this post was submitted on 05 Jan 2026
6 points (100.0% liked)
Aotearoa / New Zealand
2073 readers
11 users here now
Kia ora and welcome to !newzealand, a place to share and discuss anything about Aotearoa in general
- For politics , please use !politics@lemmy.nz
- Shitposts, circlejerks, memes, and non-NZ topics belong in !offtopic@lemmy.nz
- If you need help using Lemmy.nz, go to !support@lemmy.nz
- NZ regional and special interest communities
Rules:
FAQ ~ NZ Community List ~ Join Matrix chatroom
Banner image by Bernard Spragg
Got an idea for next month's banner?
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I don't have any insider information so I'm just spitballing here :D but I have worked in health IT field before and I'm not even a little surprised that bugs like these exist - and have been exploited.
Poor authorisation handling bug is quite common. Authentication is largely a solved problem what with OAuth (not that a lot of NZ health IT providers use it...... sigh) but each software developer still has to solve the problem of authorisation. And it's just all too easy to forget that random IDs are not secure and are not even random.