News for hackers. Stuff that matters.

A comment on IRS says thieves stole tax info from 100,000. Parent comment

Re:IRS says thieves stole tax info from 100,000 by jtzhou on Tuesday May 26, 2015 @11:38PM (#9609191)
Unbelievable that the IRS would have this "Get Transcript" feature readily available via the web without any password, or better two-factor authentication. It's already been taken offline, but was up for a long time.

Will there be punitive lawsuits against the IRS as there were for Target and likely will be for Anthem?

[ Parent | on HN ]
Re:IRS says thieves stole tax info from 100,000 by smackfu on Wednesday May 27, 2015 @08:40AM (#9610899)
I think the hackers were attacking the initial sign-up, not already created accounts. So I don't see how you could use 2FA.
[ Parent | on HN ]