MBIE dismisses concerns over website security

Author
Gia Garrick ,
Publish Date
Tue, 25 Aug 2015, 3:18PM
MBIE minister Steven Joyce (Getty Images)

MBIE dismisses concerns over website security

Author
Gia Garrick ,
Publish Date
Tue, 25 Aug 2015, 3:18PM

UPDATED 5.26pm: The Ministry of Business Innovation and Employment has just launched a half a million dollar new website - but there are claims it's flawed.

LISTEN ABOVE: Daniel Ayers speaks to Larry Williams about the security concerns

Independent security company Qualys claims to have found simple flaws in the website's encryption and said people's personal details aren't safe.

MORE: Labour accuses MBIE of website overspend

Computer forensic expert Daniel Ayers said the flaws mean it's trivially easy for anyone to go in and gather others' data.

"There are a number of testing sites on the internet that people can go to. You put in the website address and press enter, and you wait a couple of minutes and it tells you the outcome."

Mr Ayers said it raises questions about what the money was spent on.

"The fact that this website has been release for public use, in that condition, is inexcusable."

However, the Ministry has hit back, saying it was well assessed and it doesn't actually matter.

The site doesn't collect personal information from its visitors.

The Ministry said it conducted its own security test before the site went live, and no significant issues were identified.

It said the encryption it uses is known to have issues related to private information, but that wasn't seen as a risk because the site doesn't request personal information.

The only details it collects are responses to requests, like the names and emails of people that are responded to.

It said even those details though are not stored on the site.