[ad_1]
A major flaw in the British Conservative Party's official conference phone application has made the private data of the party's top members, including ministers, accessible to anyone connecting as a conference participant.
The images posted on social media showed people logging in as Boris Johnson, Michael Gove and others, revealing personal information, including their mobile numbers.
Gove's private phone numbers and private details, Johnson's real number and apparently all registrants for the Conservative conference were accessible.
The data breach could open the door of the Conservative Party to fines and an investigation by the Information Commissioner, an independent authority that defends the right to information in the public interest.
The Office of the Information Commissioner announced that it would investigate this violation and added that "organizations have a legal obligation to protect their personal data".
How can we trust this Conservative government … when they can not even create a conference application that keeps their members' data … safe and secure?
John Trickett, Minister of Cabinet of the Shadow
Once connected to the application, users were able to edit and make public the personal data of prominent MPs. Twitter users claim that Johnson's photo was briefly replaced by a photo containing a pornographic image.
Gove's photo has been changed to Rupert Murdoch, his former employer in London Time.
Anyone can log in as a participant by providing an email without a password. Many MPs were registered with their parliamentary e-mail addresses, which made it easier for any member of the public to access their phone number.
According to commentators, this flaw raises questions about the government's ability to exploit technology to solve problems related to the Irish border and customs controls.
The application may also have violated the data protection policy. Its privacy policy states that it "complies … with the European Union's General Data Protection Regulation (PGRP)".
The violation exasperated the chief ministers. A Whitehall source described the mistake as "ridiculous". Anger was targeting Brandon Lewis, the Conservative Party chairman, whose duties included overseeing the conference.
The Labor Party said the accident raised questions about national security and recommended that the Conservatives provide basic computer training to its members.
"How can we trust this Conservative government with the security of our country when they can not even create a conference application keeping the data of their members, MPs and other people safe?" Said Minister John Trickett ghost of the Cabinet.
"The conservative party should set up basic computer security training to put their house in order."
A spokesman for Momentum criticized the Conservative party's "staggering incompetence" and spoke of the success of its own internal application at this week's Labor Party conference.
"It sums up the Conservatives, incredibly incompetent and disconnected from the modern world," they said. "They can not even create a basic conferencing application without a huge data breach. It's terrifying to be responsible for the technology that runs our hospitals, our schools, and our airports.
"Our conference application was built by a team of volunteers for a near zero amount, and I'm sure they'll be happy to give some advice to the Conservatives for next year."
[ad_2]Source link
