Children's private records leaked on internet from independent school applications

[mertle]

http://www.telegraph.co.uk/technolog...lications.html

absolute shocking and disgusting dont care whose parents they are it not for public viewing.

Who to blame for what could destroy these kids lives by this calaous act needs being prosecuted.

The company should also tighten which seems lapse security although even best security is hackerable. Seems just mere google you was able read the infomation according the article.

For once well done media for alerting the authorities for a change to the security breach.

[Gavin78]

I guess this is what we now see moving from paper records to the digital records. this information should be kept on a computer that doesn't have internet access.

Thats my biggest concern these days too much information floating around the digital world and not knowing who knows what about you.

No amount of security helps its been proven many times even top government systems have been hacked

[mertle]

sadly your right think the next biggest danger is cloud really think this bad.

Many will simply store critical and vital information in cloud.

Dangers is that information could be intercepted on uploading.

Wonder if this was already the case.

As technology moves on we seem to be very much less in security prepared/lapsed/lazy/naive.

[heero_yuy]

A common mistake that people make when trying to design something completely foolproof was to underestimate the ingenuity of complete fools. - Douglas Adams

The more people put their faith in the cloud the worse these breaches will become.

[mertle]

Originally Posted by heero_yuy

The more people put their faith in the cloud the worse these breaches will become.

aye its not rocket science but seems people never learn.

I fear cloud is hackers paradise and magnet. At least before hackers had seek out information from wide veriety locations. Now its on stop shop.

My fear founded when companies started using internet source transfering sensetive data. Although this was founders how internet was born its popularity meant businesses worth salt had own private network.

You had to use company computer on that network to gain access. None ever on outside internet link. Today companies become idots now lazy in there network IT solutions. Its likely the costs but whats more costly embarrasing when breaches happen. Surely worth spending extra for better security/networking solutions.

great comment from adams by the way. So true so true

[Hugh]

Your opinion is ill-informed.

Cloud Services are very little different from managed and bureau services, which have been around since the 60s, but the difference being they are web-accessible, be they SAAS, PAAS, or IAAS.

One of the basics of setting up a cloud contract (and most companies still have the majority of their systems/data in-house) is the legal, governance, and security frameworks.

When we moved one of our systems to the 'cloud' in 2008, over half the project budget went on legal fees to ensure the appropriate governance was in place.

btw, where does it state this data was on the cloud - it was published on a website, which is something completely different. It sounds as if someone gave the wrong access rights to an in-house database.

[mertle]

Originally Posted by Hugh

Your opinion is ill-informed.

Cloud Services are very little different from managed and bureau services, which have been a round since the 60s, but the difference being they are web-accessible, be they SAAS, PAAS, or IAAS.

One of the basics of setting up a cloud contract (and most companies still have the majority of their systems/data in-house) is the legal, governance, and security frameworks.

When we moved one of our systems to the 'cloud' in 2008, over half the project budget went on legal fees to ensure the appropriate governance was in place.

btw, where does it state this data was on the cloud - it was published on a website, which is something completely different.

thanks hugh used use the collage student database using vax vms system. Damn it was dinasoar but it worked.

Used to be linked to the education authority and midland examination board if memory serves me. We had 7 levels security from administrator, principal, , deans & management etc. This was not when I was there linked to internet computers our IT section made sure all of them on this network was not internet active.

So it would still be similar to closed loop.

I was replying heero_yuy hugh we have to wait to see if this breach deemed that.

but what I read this was backdoor google thing.

Its more common issue some online stores easily breached by this method because amatuerish security.

I dont pocess to understand how google sees docs, pics, files from web search.

[Hugh]

Here you go - info from a different source

thedrum

Gabbitas, the firm behind the blunder, inadvertently posted names, addresses and confidential notes on pupils personality, achievements and health to public Google searches rather than a secure internal server.

Because the info was posted to a publicly viewable website, it meant that the info-gathering bots from google and others could cache and index it.

Our old friend, "human error"....

[Gavin78]

Security is so tight in the NHS can't even stick my own pen drive or keyboard into the computer without IT allowing access.