Feeds

ContactPoint goes live despite security fears

Thinking of the children - but is that all?

Choosing a cloud hosting partner with confidence

Won't someone think of the malware?

During trials due to begin next week, 800 frontline workers in 17 local authorities' areas (largely in North West England) will be trained in using the system. Officials with two childrens' charities - Barnardo's and KIDS - will also be involved in phase two of the roll-out of the system.

Earlier trials of the system have already uncovered problems. For example, adopted children included on the systems were filed by both their original and adopted surnames, creating a greater risk that these potentially troubled kids might be tracked down, the Daily Telegraph reports/a>.

Security researchers have expressed doubts about ministerial assurances on the security of the proposed ContactPoint child protection database.

Such comforting statements are at best incomplete, according to three experts. Concerns about the security of the database expressed by malware expert Chris Boyd of IM security firm FaceTime and Stuart Okin, UK managing director of security consulting Comsec, follow those first raised by confidential Reg sources in the IT testing community last month. Peter Houppermans, architect of the high-profile GSI project, is similarly unconvinced.

Boyd's concerns focus on the possibility that malware-infected laptops might allow access into the system, which will become an attractive target for hackers. Okin highlights issues over the huge number of professionals who will be authorised to access the system.

Answering questions in the House of Commons last month, Beverley Hughes, minister of state at the Department of Children, Schools and Families, brushed away concerns that the system might be vulnerable to unauthorised access or leaks. As well as saying the systems had been subjected to penetration tests, Hughes also responded to questions about remote access to the system.

Practitioners will be able to access ContactPoint remotely (i.e. from locations other than local authority, health service or national partner organisations premises) only via secure remote access solutions authorised and provided by those organisations and compliant with the ContactPoint security policy. Technical security measures prevent access from unsecured wireless broadband or public locations such as internet cafes and wireless "hotspots".

The minister told the House that even authorised users would be unable to download information obtained from the database, either onto a computer or removable media.

Chris Boyd of FaceTime is sceptical on this.

Beginner's guide to SSL certificates

More from The Register

next story
Facebook pays INFINITELY MORE UK corp tax than in 2012
Thanks for the £3k, Zuck. Doh! you're IN CREDIT. Guess not
Big Content outs piracy hotbeds: São Paulo, Beijing ... TORONTO?
MPAA calls Canadians a bunch of bootlegging movie thieves
Google Glassholes are UNDATEABLE – HP exec
You need an emotional connection, says touchy-feely MD... We can do that
Just don't blame Bono! Apple iTunes music sales PLUMMET
Cupertino revenue hit by cheapo downloads, says report
US court SHUTS DOWN 'scammers posing as Microsoft, Facebook support staff'
Netizens allegedly duped into paying for bogus tech advice
Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
Verizon bankrolls tech news site, bans tech's biggest stories
No agenda here. Just don't ever mention Net neutrality or spying, ok?
prev story

Whitepapers

Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
New hybrid storage solutions
Tackling data challenges through emerging hybrid storage solutions that enable optimum database performance whilst managing costs and increasingly large data stores.
Security and trust: The backbone of doing business over the internet
Explores the current state of website security and the contributions Symantec is making to help organizations protect critical data and build trust with customers.