[ISN] Indonesia's blunder on privacy

From: InfoSec News <alerts_at_private>
Date: Wed, 15 Oct 2008 00:23:52 -0500 (CDT)
http://asia.cnet.com/blogs/toekangit/post.htm?id=63006854

By Budi Putra
CNet Asia
Oct 13, 2008 

Amid concerns about privacy and security on the Internet, the Indonesian 
Ministry of Education recently put up a detailed database of students 
online and in downloadable files. There are at least 36 million students 
listed on the Web site in Excel files containing names, dates, places of 
birth and addresses!

I got the breaking news the last weekend from Treespotter's blog [1]. He 
wrote:

    The database was put online a while ago, but Google had already 
    indexed it by now--if you have kids at school (private, public and 
    religious schools all)--you can try Googling them to see what comes 
    out. You can find the FULL FILES in XLS downloadables without too 
    much trouble. Of your children.

As I wrote in my blog, the Government's blunder just confirms one thing: 
They have a lack of capacity and capability in optimizing the New Media 
benefit. They may have good intent to put online a complete database, 
but clearly aren't aware about the issues of privacy and security. How 
could they publish the complete addresses and details (even the dates of 
births) on their Web site?

I downloaded one of its Excel files at that time, and got a shock 
reading all details of Indonesian students there! Today, as of 
publishing this post, the downloadable database is still there. (I will 
not post any link here for obvious reasons).

[1] http://treespotter.blogspot.com/2008/10/diknas-and-bakrie-alert.html

[...]


__________________________________________________      
Register now for HITBSecConf2008 - Malaysia! With 
a new triple-track conference featuring 4 keynote 
speakers and over 35 international experts, this 
is the largest network security event in Asia and 
the Middle East! 
http://conference.hackinthebox.org/hitbsecconf2008kl/
Received on Tue Oct 14 2008 - 22:23:52 PDT

This archive was generated by hypermail 2.2.0 : Tue Oct 14 2008 - 22:35:19 PDT