Reader Submission: Database of travelers arrival data in Thailand unsecured on the web
Thailand left a database containing arrival details of 106 million travelers over the past 10 years unsecured on the web. This according to a message from Comparitech on September 20, 2021.
See the article in this link: https://www.comparitech.com/blog/information-security/thai-traveler-data-leak/
The file contains the date and time of arrival, name of the traveller, nationality, gender, passport number, type of visa and arrival card number TM6.
The search engine Censys saw this file on August 20, and Comparitech discovered it on August 22 and reported it immediately. On the 23rd, the Thais acknowledged the mistake and shielded the database. Search engines can search the web for (updated) websites daily, but sometimes also every few days, so it is quite possible that the file has been on the web for several days without (password) protection. Comparitech is based in England and conducts research and publishes on cyber security.
In my opinion, unfortunately, security of files is not properly arranged considering that there was also a leak at a government vaccination registration site some time ago. The quality of many of the Thai websites is not high and below I show how the Thai Immigration Service website fares in terms of performance, accessibility and design in the usual website reviewer “Lighthouse”. By the way, I've been trying in vain to do my 90-day report online for two days now, but maybe I should go in-person to the Immigration Bureau again.
Submitted by Rembrandt
Well….not so neat
but if you have a FB page they know much much more about you: about your past, your present and also about your future…..Algorithms…..Has never heard of Prayut, I think.
I would just think that many more people don't even know what IT security means. THE celebrated government program that companies must work with is based on Internet Explorer, which will no longer be supported by Windows next year. https://www.thainsw.net/INSW/index.jsp
To be able to use the program, you must indicate that you wish to accept the insecurity despite the message that it is potentially unsafe. How crazy can you make it up?
In addition, large organizations such as post offices still frequently use Windows 7, which is no longer supported as standard.
As soon as a little hacker strikes, people are in turmoil and in the meantime we muddle on..
It doesn't always have to leak out digitally.
Years ago when I still had to do my 90 day report in Chiangmai at the old IMMI building.
Was there a time perhaps due to paper cuts, my proof of the 90 day report and the stamp with the next date for report on it.
Printed on a used and cut A4 sheet.
With on the back of this cut-up A4 sheet the full address and telephone number and partial passport number of an Englishman whom I had of course never met.
Jan Beute.
That was no different in Pattaya. Received information from others for years on the back of the report paper 90 days. When I reported that this was not so neat, the shoulders were shrugged. Mai pen arai khrap.