CIO
Leakage Problem Means Cards Will Never Be Secure
Sue Bushell  26 September, 2006 12:26:50

A fierce and prominent opponent of the Hawke government's 1987 plans to introduce a national identity card says nothing has changed technologically in the intervening years that would make a smart card today any more secure than the Australia Card proposed then.

Yet Benbow Consulting Director Gary Benbow says governments are turning a deaf ear to warnings the data leakage problem makes it impossible to ever completely secure any smart card.

His comments came in the wake of revelations that 585 Centrelink staff had been sanctioned for privacy violations, while another 19 had been dismissed and 92 had resigned over a two-year period. Earlier in the year it was revealed that the Child Support Agency had discovered 405 breaches of privacy, including 69 cases where sensitive information had been given to former spouses.

Despite the security lapses, the Howard government wants to issue a smart card to up to 17 million Australians in phases from 2008 to replace 17 health and social security cards, including the Medicare and Veteran's cards. The government argues this will allow better service delivery to customers. It insists the card will not compromise privacy because databases will remain "siloed" and because citizens will be safeguarded by the newly established Access Card Consumer and Privacy Taskforce, chaired by former Australian Consumer and Competition Commission head Professor Allan Fels.

Plans for the card were announced by Prime Minister John Howard in July last year in the wake of the London bombings. The PM, a vehement opponent of the proposed Australia Card, argues much has changed since the Hawke government's proposal to introduce the Australia Card bitterly divided the nation in the mid-1980s. Benbow disagrees.

"I think the smart card (proposal) is atrocious," he says. "I was a vocal advocate against the Australia Card, and I still am. There's nothing that's changed because linking data makes data more accessible. I think what we've seen during the Centrelink debacle, where people trolled through files, is that anywhere that you can get to everybody's history through a unique identifier, where the infrastructure is not there to support privacy, is a problem.

"And we still have lots of areas for leakage of data in corporations. It doesn't have to be online either. It can be in a development environment, it can be data that is copied and sent into an off-site location, it can be the hard copy, it can be through wireless. There's a whole stack of ways that data can be leaked out of a server with or without knowledge. It is just horrendous to think that we are going about linking everyone's known data."

Benbow, with a strong background in IT audit, insists there is no truly secure computer environment and probably never will be. For instance he says he has just completed an audit of a major government and found security there to be "okay". But he says he faced strong pressure to give the go-ahead to the department's plans to link "very, very sensitive high-level confidential information" across the whole of government.

Yet he says even the computer systems of the world's best intelligence agencies, like MI5, the CIA and the KGB, suffer data leakage, usually emanating from "a person with two legs and two arms" and the motivation to compromise the data.

"Whenever you have a person involved you cannot give a 100 percent guarantee," he says.

Comments

Post new comment

Login or register to link comments to your user profile, or you may also post a comment without being logged in.
The content of this field is kept private and will not be shown publicly.
Enter the fully qualified URL, eg. http://www.example.com/
  • Web page addresses and e-mail addresses turn into links automatically.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.

More information about formatting options

Syndicate content Syndicate content

HP Data Center Transformation solutions offer practical ways to overcome the energy and capacity limitations, operational vulnerabilities and technology constraints that can plague your data center. Choosing from a portfolio of solutions matched to your business needs, we can help you transform your data center into a business-driven, process-smart and future-ready asset.

Latest on Data Centre

  • +

    Inside Internode's data centre 05 June, 2009 14:39:00

    Computerworld gets an exclusive behind the scenes look inside Internode's Adelaide data centre with network guru Mark Newton
    Computerworld gets an exclusive behind the scenes look inside Internode's Adelaide data centre with network guru Mark Newton
  • +

    HP uses outside air, big fans, 12-foot raised floor to cool servers 03 June, 2009 07:44:00

    It's also cutting data center power use by painting server racks white
    Just off the North Sea coast in the United Kingdom, Hewlett-Packard Co.'s EDS unit has built a data center that largely relies on cold sea air to keep servers chilled and -- by doing so -- cut the center's cooling power needs in half.
  • +

