From CBS-5 TV
New And Improved CalJobs Website Still Unsafe?
Anna Werner, reporting
The Employment Development Department's CalJobs website is up and running again, after the state shut it down for several months to look into security flaws that were brought to the state's attention by CBS 5 Investigates....
So is the site truly safe? CBS 5 Investigates went back to UC Berkeley computer expert [and School of Information professor] Doug Tygar who looked, and found: "It's clearly not the case."
Not the case, he said, because: "They just put a small bandaid on it." Tygar proved it by showing how he can once again get in and see Tom Diederich's information. "See, I can see it, I could go in and change his password even," Tygar said.
CBS 5 asked him if he was surprised that they put up what you call really a band-aid on this problem and then reopened the site. His response: "Yes absolutely. I would have thought that they would have done a thorough security review of the site."...