Taxpayer Data At IRS Remains Vulnerable

CWmike writes "A new Government Accountability Office report (PDF) finds that taxpayer and other sensitive data continues to remain dangerously underprotected at the IRS. The news comes less than three months after the Treasury Inspector General for Tax Administration reported that there were major security vulnerabilities in two crucial IRS systems. Two big standouts in the latest finding: The IRS still does not always enforce strong password management rules for identifying and authenticating users of its systems, nor does it encrypt certain types of sensitive data, the GAO said."

Comments

Re:It's not the first time, it won't be the last.

[playerone]

The minister responsible was never held accountable. That's why these security breaches keep on happening over here.

GrpA

I am so angry that politicians are not accountable for their actions. It makes the implementation of democracy a farce because the people in power voted in by the public can basically do whatever the hell they want and walk away with a fat paycheck and pension without having to worry that if they do something seriously wrong they can be punished somehow.

Such a rort.

All it would take is some simple bad behavior = punishment laws for politicians but oh hold on its those same politicians that vote on the laws so of course they won't do that.
Don't even get me started on being able to give yourself a payrise.

P1

Re:To answer my question

[techno-vampire]

Not only that, it makes wholesale identity theft nice and easy.

Solution

[truthsearch]

Suspend all income taxes for one year. Plenty of time to focus on the security holes and a temporary boost to the economy. Two problems easily solved.

Re:Solution

[ITEric]

Suspend all income taxes for one year. Plenty of time to focus on the security holes and a temporary boost to the economy. Two problems easily solved.

Folks would still need to file a return to get whatever refunds of their payments, etc. that are due. It would surely boost the economy, but not help with the security issue.

Re:Solution

[need4mospd]

The solution is easier than that. Scrap the IRS entirely and move to a national sales tax. The government will no longer have the need to possess the information in the first place. The citizens become MUCH more aware of how much tax they are really paying by being reminded of it each purchase. Businesses and individuals no long have a complicated tax code to fumble through every year on April 15th. The nation saves $265 billion every year from the costs of doing taxes, not the taxes themselves, just the act of filling out paperwork and hunting for receipts.

On top of all that, it takes the power away from the government! You say, "Oh our Congressman would never approve!" Really? There are 72+ cosponsors for a house bill that does this right now! And the people of America are pissed off enough now that we actually CAN make a difference if we raise our voices long enough to drown out American Idol.

If you haven't looked at it in a while, the Fair Tax plan is looking better and better everyday. The research and the numbers are solid. All the myths and lies have been squashed. Do yourself a favor and read the actual website, not your favorite one-sided blog.

Re:Solution

[charlener]

Aren't sales taxes inherently regressive? As in, they hurt those with lower income the most as it increases the proportion of their income spent on taxes compared to those with higher incomes.

Most states at this point do not tax "necessary for life" stuff, such as basic food and medicines, though I believe clothes, etc continue to be taxed. Does this proposal mean taxation across the board on all things, or only "nonessential" things, or what?

It doesn't seem just to tax sales on essential to life items, which leaves most of the burden on luxury items, which doesn't sound like it would be enough income generated to do much.

Re:What's the big secret?

[Hatta]

Care to post your tax return online and find out?

Re:What's the big secret?

[techno-vampire]

I worked at one company where I'm sure I missed out on getting a transfer to a new department where I could have done a lot of good and learned new things because my new manager asked me how much I was getting. I could see from his expression that I'd lost out the moment he learned that I was making more than he was. Not only had I received a merit increase at one point, but our annual raises were a percentage, and even if my percentage was average, it still meant a bigger raise than the other techs got, and the gap just got bigger every year. Now, imagine what would happen if you were looking for a new job and your potential employer was able to learn what you were really getting instead of what you wanted him to think your salary/hourly was.

Re:It's not the first time, it won't be the last.

[Klootzak]

I am so angry that politicians are not accountable for their actions. It makes the implementation of democracy a farce because the people in power voted in by the public can basically do whatever the hell they want and walk away with a fat paycheck and pension without having to worry that if they do something seriously wrong they can be punished somehow.

That's a very Insightful comment...

Politicians tend to say "If you pay peanuts you'll get monkeys", yet most businesses appear to operate on exactly this ideology.

I don't know about you, but I've seen far more Monkeys working as politicians than as (relatively) low-seniority employees.

Re:It's not the first time, it won't be the last.

[GFree678]

There were accusations of hacking and all, but it conveniently left out the discussion that it was a pretty obvious and blatant flaw.

Oh my God. Are you saying that changing one digit in a completely accessible URL is enough to be accused of hacking?

Humanity is hopelessly lost when it comes to common sense.

Re:Government Solutions Office

[BlueStrat]

What we need is a counterpart to the GAO.

The GAO should be able to exact fines from any agency for waste, insecurity etc etc.

All of this fine money should be funneled into a Government Solutions Office whose task is to spend that money back into the program to fix it.

GAO finds improper encryptions. Fines IRS. GSO hires a security expert to create new policies and purchase needed training.

Just a thought.

It sounds like a good idea, except getting Congress to give the GAO the powers it would need to be able to actually force a department like the IRS and similar formidable departments like Homeland Security to allow themselves to be fined, especially when some congress-critters' pet agency or department is threatened. I just don't think the bureaucratic fiefdoms and political power-players will allow any such reduction in their power.

We're talking about the power players in D.C.. The two pillars there are money and power. The players there never ever part with one without gaining a significant profit on the other, which they then use to recover their investment, usually with profit. Anything that interferes with this is anathema, and is avoided completely or at best given lip service enough to let them continue business as usual until the crisis is past.

It's a self-perpetuating system, and I just don't know what it would take to affect the kind of sweeping all-encompassing simultaneous reform across Congress, both political parties, lobbyists/lobbying, the courts/Justice Dept., and massive bureaucratic structures it would require to change the way things operate. It's particularly difficult and scary because of all the radical changes that would need to happen pretty much at once for it to not end up a more corrupt and unaccountable system than we have now.

This is why I play blues, work on tube amps, and tinker with operating systems. I know there's a problem, and even some slight inkling of some of the causes, but I don't have any answers and nobody I've ever read of or heard from really does either.

Cheers!

Strat

CTO?

[gEvil (beta)]

Remember a month or so ago when so many people here were saying what a stupid idea it was that Obama wanted to create a CTO position for the government? Isn't this exactly the sort of thing that someone in that position would be involved in sorting out?

Re:It's not the first time, it won't be the last.

[cloudmaster]

It /is/ hacking - and cracking. Just not the hard kind that requires significant knowledge or gains you the respect of your peers. :) Here in the US, that's "gaining access to data you aren't supposed to access". As an analogy, if you found that I left my car doors unlocked, and I found you sitting in my car, I'd probably proceed to issue you a beatdown whether you actually stole anything or not. I'd probably thank you if you just mentioned that you saw them to be unlocked. This is pretty much the same thing.