News for hackers. Stuff that matters.

A comment on Canada's tax revenue agency tries to ToS itself out of hacking liability. Parent comment

Re:Canada's tax revenue agency tries to ToS itself out of ha... by greenshackle2 on Wednesday March 08, 2023 @04:59PM (#35075331)
You can still mail in paper forms.
[ Parent | on HN ]
Re:Canada's tax revenue agency tries to ToS itself out of ha... by goosedragons on Wednesday March 08, 2023 @06:48PM (#35076378)
But they might still "email" any reassessment or whatever to your account if you setup paperless beforehand..
[ Parent | on HN ]
Re:Canada's tax revenue agency tries to ToS itself out of ha... by mitthrowaway2 on Wednesday March 08, 2023 @08:29PM (#35077257)
Generally the CRA will only email a notice that there is a new message waiting for you on their site; you have to log in to their site to access the message. As far as security practices go, I won't complain about that.
[ Parent | on HN ]
Re:Canada's tax revenue agency tries to ToS itself out of ha... by goosedragons on Wednesday March 08, 2023 @08:45PM (#35077382)
Yeah, thats why I had email in quotes. Could have been more clear I guess. Still a problem that you need to accept their TOS to see if they decided you owe money.
[ Parent | on HN ]
Re:Canada's tax revenue agency tries to ToS itself out of ha... by 1over137 on Thursday March 09, 2023 @07:36AM (#35080589)
No, you don't have to have any electronic account with the CRA, you can file by paper, and they write you back by paper, and you can pay by cheque, or get your refund by cheque.
[ Parent | on HN ]
Re:Canada's tax revenue agency tries to ToS itself out of ha... by j_not_j on Wednesday March 08, 2023 @07:18PM (#35076647)
And the bad boys and girls can still hack CRA and if they defraud you using the data they stole is CRA still liable in spite of your paper-based filing?

You will have to prove a lot of "facts" to win that lawsuit. Especially since your social number(s), email, phone, whatsapp, etc are all public info already.

Recall a few years ago an uneducated hacker ("script kiddie") got part way into a CRA website and they took the whole website down for a week. (The attacker was caught, and prosecuted iirc.)

[ Parent | on HN ]