AARTO website hacked

House said:
If these are links to external websites, they are fine.
Click to expand...

Hopefully just links to external websites but somehow I think it was local.
link of pay my fine goes to: http www.aarto.gov.za index.php?option=com_content&view=category&layout=blog&id=1&Itemid=139

Seems to be hosted locally.

House said:
The fact that their server is still down tells me that the sh*t has hit the fan.
Click to expand...

Or that they still do not know or care.
 
LoL... Class!!!

Site still down... Even more class!!

Now only if this said Bangladeshi Hacker can wipe out everyone's Traffic Fines that would be Superb!
 
moklet said:
House said:
First off, the hackers claimed to have gotten root access. I am not sure what information they have available at this time, but if there were any online databases with personal identifiable information on the Aarto website, this will soon be leaked in hacker circles. Good luck to everyone...
Click to expand...
Normally these are only public facing websites with no direct links or integration in backend systems, so I doubt they will get a lot of juicy info
Click to expand...
If they can't secure the public site, what's to say they secured the backend systems?
They system is probably so insecure that all the information is one one server.

I was on the site a few days back, and to check your "infringements" all that is required is your ID or Car Reg Number.
The hackers could have installed scripts to capture the user's ID/RegNum, and from there mined the backend to get more information - like make of car, ID number, driver's name, home address, etc.

Very bad - there should be consequences (fines) for this kind of data leakage.
The public protector should investigate as this is quite serious due to the information that could be (was) stolen.
People get fired for this kind of breach.
 
I have used a link on there before to see how many fines I have. Not sure if they called the DB from there or another web service. But if they did (call the DB) and the hacker got to it please, please tell me they deleted all the fines in there. That would really make my year :D
 
The site is up now....but it looks like a web site from 1999!!

It must be one of the ugliest web sites I've ever had the displeasure of seeing. :sick:
 
They are one of our clients for data enrichment.

I asked a senior manager if the DB was affected due to the hack and they reckon all is safe.
 
They say they did, but time will only tell.

We don't have to fear the hackers, the real fear are the internal staff.

I have never seen a database so inacurate and fragmented in all my life, and I have seen many.
 
ant_man said:
They are one of our clients for data enrichment.

I asked a senior manager if the DB was affected due to the hack and they reckon all is safe.
Click to expand...

I am going to disagree. The group released a small extraction of data from the breach. Not really much to go on at this stage, but I will wait for the full release of the data and see what's up.
 
House said:
I am going to disagree. The group released a small extraction of data from the breach. Not really much to go on at this stage, but I will wait for the full release of the data and see what's up.
Click to expand...

Please keep me posted if you do hear anything.
It will be interesting to see what you hear and what my guy says.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X