    HP targets the cloud with new hardware 12 June, 2009 08:27:00

    HP offers complete cloud computing package for businesses
    HP has designed a new portfolio of hardware, software, and services, aimed at reducing costs and saving resource, particularly for businesses involved in Web 2.0, cloud and high-performance computing.
  • +

    Defence to spend $700m on ICT reform 05 June, 2009 11:13:00

    Strategic Reform Program report reveals only half of defence IT budget visible to CIO
    Less than half of the annual $1.2 billion spent by Defence on its ICT is visible to its chief information officer, Greg Farr, a new report has revealed.
  • +

    Inside Telstra's Virtualisation Strategy 11 May, 2009 14:12:00

    Need to cut infrastructure costs driving the strategy
    Telstra is increasingly turning to virtualisation as its core strategy to both manage the rising costs of, and growth in, its data centres, according the company’s CIO, John McInerney.
  • +

    Defence to Initiate ICT Reform Program, Expand CIO Role 05 May, 2009 11:56:00

    ERP rollout, data centre consolidation, single architecture all on the cards, according to the Department of Defence’s strategic policy white paper
    The Defence department has signaled a raft of changes to its approach to information technology under a new ICT reform program.

Free Resource Library

Data Centre Assessments

The First step to Optimising

Speeding business innovation

Removing barriers to growth, increasing agility and driving out costs

Assessments: Ammunition for Facts-Based Decision Making
by Richard L. Sawyer, Senior Principal, HP Critical Facilities Services
Download Podcast Download Transcript
 

CIO Summit The New World Order Opportunities and Challenges for CIOs

23rd July 2009
The Westin Sydney


A content-rich networking event where CIOs and senior executives collaborate on business and technology issues ranging from the impact of the economic downturn to the most pressing trends affecting IT in the enterprise.

Register Now

  • +

    New scam email uses Australian Federal Police to gain victims' trust 03 July, 2009 10:49:00

    Fake offers of free AFP monitoring service to stop "cybernetic attacks"
    Cyber criminals have changed tack in their ongoing scam campaign against banks, moving to the use of government agencies to gain the trust of unsuspecting email recipients.
  • +

    AFP hits $6 million identity fraud syndicate 03 July, 2009 08:25:00

    $500,000 of goods per week purchased with fake credit cards
    The Australian Federal Police (AFP) claims to have struck a major blow to a multi-million identity fraud syndicate.
  • +

    5 steps to secure a new PC 30 June, 2009 00:19:00

    Just unwrapped a brand-new PC? Security pros share their secrets for making your system Internet-safe.
    A common misconception is that a shiny new computer is more or less secure because it hasn't yet been exposed to the Internet's sinister underbelly. But the truth is, these machines come out of the box needing scores of patches, some basic security software downloads and the disabling or replacing of items security pros don't typically trust.
  • +

    Facebook simplifies privacy settings, calls them too complex 02 July, 2009 05:48:00

    The social-networking site is also getting ready to let members share content with anyone on the Internet
    Facebook will simplify the way in which it offers privacy options to its users, as it gets ready to give its members for the first time the option to make the content they post on their profiles available to anyone on the Internet.
  • +

    DR a growing concern for A/NZ CIOs: Symantec 02 July, 2009 09:16:00

    Mission critical apps and cost of down-time major drivers
    CIOs in Australia and New Zealand are increasingly getting involved in the disaster recovery planning of their organisations, according to a new survey from Symantec.
Upcoming Industry Events
  • No upcoming events available
Whitepaper

Look before you leap | Key considerations for moving to 802.11n

Discover how you can plan a high performance 802.11n network and how your business can reap the maximum benefit from a clean-slate 802.11n impementation. Read on to discover the best 802.11n strategy for your organisation.


CIO Industry Insight Podcast #4: Kerry Stratton, Managing Director of Healthcare, InterSystems
Listen to the latest edition of CIO Live which is now available for download.
Listen to the podcast
Sign up to the CIO Live email