[HN Gopher] Florida state tax website bug exposed filers' data
       ___________________________________________________________________
        
       Florida state tax website bug exposed filers' data
        
       Author : KoftaBob
       Score  : 42 points
       Date   : 2022-12-04 16:19 UTC (6 hours ago)
        
 (HTM) web link (techcrunch.com)
 (TXT) w3m dump (techcrunch.com)
        
       | guiambros wrote:
       | > ... _access, modify and delete the personal data of business
       | owners whose information is on file with the state's tax
       | authority by modifying the part of the web address..._
       | 
       | > _Mohsin said that application numbers are sequential, allowing
       | anyone to enumerate taxpayers' information by incrementing the
       | application number by a single digit. Mohsin said there were more
       | than 713,000 applications in the system, which the department did
       | not dispute when reached for comment._
       | 
       | Ugh.
        
       | montroser wrote:
       | > When asked, the department said that it has identified "no sign
       | of exploitation prior to this breach"
       | 
       | As long as you do not look, you will not find.
        
         | freitasm wrote:
         | And wait until the administration decides to sue the person who
         | reported the breach to them.
        
       | jimt1234 wrote:
       | Good: At least Florida didn't take the path of Missouri, my home
       | state. [1]
       | 
       | Bad: More "complimentary credit monitoring". Ugh.
       | 
       | [1] https://www.vice.com/en/article/pkpmj7/this-is-the-
       | hacking-i...
        
       ___________________________________________________________________
       (page generated 2022-12-04 23:02 UTC)