Slashdot Mirror

← Back to Stories (view on slashdot.org)

IRS Rolls Out Risky Tax Processing Systems

Posted by ScuttleMonkey on from the history-repeats-itself dept.

GovIT Geek writes to tell us that, despite known security issues, the IRS has decided to roll out two new applications for tax processing systems. "The [IRS inspector general] concluded in a September annual audit that security weaknesses in the agency's updated tax processing systems could enable malicious intruders to gain unauthorized access to taxpayer information and prevent the IRS from recovering applications during an emergency. The Customer Account Data Engine is a tax processing tool being deployed in phases to replace the existing repositories of taxpayer information, while the Account Management Services systems aim to provide employees with faster and better access to taxpayer account data."

23 of 66 comments (clear)

  1. Soon Trinity will be hacking the IRS dBase... by mellon · · Score: 4, Funny

    I think this is terribly unfair. It should at least be a *challenge*.

    1. Re:Soon Trinity will be hacking the IRS dBase... by Sponge+Bath · · Score: 2, Funny

      She still has to get past IRS Agent Smith.

      You hear that Mr. Anderson?...
      That is the sound of inevitability...
      It is the sound of your audit.

  2. Hey Massachusetts & Nevada.... by hajihill · · Score: 2, Funny

    thanks for playing.

    I think this might be a new definition for the word "moded".

    --
    Of blankness, I know nothing.
  3. naturally... by X0563511 · · Score: 4, Interesting

    I think the response to this shouold be someone, somewhere, repeatedly breaking in and posting financial info on politicians. Do it enough times, they will get the message.

    If you go do this, make sure you remember you didn't hear it from me, and that you do NOT brag about it. Don't be stupid.

    --
    For large sets, this will be our guide even unto death, for the LORD will work for each type of data it is applied to...
  4. Inflammatory Article by TheNecromancer · · Score: 2, Interesting

    Just another inflammatory article. What are they supposed to do? Hold off upgrading their systems until the new system is 100% rock-solid? Sorry, but every new software system has SOME bugs in it. TFA states that the project managers felt the vulnerabilites were acceptable at the time. Managing software projects involve iterations of identifying critical (or not so critical) defects (as many as you can before release), and then going back and updating the software to fix any defects that you didn't have time for the first go-around.

    --
    Attention all planets of the Solar Federation! We have assumed control! - Neil Peart
    1. Re:Inflammatory Article by truthsearch · · Score: 3, Insightful

      In addition, these should be purely internal systems. So assuming malicious intruders can be kept out, using a separate layer of systems, the risk is greatly reduced.

      --
      Developers: We can use your help.
    2. Re:Inflammatory Article by compro01 · · Score: 4, Insightful

      Hold off upgrading their systems until the new system is 100% rock-solid?

      Yes. This is taxes they're dealing with, and given the unreasonable complexity of the tax laws and the guilty-until-proven-innocent way the tax courts work (how the hell is that considered constitutional?), screwups are NOT acceptable.

      --
      upon the advice of my lawyer, i have no sig at this time
    3. Re:Inflammatory Article by TheNecromancer · · Score: 2, Interesting

      Well then, you've obviously never managed a software project. If they are to wait until 100% of all the defects/vulnerabilities are fixed before they release, then THE SOFTWARE WOULD NEVER BE RELEASED!! It's like waiting to buy a computer: you could wait a month or two more, so that they drop the prices a little bit more, but when that month comes, you just say the same thing. Lather, rinse, repeat.

      It doesn't really matter what the project is about. It can be tax information, HIPAA info, or credit card info. Software project managers have to decide if the defects they have are important enough to delay the release of the software. In this case, they felt it was an acceptable risk. But to say that they should have fixed 100% of the defects beforehand is pure ignorance.

      --
      Attention all planets of the Solar Federation! We have assumed control! - Neil Peart
    4. Re:Inflammatory Article by Anonymous Coward · · Score: 5, Insightful

      What are they supposed to do? Hold off upgrading their systems until the new system is 100% rock-solid? Sorry, but every new software system has SOME bugs in it.

      Two things (simplified):

      A - Yes, they should. And SQL bug at your library might put a book on the wrong shelf; the same bug in a table at the IRS leads to audits, tax fraud investigations, and has serious implications on your life. A program in such a high profile program absolutely needs to be as bug free as possible.

      B - This isn't even about bugs in implementation, the issue is a security vulnerability due to the design. You'll secure your email so some packet snooper can't see the pictures from that party last night, but you're comfortable with the IRS rolling out a system that would allow the same snooper to interfere with the recording of billions of dollars in transactions?

  5. sweet by JeanBaptiste · · Score: 5, Funny

    I know how my taxes are getting d';update taxtable set refund = '50000000' where uid = 'jeanbaptiste';--

    1. Re:sweet by Anonymous Coward · · Score: 5, Funny

      I know how my taxes are getting d';update taxtable set refund = '50000000' where uid = 'jeanbaptiste';--

      Close; but to be really effective, I think you have to sneak it into the dependent's name field.

