Follow @PoliticsIE
 
 
 
Page 1 of 3 123 LastLast
Results 1 to 10 of 29

Thread: HUGE Data Protection leak in Irish Schools.

  1. #1
    Politics.ie Member
    Join Date
    Jan 2012
    Location
    Sol
    Posts
    3,969
    Mentioned
    0 Post(s)

    Default HUGE Data Protection leak in Irish Schools.

    Some Breaking news,

    A huge Data Protection Leak that allows anyone with a generic username and password can log onto school servers remotely and access and alter data.

    Some of the records than can be accessed include


    • The pupil’s photograph
    • Their date of birth
    • Their parents’ names and contact phone numbers
    • Details of any of the pupil’s siblings who are also enrolled in the school
    • The name of the pupil’s family doctor
    • The classes in which that pupil is enrolled, and their individual timetable
    • The pupil’s attendance records
    • Records of the student’s misconduct, including disruptive behaviour or homework not completed, and
    • Results of that pupil’s in-house examinations for as long as the system has been live, and their results in any state exams



    And the government want us to give them a Yes vote in the upcoming referendum and they ant even ensure childrens data is protected!


    PERSONAL RECORDS of thousands of secondary school pupils – including their academic records, parents’ details and disciplinary history - could be available to view by any internet user, TheJournal.ie can reveal.

    A grave security flaw in the data management systems used by a large number of Irish secondary schools means that highly sensitive data is available to anyone – armed with only a generic username and password.
    The systems, which run on servers physically installed in the schools, use ‘ePortal’ software created by the British services giant Serco and can be accessed remotely through the internet – though all data is hidden to anyone without a password.


    But a default, generic username and password combination – which is now said to have been leaked online – allows full access to almost all of the ePortal servers run in Irish schools, opening up public access to thousands of pupils’ records.


    The leak of this combination – which can be thought of as a master key, allowing anyone with them to log in to any Irish school’s ePortal server – means the personal data of the pupils in those schools can be accessed quickly and easily.
    Irish pupils’ records at risk in major data protection threat

  2. #2
    Moderator Cato's Avatar
    Join Date
    Aug 2005
    Location
    Ithaca
    Posts
    20,762
    Mentioned
    1 Post(s)

    Default

    You forgot this bit:

    The Department stressed that the data management packages used by schools is chosen on a case-by-case basis by each school’s board of management, and that the Department had no role in choosing or operating the software.

    This is borne out by records of tenders issued by the Department, which do not include any school management software packages.
    “I would rather be exposed to the inconveniences attending too much liberty, than those attending too small a degree of it." - Thomas Jefferson (yeah, I'm aware of the irony)

  3. #3
    Politics.ie Member Analyzer's Avatar
    Join Date
    Feb 2011
    Location
    Northern Ireland - without forgiveness, there is dysfunctionality.
    Posts
    46,117
    Mentioned
    0 Post(s)

    Default

    Who got the contract for the system ?

    Somebody related to a former minister in the drinks cabinet, or somebody who was a life long pal of a minister in the current government ?

    Was there even an evaluation process ?

    Here we go again, more sloppy state tendering.
    Last edited by Analyzer; 20th October 2012 at 11:41 PM.
    Coveney's ambition is the be Ireland's next EU Commissar and Ireland will pay a price as he builds his CV to position himself sufficiently loyal to the nEU empire.

  4. #4
    Moderator Cato's Avatar
    Join Date
    Aug 2005
    Location
    Ithaca
    Posts
    20,762
    Mentioned
    1 Post(s)

    Default

    Quote Originally Posted by Analyzer View Post
    Who got the contract for the system ?

    Somebody related to a former minister in the drinks cabinet, or somebody who was a life long pal of a minister in the current government ?

    Was there even an evaluation process ?

    Here we go again, more sloppy state tendering.
    The management boards of the individual schools made the decisions not the state.
    “I would rather be exposed to the inconveniences attending too much liberty, than those attending too small a degree of it." - Thomas Jefferson (yeah, I'm aware of the irony)

  5. #5
    Politics.ie Member
    Join Date
    Jan 2012
    Location
    Sol
    Posts
    3,969
    Mentioned
    0 Post(s)

    Default

    Quote Originally Posted by Cato View Post
    The management boards of the individual schools made the decisions not the state.
    Usual pass the buck politics, The government are responsible for Education in the state nobody else.

    If they allow schools to tender contracts that's upto the government, dosent take away the fact the government are still responsible for Education.

  6. #6
    Politics.ie Member
    Join Date
    Jan 2012
    Location
    Sol
    Posts
    3,969
    Mentioned
    0 Post(s)

    Default

    A spokeswoman for the Department of Education said it became aware of the issue on Wednesday when a parent notified it that their child had been able to log into their own school’s server, and that of another school, using only the generic username and password.


    The Department had contacted Serco to inform them of the breach, and had “requested them to take urgent and immediate action to alert schools that had purchased the E-portal application of the potential risk to any personal data held by the school, and to take whatever corrective action is deemed necessary to reduce any risk”.

  7. #7
    Politics.ie Member dresden8's Avatar
    Join Date
    Feb 2009
    Posts
    14,676
    Mentioned
    0 Post(s)

    Default

    Quote Originally Posted by Neutron View Post
    Usual pass the buck politics, The government are responsible for Education in the state nobody else.

    If they allow schools to tender contracts that's upto the government, dosent take away the fact the government are still responsible for Education.
    I thought all you people liked decentralisation of functions away from the inefficient civil service.

  8. #8
    Politics.ie Member seabhcan's Avatar
    Join Date
    Sep 2007
    Posts
    14,309
    Mentioned
    0 Post(s)

    Default

    Quote Originally Posted by Analyzer View Post
    Who got the contract for the system ?

    Somebody related to a former minister in the drinks cabinet, or somebody who was a life long pal of a minister in the current government ?

    Was there even an evaluation process ?

    Here we go again, more sloppy state tendering.
    "software created by the British services giant Serco"

  9. #9
    Moderator Cato's Avatar
    Join Date
    Aug 2005
    Location
    Ithaca
    Posts
    20,762
    Mentioned
    1 Post(s)

    Default

    Quote Originally Posted by Neutron View Post

    Usual pass the buck politics, The government are responsible for Education in the state nobody else.

    If they allow schools to tender contracts that's upto the government, dosent take away the fact the government are still responsible for Education.
    Eh ... you seem to have missed some salient features of the ownership, patron, and management structure of Irish schools.
    “I would rather be exposed to the inconveniences attending too much liberty, than those attending too small a degree of it." - Thomas Jefferson (yeah, I'm aware of the irony)

  10. #10
    Politics.ie Member Analyzer's Avatar
    Join Date
    Feb 2011
    Location
    Northern Ireland - without forgiveness, there is dysfunctionality.
    Posts
    46,117
    Mentioned
    0 Post(s)

    Default

    This is extremely dangerous. Especially given the lax attituide, even still with regard to paedos in the state.

    There are peados coming and going through Dublin Airport every week, and they never come to the attention of the gardai, because they are white, and well dressed. The cops do not have an electronic swipe to identify whether an arrival is on a paedo list in another country.

    Then you hear that noted UK paedos showing up in neighbourhoods in the state - as a result of UK police trying to track them down when they are no longer showing up in the UK, or if bank transactions indicate that they are here.
    Coveney's ambition is the be Ireland's next EU Commissar and Ireland will pay a price as he builds his CV to position himself sufficiently loyal to the nEU empire.

Page 1 of 3 123 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •