{"id":552476,"date":"2007-06-05T08:21:16","date_gmt":"2007-06-05T08:21:16","guid":{"rendered":"http:\/\/localhost:8888\/wordpress\/technology\/552476-enatis-inherits-security-breach-2.html"},"modified":"2007-06-05T08:21:16","modified_gmt":"2007-06-05T08:21:16","slug":"enatis-inherits-security-breach-2","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/technology\/552476-enatis-inherits-security-breach-2.html","title":{"rendered":"eNatis inherits security breach"},"content":{"rendered":"

The Auditor General\u2019s report, revealed in court, says that any official in the department of transport with access to a terminal has been able to access and change files, possibly compromising the database. The court heard that this problem has existed for years on the old National Traffic Information System (Natis) and had migrated to the new electronic National Traffic Information System (eNatis), but that this breach was only discovered in the recent Auditor General report, which was completed in February. <\/font><\/p>\n

The security concerns came to light during a hearing of an application from the Director General of Transport, Mpumi Mpofu, to prevent Beeld newspaper from publishing the Auditor General\u2019s report on security problems related to the two systems. Judge Dion Basson dismissed the director general\u2019s application.<\/font><\/p>\n

eNatis replaced Natis in April, but its implementation has been plagued by inefficiency and delays. <\/font><\/p>\n

The system is designed to register and license motor vehicles and manage applications for drivers\u2019 and learners\u2019 licences. It also monitors traffic in South Africa, and contains information on motor vehicle registrations, the state of infrastructure, drivers, contraventions, accidents and financial records.<\/font><\/p>\n

Advocate Sias Reynecke argued for Beeld that the Auditor General\u2019s report revealed insufficient protection for passwords and that users at eNatis terminals could easily access different folders. He argued that it was in the public\u2019s interest to be aware of these problems. <\/font><\/p>\n

In arguments it emerged that department of transport users of Natis and eNatis had been granted \u201cpowerful authority\u201d to access files on the network and that users had access to sensitive \u201croot files\u201d. The old system also did not require passwords for access, a problem which has apparently not been addressed in the new system.<\/font><\/p>\n

Reynecke argued that the fault did not lie with the system itself, but rather with the department\u2019s management. He said passwords were not administered adequately and that \u201csecurity patches\u201d were not installed when needed.<\/font><\/p>\n

But the department argued that revealing \u201cconfidential\u201d information, including about the password problems, could have a negative impact on the functioning of eNatis. The department\u2019s advocate, Pat Ellis, argued that it was in the public interest not to have the security problems exposed in detail in the public domain.<\/font><\/p>\n

\u201cHeaven forbid car theft syndicates use the information to break into the system to cover up their crimes,\u201d he said.<\/font><\/p>\n

Ellis compared the department\u2019s concerns about publicising eNatis\u2019s security problems to a situation in which a prison\u2019s secret codes and keys were leaked to the public, which he said would have a detrimental impact on the prison\u2019s security operations.<\/font><\/p>\n

But Reynecke hit back, asking whether the argument would hold water if the Auditor General had told the prison that the wardens were not locking the cell doors, and the prison then ignored it.<\/font><\/p>\n

\u201cThe press then reports on this after the department had ignored the warnings. Now the prison wants to gag the press, because they say the inmates will be told their cells are unlocked,\u201d he said. \u201cThis is after prisoners have already escaped.\u201d<\/font><\/p>\n

Ellis also argued that the problems the Auditor General reported on had to do with the old system and not eNatis and that a new audit report had to be done to investigate eNatis itself.<\/font><\/p>\n

Reynecke rejected this argument, asking why the department was then trying to gag Beeld. \u201cThe director general wants to protect herself against people\u2019s criticism of poor governance,\u201d he said. <\/font><\/p>\n

Department of transport spokesperson Collen Msbi told the Mail & Guardian after the verdict that the judgement \u201cwas a minor setback\u201d. \u201cWe are studying the judgment and will make a decision on what to do next,\u201d he said. \u201cWe still believe that this matter is confidential and not fit for the public domain.\u201d<\/font><\/p>\n

He said the department would not be responding to any questions that will compromise the \u201csecurity\u201d of the report. Mpofu, who was also present at the hearing, did not respond, except to say she believed eNatis was safe.<\/font><\/p>\n

Comments<\/a><\/font><\/p>\n

Mail & Guardian<\/a><\/p>\n

\n","protected":false},"excerpt":{"rendered":"

The Pretoria High Court recently heard that an Auditor General report on the old and new National Traffic Systems questioned whether the system had adequate security in place. It also emerged that the department had done nothing after being warned about the security breach.<\/p>\n","protected":false},"author":23,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_facebook_post_id":"","_sma_instagram_post_id":"","_sma_threads_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[17],"tags":[],"class_list":["post-552476","post","type-post","status-publish","format-standard","hentry","category-technology"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/552476"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/23"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=552476"}],"version-history":[{"count":0,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/552476\/revisions"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=552476"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=552476"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=552476"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}