South Africa’s biggest forum. Discuss, discover, and connect with thousands of members.
The eNatis website and the eNatis system are two different programmes
The eNatis vehicle registration system website had not been hacked, the Department of Transport said on Thursday.
...
Earlier in the day Msibi said an investigation was under way to establish how the site was hacked into.
The department wants to reassure all South Africans that these allegations of hacking have nothing to do with the eNatis system and the system is running optimally with no interruption whatsoever.
"The system has in fact stabilised since the interventions of May 8 and the days of long queues are long over.
The suggestion that eNatis was hacked is actually laughable.
Holy cow - I can't believe this!!! They are even more incompetent than I thought! If you don't call web defacement a hack then what the hell is it? A publicity stunt!!?? This is really a slap in the face for anyone that knows anything about IT - which clearly they don't have a clue!!!
Sorry, I have to add a different scenario to the hack. The compromise was spotted 'cos it was totally obvious...
What If -
A link was added to the main page by the hackers saying "Pay Fines" here and redirecting to a valid URL where you enter banking details?
Would DoT have noticed that? What if login credentials to the site were sent to an IRC channel (php is very powerfull), it can even connect to another IP address and serve pages as a HTTP server.
If an DoT employee (with admin rights) logged on when such a "voilation" in progress, then the impact is completely different.
The entire page was defaced, just place one link on the page, or even redirect to a Fake www.enartis.com (deliberate spelling mistake), who would notice?
This was apparently due to someone leaving a comment on a page of a section of the eNatis public website.