https://www.theregister.co.uk/2020/04/28/anpr_sheffield_council/
By Gareth Corfield
The Register
28 Apr 2020
Exclusive -- In a blunder described as "astonishing and worrying,"
Sheffield City Council's automatic number-plate recognition (ANPR) system
exposed to the internet 8.6 million records of road journeys made by
thousands of people, The Register can reveal.
The ANPR camera system's internal management dashboard could be accessed
by simply entering its IP address into a web browser. No login details or
authentication of any sort was needed to view and search the live system –
which logs where and when vehicles, identified by their number plates,
travel through Sheffield's road network.
Britain's Surveillance Camera Commissioner Tony Porter described the
security lapse as "both astonishing and worrying," and demanded a full
probe into the snafu.
He told us: "As chair of the National ANPR Independent Advisory Group, I
will be requesting a report into this incident. I will focus on the
comprehensive national standards that exist and look towards any emerging
compliance issues or failure thereof."
[...]
--
Subscribe to InfoSec News
https://www.infosecnews.org/subscribe-to-infosec-news/
https://twitter.com/infosecnews_
