhruv Mehrotra
Massive Leak Exposes 41,000 Homeland Security Workers—Including Undercover ICE Agents
The leaked records include the locations of ICE and CBP facilities, workers’ cell phone numbers, and the members of groups tied to wiretap programs, Palantir software, and xAI’s Grok chatbot.
Dhruv Mehrotra
The PHP Meltdown Shows How AI Makes Bugs More Exploitable
Security researchers used AI tools to help uncover years-old vulnerabilities in the PHP web scripting language. Then the AI-assisted attacks began.
Lily Hay Newman
The US Government Is Hiding a Secret Court Ruling About How It Spies on Americans
Two US senators say the Trump administration is breaking the law by withholding the FISA court decision while it presses Congress to renew America’s most sweeping surveillance program.
Dell Cameron
A Defense Contractor Gave Their Personal AI Agent Access to a Secure Pentagon System
Sources tell WIRED that an Accenture employee’s personal Claude agent ran on a DOD network for two months before it was identified and the vulnerability could be patched.
Vittoria Elliott
‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire
The PHP Foundation has revealed two serious vulnerabilities that could impact millions of websites. Security experts warn that failure to quickly patch the flaws could have dire consequences.
Matt Burgess
ICE Emails Discuss Using Palantir-Supported Tool to Investigate Voter Fraud
Documents obtained by Democracy Forward show that ICE looked into feeding voter roll data into the ELITE tool, normally used to identify targets for deportation.
David Gilbert
Most Servers on the Planet Are Vulnerable to This Firmware Code-Execution Flaw
The critical flaw in UEFI firmware—used by most server vendors and data centers—allows attackers to execute code early in the boot process.
Dan Goodin, Ars Technica
‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads
Researchers at The Citizen Lab have for the first time released technical evidence of sophisticated mercenary spyware being distributed via online advertising.
Matt Burgess