The IRS is paying Equifax millions for a login system that's been hacked twice

Posted by imanewsman on Wednesday October 04, 2017 @05:58PM
from the qz.com dept.

https://qz.com/1094442/equifax-efx-built-the-irss-login-system-that-was-hacked-in-2015-and-the-irs-just-renewed-its-contract/

( 2 comments | 34 points | on HN )

Re:The IRS is paying Equifax millions for a login system tha... by wilkystyle on Thursday October 05, 2017 @04:07AM (#15407389)

> The system, known as Knowledge-Based Authentication, or KBA, asks questions based on a person’s credit history, such as “On which of the following streets have you lived?” or “What is your total scheduled monthly mortgage payment?”

So it authenticates you based on facts that can’t be changed, and are either publicly-available knowledge or easily discoverable with some lite social engineering?

[ Parent | on HN ]

Re:The IRS is paying Equifax millions for a login system tha... by diggernet on Thursday October 05, 2017 @12:47AM (#15406730)

Boggles the mind.

[ Parent | on HN ]