      (Irony: CAPTCHA = 'stolen'!)

  6. SSSHHHHHH!!!! by Colin+Smith · · Score: 5, Funny

    This is the IRS! For crying out loud. Don't TELL them!

     

    --
    Deleted
  7. The IRS is now irrelevant. by jcr · · Score: 4, Insightful

    The money the federal government takes from us by direct taxation is dwarfed by the theft through inflation. They can't raise trillions through taxes, they can only do it by further devaluing the currency.

    -jcr

    --
    The only title of honor that a tyrant can grant is "Enemy of the State."
  8. Treat the IRS Like a Bank by KalvinB · · Score: 4, Insightful

    One of the frustrating things as a tax payer is not knowing how much I owe the government. I don't know if I'm overpaying or underpaying until the end of the year. Then I'm either screwed because I owe them a pile of cash or screwed because I wasted a lot of money that could have been better invested. Last year I gave the government 3000 extra which could have stayed as a cushion in a bank account or have been invested rather than getting it back with no interest.

    Tax payers should be able to log into their IRS account and see what they owe throughout the year based on what their earnings are and how much has been taken out of their paychecks already. Throughout the year they can enter in deductions and extra earnings and whatnot so at the end of the year there isn't a surprise. It'd be nice to make extra payments if you want before April so that you don't get a huge tax bill or get no tax bill at all in April.

    --
    Work Safe Porn
    1. Re:Treat the IRS Like a Bank by Thng · · Score: 4, Informative
      There already is something like this, although it does not access your account:

      IRS Withholding Calculator

      Purpose of This Computer Program The purpose of this application is to help employees to ensure that they do not have too much or too little income tax withheld from their pay. It is not a replacement for Form W-4, but most people will find it more accurate and easier to use than the worksheets that accompany Form W-4. You may use the results of this program to help you complete a new Form W-4, which you will submit to your employer

      Use it at the beginning and middle of the year (for double checking) and for whenever you have a life change, such as getting married, gaining dependents, new job, etc.

      You'll need your most current paystub and other basic information regarding your finances (interest earned, rental income, etc).

    2. Re:Treat the IRS Like a Bank by moderatorrater · · Score: 2, Insightful

      Last year I gave the government 3000 extra which could have stayed as a cushion in a bank account or have been invested rather than getting it back with no interest.

      Does that mean you should be thanking them?

    3. Re:Treat the IRS Like a Bank by wbren · · Score: 4, Insightful

      Last year I gave the government 3000 extra which could have stayed as a cushion in a bank account or have been invested rather than getting it back with no interest.

      Given the state of the markets, overpaying the IRS might be the safest thing to do with your money.

      Tax payers should be able to log into their IRS account and see what they owe throughout the year based on what their earnings are and how much has been taken out of their paychecks already.

      Yes, they should definitely be able to do that. Two problems. First, relatively few people would use that feature enough to justify the cost of building it. Second, the IRS will never put a system like that in place on their own, because they make money from keeping people in the dark. The IRS is given a giant interest-free loan from the American people every year. If I were them, I wouldn't advertise it either...

      --
      -William Brendel
    4. Re:Treat the IRS Like a Bank by Thaelon · · Score: 2, Insightful

      No no no, take another step back.

      There should be no income tax: The hardest thing in the world to understand is the income tax. -- Albert Einstein

      --

      Question everything

    5. Re:Treat the IRS Like a Bank by ColdWetDog · · Score: 4, Funny

      You're making it too complex. It's much easier when you figure it thusly:

      1. How much to did you make?
      2. Give it to us.

      --
      Faster! Faster! Faster would be better!
    6. Re:Treat the IRS Like a Bank by TubeSteak · · Score: 3, Funny

      I think your tagline makes a fitting Step 3

      1. How much to did you make?
      2. Give it to us.
      3. Now go away, or I shall taunt you a second time

      --
      [Fuck Beta]
      o0t!
    7. Re:Treat the IRS Like a Bank by Ig0r · · Score: 2, Insightful

      Ron Paul!

      --
      Soma: because a gramme is better than a damn.
  9. MOAIT by Nom+du+Keyboard · · Score: 2, Insightful

    This will be the MOAIT (Mother Of All Identity Thefts) when it's hacked.

    --
    "It's the height of ridiculousness to say for those 9 lines you get hundreds of millions."
  10. Emergency? by supernova_hq · · Score: 2, Interesting

    prevent the IRS from recovering applications during an emergency

    And what praytell is considered an IRS Emergency? In my world, an emergency is something that requires medical assistance, police or rescue to be involved.

    If by emergency, they mean "someone has deleted the files", isn't that what automated backups are for? I don't care what software you are using, a proficient IT department, given the proper resources (tape drive auto system, etc) can recover ANYTHING!