[ISN] Security flaws close new road's toll system

From: InfoSec News <alerts_at_private>
Date: Thu, 8 Jan 2009 03:41:49 -0600 (CST)
http://www.nzherald.co.nz/nz/news/article.cfm?c_id=1&objectid=10550744

By Mathew Dearnaley
New Zealand Herald
Jan 07, 2009

Internet security flaws have forced a closedown of website toll payment 
facilities for the Northern Gateway motorway between Orewa and Puhoi, 
less than three weeks before its opening date.

After shutting the payment section of the $365 million toll road's 
website yesterday, the NZ Transport Agency admitted it had done so 
because of flaws pointed out to the Herald by computer experts.

It said the toll payment system was set up "without all the necessary 
security features".

The agency has until January 25 to plug the security hole, but more than 
900 motorists have sent credit card or bank details over what it now 
admits was an insecure internet link to set up toll payment accounts.

That follows a marketing blitz by the agency to get motorists booked in 
early to the $27.8 million "free-flow" electronic collection system, 
which is run through the national motor vehicle registry centre in 
Palmerston North.

[...]


_______________________________________________      
Please help InfoSecNews.org with a donation!
http://www.infosecnews.org/donate.html
Received on Thu Jan 08 2009 - 01:41:49 PST

This archive was generated by hypermail 2.2.0 : Thu Jan 08 2009 - 01:59:08 PST