A security flaw in Passport Canada's website has allowed easy access to the personal information - including social insurance numbers, dates of birth and driver's licence numbers - of people applying for new passports. The breach was discovered last week by an Ontario man completing his own passport application. He found he could easily view the applications of others by altering one character in the Internet address displayed by his Web browser.
[lolcat]I has a session hijacking vuln. I is in your Oracle, pwning all your numberz[/lolcat] Massive breach in Canadian Passport website |