It is hardly an exaggeration to call 1177-leak for one of Sweden’s largest integritetsskandaler ever. If not the largest. The disclosure, signed for the magazine Computer Sweden, showed how 2.7 million calls were fully openly available online.
Then it became really strange.
In a DN interview suggested the ceo of the company Voice Integrate Nordic, only those with specialized knowledge had the opportunity to come to the talks.
– the Common people could not handle it, but those who can such as this could make some sort of special kommandorörelse and slip in through the back door.
Responsible for the Vårdguiden-the crash: ”the Human factor”
put it plainly, is pure nonsense. In addition to that there is something called ”special kommandorörelse” required nothing special at all. It was just to fill in an address in the browser and pressing the enter key.
In this way, different leak from many previous säkerhetsskandaler. Often it has been forgotten security vulnerabilities or flawed encryption, which it with the right tools and knowledge could exploit.
Here were the calls about the care and diseases straight out on the internet. Open for anyone to download.
But the strange handling of the scandal does not stop there. On their site have Voice Integrate argued that the Authority for civil contingencies agency has verified the security on the enterprise network. It forced the MSB’s cyber-safety CERT to refute: ”This is not true,” writes the agency in a statement and continues: ”We have paid attention to them on the flaws but not säkerhetsgranskat their it environment.”
for the ”pure nonsense”.
And so we have the declaration that all was due to someone ”simply put a internetsladd in the hard drive”, as the ceo puts it. There is a history and technical facts about the server that sets this statement in a different light, which is a series of it security experts have stressed.
And would the explanation be true, it does not matter better. If one is to be trusted with such a huge sensitive material as 2.7 million recorded calls to a medical facility, then store it in a hard disk drive that you connect to the net with some in passing.
out out around 1177 scandal. But so far nothing has emerged that suggests other than that, the entire handling characterized by huge incompetence. One has to question what had happened if a newspaper had revealed it all. Without input from the Computer Sweden (for transparency: an editorial where I was previously the chief news editor) had the event might have been able to fly under the radar.
Under the radar for the general public, that is. Someone had still been able to find the files, downloaded them and used them for their own purposes.
Read more: the Region of Stockholm felt that the it solution was rättsosäker
